$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: Panc/KJiacNLkLYW7uV+u0lrHdI2l7s6S+7iTH2VHgc= Subject key identifier: 7A:DD:78:2B:9B:3B:87:5A:0E:39:34:BD:48:64:C9:0C:F8:A6:4A:A5 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019D258394F6C31368DA0D34D49F8B4C79FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1889 Signing time: Wed 25 Mar 2026 15:01:13 +0000 Manifest this update: Wed 25 Mar 2026 15:01:13 +0000 Manifest next update: Thu 26 Mar 2026 15:01:13 +0000 Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=) 2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=) 3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=) 4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=) 5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=) 6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=) 7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=) 8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=) 9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=) 10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=) 11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=) 12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: lVWn2QRKpB6qLCW682kLVMI6/2O/1dQFd9tH7HzXIgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:94:f6:c3:13:68:da:0d:34:d4:9f:8b:4c:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Mar 25 15:01:13 2026 GMT Not After : Mar 26 15:01:13 2026 GMT Subject: CN=7add782b9b3b875a0e3934bd4864c90cf8a64aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:6d:f7:b9:9e:84:1d:60:ed:18:71:d5:f1: f9:ea:ef:32:34:2c:d0:01:5c:78:02:b8:07:2a:a2: 07:94:ed:fb:58:c0:b8:05:e3:51:c8:21:3f:02:7e: fa:5f:26:63:2e:65:55:5c:c1:65:c8:df:63:b3:15: 85:a9:3a:ee:91:97:ab:c3:9d:f3:48:f4:3b:8a:81: 8b:ff:c4:11:da:73:0e:d3:e7:2a:9f:96:0f:08:b5: af:55:90:88:c1:0b:e6:c5:65:3d:cc:27:19:8d:58: 11:a3:c6:74:bf:9a:5e:4f:95:e1:ea:8c:ed:e9:eb: 70:fa:10:e8:1a:7e:2a:55:62:34:91:62:4d:9a:d8: 35:b2:6f:c0:ed:d6:56:2b:35:79:4c:89:0b:a6:31: 3b:2b:7b:9b:c7:ec:1e:0a:5c:6d:0f:a5:e0:07:08: 5f:0c:f4:1c:07:76:a9:4d:81:fb:54:70:ba:13:f6: 3a:f8:3c:f6:5e:27:2d:2f:6b:b2:b7:b5:e9:be:b1: 91:94:5e:ab:9d:a0:1f:c7:91:1e:6a:e1:a3:57:de: 85:e7:8a:47:6d:97:e1:65:6d:5f:e8:08:2f:83:4b: da:f1:91:ec:e3:01:ec:dc:9d:38:0f:6c:03:0a:3e: 21:a8:50:db:1c:a9:1a:92:b5:68:8b:a2:dc:bb:4a: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:78:2B:9B:3B:87:5A:0E:39:34:BD:48:64:C9:0C:F8:A6:4A:A5 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6d:b6:a7:0c:0c:43:26:b5:0d:a0:f4:18:a6:d4:5b:20:7a: 8d:90:ff:64:56:62:ee:08:42:e8:c3:54:0d:65:13:a4:ad:3b: 40:c5:71:23:4a:25:02:91:98:1a:bd:a3:45:56:ce:96:a4:b6: 80:c6:04:82:6e:ae:ce:9f:4d:78:05:5a:32:c7:67:ca:72:7a: 18:92:b7:07:e9:ea:f3:4f:5e:69:89:a5:4c:62:8b:c2:80:89: c3:79:36:7d:64:cb:7c:0a:a8:cf:b9:ed:c2:74:fb:df:82:23: dd:f1:0d:ec:f2:a7:bf:00:bb:c6:3e:97:4b:b5:9d:6a:8d:05: 5b:b0:4c:81:fd:d7:b3:fe:7e:7d:37:3e:f0:e5:55:c5:47:06: 7c:59:ba:01:65:1a:d7:7c:38:9d:02:a7:35:c5:51:2f:8f:5c: 55:de:58:64:44:c9:0f:34:1d:01:2a:ae:7c:45:68:49:21:b8: d6:0c:30:36:c5:d4:e9:35:fb:61:1b:e5:8b:73:02:21:95:8d: b9:5c:f7:2d:4f:b9:27:87:ca:dc:81:b2:bb:94:a0:fe:78:6c: 7d:3d:39:fd:de:c0:e6:60:5f:c2:3d:e1:76:75:85:e8:20:bd: 95:21:18:ad:18:40:73:fe:f7:ff:0c:aa:8a:00:32:21:c8:7b: a7:46:e3:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg5T2wxNo2g001J+LTHn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwMzI1MTUwMTEzWhcNMjYwMzI2MTUwMTEzWjAzMTEwLwYDVQQD Eyg3YWRkNzgyYjliM2I4NzVhMGUzOTM0YmQ0ODY0YzkwY2Y4YTY0YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIht97mehB1g7Rhx1fH56u8yNCzQ AVx4ArgHKqIHlO37WMC4BeNRyCE/An76XyZjLmVVXMFlyN9jsxWFqTrukZerw53z SPQ7ioGL/8QR2nMO0+cqn5YPCLWvVZCIwQvmxWU9zCcZjVgRo8Z0v5peT5Xh6ozt 6etw+hDoGn4qVWI0kWJNmtg1sm/A7dZWKzV5TIkLpjE7K3ubx+weClxtD6XgBwhf DPQcB3apTYH7VHC6E/Y6+Dz2XictL2uyt7XpvrGRlF6rnaAfx5EeauGjV96F54pH bZfhZW1f6Agvg0va8ZHs4wHs3J04D2wDCj4hqFDbHKkakrVoi6Lcu0qgSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrdeCubO4daDjk0vUhkyQz4pkqlMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG22pwwM Qya1DaD0GKbUWyB6jZD/ZFZi7ghC6MNUDWUTpK07QMVxI0olApGYGr2jRVbOlqS2 gMYEgm6uzp9NeAVaMsdnynJ6GJK3B+nq809eaYmlTGKLwoCJw3k2fWTLfAqoz7nt wnT734Ij3fEN7PKnvwC7xj6XS7Wdao0FW7BMgf3Xs/5+fTc+8OVVxUcGfFm6AWUa 13w4nQKnNcVRL49cVd5YZETJDzQdASqufEVoSSG41gwwNsXU6TX7YRvli3MCIZWN uVz3LU+5J4fK3IGyu5Sg/nhsfT05/d7A5mBfwj3hdnWF6CC9lSEYrRhAc/73/wyq igAyIch7p0bjjA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:35 2026 by rpki-client