$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: ipHQkSwJzCZP+aRYG+MIdlx3f2hTFQjCMEMp9LqQs5k= Subject key identifier: 04:D8:5C:C3:B3:8A:62:02:0C:44:CC:F5:49:4D:D6:4C:40:64:87:25 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019D31BE637099B6A8EC1F4C5E69930E35B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1078 Signing time: Sat 28 Mar 2026 00:00:53 +0000 Manifest this update: Sat 28 Mar 2026 00:00:53 +0000 Manifest next update: Sun 29 Mar 2026 00:00:53 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 4: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 5: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: ZHML/ufz5O1QxrNhNZnS1PMd+5E9qTIA5rCFmirdqYw=) 7: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 8: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 9: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 10: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:be:63:70:99:b6:a8:ec:1f:4c:5e:69:93:0e:35:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Mar 28 00:00:53 2026 GMT Not After : Mar 29 00:00:53 2026 GMT Subject: CN=04d85cc3b38a62020c44ccf5494dd64c40648725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:8c:9f:b2:69:22:cf:97:fe:5a:39:d3:9e: b8:db:d8:19:6e:9f:b3:f5:bf:d3:15:ce:4e:04:60: 4e:a4:6b:eb:b8:b9:7e:fb:58:55:97:0a:65:36:a2: e5:39:71:63:34:ad:a1:53:6a:ba:fa:c5:b6:0f:e6: b4:39:e5:77:db:62:c1:8c:95:66:5b:78:c0:70:7c: d3:1e:2a:43:82:ec:05:cc:cb:ee:0e:74:01:f1:8a: f7:d7:5f:4b:19:fb:8e:f1:0f:82:80:8e:cd:b2:8e: 75:b1:b2:f1:40:aa:08:36:2a:2b:f4:4b:d2:ed:24: 09:a6:93:fd:2f:93:4f:24:7c:89:03:01:8e:c3:84: 10:03:a4:c1:58:74:4b:ab:aa:fb:32:cb:fe:99:a3: 04:a5:28:38:f4:bb:32:2c:bd:5c:49:07:d8:ba:51: ec:ca:da:94:67:b3:f3:ca:57:4e:07:41:d7:5c:54: 62:92:a8:ee:ca:36:d7:ec:79:1b:16:6c:61:3a:58: 6f:07:b8:be:12:c1:91:26:bd:b2:25:3d:69:34:c8: a3:d9:80:18:f7:8c:0c:dd:0a:bd:bb:a2:1c:ab:08: 4b:20:6b:00:a3:f6:82:12:88:16:da:43:cd:e8:46: eb:c9:ae:82:8a:c4:fe:1e:b3:0c:ca:6a:45:08:da: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:5C:C3:B3:8A:62:02:0C:44:CC:F5:49:4D:D6:4C:40:64:87:25 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:09:c2:ac:bf:ec:f5:a8:11:a8:26:93:ce:65:57:64:69:86: 18:a1:d0:a3:42:2f:fb:de:20:05:30:ef:dc:6a:2c:f9:f8:05: 63:6b:65:57:50:52:57:6f:83:ef:5a:73:da:37:29:0a:9d:40: 94:36:9e:5a:9f:37:4f:eb:fc:c8:2a:6c:d2:68:7c:38:22:40: a6:ad:05:27:96:0e:f6:e4:9a:bb:69:d4:33:70:55:74:93:73: 78:b3:8c:20:90:04:4b:65:47:20:ce:ee:17:0e:3d:83:a8:db: 4c:5d:71:8e:90:b7:17:d9:22:a2:9d:c3:15:cf:9c:36:36:17: e0:af:8c:2e:b7:30:0b:d9:5c:9c:93:2c:f2:4a:72:c9:2c:df: 92:0e:46:04:1f:46:de:75:87:f0:dd:df:1a:9f:e0:a1:d1:23: 45:9d:66:83:59:e0:d9:e6:4e:5a:7d:db:19:a5:95:c8:72:97: 55:3e:86:e8:d7:18:80:cd:85:55:af:88:25:7e:13:e8:17:37: 48:dd:f7:fc:d0:2a:f5:7f:13:24:eb:21:f1:da:23:0f:2e:08: 3e:25:0c:96:21:be:00:6c:fd:1d:e1:dc:be:d4:80:45:bc:f4: 9c:1d:ad:29:a1:61:c7:9e:bd:a5:a3:95:f6:15:14:15:eb:30: 88:39:0b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xvmNwmbao7B9MXmmTDjW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMzI4MDAwMDUzWhcNMjYwMzI5MDAwMDUzWjAzMTEwLwYDVQQD EygwNGQ4NWNjM2IzOGE2MjAyMGM0NGNjZjU0OTRkZDY0YzQwNjQ4NzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAiMn7JpIs+X/lo5056429gZbp+z 9b/TFc5OBGBOpGvruLl++1hVlwplNqLlOXFjNK2hU2q6+sW2D+a0OeV322LBjJVm W3jAcHzTHipDguwFzMvuDnQB8Yr3119LGfuO8Q+CgI7Nso51sbLxQKoINior9EvS 7SQJppP9L5NPJHyJAwGOw4QQA6TBWHRLq6r7Msv+maMEpSg49LsyLL1cSQfYulHs ytqUZ7PzyldOB0HXXFRikqjuyjbX7HkbFmxhOlhvB7i+EsGRJr2yJT1pNMij2YAY 94wM3Qq9u6IcqwhLIGsAo/aCEogW2kPN6Ebrya6CisT+HrMMympFCNoTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATYXMOzimICDETM9UlN1kxAZIclMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwnCrL/s 9agRqCaTzmVXZGmGGKHQo0Iv+94gBTDv3Gos+fgFY2tlV1BSV2+D71pz2jcpCp1A lDaeWp83T+v8yCps0mh8OCJApq0FJ5YO9uSau2nUM3BVdJNzeLOMIJAES2VHIM7u Fw49g6jbTF1xjpC3F9kiop3DFc+cNjYX4K+MLrcwC9lcnJMs8kpyySzfkg5GBB9G 3nWH8N3fGp/godEjRZ1mg1ng2eZOWn3bGaWVyHKXVT6G6NcYgM2FVa+IJX4T6Bc3 SN33/NAq9X8TJOsh8dojDy4IPiUMliG+AGz9HeHcvtSARbz0nB2tKaFhx569paOV 9hUUFeswiDkLzg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:36 2026 by rpki-client