$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json) Hash identifier: HezWPNDfAvCJI06Dk/FF8RCIzMa2BHHHwzSk5pg2ECU= Subject key identifier: 59:26:00:91:4A:1D:47:F8:D5:FD:69:B7:AA:16:47:8A:CF:E1:8A:0B Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019D2AE101D916BA867C732EA02317E1F851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft Manifest number: 0D44 Signing time: Thu 26 Mar 2026 16:01:22 +0000 Manifest this update: Thu 26 Mar 2026 16:01:22 +0000 Manifest next update: Fri 27 Mar 2026 16:01:22 +0000 Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=) 2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=) 3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=) 4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: rSwFDYwNWRCvOoB79Rv4fkncSM1JR9dI+h8pL0iRjwo=) 5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=) 6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=) 7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=) 8: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=) 9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=) 10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=) 11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=) 12: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:e1:01:d9:16:ba:86:7c:73:2e:a0:23:17:e1:f8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Mar 26 16:01:22 2026 GMT Not After : Mar 27 16:01:22 2026 GMT Subject: CN=592600914a1d47f8d5fd69b7aa16478acfe18a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:40:51:e1:4c:17:75:45:0f:2d:e3:d5:d9: 63:0f:7c:56:39:13:a5:da:ea:92:8e:05:50:78:1b: 58:eb:61:f3:e5:e8:d8:f9:f9:d5:c2:57:ce:b8:4a: 41:4c:6a:f1:49:9c:16:3c:e9:d7:04:4e:43:f8:fe: 6c:25:86:d3:a3:44:e9:45:ff:f6:6d:30:fa:c6:9c: 20:02:4d:fc:0e:de:a4:56:07:b3:83:b6:da:05:60: 28:80:3e:35:3e:0b:2c:6f:d4:c1:47:f3:40:a8:9c: 0c:90:b8:a0:88:c9:9b:3f:8f:e8:a0:97:e0:dc:2d: a2:0a:54:d6:54:c2:79:6a:95:40:57:0e:e9:36:83: 10:9e:35:27:42:c9:ca:10:b6:27:cf:13:a4:12:25: f9:4c:c6:07:99:96:0d:01:69:ca:2d:42:a1:e3:14: 88:1a:98:83:6a:36:9e:79:da:e0:61:84:2a:ce:c5: ba:9c:27:ae:42:09:3a:e0:c1:96:bd:90:9c:f6:0c: 3c:05:5c:7d:96:c0:ee:b3:5d:27:6c:fb:12:c2:bd: 39:d8:b8:18:c8:a9:63:b0:9a:99:a6:8b:68:ca:48: 8b:88:3b:65:88:d8:ec:35:32:b1:99:9c:9a:28:6b: 00:f0:39:0a:25:b9:9f:2c:e5:0f:de:9f:7a:95:bb: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:26:00:91:4A:1D:47:F8:D5:FD:69:B7:AA:16:47:8A:CF:E1:8A:0B X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:1c:e3:5e:44:4e:42:c2:6a:c8:d9:47:a1:a9:9b:40:b0: e6:d3:8b:fb:92:69:a0:1f:83:8d:fd:c9:93:51:4e:8c:08:61: 7a:7f:3f:09:b4:fd:4d:1b:3c:63:bc:a7:4a:4b:cd:2b:ca:b9: 3f:37:5c:06:a4:9a:c9:91:a9:35:4d:77:5a:bc:a4:db:b6:1e: 9f:c4:d5:6f:b1:48:e5:c7:9d:3d:7c:1f:a3:b0:16:da:1c:12: dd:85:18:fa:f4:7b:b5:78:4c:56:49:23:59:f0:fb:cf:19:9a: bf:ce:f2:47:23:b7:72:04:79:ca:74:1f:e6:80:73:9e:b1:29: fc:29:0e:50:e7:81:79:b4:b6:a0:c5:d9:55:cb:7e:bb:86:ee: e9:cc:bb:c0:9e:55:9b:9e:ec:8e:40:38:90:37:c5:1d:4b:d7: 6f:d9:a6:9a:df:30:55:16:65:63:aa:f5:cf:ca:4b:67:11:0d: c6:28:b4:a4:8b:30:4d:d0:3a:3d:47:8a:13:b3:36:1f:84:85: a1:f2:21:07:3d:a0:93:29:bb:aa:ad:96:dc:b9:00:0e:dc:5b: fe:88:a3:cc:76:fe:80:bf:8a:80:27:91:a5:83:8a:e4:11:98: ca:74:99:3a:e7:cf:92:cc:34:ae:f4:1a:92:65:1e:82:8d:6c: da:0d:1f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0q4QHZFrqGfHMuoCMX4fhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMzI2MTYwMTIyWhcNMjYwMzI3MTYwMTIyWjAzMTEwLwYDVQQD Eyg1OTI2MDA5MTRhMWQ0N2Y4ZDVmZDY5YjdhYTE2NDc4YWNmZTE4YTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv1AUeFMF3VFDy3j1dljD3xWOROl 2uqSjgVQeBtY62Hz5ejY+fnVwlfOuEpBTGrxSZwWPOnXBE5D+P5sJYbTo0TpRf/2 bTD6xpwgAk38Dt6kVgezg7baBWAogD41Pgssb9TBR/NAqJwMkLigiMmbP4/ooJfg 3C2iClTWVMJ5apVAVw7pNoMQnjUnQsnKELYnzxOkEiX5TMYHmZYNAWnKLUKh4xSI GpiDajaeedrgYYQqzsW6nCeuQgk64MGWvZCc9gw8BVx9lsDus10nbPsSwr052LgY yKljsJqZpotoykiLiDtliNjsNTKxmZyaKGsA8DkKJbmfLOUP3p96lbsq/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkmAJFKHUf41f1pt6oWR4rP4YoLMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNsc415E TkLCasjZR6Gpm0Cw5tOL+5JpoB+Djf3Jk1FOjAhhen8/CbT9TRs8Y7ynSkvNK8q5 PzdcBqSayZGpNU13Wryk27Yen8TVb7FI5cedPXwfo7AW2hwS3YUY+vR7tXhMVkkj WfD7zxmav87yRyO3cgR5ynQf5oBznrEp/CkOUOeBebS2oMXZVct+u4bu6cy7wJ5V m57sjkA4kDfFHUvXb9mmmt8wVRZlY6r1z8pLZxENxii0pIswTdA6PUeKE7M2H4SF ofIhBz2gkym7qq2W3LkADtxb/oijzHb+gL+KgCeRpYOK5BGYynSZOufPksw0rvQa kmUego1s2g0ftg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:03 2026 by rpki-client