$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: Cvmp032nAIK8dfM95R8VbmsSWDPvvW+YmU3nvXlj6Hk= Subject key identifier: 68:3D:00:A3:26:CF:53:B2:A6:D2:91:9B:71:C1:4A:64:6E:4B:2F:B0 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D26CCA7032752DD741E3EE9D16CFFFE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11A8 Signing time: Wed 25 Mar 2026 21:00:39 +0000 Manifest this update: Wed 25 Mar 2026 21:00:39 +0000 Manifest next update: Thu 26 Mar 2026 21:00:39 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: +f7We+iWzHgBrh2dBZ+UMlkJV09ao3+1hX6tZQNJof8=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:a7:03:27:52:dd:74:1e:3e:e9:d1:6c:ff:fe:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 25 21:00:39 2026 GMT Not After : Mar 26 21:00:39 2026 GMT Subject: CN=683d00a326cf53b2a6d2919b71c14a646e4b2fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:05:cc:f9:65:f6:ef:a2:e0:01:c6:ca:8c: 63:ed:1c:27:15:16:6c:1a:a4:78:42:61:91:a6:a9: ab:50:dc:bf:06:d6:44:63:1d:8d:f1:5f:91:32:0e: f2:16:3b:ac:9f:64:19:fc:74:58:c7:8c:ba:b2:f5: f1:43:37:dd:05:a6:bb:2a:2b:91:95:3d:8a:ce:b6: 98:eb:98:31:41:74:59:eb:75:ba:ca:d9:8d:4f:0c: 90:b4:70:3a:3d:5a:4b:66:82:b5:39:94:a9:9d:d7: 24:a3:3d:15:64:6c:c5:95:f0:90:b4:c2:11:a1:5c: aa:6d:89:8d:49:0b:4e:a9:64:35:31:df:79:df:a8: 61:88:80:0b:e6:d9:36:ca:68:1f:f5:11:bb:b7:6c: 05:a1:79:43:9f:43:ec:03:28:ab:f0:73:ab:ad:cc: f6:6e:2f:a2:d8:e9:41:35:b9:60:0c:47:e4:ae:8e: 8c:6c:46:65:ad:97:ee:1d:59:47:9d:e2:a7:e2:af: 90:63:b1:d8:96:53:86:02:95:28:c1:da:79:a3:fd: 68:5a:4f:47:3d:8e:30:1c:bb:26:3f:27:fd:96:2d: 4c:dc:49:aa:fa:7e:61:2f:3c:02:d7:0a:e2:e4:e7: 91:52:a8:a9:73:93:de:49:62:67:04:de:f2:3e:73: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:00:A3:26:CF:53:B2:A6:D2:91:9B:71:C1:4A:64:6E:4B:2F:B0 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:04:8d:19:cd:23:ba:8e:68:9c:a4:0e:85:7b:cb:aa:23:66: 3c:bb:af:38:ca:f9:ac:c7:90:3d:b2:b4:11:2f:df:cf:06:22: 4a:7f:eb:40:bf:82:30:d1:8a:9d:58:21:8c:c7:5c:9f:fc:d0: f2:b8:83:98:9a:43:4b:3b:1a:07:f3:3b:5a:26:96:0f:5c:d0: aa:67:00:c6:81:a1:df:08:c0:3a:b8:f0:c1:3a:62:67:01:b0: 1f:79:db:18:ef:ad:cb:76:a2:0b:81:83:c0:37:ab:78:80:e2: cc:31:d4:06:82:7a:37:40:41:3c:e1:8e:4d:b0:b5:0c:e4:f6: 99:59:e1:fb:57:eb:f2:85:38:65:a8:f0:8f:9c:80:f0:91:1d: 61:f8:af:9a:56:7a:ae:b9:bd:3a:a8:d2:bf:71:3e:81:14:8c: cc:f5:66:71:b1:77:4a:a6:4e:b0:a2:cb:a1:1f:de:27:c6:ec: c8:26:00:4f:b7:bd:de:2f:ef:4e:47:1a:10:c6:87:f6:4c:64: 51:07:25:94:ed:01:45:c1:00:05:d7:06:4c:9f:30:a9:69:6f: 57:01:0a:89:63:33:9a:b3:2a:53:be:b1:c1:56:42:3e:39:5e: c2:a6:c7:37:72:5c:56:d5:0e:bb:46:5d:b5:8e:04:7b:06:6f: ec:10:8b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzKcDJ1LddB4+6dFs//4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzI1MjEwMDM5WhcNMjYwMzI2MjEwMDM5WjAzMTEwLwYDVQQD Eyg2ODNkMDBhMzI2Y2Y1M2IyYTZkMjkxOWI3MWMxNGE2NDZlNGIyZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3sFzPll9u+i4AHGyoxj7RwnFRZs GqR4QmGRpqmrUNy/BtZEYx2N8V+RMg7yFjusn2QZ/HRYx4y6svXxQzfdBaa7KiuR lT2KzraY65gxQXRZ63W6ytmNTwyQtHA6PVpLZoK1OZSpndckoz0VZGzFlfCQtMIR oVyqbYmNSQtOqWQ1Md9536hhiIAL5tk2ymgf9RG7t2wFoXlDn0PsAyir8HOrrcz2 bi+i2OlBNblgDEfkro6MbEZlrZfuHVlHneKn4q+QY7HYllOGApUowdp5o/1oWk9H PY4wHLsmPyf9li1M3Emq+n5hLzwC1wri5OeRUqipc5PeSWJnBN7yPnN2DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg9AKMmz1OyptKRm3HBSmRuSy+wMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgASNGc0j uo5onKQOhXvLqiNmPLuvOMr5rMeQPbK0ES/fzwYiSn/rQL+CMNGKnVghjMdcn/zQ 8riDmJpDSzsaB/M7WiaWD1zQqmcAxoGh3wjAOrjwwTpiZwGwH3nbGO+ty3aiC4GD wDereIDizDHUBoJ6N0BBPOGOTbC1DOT2mVnh+1fr8oU4Zajwj5yA8JEdYfivmlZ6 rrm9OqjSv3E+gRSMzPVmcbF3SqZOsKLLoR/eJ8bsyCYAT7e93i/vTkcaEMaH9kxk UQcllO0BRcEABdcGTJ8wqWlvVwEKiWMzmrMqU76xwVZCPjlewqbHN3JcVtUOu0Zd tY4EewZv7BCLug== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:51 2026 by rpki-client