$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: N06lrzqDHwYSSS8PL2hb2Hp/0i9SjCUAOa+J8wi0I8c= Subject key identifier: 0B:CD:89:F8:A3:52:AE:44:61:1D:F2:99:2A:EF:ED:63:69:5F:0F:06 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019D265FEB667554FD80328FDE60BA56491B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 100C Signing time: Wed 25 Mar 2026 19:01:53 +0000 Manifest this update: Wed 25 Mar 2026 19:01:53 +0000 Manifest next update: Thu 26 Mar 2026 19:01:53 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 4: I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa (hash: TgoS4NVRCKw3VQlQIXu5bcdT8lLerjXyG7C2JML0rR4=) 5: QIQmOYwmYDAmuGNr99m8HLlWChU.roa (hash: 2hFXRY7xApUSUGmkWAKEi1tCNtzyuPD0Q8qiUj/opMw=) 6: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 7: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 8: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 9: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 10: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 11: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 12: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 13: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: 6AxsChWdLdGkiQg/Crt86sknback7DBMJ+QiN18IMCo=) 14: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 15: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (hash: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=) 16: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:eb:66:75:54:fd:80:32:8f:de:60:ba:56:49:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Mar 25 19:01:53 2026 GMT Not After : Mar 26 19:01:53 2026 GMT Subject: CN=0bcd89f8a352ae44611df2992aefed63695f0f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:f4:a7:68:44:62:76:a5:54:9d:32:2f:dd: 0a:3d:fa:1f:fb:c2:86:77:50:84:b0:31:63:2a:13: 37:08:42:d3:39:cc:38:4f:cc:95:04:74:d9:1f:9b: 78:f7:80:09:4f:bb:23:76:a0:cf:e2:5f:8f:05:a8: 59:a2:a7:03:df:ea:ba:01:d4:b0:c1:18:37:52:4c: b6:82:cb:e1:40:e5:34:df:5c:52:73:dd:46:20:2b: 32:50:f0:5e:2b:30:13:52:cd:d9:5f:f1:e4:2f:44: ce:ae:5d:8d:fd:5d:59:bb:76:8a:7f:e7:d8:9b:4f: 2e:71:43:4e:a8:14:93:2f:53:f6:8b:2f:88:83:d2: 97:6f:35:5d:f1:50:b7:85:83:1d:13:d4:94:ab:de: ec:85:10:a2:2e:a1:13:b0:14:3c:3f:ac:3e:3c:b3: 6e:dc:87:14:4d:10:40:c0:e2:89:09:ed:e9:c1:eb: 30:bf:c4:d7:4c:b0:79:92:4d:3b:dc:fd:e7:9d:4f: 14:7a:1e:5e:df:d8:7d:21:85:74:4d:24:ce:0f:35: 10:22:b1:2e:9c:3b:2d:e5:42:f0:aa:22:f1:c0:4b: 85:79:01:47:42:03:21:9b:97:c5:83:ef:31:59:50: 3b:01:5e:e1:b7:76:cb:71:8b:68:6f:3c:2a:f6:5e: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:89:F8:A3:52:AE:44:61:1D:F2:99:2A:EF:ED:63:69:5F:0F:06 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:af:df:02:bb:2e:9e:0e:d7:6c:ad:4f:b9:62:55:dd:05:6b: 64:45:1c:60:35:9b:58:5b:d9:51:ba:28:0e:51:fa:10:71:c4: f3:57:95:71:ed:19:75:23:34:23:a9:cb:3d:66:f6:92:05:25: 97:7f:6d:c9:db:36:25:01:23:fd:2f:67:98:9d:4f:99:0b:fa: d8:7a:e6:56:88:cf:78:64:56:38:98:c0:28:68:77:03:d5:d2: ce:c0:ee:8c:ae:45:fb:5b:fa:22:84:d8:2b:c4:2c:b1:2a:35: 65:57:42:16:12:d7:c4:2b:72:bf:2b:2b:2a:28:06:31:1a:72: bf:24:e6:22:05:e4:68:83:d5:15:95:5f:ac:4a:f8:ac:06:3d: 81:e1:af:96:ff:2e:e3:b9:e6:41:92:4c:2e:7a:fc:b8:ab:eb: f2:70:db:1b:63:e0:9a:e9:7e:94:d9:e0:8b:b8:0a:62:39:7d: 8e:ab:3a:79:c8:dc:57:7f:17:52:b0:9f:b5:c7:db:3b:7d:0f: 06:a2:de:08:6b:7d:8a:df:58:5f:d3:34:4f:bc:2e:3a:ea:a7: 67:af:30:3b:ea:0b:72:b2:25:86:a1:d5:f3:47:8d:f1:80:39: 65:42:f4:7c:62:4b:3b:cb:b8:0c:4c:c3:fd:24:ae:e1:f4:0e: 44:31:e1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX+tmdVT9gDKP3mC6VkkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMzI1MTkwMTUzWhcNMjYwMzI2MTkwMTUzWjAzMTEwLwYDVQQD EygwYmNkODlmOGEzNTJhZTQ0NjExZGYyOTkyYWVmZWQ2MzY5NWYwZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfL0p2hEYnalVJ0yL90KPfof+8KG d1CEsDFjKhM3CELTOcw4T8yVBHTZH5t494AJT7sjdqDP4l+PBahZoqcD3+q6AdSw wRg3Uky2gsvhQOU031xSc91GICsyUPBeKzATUs3ZX/HkL0TOrl2N/V1Zu3aKf+fY m08ucUNOqBSTL1P2iy+Ig9KXbzVd8VC3hYMdE9SUq97shRCiLqETsBQ8P6w+PLNu 3IcUTRBAwOKJCe3pweswv8TXTLB5kk073P3nnU8Ueh5e39h9IYV0TSTODzUQIrEu nDst5ULwqiLxwEuFeQFHQgMhm5fFg+8xWVA7AV7ht3bLcYtobzwq9l6gwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvNifijUq5EYR3ymSrv7WNpXw8GMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6/fArsu ng7XbK1PuWJV3QVrZEUcYDWbWFvZUbooDlH6EHHE81eVce0ZdSM0I6nLPWb2kgUl l39tyds2JQEj/S9nmJ1PmQv62HrmVojPeGRWOJjAKGh3A9XSzsDujK5F+1v6IoTY K8QssSo1ZVdCFhLXxCtyvysrKigGMRpyvyTmIgXkaIPVFZVfrEr4rAY9geGvlv8u 47nmQZJMLnr8uKvr8nDbG2Pgmul+lNngi7gKYjl9jqs6ecjcV38XUrCftcfbO30P BqLeCGt9it9YX9M0T7wuOuqnZ68wO+oLcrIlhqHV80eN8YA5ZUL0fGJLO8u4DEzD /SSu4fQORDHh7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:34:54 2026 by rpki-client