$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: 434UlF0GaywKdS18ETMWFCAqHvtjf6hlfmURASM6Ht0= Subject key identifier: 8C:9B:D1:D0:96:1A:71:39:30:1F:EC:9D:7C:F6:5C:65:C0:5D:64:90 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019D28F32086C856C707CA16CD53CC858E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 10AC Signing time: Thu 26 Mar 2026 07:01:55 +0000 Manifest this update: Thu 26 Mar 2026 07:01:55 +0000 Manifest next update: Fri 27 Mar 2026 07:01:55 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 6XUw5W_M3EzaqfvE8eeuL5B03o0.roa (hash: PQOjHvKjd9kIbNtHBoVyGVd20P8cKxJlW+bd9y79LQ0=) 3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 4: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 9: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: bHgk4lwyFn66BuTToFhyhR3U+v48cLA16Aqw5iH3nXk=) 10: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:f3:20:86:c8:56:c7:07:ca:16:cd:53:cc:85:8e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Mar 26 07:01:55 2026 GMT Not After : Mar 27 07:01:55 2026 GMT Subject: CN=8c9bd1d0961a7139301fec9d7cf65c65c05d6490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:0e:05:a5:89:9a:34:75:5c:aa:53:d3:b0: af:a4:f1:93:9b:66:e6:d9:b3:83:55:79:d0:72:42: fb:9c:8f:c5:8b:1e:10:d0:fb:4d:ce:55:94:ad:fa: 36:a1:ef:a3:82:8d:7d:ff:4d:cd:9c:7c:10:17:29: 58:44:f4:5e:39:f3:3d:06:a7:e9:1e:64:c2:bc:06: 95:00:57:a8:15:41:e3:ae:d1:83:f0:b7:26:d6:a7: 82:01:84:db:63:43:0d:b3:7d:2d:d3:78:61:0d:2e: cb:96:86:8a:5d:d3:0e:85:ed:8c:6f:78:c8:bf:9a: d9:7e:11:59:21:ce:c6:b8:c8:a6:a0:e1:9f:1b:af: 2e:80:ce:da:89:6e:b8:e9:3c:f1:a1:59:5c:81:d3: 31:59:ef:ba:59:33:05:4b:48:d8:5d:d2:61:7d:e6: 25:7c:2b:5f:ca:e7:71:fb:d4:b3:77:31:e5:7c:b2: 1b:9d:aa:e3:84:30:9f:12:77:ae:3b:68:7c:b3:3e: 23:7c:4f:dc:8b:28:cf:4e:4e:d6:72:ca:a4:b0:9a: 1b:ff:f4:bd:83:15:ec:15:42:19:30:2c:e2:fe:ca: dc:eb:66:57:c9:8a:0c:5f:5f:1f:0a:a1:73:c1:e8: af:ee:39:c9:ed:0d:f1:70:49:e7:0a:8e:f5:c3:90: 8f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:D1:D0:96:1A:71:39:30:1F:EC:9D:7C:F6:5C:65:C0:5D:64:90 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cb:f9:91:8b:36:f1:b5:73:f0:3f:99:36:0f:be:30:65:67: 45:9c:cc:ff:c0:d6:b8:42:17:73:30:0c:1e:69:d1:b6:40:a5: 4a:4b:ec:7d:c7:ea:de:99:37:b0:51:97:b2:16:2a:2b:43:32: 74:f7:e9:1a:da:22:dd:d7:92:93:02:10:f1:4a:7e:08:3c:10: 00:3c:16:a6:44:41:4d:9a:1c:83:b9:f6:08:cf:42:e2:43:9f: c6:ee:69:2d:55:71:f3:02:30:c6:34:45:92:80:2c:c2:54:a3: b9:4d:a9:0c:87:54:c2:13:06:cc:63:aa:54:64:e8:7d:29:0d: 7b:8e:0e:1c:e3:2b:98:50:ce:71:97:60:e9:d2:3b:72:5f:9b: 09:b2:d7:93:94:ee:38:b3:5e:ef:c4:1c:34:79:1c:f3:f9:fe: aa:18:96:d1:a5:10:0f:4c:5f:1a:b5:59:05:7a:72:d1:39:2c: a6:4e:e5:ba:75:8f:90:63:ec:b8:50:9c:f9:81:ea:e6:bd:c2: 07:8a:79:d3:e4:79:6a:b2:3e:b9:c5:88:da:48:d9:da:52:41: 78:73:4f:a0:e8:1f:ba:db:7e:c5:e1:2a:3c:68:72:6e:ba:4a: 6f:16:89:25:89:7a:98:68:76:08:13:6a:19:e3:db:dc:25:9b: 66:dd:a2:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0o8yCGyFbHB8oWzVPMhY5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwMzI2MDcwMTU1WhcNMjYwMzI3MDcwMTU1WjAzMTEwLwYDVQQD Eyg4YzliZDFkMDk2MWE3MTM5MzAxZmVjOWQ3Y2Y2NWM2NWMwNWQ2NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqekOBaWJmjR1XKpT07CvpPGTm2bm 2bODVXnQckL7nI/Fix4Q0PtNzlWUrfo2oe+jgo19/03NnHwQFylYRPReOfM9Bqfp HmTCvAaVAFeoFUHjrtGD8Lcm1qeCAYTbY0MNs30t03hhDS7LloaKXdMOhe2Mb3jI v5rZfhFZIc7GuMimoOGfG68ugM7aiW646TzxoVlcgdMxWe+6WTMFS0jYXdJhfeYl fCtfyudx+9SzdzHlfLIbnarjhDCfEneuO2h8sz4jfE/ciyjPTk7WcsqksJob//S9 gxXsFUIZMCzi/src62ZXyYoMX18fCqFzweiv7jnJ7Q3xcEnnCo71w5CP/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyb0dCWGnE5MB/snXz2XGXAXWSQMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsv5kYs2 8bVz8D+ZNg++MGVnRZzM/8DWuEIXczAMHmnRtkClSkvsfcfq3pk3sFGXshYqK0My dPfpGtoi3deSkwIQ8Up+CDwQADwWpkRBTZocg7n2CM9C4kOfxu5pLVVx8wIwxjRF koAswlSjuU2pDIdUwhMGzGOqVGTofSkNe44OHOMrmFDOcZdg6dI7cl+bCbLXk5Tu OLNe78QcNHkc8/n+qhiW0aUQD0xfGrVZBXpy0Tkspk7lunWPkGPsuFCc+YHq5r3C B4p50+R5arI+ucWI2kjZ2lJBeHNPoOgfutt+xeEqPGhybrpKbxaJJYl6mGh2CBNq GePb3CWbZt2iFw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:36 2026 by rpki-client