$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: Q/j+BK2OcknkZFF3vSNDh7idJ3rTIO5M3DdHtzrfYkY= Subject key identifier: 12:10:7C:07:1C:9A:6A:57:7A:48:AB:E4:8D:D2:35:DD:EA:31:C9:BA Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019D26284F0305A5CB6B782C0C639D11CD5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 18A5 Signing time: Wed 25 Mar 2026 18:01:09 +0000 Manifest this update: Wed 25 Mar 2026 18:01:09 +0000 Manifest next update: Thu 26 Mar 2026 18:01:09 +0000 Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=) 2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=) 3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=) 4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=) 5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=) 6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=) 7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=) 8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=) 9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=) 10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=) 11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=) 12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=) 13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: zg8/S1CRMdDC8joLCn02mN+WT9GsTQf/OaYEj8Zodnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:4f:03:05:a5:cb:6b:78:2c:0c:63:9d:11:cd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Mar 25 18:01:09 2026 GMT Not After : Mar 26 18:01:09 2026 GMT Subject: CN=12107c071c9a6a577a48abe48dd235ddea31c9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:72:c5:97:85:93:bf:1b:83:ea:85:fb:e7: 33:8a:8c:8b:14:e8:b3:62:b6:0e:37:50:a5:55:23: e4:2a:01:f4:3e:44:ab:43:ee:a4:49:78:7d:ef:b3: 3f:a4:6a:ac:f4:9d:cf:c0:0d:1e:79:af:67:55:1d: 26:96:09:7c:d8:6c:dc:a5:61:2c:c3:49:4d:22:04: 28:68:d5:d2:33:9b:55:99:6f:10:16:18:1a:ff:00: 5d:97:f3:1d:b7:38:aa:a3:49:e3:2b:c6:18:c5:4e: 59:0a:65:a5:68:d6:43:47:b7:aa:b5:e2:a2:a4:99: 3f:60:21:3f:87:16:5a:34:81:78:87:b5:68:40:67: b2:b0:37:57:c2:8e:17:2a:54:55:f1:3d:cf:29:89: 80:32:38:88:79:f0:d1:89:38:3c:70:6b:3d:39:11: 22:4b:73:91:6d:5e:e3:dd:1f:6c:32:1c:7f:f5:0d: 6d:b5:d6:bd:01:a6:d8:c5:5e:09:23:4c:72:eb:a4: 43:f0:fe:13:94:d6:76:12:ca:28:70:03:02:cc:c1: bf:5f:0f:f1:c1:1c:7e:5f:4d:fa:18:f7:03:c7:aa: d5:03:1c:a8:e8:64:49:96:70:b1:44:18:56:31:b1: ff:3f:96:4c:33:75:e4:dd:3f:22:74:45:2c:85:45: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:7C:07:1C:9A:6A:57:7A:48:AB:E4:8D:D2:35:DD:EA:31:C9:BA X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:e6:b3:82:21:e2:e4:89:90:1f:63:68:b9:79:3c:3a:4c: a4:7c:6c:03:5f:66:2e:5e:c7:aa:b1:69:8e:b8:5a:8b:de:38: ee:f5:7f:8a:d5:67:2a:57:23:4f:20:76:1c:09:cd:13:15:19: 23:75:64:07:ca:30:dd:aa:7c:66:59:ea:2c:dd:79:f3:d5:9e: e9:83:f3:9f:a8:5c:d6:29:16:3f:80:10:bb:c7:93:7c:3f:4b: eb:03:9b:55:e8:1d:47:1a:a6:a2:e5:e2:b1:f5:4d:47:f7:24: ac:d8:56:eb:43:65:bc:7f:68:2b:0b:12:0c:45:d2:a9:2a:f6: a6:c2:6a:ff:a8:ca:ac:9f:05:91:28:7f:65:42:22:87:92:e8: 34:5c:42:f1:52:d8:19:a1:0e:66:91:c2:14:ee:d1:17:a6:4a: aa:29:f2:a4:8e:85:3b:90:c5:00:ea:d2:1b:f4:6d:99:e0:f3: 89:31:ad:03:7b:ad:05:c7:3e:24:ae:e9:db:7b:ed:89:7e:eb: 9e:a7:38:f9:73:9d:61:a4:64:9a:5d:65:90:f8:35:2c:d9:be: b5:1a:93:af:a0:ac:19:38:f1:01:9f:67:e5:01:29:20:8a:c7: 00:66:ae:64:0e:da:dc:ec:66:8c:65:dc:af:fb:21:ae:19:fa: b3:8e:24:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKE8DBaXLa3gsDGOdEc1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMzI1MTgwMTA5WhcNMjYwMzI2MTgwMTA5WjAzMTEwLwYDVQQD EygxMjEwN2MwNzFjOWE2YTU3N2E0OGFiZTQ4ZGQyMzVkZGVhMzFjOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDZyxZeFk78bg+qF++czioyLFOiz YrYON1ClVSPkKgH0PkSrQ+6kSXh977M/pGqs9J3PwA0eea9nVR0mlgl82GzcpWEs w0lNIgQoaNXSM5tVmW8QFhga/wBdl/Mdtziqo0njK8YYxU5ZCmWlaNZDR7eqteKi pJk/YCE/hxZaNIF4h7VoQGeysDdXwo4XKlRV8T3PKYmAMjiIefDRiTg8cGs9OREi S3ORbV7j3R9sMhx/9Q1ttda9AabYxV4JI0xy66RD8P4TlNZ2EsoocAMCzMG/Xw/x wRx+X036GPcDx6rVAxyo6GRJlnCxRBhWMbH/P5ZMM3Xk3T8idEUshUUdqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIQfAccmmpXekir5I3SNd3qMcm6MB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAbms4Ih 4uSJkB9jaLl5PDpMpHxsA19mLl7HqrFpjrhai9447vV/itVnKlcjTyB2HAnNExUZ I3VkB8ow3ap8ZlnqLN1589We6YPzn6hc1ikWP4AQu8eTfD9L6wObVegdRxqmouXi sfVNR/ckrNhW60NlvH9oKwsSDEXSqSr2psJq/6jKrJ8FkSh/ZUIih5LoNFxC8VLY GaEOZpHCFO7RF6ZKqinypI6FO5DFAOrSG/RtmeDziTGtA3utBcc+JK7p23vtiX7r nqc4+XOdYaRkml1lkPg1LNm+tRqTr6CsGTjxAZ9n5QEpIIrHAGauZA7a3OxmjGXc r/shrhn6s44kyg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:02 2026 by rpki-client