$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: bu/gKEco21OdYDkaIP7od+L/JcLH6SANAEbYZ+bf4R4= Subject key identifier: 54:6B:86:46:95:DC:79:8A:30:04:26:42:34:E3:0F:76:BB:A4:EF:0E Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019D254C439F6DF5A9DB952848B2C7A802BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: EE Signing time: Wed 25 Mar 2026 14:00:48 +0000 Manifest this update: Wed 25 Mar 2026 14:00:48 +0000 Manifest next update: Thu 26 Mar 2026 14:00:48 +0000 Files and hashes: 1: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 2: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 3: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 4: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 6C4ewtbstd4rLE9vuCdpnzMhaG99Jr+DbgAewIy13J8=) 5: EJCxpMqO_3L2hhD7DEajsG5R4G4.roa (hash: RyaRFqoui2dNP2kbmLeH5dCdfOnH4VJIMS/8wRVXHdw=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: WScdMd0aWt_OtbcvgTIGER8O-qU.roa (hash: 8o7qzj0f2oKlSlfetwvAe5E/ZOiSOP7vaR/Yzo4OTdo=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 13: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:43:9f:6d:f5:a9:db:95:28:48:b2:c7:a8:02:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Mar 25 14:00:48 2026 GMT Not After : Mar 26 14:00:48 2026 GMT Subject: CN=546b864695dc798a3004264234e30f76bba4ef0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:16:9a:89:46:44:86:7e:14:0e:95:0d:79:f3: bb:d6:9a:ef:9f:d7:04:6f:08:81:60:f3:55:5d:f8: 5d:b4:6d:1f:81:de:cd:41:d8:d7:66:0e:ab:ac:f7: b2:86:86:ed:07:64:4a:bb:8f:bd:fc:ff:20:29:79: 92:cb:fa:a2:50:2f:3a:80:1f:c4:10:6a:61:35:1b: 52:d1:16:f2:a7:7d:02:1e:8f:6a:95:9e:c0:3f:58: 8e:24:50:7c:1e:38:27:c9:59:b6:c1:e2:d0:49:9f: e0:bd:ac:02:a6:e0:97:81:8c:f4:48:66:ed:23:93: 79:a0:9c:b5:95:9d:7b:2f:bf:16:62:a2:42:a2:f3: 91:d4:54:87:41:97:20:ad:3f:8c:87:e0:f7:60:3a: 9f:10:97:38:e6:52:7b:61:66:0d:60:4a:e9:ce:b3: b3:70:a7:98:2a:9a:b8:53:09:ff:84:45:6c:26:83: 17:52:60:63:63:ee:8b:24:5c:1e:c9:16:d9:46:a4: ae:b8:db:24:49:04:c6:a2:e0:11:d3:29:93:1c:45: 94:bc:c2:06:81:c8:cd:47:d7:5d:2a:59:e4:a0:7a: 6c:4b:b6:8e:e4:2f:60:a2:d7:34:df:b1:7b:aa:6a: f4:02:bd:4e:19:fe:72:1e:b8:bb:9b:7a:8d:20:8e: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:86:46:95:DC:79:8A:30:04:26:42:34:E3:0F:76:BB:A4:EF:0E X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e1:51:77:52:23:13:cf:8c:fc:ec:d4:78:d4:d4:20:f8:c1: b8:61:93:e9:67:2f:27:d6:4f:84:d2:af:0b:bf:80:f0:f3:73: 75:64:0f:52:ea:9a:4c:89:71:de:17:01:20:cf:28:f5:ef:df: 74:1a:7e:67:06:f5:45:e8:d0:cc:e4:d9:db:87:4b:13:ef:f7: 2c:78:5c:df:ab:91:d4:32:89:44:2c:40:90:7f:49:a8:3d:ab: 73:eb:64:36:06:77:94:72:65:94:77:a1:33:2a:d2:b9:ce:db: 08:7e:f3:88:a9:8f:db:f2:f5:7e:60:39:65:ba:f3:68:ab:ab: 01:6c:bc:ad:8d:d5:b3:be:50:54:a2:27:4c:3a:d9:cd:df:3e: d5:c2:90:60:e5:53:24:7a:dc:77:6b:21:8f:7b:5e:fa:52:ec: ff:c3:0c:61:af:fd:d0:4d:e1:38:a5:bd:77:86:e3:5a:dd:75: eb:6d:6c:e8:a4:42:92:2a:9d:87:8c:ce:b3:6e:82:89:a4:1e: 99:73:0a:d0:10:d6:60:01:a3:ad:c4:03:b1:fc:16:2f:9e:f8: d6:ce:7c:4d:79:2d:95:0f:4d:e5:11:4b:f8:61:c0:81:df:60: ce:cc:a1:34:4c:e4:f4:a3:fd:75:e1:06:5d:dd:d3:2a:45:d7: 78:28:47:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTEOfbfWp25UoSLLHqAK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwMzI1MTQwMDQ4WhcNMjYwMzI2MTQwMDQ4WjAzMTEwLwYDVQQD Eyg1NDZiODY0Njk1ZGM3OThhMzAwNDI2NDIzNGUzMGY3NmJiYTRlZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxaaiUZEhn4UDpUNefO71prvn9cE bwiBYPNVXfhdtG0fgd7NQdjXZg6rrPeyhobtB2RKu4+9/P8gKXmSy/qiUC86gB/E EGphNRtS0Rbyp30CHo9qlZ7AP1iOJFB8HjgnyVm2weLQSZ/gvawCpuCXgYz0SGbt I5N5oJy1lZ17L78WYqJCovOR1FSHQZcgrT+Mh+D3YDqfEJc45lJ7YWYNYErpzrOz cKeYKpq4Uwn/hEVsJoMXUmBjY+6LJFweyRbZRqSuuNskSQTGouAR0ymTHEWUvMIG gcjNR9ddKlnkoHpsS7aO5C9gotc037F7qmr0Ar1OGf5yHri7m3qNII760QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRrhkaV3HmKMAQmQjTjD3a7pO8OMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOFRd1Ij E8+M/OzUeNTUIPjBuGGT6WcvJ9ZPhNKvC7+A8PNzdWQPUuqaTIlx3hcBIM8o9e/f dBp+Zwb1RejQzOTZ24dLE+/3LHhc36uR1DKJRCxAkH9JqD2rc+tkNgZ3lHJllHeh MyrSuc7bCH7ziKmP2/L1fmA5ZbrzaKurAWy8rY3Vs75QVKInTDrZzd8+1cKQYOVT JHrcd2shj3te+lLs/8MMYa/90E3hOKW9d4bjWt11621s6KRCkiqdh4zOs26CiaQe mXMK0BDWYAGjrcQDsfwWL5741s58TXktlQ9N5RFL+GHAgd9gzsyhNEzk9KP9deEG Xd3TKkXXeChHwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:31:46 2026 by rpki-client