$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: HyTBeKgLqJBh8yG0Bd2y7nW250LIaC0PLdxQSraB4/k= Subject key identifier: 29:57:5B:AF:7C:21:DD:18:0C:F1:48:88:11:E3:50:B6:AB:94:C6:2C Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019DAFEA3E2F52480F0262E354F04CC09CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0B70 Signing time: Tue 21 Apr 2026 12:00:57 +0000 Manifest this update: Tue 21 Apr 2026 12:00:57 +0000 Manifest next update: Wed 22 Apr 2026 12:00:57 +0000 Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=) 2: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=) 3: 5Uqqze0EA8rQbpzcQK8e22XUd0s.roa (hash: VagYyiLv9xrM+IBBxSvL16xoewVk+69H1JA53nMSGNw=) 4: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=) 5: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=) 6: 9K1LCa_BZxwmFKziFmKg5k9ZSPw.roa (hash: zcfTdUdCdWCGykQ8Ef/AtFMrZXL7riKrfHYVxi7rWFQ=) 7: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=) 8: F_iRAgLKrNXNNmblUKtlAu-_jvE.roa (hash: 9m52HExuOSnfwbjHl68fTIeExChAA3QYd+eNALG03CM=) 9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=) 10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=) 11: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=) 12: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=) 13: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=) 14: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=) 15: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: 1kbvpf1fmrXNLr0xLuunVvEb3wK6Sa5nsLIaEZMY4NY=) 16: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=) 17: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=) 18: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=) 19: gWUoPtKu4Ygknkyrez4F7XlU7JU.roa (hash: 9nDIkHs65Wge6gpKCtTP63Y9gCXb0tsZlxUtihUCR5E=) 20: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=) 21: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=) 22: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=) 23: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=) 24: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=) 25: vR6geB2IJnI1DRLUG8sUqATNeUQ.roa (hash: 6Ld2mRTI5n33TWw/OgClAhSZl/FU5wJ1uGoGQJPXSaw=) 26: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=) 27: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:ea:3e:2f:52:48:0f:02:62:e3:54:f0:4c:c0:9c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Apr 21 12:00:57 2026 GMT Not After : Apr 22 12:00:57 2026 GMT Subject: CN=29575baf7c21dd180cf1488811e350b6ab94c62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:af:e8:11:bb:ce:8b:50:9c:04:99:56:5d: 64:51:67:05:74:9d:62:d3:bf:1d:5c:f3:2a:35:05: 81:0e:36:e9:9a:b8:76:0f:7e:1d:58:79:96:35:1a: 10:0e:19:a7:49:bf:87:b2:a2:4f:62:84:ee:8f:fc: bc:77:6a:17:d3:70:eb:5b:70:f5:61:2b:00:49:5c: 28:dc:9b:e1:f2:d4:99:dd:d3:76:34:33:4d:fb:73: ae:19:98:36:62:2d:e7:0d:67:a0:38:9b:da:ac:c9: 7d:05:83:98:d8:ca:1e:f3:ce:94:20:23:94:8b:7b: 04:c9:64:b0:8b:c2:e6:dc:55:72:45:0b:19:cf:b0: b2:db:0b:6f:e6:44:ad:aa:81:86:1f:ac:68:e0:20: ec:de:38:b9:e2:67:f6:e9:e0:71:60:58:b6:8b:37: e9:da:4a:1e:b5:c8:00:d6:09:83:67:28:be:fa:bd: f9:77:b6:59:22:20:19:e0:c0:c5:05:54:ec:1e:14: a9:d1:06:c1:3d:ee:c7:30:34:14:84:5a:bf:14:9d: 47:05:33:cb:9e:da:85:14:9f:f6:67:a5:af:f4:43: ae:e7:8e:1c:a5:4a:dc:ee:8f:dc:b0:40:a5:ad:0c: 2d:d0:ff:64:0f:30:35:ac:11:b9:fb:08:a6:a6:cc: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:57:5B:AF:7C:21:DD:18:0C:F1:48:88:11:E3:50:B6:AB:94:C6:2C X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1f:8b:31:2b:cd:74:7b:f1:5d:34:b3:fe:f3:0f:04:57:50: 1d:5c:f9:ca:a5:6b:a7:16:13:7c:08:3f:fa:6c:28:1a:82:ce: 41:6a:8c:a2:72:83:57:28:5d:78:f0:88:d1:0a:e5:c6:de:7c: 71:82:29:d1:89:e6:0d:67:24:59:3c:98:24:5f:99:68:fb:e2: a8:3f:68:d4:a5:64:a2:68:d1:2c:bb:41:5e:02:35:e5:6b:48: fa:da:55:fc:56:0c:27:fe:d6:3a:2b:ef:52:07:b4:4a:b6:08: eb:a9:c7:1d:ee:16:93:a9:fb:e7:de:ea:90:70:bd:1d:77:30: 3f:13:c2:f1:5d:b9:c7:b6:26:d9:a2:03:2d:fb:ec:34:74:a4: fe:4e:5a:98:4a:17:98:9b:2d:17:9a:47:74:1f:bc:7d:38:aa: 47:fe:94:65:52:94:0b:b7:b6:08:b3:29:a1:82:a0:64:6f:51: 82:65:df:01:dd:c9:7b:be:23:17:5a:f0:00:c8:a2:4f:52:94: c7:34:f2:08:fe:ed:03:ae:dd:f5:c5:f3:9a:ca:1c:ea:3c:df: 6d:01:9b:df:52:73:80:64:10:bc:54:8a:c9:ba:19:0e:8b:fb: 0d:c9:f0:e7:04:a1:93:53:dc:9a:b4:d5:25:3b:75:39:9c:b3: a5:c3:f2:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2v6j4vUkgPAmLjVPBMwJzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwNDIxMTIwMDU3WhcNMjYwNDIyMTIwMDU3WjAzMTEwLwYDVQQD EygyOTU3NWJhZjdjMjFkZDE4MGNmMTQ4ODgxMWUzNTBiNmFiOTRjNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1iv6BG7zotQnASZVl1kUWcFdJ1i 078dXPMqNQWBDjbpmrh2D34dWHmWNRoQDhmnSb+HsqJPYoTuj/y8d2oX03DrW3D1 YSsASVwo3Jvh8tSZ3dN2NDNN+3OuGZg2Yi3nDWegOJvarMl9BYOY2Moe886UICOU i3sEyWSwi8Lm3FVyRQsZz7Cy2wtv5kStqoGGH6xo4CDs3ji54mf26eBxYFi2izfp 2koetcgA1gmDZyi++r35d7ZZIiAZ4MDFBVTsHhSp0QbBPe7HMDQUhFq/FJ1HBTPL ntqFFJ/2Z6Wv9EOu544cpUrc7o/csEClrQwt0P9kDzA1rBG5+wimpsybVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClXW698Id0YDPFIiBHjULarlMYsMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB+LMSvN dHvxXTSz/vMPBFdQHVz5yqVrpxYTfAg/+mwoGoLOQWqMonKDVyhdePCI0Qrlxt58 cYIp0YnmDWckWTyYJF+ZaPviqD9o1KVkomjRLLtBXgI15WtI+tpV/FYMJ/7WOivv Uge0SrYI66nHHe4Wk6n7597qkHC9HXcwPxPC8V25x7Ym2aIDLfvsNHSk/k5amEoX mJstF5pHdB+8fTiqR/6UZVKUC7e2CLMpoYKgZG9RgmXfAd3Je74jF1rwAMiiT1KU xzTyCP7tA67d9cXzmsoc6jzfbQGb31JzgGQQvFSKyboZDov7Dcnw5wShk1PcmrTV JTt1OZyzpcPylA== -----END CERTIFICATE-----Generated at Tue Apr 21 22:30:37 2026 by rpki-client