$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: yhdeUzJz9T8p44xgFVng5mArojdqx3/hnp0wc4ZBAbQ= Subject key identifier: 25:C3:18:84:E8:36:EF:5E:98:FA:83:75:77:A4:00:31:96:F4:FA:6B Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01A00281656BF54948869737EA10952357A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1A11 Signing time: Fri 14 Aug 2026 23:00:29 +0000 Manifest this update: Fri 14 Aug 2026 23:00:29 +0000 Manifest next update: Sat 15 Aug 2026 23:00:29 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: DbtmnKKDaflVuUDZSUh/xJy4oQnpdirD6FgMcf76xhU=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:81:65:6b:f5:49:48:86:97:37:ea:10:95:23:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Aug 14 23:00:29 2026 GMT Not After : Aug 15 23:00:29 2026 GMT Subject: CN=25c31884e836ef5e98fa837577a4003196f4fa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5d:da:9b:a4:a6:22:fb:87:f5:88:74:5a:9e: 70:78:a7:36:08:b4:6d:dc:92:af:5d:95:7d:31:e9: 75:ac:5c:5f:95:62:56:4a:e2:27:63:75:df:af:b4: 35:46:a6:a8:3e:e1:f7:70:ac:e9:90:52:95:e9:e0: b8:91:67:7a:2e:70:3f:ce:6e:d0:f8:6e:b1:04:63: 21:49:49:83:5c:29:e7:53:46:b8:09:74:ac:2d:a5: a8:19:c3:96:b8:8b:93:8e:c1:31:cd:81:ee:28:24: d5:db:0c:44:a7:f0:59:c5:00:d7:36:3f:88:63:f6: 55:ec:93:16:70:e3:1c:73:7f:f1:c3:32:03:c6:18: 35:31:1e:67:e8:1c:c4:c8:77:5f:c9:d8:89:f6:04: a2:ef:9a:14:b0:ea:f4:49:28:60:ed:ed:a1:66:42: 1b:53:a4:22:9d:da:57:2d:80:24:67:8f:da:98:c9: 71:2e:98:9d:d1:6a:c2:57:5a:27:54:f1:83:bb:34: f4:d1:33:aa:07:0d:96:81:61:af:a4:85:d8:8c:85: ce:ac:dd:79:66:c1:e2:3b:55:b4:76:ee:32:b4:fb: 65:f2:2a:c1:61:ba:27:9a:7a:8f:f6:1d:a4:06:33: e2:42:c3:12:ff:f2:58:6e:5b:e1:cc:ce:9c:f5:f3: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:18:84:E8:36:EF:5E:98:FA:83:75:77:A4:00:31:96:F4:FA:6B X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:12:28:a9:2a:9d:36:70:e0:eb:44:cd:f5:9a:89:a6:12: bc:f1:73:88:13:44:d7:37:64:49:9a:db:ea:53:43:e5:8f:ba: e6:89:3e:cf:d7:f1:5e:d5:9f:02:71:01:c8:4e:5d:31:33:bf: 27:51:e5:03:12:4a:4a:74:7b:86:50:ac:62:9b:cc:b3:51:7b: 70:fe:4c:5e:80:cd:62:7d:26:2d:13:0c:9b:f3:cd:11:f4:ec: be:e7:f2:09:5d:0b:f4:32:68:b9:b7:f8:71:63:e2:54:a7:e7: 4d:c5:10:d7:c8:cb:d7:2a:d9:b7:84:bb:15:a7:1b:bc:f7:1b: 88:81:eb:74:9c:46:c1:54:41:53:00:87:e4:3d:19:7d:e7:93: 75:91:c5:a3:c6:fb:53:27:24:29:e7:fa:40:4d:3c:48:c4:91: 53:d6:79:8a:ca:78:49:2d:1a:72:3e:c7:72:ae:28:0b:2a:85: fe:f7:52:ee:21:c5:76:95:de:f1:16:c0:6b:15:8a:e1:f9:1a: 9a:ed:d6:d8:fa:cc:6a:60:c0:28:12:ad:3e:f2:7b:2f:7b:35: 42:6f:b9:d8:8a:dc:97:48:be:ce:06:48:c9:84:8e:31:80:31: d9:79:b3:44:e9:24:91:e5:a4:d9:67:7e:6e:20:76:c1:03:d8: cf:70:d2:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACgWVr9UlIhpc36hCVI1egMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwODE0MjMwMDI5WhcNMjYwODE1MjMwMDI5WjAzMTEwLwYDVQQD EygyNWMzMTg4NGU4MzZlZjVlOThmYTgzNzU3N2E0MDAzMTk2ZjRmYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V3am6SmIvuH9Yh0Wp5weKc2CLRt 3JKvXZV9Mel1rFxflWJWSuInY3Xfr7Q1RqaoPuH3cKzpkFKV6eC4kWd6LnA/zm7Q +G6xBGMhSUmDXCnnU0a4CXSsLaWoGcOWuIuTjsExzYHuKCTV2wxEp/BZxQDXNj+I Y/ZV7JMWcOMcc3/xwzIDxhg1MR5n6BzEyHdfydiJ9gSi75oUsOr0SShg7e2hZkIb U6QindpXLYAkZ4/amMlxLpid0WrCV1onVPGDuzT00TOqBw2WgWGvpIXYjIXOrN15 ZsHiO1W0du4ytPtl8irBYbonmnqP9h2kBjPiQsMS//JYblvhzM6c9fPBzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXDGIToNu9emPqDdXekADGW9PprMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYESKKkq nTZw4OtEzfWaiaYSvPFziBNE1zdkSZrb6lND5Y+65ok+z9fxXtWfAnEByE5dMTO/ J1HlAxJKSnR7hlCsYpvMs1F7cP5MXoDNYn0mLRMMm/PNEfTsvufyCV0L9DJoubf4 cWPiVKfnTcUQ18jL1yrZt4S7FacbvPcbiIHrdJxGwVRBUwCH5D0ZfeeTdZHFo8b7 UyckKef6QE08SMSRU9Z5isp4SS0acj7Hcq4oCyqF/vdS7iHFdpXe8RbAaxWK4fka mu3W2PrMamDAKBKtPvJ7L3s1Qm+52Ircl0i+zgZIyYSOMYAx2XmzROkkkeWk2Wd+ biB2wQPYz3DSuw== -----END CERTIFICATE-----Generated at Sat Aug 15 03:29:00 2026 by rpki-client