$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: ibbwlFIyEoxRjWdvCrQGUwzeXkklSeKTTUxYtXthF3I= Subject key identifier: 35:C7:21:E4:AB:06:DB:5D:57:E1:3E:C8:FB:CB:3B:95:84:6B:67:9A Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019D288478E94DEBE57CD5221DBD6C424472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 18C2 Signing time: Thu 26 Mar 2026 05:01:03 +0000 Manifest this update: Thu 26 Mar 2026 05:01:03 +0000 Manifest next update: Fri 27 Mar 2026 05:01:03 +0000 Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=) 2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=) 3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=) 4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=) 5: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (hash: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I=) 6: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=) 7: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=) 8: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=) 9: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=) 10: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=) 11: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=) 12: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=) 13: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=) 14: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=) 15: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=) 16: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=) 17: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=) 18: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: xU1MofElFgJ6TK9ZAN+AYKSpFdxHxjdIRtCiIWJYD8c=) 19: wEezPkEzN7e4KBElW04dGq39yXE.roa (hash: tPPcQRNIUmCvUpl1+b0ZJ2Bt31w7/vOz4ZjosTuObmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:78:e9:4d:eb:e5:7c:d5:22:1d:bd:6c:42:44:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Mar 26 05:01:03 2026 GMT Not After : Mar 27 05:01:03 2026 GMT Subject: CN=35c721e4ab06db5d57e13ec8fbcb3b95846b679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:66:8c:f3:e7:ab:10:14:ce:e6:e3:92:f6: 88:a1:c1:5e:38:59:bc:01:63:c1:b8:39:00:5f:41: 48:ce:3d:11:5d:49:ba:d4:c8:f3:90:a4:8e:77:b0: f8:1d:96:6a:9d:26:d1:25:58:67:76:bf:46:0e:e8: b3:b0:d6:cb:cd:a2:39:ee:31:06:9e:38:4c:19:ea: 6a:0c:1a:1b:1d:dc:51:a7:f4:1e:a7:d6:c9:36:43: 88:1e:91:69:53:6a:a9:d3:a7:99:66:e9:1b:11:d9: 31:23:c8:4a:97:1e:3a:b4:e1:d1:bd:b0:c3:b3:e4: a9:df:d1:7c:78:89:03:85:ee:52:64:30:88:46:d4: 78:cd:72:e7:22:77:14:79:db:c5:25:a1:a8:3a:c1: 1b:66:e4:ac:41:b4:a9:8d:10:7c:c1:34:35:7f:fa: 04:30:ab:f4:f3:0d:67:72:36:4e:5e:3a:f3:07:81: 1e:7f:a3:11:ea:bc:66:ca:07:e4:7b:b8:a6:cb:61: 4c:7e:93:cc:7e:d0:88:53:2c:97:f9:30:49:5e:01: 39:7a:de:ab:93:81:50:97:91:e0:00:18:62:4a:76: d3:4b:15:67:16:c4:36:55:a4:67:5a:4d:7a:98:6c: 81:de:bc:13:ae:62:eb:d1:92:a1:f2:a4:4c:d3:4d: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:21:E4:AB:06:DB:5D:57:E1:3E:C8:FB:CB:3B:95:84:6B:67:9A X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f7:00:e3:65:2a:12:34:5d:45:73:d1:49:9b:c8:0c:21:31: 0c:d9:79:e8:ab:92:66:0a:f0:75:9e:06:6b:87:dc:e4:88:e5: b3:70:7d:8e:ef:f5:b4:fb:bf:96:1f:08:6b:1d:46:35:4d:b5: 95:3e:67:58:f0:c2:6d:64:11:4e:73:3e:25:f7:8a:04:56:c5: a3:32:95:37:0a:11:8a:32:7f:fb:3b:91:94:1a:88:06:e0:cd: 4a:e4:0c:e6:2b:e2:6d:97:59:d3:67:96:e9:7c:a9:6d:f5:5e: 06:35:a9:be:66:f1:db:c3:7e:df:f8:40:47:ea:cf:02:56:73: e2:6b:c2:71:7a:7a:46:67:66:5e:41:b6:b1:23:5a:5a:c1:3f: ab:db:f2:e3:98:72:3d:8f:99:1f:93:24:06:f9:9e:f2:bb:90: e6:d9:df:9e:56:6e:bc:a7:95:21:1a:90:57:89:51:f4:69:9d: 6c:fb:b9:4a:5f:72:74:2d:85:42:56:de:b4:96:5c:e3:a4:6b: 68:56:f6:2c:7e:23:a4:ae:85:f9:58:e4:cc:c0:aa:7f:33:7a: 26:8b:7b:a9:00:25:4e:58:34:95:38:e9:30:6a:60:f9:06:fa: 71:c1:ee:64:ea:8a:2d:52:4d:dc:6f:d9:0a:c3:5a:72:93:50: e1:f0:d7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohHjpTevlfNUiHb1sQkRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMzI2MDUwMTAzWhcNMjYwMzI3MDUwMTAzWjAzMTEwLwYDVQQD EygzNWM3MjFlNGFiMDZkYjVkNTdlMTNlYzhmYmNiM2I5NTg0NmI2NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1tmjPPnqxAUzubjkvaIocFeOFm8 AWPBuDkAX0FIzj0RXUm61MjzkKSOd7D4HZZqnSbRJVhndr9GDuizsNbLzaI57jEG njhMGepqDBobHdxRp/Qep9bJNkOIHpFpU2qp06eZZukbEdkxI8hKlx46tOHRvbDD s+Sp39F8eIkDhe5SZDCIRtR4zXLnIncUedvFJaGoOsEbZuSsQbSpjRB8wTQ1f/oE MKv08w1ncjZOXjrzB4Eef6MR6rxmygfke7imy2FMfpPMftCIUyyX+TBJXgE5et6r k4FQl5HgABhiSnbTSxVnFsQ2VaRnWk16mGyB3rwTrmLr0ZKh8qRM002ugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXHIeSrBttdV+E+yPvLO5WEa2eaMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvcA42Uq EjRdRXPRSZvIDCExDNl56KuSZgrwdZ4Ga4fc5Ijls3B9ju/1tPu/lh8Iax1GNU21 lT5nWPDCbWQRTnM+JfeKBFbFozKVNwoRijJ/+zuRlBqIBuDNSuQM5ivibZdZ02eW 6XypbfVeBjWpvmbx28N+3/hAR+rPAlZz4mvCcXp6RmdmXkG2sSNaWsE/q9vy45hy PY+ZH5MkBvme8ruQ5tnfnlZuvKeVIRqQV4lR9GmdbPu5Sl9ydC2FQlbetJZc46Rr aFb2LH4jpK6F+VjkzMCqfzN6Jot7qQAlTlg0lTjpMGpg+Qb6ccHuZOqKLVJN3G/Z CsNacpNQ4fDXNw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:19 2026 by rpki-client