$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: FHbG85UAbgXO0XdE5KcXxHaREmfWgTLW2PfLhtmvjy8= Subject key identifier: 29:B5:7B:14:BE:6E:50:4B:CD:8A:52:0C:09:11:D3:8A:C2:22:B4:F4 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019D2628690DE0193F66310593782013FBDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 18AD Signing time: Wed 25 Mar 2026 18:01:15 +0000 Manifest this update: Wed 25 Mar 2026 18:01:15 +0000 Manifest next update: Thu 26 Mar 2026 18:01:15 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: +rz90yN12jz1BrQcCBXW81J33t4hk9xADghgdjb+r1c=) 8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:69:0d:e0:19:3f:66:31:05:93:78:20:13:fb:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Mar 25 18:01:15 2026 GMT Not After : Mar 26 18:01:15 2026 GMT Subject: CN=29b57b14be6e504bcd8a520c0911d38ac222b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:e0:7c:df:b3:0b:51:51:1b:91:03:a1:77: 5a:11:22:f8:0d:c0:52:97:ed:e9:cf:8c:14:b8:fc: 35:fb:8b:d2:97:38:75:ae:ce:da:86:57:7a:16:e4: c5:9f:98:61:e0:c5:bc:1a:41:28:71:d9:91:5f:46: 0f:0e:8b:a8:9f:fb:4c:52:4b:8d:38:3c:ac:05:8c: 9a:66:18:9e:82:22:82:15:32:c7:6f:47:a3:12:4e: 9b:ea:f7:82:ae:f8:8b:43:b0:e0:8d:8f:01:9b:f1: 75:be:53:1c:ed:da:66:0b:e5:25:65:80:6f:55:2a: a9:44:6f:01:17:e4:df:eb:f4:23:1e:9d:c6:bf:2c: 5c:0b:b9:4b:75:17:4e:c0:e3:47:89:66:e7:0e:a1: 7e:bb:24:e2:63:5a:12:67:b4:9a:01:2a:7f:b2:91: c8:74:2d:06:39:23:76:29:a6:40:35:da:d0:18:b5: d9:f6:98:01:20:ec:50:e8:4e:26:74:e0:b9:66:73: fd:fe:d9:dd:42:9e:81:fe:3e:3c:45:3b:7c:48:cd: 55:98:81:c9:11:09:5c:72:3e:8e:84:a6:d3:b8:bb: 1d:fc:27:b5:b3:b4:bd:5a:fc:21:72:f3:ef:ae:57: 69:a3:c8:08:ea:85:7b:24:a9:0f:f1:d3:9c:16:0c: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B5:7B:14:BE:6E:50:4B:CD:8A:52:0C:09:11:D3:8A:C2:22:B4:F4 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fd:c8:72:86:77:c6:c8:36:23:af:52:c1:70:39:59:e0:b8: 58:9f:f7:75:b1:a7:09:11:c2:c1:a4:c6:6f:6a:de:f8:fb:1f: 6f:76:83:a5:a5:9b:2c:53:0c:76:43:32:12:a7:e1:00:af:5d: 78:48:53:12:00:49:90:f4:fa:7d:a3:d5:06:ff:3b:12:55:26: 62:9c:ad:5d:b1:ce:cd:be:61:02:fc:18:16:89:ce:8e:51:3d: 0f:5d:c3:45:02:65:49:bf:5f:ca:6a:97:a1:86:38:15:6e:d6: bd:cd:7a:83:1b:51:ef:e0:85:f2:02:8d:0d:a4:b9:20:97:2a: ec:fb:67:56:9e:5e:8c:c1:93:23:bd:21:3c:d7:d9:16:2c:df: 7d:0c:a6:17:f4:90:cf:e4:17:f8:ba:29:bb:82:d7:58:0f:2b: 58:16:01:37:15:a2:4e:78:4b:17:cc:c8:bb:f8:0b:53:2f:ba: 3a:9e:b0:46:c6:d9:cf:34:c2:51:98:1f:b7:0f:26:10:ec:06: 39:8e:33:eb:47:95:84:38:4e:2e:5d:8d:8f:96:f8:f5:7a:da: df:7c:4f:53:61:ac:8c:23:dd:85:03:7b:be:03:87:07:51:c8: 4c:ee:03:92:87:04:df:3f:96:f3:de:5b:5f:a9:72:59:f7:18: 0d:a3:d3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKGkN4Bk/ZjEFk3ggE/vdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMzI1MTgwMTE1WhcNMjYwMzI2MTgwMTE1WjAzMTEwLwYDVQQD EygyOWI1N2IxNGJlNmU1MDRiY2Q4YTUyMGMwOTExZDM4YWMyMjJiNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTgfN+zC1FRG5EDoXdaESL4DcBS l+3pz4wUuPw1+4vSlzh1rs7ahld6FuTFn5hh4MW8GkEocdmRX0YPDouon/tMUkuN ODysBYyaZhiegiKCFTLHb0ejEk6b6veCrviLQ7DgjY8Bm/F1vlMc7dpmC+UlZYBv VSqpRG8BF+Tf6/QjHp3GvyxcC7lLdRdOwONHiWbnDqF+uyTiY1oSZ7SaASp/spHI dC0GOSN2KaZANdrQGLXZ9pgBIOxQ6E4mdOC5ZnP9/tndQp6B/j48RTt8SM1VmIHJ EQlccj6OhKbTuLsd/Ce1s7S9WvwhcvPvrldpo8gI6oV7JKkP8dOcFgxEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm1exS+blBLzYpSDAkR04rCIrT0MB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf3IcoZ3 xsg2I69SwXA5WeC4WJ/3dbGnCRHCwaTGb2re+Psfb3aDpaWbLFMMdkMyEqfhAK9d eEhTEgBJkPT6faPVBv87ElUmYpytXbHOzb5hAvwYFonOjlE9D13DRQJlSb9fymqX oYY4FW7Wvc16gxtR7+CF8gKNDaS5IJcq7PtnVp5ejMGTI70hPNfZFizffQymF/SQ z+QX+Lopu4LXWA8rWBYBNxWiTnhLF8zIu/gLUy+6Op6wRsbZzzTCUZgftw8mEOwG OY4z60eVhDhOLl2Nj5b49Xra33xPU2GsjCPdhQN7vgOHB1HITO4DkocE3z+W895b X6lyWfcYDaPT+A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:24:15 2026 by rpki-client