$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: 3ptD5Q8DCES3CoTbV6rEhlQyVGGT6gKEHXSTWxubIvg= Subject key identifier: 70:A4:A7:F6:24:02:46:8B:42:DC:66:1F:03:FD:B2:8D:E8:37:91:FC Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019D273B10D01155E6266BD348537239E1E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 18D7 Signing time: Wed 25 Mar 2026 23:01:15 +0000 Manifest this update: Wed 25 Mar 2026 23:01:15 +0000 Manifest next update: Thu 26 Mar 2026 23:01:15 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: BUbIYyGscfnvlzYbPobrKpKEwl3qn+GISVXgBZanGu4=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:10:d0:11:55:e6:26:6b:d3:48:53:72:39:e1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Mar 25 23:01:15 2026 GMT Not After : Mar 26 23:01:15 2026 GMT Subject: CN=70a4a7f62402468b42dc661f03fdb28de83791fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:c3:d7:55:f5:c8:3d:c9:02:83:6d:a6:7d: 8e:f5:80:f5:0a:14:f4:26:fe:4e:c0:93:37:9e:dd: 98:ef:28:7d:07:3b:04:e6:d1:25:7a:94:39:6e:27: 42:68:cb:41:42:50:98:2e:dc:e2:5b:bc:9f:1f:60: 8b:28:52:38:b7:ea:2f:d0:80:3d:4a:b2:d6:10:c2: 3c:41:d8:78:15:ca:f2:c5:ad:a2:70:38:68:d4:40: be:9e:ac:58:98:64:69:ea:2b:53:87:a6:02:39:74: 60:46:8a:d9:b7:1f:f4:52:09:5a:e6:a1:ba:82:51: 8d:88:c4:4b:1d:d7:88:28:60:96:d2:fe:e0:49:f8: e8:dc:58:4c:69:e0:30:c9:13:00:37:46:9f:00:51: 8f:e4:89:5a:2d:b1:a4:c3:84:99:d2:79:4a:91:eb: ef:83:9f:85:1e:af:cb:2e:4c:2d:31:0e:6c:ca:c5: 6f:50:50:48:f1:3b:95:81:f0:47:c5:c2:13:c0:c6: b5:42:f6:c2:ac:62:8b:8f:3f:78:cb:12:9f:cc:79: e9:ea:83:ee:b8:e7:4a:14:f7:fe:4c:55:72:c4:b2: e7:ec:b9:45:37:78:a2:2c:46:e9:4b:33:f6:c2:a4: 25:57:d3:7a:2c:db:0e:30:3a:28:3e:55:74:20:a3: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:A7:F6:24:02:46:8B:42:DC:66:1F:03:FD:B2:8D:E8:37:91:FC X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:7b:ca:21:da:6e:15:25:54:fa:bc:18:27:54:80:de:a3: a0:3f:94:b5:0c:9e:bb:86:45:70:6e:b7:95:88:1f:52:2d:60: 92:2f:c1:ec:eb:cc:2e:f5:bd:3e:72:c3:e4:14:e1:1d:83:97: 7f:12:cc:c8:b3:64:61:00:2c:71:cd:f7:1a:3f:79:b6:37:e6: ef:d6:3c:a7:00:07:ff:a5:e4:ea:d7:94:6b:8b:a0:75:87:c3: 65:d4:ff:1c:3b:64:21:41:06:9a:0a:85:03:34:c5:43:39:b3: 96:5f:29:f2:97:31:11:69:38:e1:68:8c:79:04:16:ec:ee:55: e1:6c:f5:7a:6d:8f:82:a1:81:68:d0:30:3d:0f:81:b8:ad:df: ad:7c:19:85:00:f5:ff:ad:88:80:3f:0f:13:38:5e:c9:b6:53: 0d:54:9d:d6:43:ef:e8:98:b2:13:e0:fd:e1:b1:2a:76:1e:20: a7:78:5e:26:18:6e:cc:60:09:da:35:4a:46:36:05:8b:80:17: 57:de:34:d5:bf:53:d5:78:77:18:40:c6:ed:42:e8:1d:40:35: 20:1c:07:93:9d:ed:2b:09:97:6d:54:48:be:fc:6e:9e:a3:7d: f6:7c:a7:b9:f7:73:fc:93:8f:47:18:11:8f:87:4e:9f:dd:1c: 2e:93:81:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOxDQEVXmJmvTSFNyOeHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMzI1MjMwMTE1WhcNMjYwMzI2MjMwMTE1WjAzMTEwLwYDVQQD Eyg3MGE0YTdmNjI0MDI0NjhiNDJkYzY2MWYwM2ZkYjI4ZGU4Mzc5MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0jD11X1yD3JAoNtpn2O9YD1ChT0 Jv5OwJM3nt2Y7yh9BzsE5tElepQ5bidCaMtBQlCYLtziW7yfH2CLKFI4t+ov0IA9 SrLWEMI8Qdh4Fcryxa2icDho1EC+nqxYmGRp6itTh6YCOXRgRorZtx/0Ugla5qG6 glGNiMRLHdeIKGCW0v7gSfjo3FhMaeAwyRMAN0afAFGP5IlaLbGkw4SZ0nlKkevv g5+FHq/LLkwtMQ5sysVvUFBI8TuVgfBHxcITwMa1QvbCrGKLjz94yxKfzHnp6oPu uOdKFPf+TFVyxLLn7LlFN3iiLEbpSzP2wqQlV9N6LNsOMDooPlV0IKO0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCkp/YkAkaLQtxmHwP9so3oN5H8MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+h7yiHa bhUlVPq8GCdUgN6joD+UtQyeu4ZFcG63lYgfUi1gki/B7OvMLvW9PnLD5BThHYOX fxLMyLNkYQAscc33Gj95tjfm79Y8pwAH/6Xk6teUa4ugdYfDZdT/HDtkIUEGmgqF AzTFQzmzll8p8pcxEWk44WiMeQQW7O5V4Wz1em2PgqGBaNAwPQ+BuK3frXwZhQD1 /62IgD8PEzheybZTDVSd1kPv6JiyE+D94bEqdh4gp3heJhhuzGAJ2jVKRjYFi4AX V9401b9T1Xh3GEDG7ULoHUA1IBwHk53tKwmXbVRIvvxunqN99nynufdz/JOPRxgR j4dOn90cLpOBAg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:16 2026 by rpki-client