$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: hWqSjWzcu1TlkP0lNxRgYguyGfHmWnk7nWeydiCoybE= Subject key identifier: BE:E8:EF:96:6F:17:ED:AB:0A:C2:B7:18:0D:FE:1A:37:CA:7D:91:EC Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019D26CD4B4087185C83544508566746F4B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 188A Signing time: Wed 25 Mar 2026 21:01:21 +0000 Manifest this update: Wed 25 Mar 2026 21:01:21 +0000 Manifest next update: Thu 26 Mar 2026 21:01:21 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: Ovi0GYfnG5n/TOAs3BeQlzJFleftBre5geLdaKb/xlE=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:4b:40:87:18:5c:83:54:45:08:56:67:46:f4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Mar 25 21:01:21 2026 GMT Not After : Mar 26 21:01:21 2026 GMT Subject: CN=bee8ef966f17edab0ac2b7180dfe1a37ca7d91ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:df:41:8e:b0:bc:41:8c:a2:d3:94:9a:6d: 40:ac:62:d7:6b:7d:a6:bc:9b:9f:07:16:87:01:14: b1:98:4e:82:26:1d:4e:f9:f4:33:0b:0b:18:e3:98: 56:e4:1c:79:89:a9:b2:8b:8b:61:55:5e:b1:38:bf: 1e:86:35:70:76:6d:1f:8a:08:83:30:62:c4:c7:cf: 07:8c:79:ff:d4:a1:23:96:bb:a0:18:05:25:22:e6: ce:af:e1:59:b8:29:d5:60:02:d6:25:e9:c8:ef:0d: 7c:f6:a9:5a:b6:d9:d8:8c:da:57:e3:cc:27:41:7f: f6:97:84:7e:e4:6e:44:cf:b8:87:40:bb:3f:86:be: e6:47:1a:07:a9:8f:e9:8b:1c:d6:aa:4e:32:93:6f: d3:1a:80:46:3c:fb:97:1a:e1:b0:a3:be:66:cc:d6: a0:e4:e1:f6:ad:88:35:0b:38:40:41:93:10:6e:12: e3:7c:64:a2:fb:8d:b4:43:cc:35:d0:c3:2c:1e:f2: 64:b3:4a:d4:88:42:4f:6c:73:8b:eb:80:cc:3d:e9: 77:db:a3:4a:09:9c:61:36:b3:f5:c9:73:6a:fd:97: ba:ce:93:41:58:11:d3:9c:49:83:da:1a:18:8a:cc: cc:c8:60:c1:9a:58:11:f7:4f:40:5b:fa:d6:20:40: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E8:EF:96:6F:17:ED:AB:0A:C2:B7:18:0D:FE:1A:37:CA:7D:91:EC X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a5:f5:c7:64:c2:be:73:79:ea:ad:2a:e8:9f:db:8e:ee:f6: 12:7a:30:59:0a:2b:c1:5c:1e:d2:cc:d4:67:bd:16:a4:96:c2: 65:17:15:fe:d7:a9:23:35:b8:45:24:9f:31:23:5d:5c:97:a0: 4b:10:84:90:d0:3a:fc:90:2c:13:73:78:61:aa:b0:98:3a:8e: 88:0e:fa:3d:ba:1a:1b:1d:6c:f3:4e:63:52:6a:0f:4f:38:76: 5c:0f:a9:56:62:93:e4:bd:c0:98:bf:41:72:f9:fd:93:3d:54: c4:b9:48:66:61:51:b3:e4:bd:50:d3:60:78:b8:92:b0:42:74: c7:20:dc:eb:e8:48:5b:28:eb:88:e4:89:b3:e6:d5:94:0c:46: e6:3d:72:96:d6:a6:fe:86:5f:e8:55:25:bc:99:ff:17:e7:ce: 4c:d9:dd:a0:7a:7a:f4:43:f8:c8:0d:da:5e:73:98:74:c3:61: 85:3e:9a:0d:0f:f0:7a:a7:6a:83:6e:e0:59:a7:d7:bd:f0:fc: d5:8e:4b:b8:ac:d7:41:b9:27:22:16:4e:23:6d:96:4d:6b:59: 03:cd:1f:47:c4:45:86:84:da:5c:36:42:90:09:22:6e:14:90: be:5f:c6:0e:be:a5:a1:5f:38:e6:0e:fa:71:3c:11:1a:5d:0c: 65:e9:1e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzUtAhxhcg1RFCFZnRvSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMzI1MjEwMTIxWhcNMjYwMzI2MjEwMTIxWjAzMTEwLwYDVQQD EyhiZWU4ZWY5NjZmMTdlZGFiMGFjMmI3MTgwZGZlMWEzN2NhN2Q5MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZzfQY6wvEGMotOUmm1ArGLXa32m vJufBxaHARSxmE6CJh1O+fQzCwsY45hW5Bx5iamyi4thVV6xOL8ehjVwdm0figiD MGLEx88HjHn/1KEjlrugGAUlIubOr+FZuCnVYALWJenI7w189qlattnYjNpX48wn QX/2l4R+5G5Ez7iHQLs/hr7mRxoHqY/pixzWqk4yk2/TGoBGPPuXGuGwo75mzNag 5OH2rYg1CzhAQZMQbhLjfGSi+420Q8w10MMsHvJks0rUiEJPbHOL64DMPel326NK CZxhNrP1yXNq/Ze6zpNBWBHTnEmD2hoYiszMyGDBmlgR909AW/rWIEBQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7o75ZvF+2rCsK3GA3+GjfKfZHsMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaX1x2TC vnN56q0q6J/bju72EnowWQorwVwe0szUZ70WpJbCZRcV/tepIzW4RSSfMSNdXJeg SxCEkNA6/JAsE3N4YaqwmDqOiA76PboaGx1s805jUmoPTzh2XA+pVmKT5L3AmL9B cvn9kz1UxLlIZmFRs+S9UNNgeLiSsEJ0xyDc6+hIWyjriOSJs+bVlAxG5j1yltam /oZf6FUlvJn/F+fOTNndoHp69EP4yA3aXnOYdMNhhT6aDQ/weqdqg27gWafXvfD8 1Y5LuKzXQbknIhZOI22WTWtZA80fR8RFhoTaXDZCkAkibhSQvl/GDr6loV845g76 cTwRGl0MZeke+A== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:10 2026 by rpki-client