$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json) Hash identifier: InniPMbNDK/LYjb6zkS8F8G7LC8JflevV6BBjno1Ly0= Subject key identifier: A4:19:C6:87:B0:5F:73:12:C7:A1:89:58:D8:7B:BA:9B:8E:AE:C9:02 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019D254CA32056DA7D3ED299BD5EE2530E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft Manifest number: 117A Signing time: Wed 25 Mar 2026 14:01:12 +0000 Manifest this update: Wed 25 Mar 2026 14:01:12 +0000 Manifest next update: Thu 26 Mar 2026 14:01:12 +0000 Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=) 2: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=) 3: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=) 4: CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa (hash: wDvPNmhM7GcOMSdAsmrbJDDVqrwM6YWhHFV4n7fPWuI=) 5: DHLKNILgfx16JsrlSXMeY6f762E.roa (hash: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU=) 6: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=) 7: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (hash: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=) 8: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=) 9: LvDcdbQFTKKtCL0HWtHi8ZHMICw.roa (hash: pr9dzyzuzRXVF7OipbNJiEIFE2wIqGOEkXf2LlwVcSo=) 10: M_kXnc2VW4WObsQRGmM4dOkxvAo.roa (hash: hrx4tS1F9C1+NylfSdZou47j0Ea58tIJch7D5WphPNA=) 11: Pg6WcfGC8AkvBSVyCvKxqgdMGlM.roa (hash: 2K2U6cGOTmQqLf6zsnhVRf79y+nh5CGpqyhhe8CMkU8=) 12: ROXrZox9qmRyvEk1U37LkhE8O1k.roa (hash: O/Kmp71WYLzeqzuXJvcZSb52Tj33zZc/vYWStp0shFw=) 13: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (hash: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU=) 14: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=) 15: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=) 16: i7lgm15yljxNJJIdxV0PN0NruUk.roa (hash: 2LRwTaHFptBADB4hm7Yrbr+djCqVu9Gi1I6wte0t5nk=) 17: pADycQ-9xhjD7DWrrFk7pCQ_Ijo.roa (hash: K1+0R7I0/kdM14j+kEitEaAtqppeRpYjvV274U8LEQY=) 18: qaDueQVxzcTEXG6b9fDcRRLZpCE.roa (hash: DDLmMzTc8RBMo8zk0yDihQy7T9kbJSiNpv5biRUVuCU=) 19: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: 0WrJebL7tvwklEMDOd7zKTY64+F+tSEk4aQrQ02U62Q=) 20: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=) 21: vINuwcNnkpikTczh3QJJDkDshUQ.roa (hash: d4JFil4KdE9sIgtRNdUYG5jzcpib/Fzi6yqvSmhW+t8=) 22: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:a3:20:56:da:7d:3e:d2:99:bd:5e:e2:53:0e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Mar 25 14:01:12 2026 GMT Not After : Mar 26 14:01:12 2026 GMT Subject: CN=a419c687b05f7312c7a18958d87bba9b8eaec902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:36:0c:9b:b9:16:48:54:0a:71:72:fa:96: 03:21:52:be:2e:c4:32:6b:64:2c:a6:92:fb:ee:a7: 94:55:fa:88:c2:b0:ad:37:a6:e1:20:b9:4c:7b:72: b3:fd:d2:a2:26:f1:05:ab:cd:5b:6e:a1:31:f6:4c: 46:b2:54:93:cd:36:a9:04:e2:83:77:31:81:53:ed: 8d:cd:56:7d:c5:d7:5e:bc:7f:04:50:9a:b2:3e:51: 59:d6:2d:f5:da:13:31:97:ae:b3:ae:ba:ff:34:92: 55:2d:8e:a9:ed:ed:50:2f:91:08:7f:fc:be:fc:fb: 0b:2d:59:d3:f6:5f:bf:86:bb:11:d0:97:93:0c:d1: 81:45:89:ec:41:ca:c1:c7:6b:1a:a4:ae:21:b8:b2: 39:e4:9b:69:a9:36:f8:4a:a2:2d:ee:d5:7a:15:11: 39:06:d7:2d:56:4f:4d:1b:47:f5:5e:1e:f0:1f:a9: ac:3c:6c:cb:17:12:34:c3:d5:9b:55:1f:0b:83:32: 2b:82:1c:8f:ec:11:91:ee:44:b1:aa:7a:78:38:8c: 50:94:2d:82:41:c3:f1:7d:21:e8:66:94:2b:dc:3a: de:c6:4b:74:44:34:c3:12:e2:0e:37:14:8b:4d:8f: 17:e0:49:d9:ea:e0:30:f9:3f:b7:03:d6:cb:cf:7a: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:19:C6:87:B0:5F:73:12:C7:A1:89:58:D8:7B:BA:9B:8E:AE:C9:02 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:4e:21:b1:60:f9:27:22:14:08:af:b9:09:8f:7c:f6:e1: b9:49:97:25:af:31:bc:cb:57:13:cb:ee:f4:b5:e8:0a:39:fb: 1d:23:b9:76:11:88:e3:68:cf:49:7a:1a:48:d7:9e:4d:f1:65: 50:cd:58:40:d7:79:59:4e:a4:7a:dc:3e:6b:9d:01:6a:c6:1b: fb:8c:59:51:e8:b3:5f:e6:17:91:d4:c1:b9:2c:c9:eb:e6:69: 43:65:a3:4c:84:bb:c9:ca:33:2d:b0:0d:bd:13:e1:f7:b4:39: 19:23:32:78:b5:4d:4d:d9:f8:93:03:03:cb:f2:f6:76:af:18: 0a:5e:56:5b:e8:28:fe:1d:c4:75:32:b1:31:8d:cf:da:0e:e8: c4:3c:7f:0d:fa:3d:1b:19:c5:bd:84:69:fc:87:8b:e7:24:59: 2f:12:5d:e0:02:fd:98:5f:18:48:db:25:14:ae:96:a8:21:f2: 4c:c2:7c:63:e0:f6:62:d9:a3:21:21:1d:40:d3:6f:58:46:9e: 2f:7d:d0:df:6e:1e:21:e7:61:eb:45:e2:39:b8:d6:b7:cb:c1: 84:85:ee:d3:8e:3a:0d:c2:00:29:0a:f0:a1:e4:29:ff:bc:50: 47:ca:45:c3:8d:44:d0:75:76:3b:94:0d:5e:da:b5:df:20:24: db:50:6a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTKMgVtp9PtKZvV7iUw4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMzI1MTQwMTEyWhcNMjYwMzI2MTQwMTEyWjAzMTEwLwYDVQQD EyhhNDE5YzY4N2IwNWY3MzEyYzdhMTg5NThkODdiYmE5YjhlYWVjOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/k2DJu5FkhUCnFy+pYDIVK+LsQy a2QsppL77qeUVfqIwrCtN6bhILlMe3Kz/dKiJvEFq81bbqEx9kxGslSTzTapBOKD dzGBU+2NzVZ9xddevH8EUJqyPlFZ1i312hMxl66zrrr/NJJVLY6p7e1QL5EIf/y+ /PsLLVnT9l+/hrsR0JeTDNGBRYnsQcrBx2sapK4huLI55JtpqTb4SqIt7tV6FRE5 BtctVk9NG0f1Xh7wH6msPGzLFxI0w9WbVR8LgzIrghyP7BGR7kSxqnp4OIxQlC2C QcPxfSHoZpQr3Drexkt0RDTDEuIONxSLTY8X4EnZ6uAw+T+3A9bLz3oApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQZxoewX3MSx6GJWNh7upuOrskCMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFVOIbFg +SciFAivuQmPfPbhuUmXJa8xvMtXE8vu9LXoCjn7HSO5dhGI42jPSXoaSNeeTfFl UM1YQNd5WU6ketw+a50BasYb+4xZUeizX+YXkdTBuSzJ6+ZpQ2WjTIS7ycozLbAN vRPh97Q5GSMyeLVNTdn4kwMDy/L2dq8YCl5WW+go/h3EdTKxMY3P2g7oxDx/Dfo9 GxnFvYRp/IeL5yRZLxJd4AL9mF8YSNslFK6WqCHyTMJ8Y+D2YtmjISEdQNNvWEae L33Q324eIedh60XiObjWt8vBhIXu0446DcIAKQrwoeQp/7xQR8pFw41E0HV2O5QN Xtq13yAk21BqxQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:03 2026 by rpki-client