$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: uogYs8C5JQ2g9U+bDV3T+GU/XmTHI8I2W7EWuxhY5fk= Subject key identifier: E7:21:AD:56:10:BC:FF:06:D9:5A:ED:AA:48:27:9B:B2:A9:8C:EE:BC Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019D26CD973267AE324B4CDD7CC636F3C127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0ECB Signing time: Wed 25 Mar 2026 21:01:40 +0000 Manifest this update: Wed 25 Mar 2026 21:01:40 +0000 Manifest next update: Thu 26 Mar 2026 21:01:40 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: phbwh7m/56PPyfiQWse1JMpPMEnl0+zhBPe93fGTj2g=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:97:32:67:ae:32:4b:4c:dd:7c:c6:36:f3:c1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Mar 25 21:01:40 2026 GMT Not After : Mar 26 21:01:40 2026 GMT Subject: CN=e721ad5610bcff06d95aedaa48279bb2a98ceebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:4b:e2:51:0c:a3:6b:e7:18:7f:90:90:40: 0e:59:cd:bf:07:3f:c4:b4:dd:1e:45:85:e8:24:44: c5:eb:69:6c:fa:8e:41:7f:26:a0:88:2f:6c:14:d2: e7:cf:18:db:6d:b0:ba:dd:ef:9a:70:0c:bb:2e:47: c2:f8:18:0d:64:47:0e:ad:df:ad:b5:78:8a:55:e1: 45:2f:a5:d5:e9:40:69:1f:45:7e:cc:5b:28:7f:29: e1:6a:48:2d:54:2c:50:3e:7d:a7:a1:09:86:00:fe: 31:b7:5c:67:e5:5d:87:9e:76:00:98:91:53:4f:42: a8:16:b3:5f:7f:32:5e:3c:bb:2a:70:f9:3f:03:f6: 21:a0:3c:18:07:4d:fb:76:ee:e9:79:08:79:68:02: 03:9c:33:31:51:1c:de:ba:3d:6a:82:1c:11:80:fa: c8:6d:f9:2c:cb:44:aa:e8:8a:f8:c2:89:17:28:04: ae:41:46:c8:28:8e:47:4a:89:2e:19:90:ab:99:57: 10:59:7f:9e:31:73:53:11:ab:3f:36:50:cf:fe:a2: 38:3f:5e:3b:44:97:03:33:4b:ae:bd:54:65:71:50: e2:8b:ed:00:ba:f1:4e:39:d0:98:83:f6:b8:78:81: e6:20:ac:be:ac:63:99:ec:20:3e:3b:e0:17:c2:d2: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:21:AD:56:10:BC:FF:06:D9:5A:ED:AA:48:27:9B:B2:A9:8C:EE:BC X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d3:7b:a3:01:42:9a:1a:4a:ec:f4:b5:aa:a4:cd:8f:47:f2: 93:05:c0:0e:26:88:c4:9e:5e:37:39:36:51:d8:08:4a:1b:07: 13:ec:bd:cd:b8:a6:2d:62:ae:03:1e:ae:f5:69:d3:6d:da:48: 70:58:d3:c7:af:ad:bf:1d:c8:01:cc:70:37:56:f1:f2:75:f5: 05:56:33:eb:17:50:db:49:13:f4:b9:be:5a:25:17:1b:06:89: 70:4d:db:6b:a8:32:11:6d:cc:19:6d:ac:7a:e6:10:c4:c7:6a: dc:3d:d9:d8:fc:44:b7:3f:0c:d9:d3:9d:35:b9:7c:ef:13:23: cb:3e:5b:12:41:17:59:c2:3a:f9:8b:43:da:99:dd:c9:fc:82: 70:a1:21:2b:95:e2:8a:80:5f:69:5a:1d:d2:53:32:d4:cc:e1: 71:03:ee:b4:46:d4:f0:9f:30:14:c7:d4:08:88:a4:e2:cc:d8: 50:ae:1a:aa:df:4c:d4:81:23:be:74:e2:13:f4:c1:65:b8:5d: bc:91:1a:0a:fa:97:01:2c:e9:a6:6b:c4:f3:f6:f3:54:c5:11: 20:87:c0:58:5b:c0:35:af:79:6b:44:f5:93:2b:8e:5e:74:11: 6b:a9:8d:67:dd:b1:25:cb:64:36:d9:ae:95:96:a4:c2:d4:82: 69:06:04:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzZcyZ64yS0zdfMY288EnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMzI1MjEwMTQwWhcNMjYwMzI2MjEwMTQwWjAzMTEwLwYDVQQD EyhlNzIxYWQ1NjEwYmNmZjA2ZDk1YWVkYWE0ODI3OWJiMmE5OGNlZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgxL4lEMo2vnGH+QkEAOWc2/Bz/E tN0eRYXoJETF62ls+o5BfyagiC9sFNLnzxjbbbC63e+acAy7LkfC+BgNZEcOrd+t tXiKVeFFL6XV6UBpH0V+zFsofynhakgtVCxQPn2noQmGAP4xt1xn5V2HnnYAmJFT T0KoFrNffzJePLsqcPk/A/YhoDwYB037du7peQh5aAIDnDMxURzeuj1qghwRgPrI bfksy0Sq6Ir4wokXKASuQUbIKI5HSokuGZCrmVcQWX+eMXNTEas/NlDP/qI4P147 RJcDM0uuvVRlcVDii+0AuvFOOdCYg/a4eIHmIKy+rGOZ7CA+O+AXwtI+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOchrVYQvP8G2Vrtqkgnm7KpjO68MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdN7owFC mhpK7PS1qqTNj0fykwXADiaIxJ5eNzk2UdgIShsHE+y9zbimLWKuAx6u9WnTbdpI cFjTx6+tvx3IAcxwN1bx8nX1BVYz6xdQ20kT9Lm+WiUXGwaJcE3ba6gyEW3MGW2s euYQxMdq3D3Z2PxEtz8M2dOdNbl87xMjyz5bEkEXWcI6+YtD2pndyfyCcKEhK5Xi ioBfaVod0lMy1MzhcQPutEbU8J8wFMfUCIik4szYUK4aqt9M1IEjvnTiE/TBZbhd vJEaCvqXASzppmvE8/bzVMURIIfAWFvANa95a0T1kyuOXnQRa6mNZ92xJctkNtmu lZakwtSCaQYE+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:45 2026 by rpki-client