$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: SCpR7n/9a/KKNDvoMbxkDiK6wqAV8uY1Hl40N+mxF7Q= Subject key identifier: 73:41:9C:29:9B:BE:71:B3:5A:43:FB:D9:2E:F3:63:F9:68:76:07:BD Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019D284D3C46E630299B7BA034197B9C1197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 100D Signing time: Thu 26 Mar 2026 04:00:43 +0000 Manifest this update: Thu 26 Mar 2026 04:00:43 +0000 Manifest next update: Fri 27 Mar 2026 04:00:43 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 4: I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa (hash: TgoS4NVRCKw3VQlQIXu5bcdT8lLerjXyG7C2JML0rR4=) 5: QIQmOYwmYDAmuGNr99m8HLlWChU.roa (hash: 2hFXRY7xApUSUGmkWAKEi1tCNtzyuPD0Q8qiUj/opMw=) 6: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 7: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 8: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 9: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 10: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 11: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 12: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 13: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: Gi1+BRU0yDD+3TBRzKT9alO3WClJYYp6R9gBLeFupgI=) 14: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 15: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (hash: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=) 16: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:3c:46:e6:30:29:9b:7b:a0:34:19:7b:9c:11:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Mar 26 04:00:43 2026 GMT Not After : Mar 27 04:00:43 2026 GMT Subject: CN=73419c299bbe71b35a43fbd92ef363f9687607bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:ba:b9:04:35:ca:47:8d:98:d0:69:6c:20: ce:d3:45:41:6c:31:a4:5d:04:91:07:24:db:30:f9: cd:8b:e8:7d:1b:35:f2:16:24:37:41:cb:88:6d:47: f0:a2:4e:ea:c1:ad:89:37:22:5a:9c:5e:81:e5:df: 45:da:a5:3d:e2:a9:1e:da:aa:1a:95:84:de:cf:7c: b8:a2:fc:9b:c7:5f:0f:92:9b:90:9c:b0:f4:50:e6: 67:79:e4:b8:66:44:39:bd:ff:8c:3e:3c:73:d7:76: 35:26:68:30:8e:ad:38:12:82:bb:dc:a2:55:1a:4c: af:db:c9:7d:68:06:7d:c3:21:d3:17:fd:c3:e7:2e: 4b:d1:25:bd:cf:c2:65:40:d8:86:d7:c3:8a:ae:fe: 78:b7:f1:2b:48:04:91:eb:b6:84:e6:3a:a5:06:be: df:95:dd:31:3d:0d:8e:33:a7:86:4e:4e:a1:89:8f: df:e2:5d:35:30:cb:50:9b:fa:fc:a8:15:a9:10:13: 2a:41:98:8c:48:f5:0f:a9:8a:88:b2:e0:ac:6b:8d: 3b:c1:d2:e7:41:ae:71:55:63:db:68:b6:26:3b:57: 33:a1:1c:bd:ee:9f:fe:8b:7e:1b:b6:d6:03:33:db: db:df:1f:42:1b:c3:39:c2:bb:07:ae:2d:11:04:de: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:41:9C:29:9B:BE:71:B3:5A:43:FB:D9:2E:F3:63:F9:68:76:07:BD X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7d:95:48:12:48:60:a8:20:8c:77:8f:89:18:f2:df:d0:5e: ba:18:2d:59:a5:ea:84:bb:6b:f5:56:f9:31:c6:c3:f2:db:8b: 89:43:fc:cf:43:18:44:4e:a8:9c:bc:87:f3:9a:74:fd:98:5d: 3d:22:97:e3:46:59:0f:7b:f5:3a:3e:b3:80:e8:f6:6f:b8:51: 20:30:08:2f:fd:c4:07:65:1f:81:c1:88:0b:2f:31:8a:7d:a8: 9e:73:48:0f:75:5d:4f:8a:aa:a9:48:9c:e3:d5:2f:be:9b:7e: f2:f3:6b:3d:84:50:33:b1:fd:1d:6b:04:43:40:10:da:6b:e7: a3:68:cd:cc:3a:89:05:4f:a9:4a:81:31:58:be:5a:be:c1:bd: 2c:ea:15:ba:a1:0e:dc:65:c7:ba:af:e0:7a:f5:0e:f9:23:0f: 16:88:bd:cc:a2:f3:3a:39:1e:2c:a3:ec:42:9d:c7:e1:50:1a: 5a:99:77:f6:18:0f:70:ff:58:70:d8:b4:92:93:bb:71:de:ff: 1d:11:e0:95:6b:91:1c:b2:52:4b:56:fa:ef:bc:14:e2:d9:8f: 75:ed:6e:e5:5c:1b:9a:a2:dd:db:53:6a:5b:8b:d2:a6:15:c5: bd:1c:b6:4f:37:7b:53:8c:3a:74:15:e5:33:43:cf:78:68:88: 03:4c:96:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTTxG5jApm3ugNBl7nBGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMzI2MDQwMDQzWhcNMjYwMzI3MDQwMDQzWjAzMTEwLwYDVQQD Eyg3MzQxOWMyOTliYmU3MWIzNWE0M2ZiZDkyZWYzNjNmOTY4NzYwN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubm6uQQ1ykeNmNBpbCDO00VBbDGk XQSRByTbMPnNi+h9GzXyFiQ3QcuIbUfwok7qwa2JNyJanF6B5d9F2qU94qke2qoa lYTez3y4ovybx18PkpuQnLD0UOZneeS4ZkQ5vf+MPjxz13Y1Jmgwjq04EoK73KJV Gkyv28l9aAZ9wyHTF/3D5y5L0SW9z8JlQNiG18OKrv54t/ErSASR67aE5jqlBr7f ld0xPQ2OM6eGTk6hiY/f4l01MMtQm/r8qBWpEBMqQZiMSPUPqYqIsuCsa407wdLn Qa5xVWPbaLYmO1czoRy97p/+i34bttYDM9vb3x9CG8M5wrsHri0RBN52vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNBnCmbvnGzWkP72S7zY/lodge9MB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH2VSBJI YKggjHePiRjy39BeuhgtWaXqhLtr9Vb5McbD8tuLiUP8z0MYRE6onLyH85p0/Zhd PSKX40ZZD3v1Oj6zgOj2b7hRIDAIL/3EB2UfgcGICy8xin2onnNID3VdT4qqqUic 49Uvvpt+8vNrPYRQM7H9HWsEQ0AQ2mvno2jNzDqJBU+pSoExWL5avsG9LOoVuqEO 3GXHuq/gevUO+SMPFoi9zKLzOjkeLKPsQp3H4VAaWpl39hgPcP9YcNi0kpO7cd7/ HRHglWuRHLJSS1b677wU4tmPde1u5VwbmqLd21NqW4vSphXFvRy2Tzd7U4w6dBXl M0PPeGiIA0yW+w== -----END CERTIFICATE-----Generated at Thu Mar 26 11:48:49 2026 by rpki-client