$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: YHu3rALYtOMsgvVbqWUuSr8NuzcWwplXkpbg8IkrhDg= Subject key identifier: 86:11:EA:29:4D:5C:0B:ED:B6:02:23:D4:2E:97:52:C5:4C:7C:2A:58 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019D2884ABCE0A4A9C188781707E59C7FC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1895 Signing time: Thu 26 Mar 2026 05:01:16 +0000 Manifest this update: Thu 26 Mar 2026 05:01:16 +0000 Manifest next update: Fri 27 Mar 2026 05:01:16 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: d2pYarNtvIEwxiJ2MNQBTQPsr6AsbXHRKUDf1RMnIK0=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:ab:ce:0a:4a:9c:18:87:81:70:7e:59:c7:fc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Mar 26 05:01:16 2026 GMT Not After : Mar 27 05:01:16 2026 GMT Subject: CN=8611ea294d5c0bedb60223d42e9752c54c7c2a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:c5:ed:a7:7a:a8:23:1c:6e:4f:f3:fa:43: d7:e9:1d:f2:f5:44:6d:39:f7:f0:f3:b6:58:72:74: 66:b0:12:b3:48:36:09:42:7a:8a:43:87:ca:ed:bd: 7a:95:66:d4:0e:43:38:2e:25:4b:c1:a3:92:47:b9: a1:d6:6e:ba:d0:92:1b:94:8b:29:1a:4f:b2:1b:1d: b8:5d:11:04:f1:83:9e:28:d2:4f:91:a3:5f:71:ac: 62:ae:ff:ce:a2:67:53:21:07:57:b3:46:56:52:6f: 9e:a2:1d:f4:fa:c7:1d:23:01:70:51:69:dc:36:96: a3:af:a9:6f:ed:e1:8b:df:a1:c9:a5:3b:f3:f2:ed: ce:6c:e0:36:96:b9:e6:76:9f:66:08:60:8c:df:6f: fa:ae:85:b8:fb:ab:8c:d8:bf:ee:89:3b:ac:0b:c5: b0:39:0a:37:2e:07:f1:ae:b8:24:fc:b3:80:cc:fa: 06:01:6f:8a:84:d0:1b:38:ac:6e:09:71:46:96:b9: 7c:8f:19:1d:24:9a:46:e9:7a:b4:27:1f:4d:65:99: d5:db:45:b2:5e:e8:15:f1:46:ab:86:47:50:e0:7b: 74:8e:2e:74:6f:45:79:23:f7:23:38:9a:5b:cd:87: 48:8d:2f:0d:85:17:63:f7:02:d5:a5:a1:b7:b8:07: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:11:EA:29:4D:5C:0B:ED:B6:02:23:D4:2E:97:52:C5:4C:7C:2A:58 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:83:00:2b:1a:92:a2:2a:b8:f3:6a:74:43:a5:7f:bb:f5:72: c5:ee:db:22:18:7e:25:e6:33:b7:f5:2d:5b:aa:0c:e9:18:d7: dd:b8:7e:58:68:cb:6f:ea:01:00:95:5b:46:d4:de:5c:6c:fa: 52:6f:69:7a:96:dc:1a:99:d0:d0:35:1a:63:72:2e:b2:80:b0: 91:60:69:60:54:a0:67:12:cc:c1:e9:6b:43:c4:8b:8d:1e:90: 73:27:83:b4:af:5a:06:a6:91:65:8b:e1:2a:dd:94:7b:6f:e5: bc:0d:25:cf:20:2b:6f:19:03:77:0c:02:f2:b6:7e:a1:66:66: 0e:1f:8e:31:3f:68:e7:66:56:77:07:1f:75:ca:46:21:a2:22: 08:6f:21:81:cc:e9:47:72:f8:ed:35:ec:3a:c7:e0:ab:ce:a0: 08:a5:17:ad:f2:df:db:cc:59:a6:aa:99:32:70:8f:46:6b:06: 73:7d:7e:b3:eb:ab:6c:cd:5f:1f:08:8a:4c:4b:e0:fa:e1:63: 19:f9:d1:7a:f4:43:f1:11:e0:8f:c6:b4:e1:f4:29:61:b0:e6: 9b:69:ea:58:7e:7d:73:51:4f:0a:53:4c:f1:c0:40:49:47:b0: dc:1c:81:07:ee:d8:3c:70:2d:40:a2:23:26:f1:16:79:80:c1: 6d:77:40:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohKvOCkqcGIeBcH5Zx/w9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMzI2MDUwMTE2WhcNMjYwMzI3MDUwMTE2WjAzMTEwLwYDVQQD Eyg4NjExZWEyOTRkNWMwYmVkYjYwMjIzZDQyZTk3NTJjNTRjN2MyYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTTF7ad6qCMcbk/z+kPX6R3y9URt Offw87ZYcnRmsBKzSDYJQnqKQ4fK7b16lWbUDkM4LiVLwaOSR7mh1m660JIblIsp Gk+yGx24XREE8YOeKNJPkaNfcaxirv/OomdTIQdXs0ZWUm+eoh30+scdIwFwUWnc Npajr6lv7eGL36HJpTvz8u3ObOA2lrnmdp9mCGCM32/6roW4+6uM2L/uiTusC8Ww OQo3Lgfxrrgk/LOAzPoGAW+KhNAbOKxuCXFGlrl8jxkdJJpG6Xq0Jx9NZZnV20Wy XugV8UarhkdQ4Ht0ji50b0V5I/cjOJpbzYdIjS8NhRdj9wLVpaG3uAcEgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYR6ilNXAvttgIj1C6XUsVMfCpYMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoMAKxqS oiq482p0Q6V/u/Vyxe7bIhh+JeYzt/UtW6oM6RjX3bh+WGjLb+oBAJVbRtTeXGz6 Um9pepbcGpnQ0DUaY3IusoCwkWBpYFSgZxLMwelrQ8SLjR6QcyeDtK9aBqaRZYvh Kt2Ue2/lvA0lzyArbxkDdwwC8rZ+oWZmDh+OMT9o52ZWdwcfdcpGIaIiCG8hgczp R3L47TXsOsfgq86gCKUXrfLf28xZpqqZMnCPRmsGc31+s+urbM1fHwiKTEvg+uFj GfnRevRD8RHgj8a04fQpYbDmm2nqWH59c1FPClNM8cBASUew3ByBB+7YPHAtQKIj JvEWeYDBbXdAhw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:04 2026 by rpki-client