$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: yqiNCzoSjwOH2AK5FzI8G38wClg3vLu8u4+jV6dOgtI= Subject key identifier: C8:C6:C3:3F:5B:0A:45:36:AC:FE:09:C4:02:B5:D0:91:8B:28:DE:65 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019D273ADBBF30A9E4D9E3692E1DFA4821F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0DBF Signing time: Wed 25 Mar 2026 23:01:01 +0000 Manifest this update: Wed 25 Mar 2026 23:01:01 +0000 Manifest next update: Thu 26 Mar 2026 23:01:01 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: 1jwpUfqbhErT/d+wntJSE2Who8o6bc97bRKAGq3vqyQ=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:db:bf:30:a9:e4:d9:e3:69:2e:1d:fa:48:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Mar 25 23:01:01 2026 GMT Not After : Mar 26 23:01:01 2026 GMT Subject: CN=c8c6c33f5b0a4536acfe09c402b5d0918b28de65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:b1:c6:1d:27:38:22:11:ed:03:7e:c2:b4: ec:af:f3:25:64:bc:a6:0a:91:64:31:4e:6d:37:c7: 6d:c0:fe:4e:0d:3d:f5:1b:30:b4:7e:8e:4d:0c:f0: 30:7b:59:be:e8:94:0e:eb:73:d8:6d:b2:ef:ae:cb: 92:0c:21:dc:48:be:99:43:6d:c0:ea:b1:4e:67:3c: 07:62:91:76:6d:ad:8d:b1:63:c2:a2:86:56:1f:96: 59:56:ff:5f:36:c2:85:2c:90:03:21:5d:d5:f5:87: 30:8f:d2:74:31:5d:6a:3d:12:4d:83:29:d5:20:de: da:45:aa:4c:1e:7d:e7:73:19:b3:40:8a:20:65:c2: bc:34:e5:23:7e:cd:e3:84:1e:4a:68:cf:c4:00:3b: 8b:f2:d7:df:6a:91:91:14:54:8b:a5:88:9c:26:51: c9:4d:8f:7a:86:4f:89:79:0d:fd:12:79:63:e7:76: 18:f9:8f:f2:05:5e:c0:75:9c:1e:b6:0b:f8:f1:da: e7:c2:a4:f0:20:23:46:54:13:14:5b:fc:d9:2e:0e: b8:a4:fe:a1:2b:43:8f:36:f1:5e:c7:d0:98:bf:ad: 91:26:23:cf:aa:c6:60:cb:a3:b0:b4:ce:90:cc:f3: da:8c:72:2a:ed:44:a6:7f:03:79:39:c7:7b:93:6e: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:C3:3F:5B:0A:45:36:AC:FE:09:C4:02:B5:D0:91:8B:28:DE:65 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:31:b7:06:0f:ee:3f:37:24:21:80:03:4b:0e:d6:6d:ce: f4:25:8f:23:92:90:3e:19:f9:35:ef:81:e6:c0:19:c3:4c:91: 99:49:0b:dd:95:4c:0c:13:14:b2:c2:30:ed:c7:06:55:59:6b: d8:f6:4c:56:8f:99:21:55:83:d7:a3:9d:be:43:f7:23:39:7c: 6f:c9:15:99:ff:96:dd:9f:54:d9:f6:0e:7c:7a:42:c5:57:ce: 59:1d:37:7d:3c:97:63:d6:0a:3a:2b:a5:87:34:c8:12:e6:d3: b1:0f:69:d8:30:5e:c2:c3:d7:88:9e:9d:8c:0b:73:3d:8d:17: cf:33:69:a6:87:26:cd:4b:1a:cf:05:59:82:90:a0:1c:06:24: 2f:82:2e:44:8c:40:98:4c:5f:11:ce:99:ce:b7:47:5d:a1:5d: 88:d8:10:9e:07:61:01:9d:99:68:ce:72:ba:47:3e:f6:29:34: f2:58:30:9f:a0:8e:4d:7d:bb:7e:08:d4:82:46:0e:13:23:6f: ad:57:83:29:4b:85:03:ab:e3:d6:d5:b8:51:fe:97:22:ba:06: 64:93:a5:49:90:a6:d7:a9:c0:a8:3a:27:85:c5:ea:cb:0b:58: 87:19:a9:1e:8b:2c:7f:72:28:db:e9:9d:41:5d:a5:fe:55:00: 2b:11:ff:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOtu/MKnk2eNpLh36SCHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMzI1MjMwMTAxWhcNMjYwMzI2MjMwMTAxWjAzMTEwLwYDVQQD EyhjOGM2YzMzZjViMGE0NTM2YWNmZTA5YzQwMmI1ZDA5MThiMjhkZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlImxxh0nOCIR7QN+wrTsr/MlZLym CpFkMU5tN8dtwP5ODT31GzC0fo5NDPAwe1m+6JQO63PYbbLvrsuSDCHcSL6ZQ23A 6rFOZzwHYpF2ba2NsWPCooZWH5ZZVv9fNsKFLJADIV3V9Ycwj9J0MV1qPRJNgynV IN7aRapMHn3ncxmzQIogZcK8NOUjfs3jhB5KaM/EADuL8tffapGRFFSLpYicJlHJ TY96hk+JeQ39Enlj53YY+Y/yBV7AdZwetgv48drnwqTwICNGVBMUW/zZLg64pP6h K0OPNvFex9CYv62RJiPPqsZgy6OwtM6QzPPajHIq7USmfwN5Ocd7k24FQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjGwz9bCkU2rP4JxAK10JGLKN5lMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiQxtwYP 7j83JCGAA0sO1m3O9CWPI5KQPhn5Ne+B5sAZw0yRmUkL3ZVMDBMUssIw7ccGVVlr 2PZMVo+ZIVWD16OdvkP3Izl8b8kVmf+W3Z9U2fYOfHpCxVfOWR03fTyXY9YKOiul hzTIEubTsQ9p2DBewsPXiJ6djAtzPY0XzzNppocmzUsazwVZgpCgHAYkL4IuRIxA mExfEc6ZzrdHXaFdiNgQngdhAZ2ZaM5yukc+9ik08lgwn6COTX27fgjUgkYOEyNv rVeDKUuFA6vj1tW4Uf6XIroGZJOlSZCm16nAqDonhcXqywtYhxmpHossf3Io2+md QV2l/lUAKxH/Uw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:22 2026 by rpki-client