$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: 8jQ1ugSlpR6xYOFDYoXkTk+gmZ0Pa6zD7EA0IFMhq/4= Subject key identifier: 6F:B5:6C:C8:9D:34:1E:65:5B:64:32:20:74:F6:B4:A4:1A:ED:75:5C Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019D296175DD4E5FB121DBB81D839378C33D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 18B8 Signing time: Thu 26 Mar 2026 09:02:26 +0000 Manifest this update: Thu 26 Mar 2026 09:02:26 +0000 Manifest next update: Fri 27 Mar 2026 09:02:26 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 6: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 7: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 8: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (hash: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: EDc9bMxX6txu626y8j6fU0XLm0PNmBCdmLyA7me0rkM=) 10: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:61:75:dd:4e:5f:b1:21:db:b8:1d:83:93:78:c3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Mar 26 09:02:26 2026 GMT Not After : Mar 27 09:02:26 2026 GMT Subject: CN=6fb56cc89d341e655b64322074f6b4a41aed755c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:72:df:92:61:c4:44:e0:d3:de:54:63:e2:fe: 52:b9:f8:b3:77:03:10:a9:df:d2:97:72:90:84:27: b9:5f:db:2d:c8:06:85:fb:02:32:88:74:00:be:dd: 09:7a:52:94:93:f3:29:a5:9f:d3:7d:26:7a:07:0b: f0:fe:c1:b1:17:c8:4f:49:eb:db:fc:18:c2:e9:18: 5a:c9:a1:42:7c:07:a0:cd:f4:cc:7d:03:65:3e:14: 05:6e:48:d7:a3:3a:23:d1:e4:17:6e:db:f0:46:f0: 74:f4:a9:d4:d9:34:da:1f:36:a1:42:33:14:79:10: f0:76:5c:a5:c7:ba:50:86:ca:8a:30:c8:b7:b1:d7: 4a:fe:69:b0:dc:2f:d6:38:74:46:f8:3e:ef:ab:80: b7:12:4f:a2:ae:9c:22:94:d2:27:78:f0:ce:d0:d8: 5c:cb:37:e7:eb:52:67:2b:91:ea:f8:71:31:75:13: 12:11:fb:cc:58:73:b6:9c:f3:46:14:88:4a:fc:82: 56:cb:5b:a8:0c:27:3d:92:43:28:e5:93:ab:03:0f: d6:3f:73:bf:ca:9f:5b:29:a4:32:37:89:23:ed:22: 53:88:ba:b2:df:73:ec:b5:f1:a8:39:de:87:cc:cd: 80:e7:28:01:7e:33:9d:11:8c:23:7e:db:9f:54:36: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:6C:C8:9D:34:1E:65:5B:64:32:20:74:F6:B4:A4:1A:ED:75:5C X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ad:5e:53:c8:cc:08:1f:2b:76:38:20:cb:c2:d8:04:0c:20: 2d:42:72:ce:65:09:e3:ba:23:64:5a:2d:a8:85:4c:75:68:ee: 9a:6c:fd:46:2d:25:24:8b:09:9e:3e:67:0d:a5:53:5e:48:8f: 9c:9e:9a:18:e4:d5:ca:7c:cc:4d:85:25:3a:7b:20:3d:4d:30: 84:80:77:29:23:6a:77:94:7f:6b:90:c1:33:8c:73:42:04:d3: 5e:7c:b3:55:3d:87:c2:d1:37:9f:64:e6:7b:5c:c2:58:21:35: 5f:78:9f:85:01:4e:9a:0f:fa:32:b4:db:72:d8:30:49:fb:60: c5:5c:7a:d7:04:8d:0b:23:5d:1b:6f:1b:b4:11:92:ea:81:9b: ef:20:b0:1a:eb:c7:02:fb:76:ce:c3:ed:21:3d:fc:a2:ae:44: 4d:21:32:b7:6b:32:65:47:55:4b:fc:71:7a:2b:e5:f0:48:d0: 40:33:3b:3b:42:80:e3:b3:91:21:f8:e6:3e:13:06:71:69:31: 74:6a:d0:54:1b:be:8c:00:da:61:bb:ab:c7:bd:e0:87:eb:bd: 14:a4:21:1e:73:ad:75:e3:d1:7d:45:cb:71:09:bf:16:7e:7e: 7c:1e:9f:de:1d:3b:29:a4:e5:ec:b0:36:85:50:45:2c:6b:6f: 97:5f:6f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYXXdTl+xIdu4HYOTeMM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMzI2MDkwMjI2WhcNMjYwMzI3MDkwMjI2WjAzMTEwLwYDVQQD Eyg2ZmI1NmNjODlkMzQxZTY1NWI2NDMyMjA3NGY2YjRhNDFhZWQ3NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53LfkmHERODT3lRj4v5SufizdwMQ qd/Sl3KQhCe5X9styAaF+wIyiHQAvt0JelKUk/MppZ/TfSZ6Bwvw/sGxF8hPSevb /BjC6RhayaFCfAegzfTMfQNlPhQFbkjXozoj0eQXbtvwRvB09KnU2TTaHzahQjMU eRDwdlylx7pQhsqKMMi3sddK/mmw3C/WOHRG+D7vq4C3Ek+irpwilNInePDO0Nhc yzfn61JnK5Hq+HExdRMSEfvMWHO2nPNGFIhK/IJWy1uoDCc9kkMo5ZOrAw/WP3O/ yp9bKaQyN4kj7SJTiLqy33PstfGoOd6HzM2A5ygBfjOdEYwjftufVDaHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+1bMidNB5lW2QyIHT2tKQa7XVcMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq1eU8jM CB8rdjggy8LYBAwgLUJyzmUJ47ojZFotqIVMdWjummz9Ri0lJIsJnj5nDaVTXkiP nJ6aGOTVynzMTYUlOnsgPU0whIB3KSNqd5R/a5DBM4xzQgTTXnyzVT2HwtE3n2Tm e1zCWCE1X3ifhQFOmg/6MrTbctgwSftgxVx61wSNCyNdG28btBGS6oGb7yCwGuvH Avt2zsPtIT38oq5ETSEyt2syZUdVS/xxeivl8EjQQDM7O0KA47ORIfjmPhMGcWkx dGrQVBu+jADaYburx73gh+u9FKQhHnOtdePRfUXLcQm/Fn5+fB6f3h07KaTl7LA2 hVBFLGtvl19vLg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:30 2026 by rpki-client