$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: mRFJwk7LnTUCt0kGuexz04F9hZIeKAIf0aRQI30J46w= Subject key identifier: 3A:E1:E3:00:2E:B1:7D:02:5E:6B:0A:2F:B8:DF:61:B1:49:D5:C8:D6 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019D273B2449E5A8B41CC434ADE41C0B9380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1743 Signing time: Wed 25 Mar 2026 23:01:20 +0000 Manifest this update: Wed 25 Mar 2026 23:01:20 +0000 Manifest next update: Thu 26 Mar 2026 23:01:20 +0000 Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=) 2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: TikKdyhcJJHNVP2QcDSQnnbiCHs.roa (hash: neErNQQSzB6BBUr7/9orHxARcJ3yH0azsWxDsn+hb5M=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: YeaEn1yeMXfSqHEhTdMMuqqcmTOBQ/jUOfG/feywx3k=) 8: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:24:49:e5:a8:b4:1c:c4:34:ad:e4:1c:0b:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Mar 25 23:01:20 2026 GMT Not After : Mar 26 23:01:20 2026 GMT Subject: CN=3ae1e3002eb17d025e6b0a2fb8df61b149d5c8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:4e:e8:4e:15:5c:18:0e:b6:94:b6:0c:d1: 2a:db:85:24:5d:27:d0:df:d6:0a:1e:92:02:27:09: ef:91:60:b0:5e:43:5f:1f:63:21:a2:01:e7:a6:6b: 19:90:aa:0f:4d:66:89:0d:66:62:19:ce:3b:a6:06: 1a:9b:e6:40:f6:e2:f9:f2:cf:f2:69:7a:4e:b3:f0: 8c:39:50:01:08:e9:3d:09:e4:1d:e0:07:3a:1f:ee: 52:1c:f5:e0:11:6b:0e:43:90:f9:d0:07:e4:cd:6a: 4b:f2:42:7b:a5:6f:91:3f:47:15:f8:38:c1:09:27: 62:e8:ef:1d:9e:3e:67:c1:b2:16:5b:63:fe:e2:eb: 45:56:9e:f5:df:0a:a8:8e:5e:f7:21:74:99:db:a0: 14:17:84:c1:a3:2c:7a:b3:b8:58:f5:5c:d0:ba:f6: f2:69:1e:6c:6d:32:4c:67:a9:03:5b:d6:aa:b0:63: 65:3e:26:6d:0c:b5:83:04:cb:eb:a1:45:26:b3:af: 5d:19:75:85:68:3a:b4:ce:e5:bd:99:9d:df:92:10: df:bc:18:28:57:38:d6:49:85:d3:c1:8e:3d:41:5b: d7:ad:69:44:4e:8c:b4:be:d8:7d:0d:1a:29:1f:74: 17:19:fb:70:16:72:93:6b:6b:23:2e:39:df:d4:7b: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:E3:00:2E:B1:7D:02:5E:6B:0A:2F:B8:DF:61:B1:49:D5:C8:D6 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:89:c1:bb:14:0c:3a:70:04:7f:3a:d8:4b:b5:60:75:8d:df: 62:28:da:43:8d:67:b6:78:c1:a1:e9:e1:45:ed:76:b5:a7:0a: b9:f2:d2:ec:70:0c:82:99:0a:98:07:14:e3:95:78:ce:f0:02: 40:ee:6e:f5:80:c6:ab:01:2a:81:36:8d:b6:10:84:43:ee:0f: 42:77:f3:0b:04:78:cf:96:67:67:a5:43:57:37:75:c7:c0:e2: 9e:4a:ff:4c:55:d1:d6:3d:fd:1a:df:32:a1:3b:6e:25:da:13: f9:ea:71:40:de:18:33:43:c3:63:fc:f0:c6:4a:dd:cf:6a:10: 6d:81:7c:19:97:ba:58:3e:62:ee:07:34:39:ae:a2:ad:8d:cb: ab:69:18:02:c6:21:4a:39:22:e5:41:33:ed:0d:48:c6:19:2e: 97:0c:82:a1:d8:9e:f1:6a:33:a1:b0:96:d2:7e:32:ef:31:5d: 3e:bc:20:dd:58:20:1a:c8:98:af:3d:53:10:89:59:47:fb:df: ea:68:25:5a:e2:6e:a4:eb:e0:4c:cb:17:05:5e:5a:f7:bf:d8: ec:37:1b:20:0d:c9:05:0f:57:4d:5e:f8:43:b3:6b:2c:0e:a8: 1a:1d:de:2e:a9:ee:10:f1:8d:56:6a:24:26:5a:01:f2:a3:da: a9:da:a5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOyRJ5ai0HMQ0reQcC5OAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMzI1MjMwMTIwWhcNMjYwMzI2MjMwMTIwWjAzMTEwLwYDVQQD EygzYWUxZTMwMDJlYjE3ZDAyNWU2YjBhMmZiOGRmNjFiMTQ5ZDVjOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1tO6E4VXBgOtpS2DNEq24UkXSfQ 39YKHpICJwnvkWCwXkNfH2MhogHnpmsZkKoPTWaJDWZiGc47pgYam+ZA9uL58s/y aXpOs/CMOVABCOk9CeQd4Ac6H+5SHPXgEWsOQ5D50AfkzWpL8kJ7pW+RP0cV+DjB CSdi6O8dnj5nwbIWW2P+4utFVp713wqojl73IXSZ26AUF4TBoyx6s7hY9VzQuvby aR5sbTJMZ6kDW9aqsGNlPiZtDLWDBMvroUUms69dGXWFaDq0zuW9mZ3fkhDfvBgo VzjWSYXTwY49QVvXrWlEToy0vth9DRopH3QXGftwFnKTa2sjLjnf1HuOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrh4wAusX0CXmsKL7jfYbFJ1cjWMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYnBuxQM OnAEfzrYS7VgdY3fYijaQ41ntnjBoenhRe12tacKufLS7HAMgpkKmAcU45V4zvAC QO5u9YDGqwEqgTaNthCEQ+4PQnfzCwR4z5ZnZ6VDVzd1x8Dinkr/TFXR1j39Gt8y oTtuJdoT+epxQN4YM0PDY/zwxkrdz2oQbYF8GZe6WD5i7gc0Oa6irY3Lq2kYAsYh Sjki5UEz7Q1IxhkulwyCodie8WozobCW0n4y7zFdPrwg3VggGsiYrz1TEIlZR/vf 6mglWuJupOvgTMsXBV5a97/Y7DcbIA3JBQ9XTV74Q7NrLA6oGh3eLqnuEPGNVmok JloB8qPaqdql8g== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:38 2026 by rpki-client