$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: V+OGaLd3Z7QABwM0mIn4lbriSubrdA0eoKa5BGnex44= Subject key identifier: 4E:25:89:DD:A1:17:EE:E8:82:D3:C3:98:84:56:10:2D:11:1A:19:EA Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019D258323B1E8D1F2AB7CE07F78B4D06031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 188B Signing time: Wed 25 Mar 2026 15:00:44 +0000 Manifest this update: Wed 25 Mar 2026 15:00:44 +0000 Manifest next update: Thu 26 Mar 2026 15:00:44 +0000 Files and hashes: 1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=) 2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=) 3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: gXTrAbHbPdZXi07fVElHOJB1PWU+IVtgKx1WttU7g/8=) 4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=) 5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=) 6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=) 7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=) 8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=) 9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=) 10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:23:b1:e8:d1:f2:ab:7c:e0:7f:78:b4:d0:60:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Mar 25 15:00:44 2026 GMT Not After : Mar 26 15:00:44 2026 GMT Subject: CN=4e2589dda117eee882d3c3988456102d111a19ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:c6:56:81:8b:f4:12:ea:cc:b5:0d:0b:33: 93:40:32:7d:13:5f:8f:79:bd:26:9c:f1:8f:f4:66: 68:55:09:fa:23:c2:04:97:b7:8b:2f:8b:52:5a:aa: 1e:f0:25:99:24:f7:a8:07:e1:a7:63:5c:7a:59:66: da:59:23:3f:9c:3d:15:28:d7:7f:e3:ee:e4:66:28: 37:a5:e5:6b:bc:a9:84:e1:e0:cf:9c:56:8d:5a:2e: 6b:7b:8f:ce:ab:c4:22:97:36:0f:d3:9f:98:c3:b8: 5e:30:97:39:d0:db:d8:9e:3e:23:bf:a0:34:c1:52: 0c:5d:3f:c8:6b:e3:f9:cc:46:93:0f:9e:37:df:79: cb:bd:47:bc:3b:6b:e5:9f:c7:d7:98:85:77:1d:60: 81:3d:b3:a3:7a:cf:d0:c0:bc:5f:9a:86:7f:8a:b9: 44:26:3f:75:23:7f:9e:b5:da:80:84:d3:81:e8:33: 1e:33:e0:e5:a1:d4:26:66:08:aa:f7:d1:20:35:9c: a2:f6:76:d1:29:25:ac:e7:54:aa:62:a0:38:23:58: 07:71:cc:ee:51:3f:0e:47:5d:a3:e6:10:27:1d:ad: 24:77:ef:06:27:0b:f1:53:ac:3e:43:d5:b8:ae:6c: 6b:0e:f5:68:77:0b:b0:71:07:77:3d:38:43:b3:fd: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:25:89:DD:A1:17:EE:E8:82:D3:C3:98:84:56:10:2D:11:1A:19:EA X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7c:5e:36:8a:7e:3b:16:e8:01:ce:92:9a:ff:49:77:fd:5e: bf:36:e9:61:a9:a8:c6:51:57:d7:16:15:45:82:a1:a7:35:8d: 5d:5e:8d:92:a0:5c:a1:23:88:ff:f8:13:f2:4d:15:24:1a:1d: 67:1a:00:ed:e9:d5:35:df:2b:35:6c:6d:54:7e:5d:fc:a7:24: 14:09:eb:9d:da:2c:fa:ce:3f:77:17:b1:b0:13:e2:0e:2d:5d: 51:96:0b:8b:16:f4:aa:d6:af:7d:1e:8a:87:91:df:10:61:93: 59:8f:dc:62:4e:81:48:be:7b:da:bc:f3:c6:46:b6:df:0f:b9: 0b:9e:7c:80:bd:29:bf:e7:fa:5b:f8:65:ad:84:d5:8d:c5:27: 54:8a:fa:44:43:e5:30:9e:25:1d:31:82:16:43:0b:06:53:e8: 02:fd:9d:7a:90:c2:06:c2:ac:64:b1:76:01:d3:c3:f2:0a:7b: 7b:78:87:53:01:c0:a4:52:ba:9d:20:46:9d:52:89:1e:e9:ec: 4c:86:75:a4:23:8e:68:b8:99:75:14:09:f7:b1:0b:b1:8f:8b: e4:8d:55:81:b0:a2:ed:a2:10:0e:79:32:b4:25:d1:55:39:cc: 40:3f:d2:db:2e:ea:14:79:d0:fe:04:35:d6:73:5c:b8:3d:d7: e3:66:1b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lgyOx6NHyq3zgf3i00GAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMzI1MTUwMDQ0WhcNMjYwMzI2MTUwMDQ0WjAzMTEwLwYDVQQD Eyg0ZTI1ODlkZGExMTdlZWU4ODJkM2MzOTg4NDU2MTAyZDExMWExOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvzGVoGL9BLqzLUNCzOTQDJ9E1+P eb0mnPGP9GZoVQn6I8IEl7eLL4tSWqoe8CWZJPeoB+GnY1x6WWbaWSM/nD0VKNd/ 4+7kZig3peVrvKmE4eDPnFaNWi5re4/Oq8QilzYP05+Yw7heMJc50NvYnj4jv6A0 wVIMXT/Ia+P5zEaTD54333nLvUe8O2vln8fXmIV3HWCBPbOjes/QwLxfmoZ/irlE Jj91I3+etdqAhNOB6DMeM+DlodQmZgiq99EgNZyi9nbRKSWs51SqYqA4I1gHcczu UT8OR12j5hAnHa0kd+8GJwvxU6w+Q9W4rmxrDvVodwuwcQd3PThDs/3OywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4lid2hF+7ogtPDmIRWEC0RGhnqMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXxeNop+ OxboAc6Smv9Jd/1evzbpYamoxlFX1xYVRYKhpzWNXV6NkqBcoSOI//gT8k0VJBod ZxoA7enVNd8rNWxtVH5d/KckFAnrndos+s4/dxexsBPiDi1dUZYLixb0qtavfR6K h5HfEGGTWY/cYk6BSL572rzzxka23w+5C558gL0pv+f6W/hlrYTVjcUnVIr6REPl MJ4lHTGCFkMLBlPoAv2depDCBsKsZLF2AdPD8gp7e3iHUwHApFK6nSBGnVKJHuns TIZ1pCOOaLiZdRQJ97ELsY+L5I1VgbCi7aIQDnkytCXRVTnMQD/S2y7qFHnQ/gQ1 1nNcuD3X42Yb7g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:25 2026 by rpki-client