$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: BCUSr0+Jbp2ntn+lQ5d3fAk+dqZEjUgvs9ifpCRc0yQ= Subject key identifier: E0:ED:5D:2C:BA:9B:7F:DD:3D:5F:3B:D3:73:AF:3B:F0:DD:55:A8:05 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019D2816C7A8796B3C5C42F021E507354644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 18AE Signing time: Thu 26 Mar 2026 03:01:14 +0000 Manifest this update: Thu 26 Mar 2026 03:01:14 +0000 Manifest next update: Fri 27 Mar 2026 03:01:14 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: AZYEVSMeCmRT9fSwC6pLmHhhDKv12mKbrnM6Zd+g0F8=) 8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:c7:a8:79:6b:3c:5c:42:f0:21:e5:07:35:46:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Mar 26 03:01:14 2026 GMT Not After : Mar 27 03:01:14 2026 GMT Subject: CN=e0ed5d2cba9b7fdd3d5f3bd373af3bf0dd55a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:82:49:cd:f7:21:61:b3:d1:54:99:1d:8b: d5:30:ed:2d:e1:22:fc:10:f4:e8:13:05:03:00:da: ab:63:45:a5:1a:60:f0:ae:c4:6a:d2:c3:ac:26:f0: c3:1d:77:8e:4e:81:fe:85:5a:64:75:74:e9:50:cc: 8f:71:36:be:48:d7:b7:ce:67:2f:d4:54:52:77:5e: 15:81:59:e1:07:aa:71:56:f3:ff:5d:44:2e:b3:c7: 14:ca:f1:a1:0f:93:f2:9a:af:60:17:ae:c1:57:51: 46:a6:be:77:ab:cd:37:84:4e:15:a8:3b:24:a4:ef: 4d:66:41:47:ce:fa:a8:fa:e0:bf:e9:e8:b7:fd:b1: 4d:6a:2b:14:a6:f0:af:a1:49:e0:bf:ad:01:9d:57: cc:18:8b:4a:84:13:e7:df:bc:dd:d4:17:1c:95:60: 6c:4d:3d:c1:10:c5:53:a1:8b:c0:2c:88:22:eb:d5: 7f:56:86:69:5f:2b:96:28:88:33:ba:f8:35:43:c1: c8:bd:ec:75:66:4a:57:25:eb:ac:96:71:d5:66:b8: c7:15:92:17:2d:b4:19:72:3f:04:d3:21:a4:91:e2: d9:73:cd:67:93:51:a4:03:5c:9c:b0:00:b3:f8:25: 5c:9b:18:51:7e:7e:2e:1d:1c:59:02:2b:f6:52:16: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:ED:5D:2C:BA:9B:7F:DD:3D:5F:3B:D3:73:AF:3B:F0:DD:55:A8:05 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:72:37:52:3a:39:18:50:d1:98:61:3b:c8:ce:2b:83:e1:f9: 3c:b9:f6:ff:d0:06:b4:98:25:07:51:f9:35:19:ff:ce:52:6b: 5a:a3:de:21:73:57:a0:1a:b5:f8:a6:ef:27:72:9c:eb:fd:f9: 20:df:c0:5b:fe:e6:b2:6f:82:89:5c:c7:3a:c9:ab:d2:c5:52: 94:fa:4d:19:e6:6e:9b:c0:84:b1:f6:85:39:c1:4f:58:c6:8b: da:01:e0:a9:62:03:64:ac:fb:07:04:c8:13:52:a5:03:55:7b: 11:0c:71:e4:7d:f2:ed:8a:7a:c6:b2:bf:e2:7c:bf:80:60:94: e0:17:fa:02:31:cb:d7:7e:ac:bc:59:5b:b6:1a:69:6e:0e:e9: 94:53:d6:75:ae:49:9e:b9:d7:cd:fe:be:8b:7c:1e:ae:e6:b3: 20:1d:f7:e0:a4:fe:5e:e4:cd:ca:9c:42:14:88:57:e5:bb:44: 8f:01:33:f0:1a:66:0b:17:63:96:39:cc:e6:98:50:d7:58:08: 4f:8b:da:6b:01:18:f8:a2:86:95:c3:ae:b8:5f:87:3a:d9:88: b2:59:91:14:f1:4b:e8:e1:15:2e:21:90:d9:01:a9:26:79:c8: 39:b9:c8:7a:fd:7c:2f:16:9d:2f:eb:e3:9a:ba:0e:70:8a:e9: bc:8a:3c:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFseoeWs8XELwIeUHNUZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMzI2MDMwMTE0WhcNMjYwMzI3MDMwMTE0WjAzMTEwLwYDVQQD EyhlMGVkNWQyY2JhOWI3ZmRkM2Q1ZjNiZDM3M2FmM2JmMGRkNTVhODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxliCSc33IWGz0VSZHYvVMO0t4SL8 EPToEwUDANqrY0WlGmDwrsRq0sOsJvDDHXeOToH+hVpkdXTpUMyPcTa+SNe3zmcv 1FRSd14VgVnhB6pxVvP/XUQus8cUyvGhD5Pymq9gF67BV1FGpr53q803hE4VqDsk pO9NZkFHzvqo+uC/6ei3/bFNaisUpvCvoUngv60BnVfMGItKhBPn37zd1BcclWBs TT3BEMVToYvALIgi69V/VoZpXyuWKIgzuvg1Q8HIvex1ZkpXJeuslnHVZrjHFZIX LbQZcj8E0yGkkeLZc81nk1GkA1ycsACz+CVcmxhRfn4uHRxZAiv2UhaHLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODtXSy6m3/dPV8703OvO/DdVagFMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnI3Ujo5 GFDRmGE7yM4rg+H5PLn2/9AGtJglB1H5NRn/zlJrWqPeIXNXoBq1+KbvJ3Kc6/35 IN/AW/7msm+CiVzHOsmr0sVSlPpNGeZum8CEsfaFOcFPWMaL2gHgqWIDZKz7BwTI E1KlA1V7EQxx5H3y7Yp6xrK/4ny/gGCU4Bf6AjHL136svFlbthppbg7plFPWda5J nrnXzf6+i3weruazIB334KT+XuTNypxCFIhX5btEjwEz8BpmCxdjljnM5phQ11gI T4vaawEY+KKGlcOuuF+HOtmIslmRFPFL6OEVLiGQ2QGpJnnIObnIev18LxadL+vj mroOcIrpvIo8rg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:54 2026 by rpki-client