$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: gCmn9nxx+Scv8rn8/0IPoRgTUcyjIGq65C7jICGC6Lo= Subject key identifier: A4:D2:15:08:83:26:6F:DD:7E:95:8A:05:C7:93:3C:21:F0:48:AD:15 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019D27725F62812234BC6FA3A3895AAF4B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1895 Signing time: Thu 26 Mar 2026 00:01:40 +0000 Manifest this update: Thu 26 Mar 2026 00:01:40 +0000 Manifest next update: Fri 27 Mar 2026 00:01:40 +0000 Files and hashes: 1: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 2: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 3: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 4: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 5: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 6: aVkTnnbGIe4fDpGVb6wjTSR-yLQ.roa (hash: mPn9lf0kaEtQghK8NnucRSJ4lyasaPeghHp1g2R6ywY=) 7: cZkC82-vLrRXW7ttrbp1YPZPpe0.roa (hash: X7Xi6DZVONjtuDM1mnYOVnatQGs+c73Ycapzeqr5W+A=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: fdLw2tSsqolIwlI2oKZwwZtFq3QaxM0+fojws4N5G0Q=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:5f:62:81:22:34:bc:6f:a3:a3:89:5a:af:4b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Mar 26 00:01:40 2026 GMT Not After : Mar 27 00:01:40 2026 GMT Subject: CN=a4d2150883266fdd7e958a05c7933c21f048ad15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:94:f4:ba:06:d1:aa:1e:ba:41:24:72:e4: 18:d0:22:11:6c:e4:83:4b:1e:52:5c:00:af:a9:5f: 23:f4:cb:df:35:7c:d9:64:58:bd:07:26:85:86:26: f5:0a:af:e1:0c:89:53:07:8c:f3:31:dc:0a:09:47: 9d:c3:21:b0:12:0b:54:54:15:80:8d:17:bc:1b:0f: e3:b6:55:c0:dd:35:0d:3e:1f:cd:a2:49:18:62:2c: 11:97:a8:ff:ce:a8:8b:7f:e9:86:a4:3f:49:2d:e2: 76:00:e1:ba:c9:fb:4d:27:1c:44:f2:23:0a:f1:5b: 25:e5:43:d3:7d:2c:47:bb:71:c8:36:d0:ca:18:cd: f8:47:cb:0f:83:a0:ea:d6:7f:3f:04:bc:cc:c9:03: 88:b5:6b:d7:f9:12:53:20:86:b2:5b:a4:88:e5:4a: 7a:36:9c:9e:cf:93:8f:bc:4c:ab:6c:ee:d9:b2:87: e5:2f:d3:89:4c:6a:4c:7f:8a:c6:a0:66:eb:2b:82: 1e:ee:35:1c:9e:5d:32:4e:be:0e:59:20:79:c6:12: 50:a7:a1:b7:85:ef:39:8b:f1:5b:a0:bf:c4:31:fc: a0:96:99:86:f8:b1:9e:29:3a:f4:1c:12:92:39:c4: 4b:ea:e9:59:11:9d:44:f9:3e:10:b0:b0:2a:2b:7c: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:15:08:83:26:6F:DD:7E:95:8A:05:C7:93:3C:21:F0:48:AD:15 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:73:a5:99:c1:f5:2d:26:02:33:d8:05:14:6c:56:e8:19:11: bb:12:57:5d:4d:da:2b:c3:f3:41:40:b9:27:fe:d0:ca:af:b6: 27:22:b2:21:ba:49:9e:4d:fb:65:c0:7e:63:6b:e0:66:50:8a: 59:fb:2f:29:17:76:c7:b6:a5:e0:53:ca:ac:9d:2b:27:74:39: 11:be:5f:43:0e:a1:71:12:65:15:68:50:b4:a8:86:a0:e0:82: 1f:6f:45:f1:a8:58:37:fb:ff:89:2a:dd:1c:2e:e3:67:20:09: 71:07:d5:66:cd:d2:48:11:91:7a:9c:86:88:db:d1:76:0f:dc: 57:fd:66:5b:12:4c:35:cc:67:af:6f:ef:9b:43:36:2c:35:6c: ff:36:e2:48:f0:c9:cd:82:73:4a:37:a0:d8:e9:6d:dd:83:75: da:12:eb:a6:e3:4b:e1:7c:b8:24:77:8f:6c:88:74:bd:c7:4b: f3:2b:fd:05:60:33:b9:cc:e0:55:dc:58:f0:43:47:7f:61:75: 0a:b2:1f:a4:f6:e3:da:a0:73:24:77:ab:1e:64:89:e2:e4:d0: d2:5f:1a:5e:18:20:e2:8d:4d:d7:23:6d:89:2a:e1:12:3d:9f: 4e:6f:35:78:c5:f1:d2:97:1c:b0:1d:94:23:8b:4f:f8:a1:9e: 6f:0b:ed:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncl9igSI0vG+jo4lar0t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMzI2MDAwMTQwWhcNMjYwMzI3MDAwMTQwWjAzMTEwLwYDVQQD EyhhNGQyMTUwODgzMjY2ZmRkN2U5NThhMDVjNzkzM2MyMWYwNDhhZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvqU9LoG0aoeukEkcuQY0CIRbOSD Sx5SXACvqV8j9MvfNXzZZFi9ByaFhib1Cq/hDIlTB4zzMdwKCUedwyGwEgtUVBWA jRe8Gw/jtlXA3TUNPh/NokkYYiwRl6j/zqiLf+mGpD9JLeJ2AOG6yftNJxxE8iMK 8Vsl5UPTfSxHu3HINtDKGM34R8sPg6Dq1n8/BLzMyQOItWvX+RJTIIayW6SI5Up6 Npyez5OPvEyrbO7ZsoflL9OJTGpMf4rGoGbrK4Ie7jUcnl0yTr4OWSB5xhJQp6G3 he85i/FboL/EMfyglpmG+LGeKTr0HBKSOcRL6ulZEZ1E+T4QsLAqK3zBIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTSFQiDJm/dfpWKBceTPCHwSK0VMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnOlmcH1 LSYCM9gFFGxW6BkRuxJXXU3aK8PzQUC5J/7Qyq+2JyKyIbpJnk37ZcB+Y2vgZlCK WfsvKRd2x7al4FPKrJ0rJ3Q5Eb5fQw6hcRJlFWhQtKiGoOCCH29F8ahYN/v/iSrd HC7jZyAJcQfVZs3SSBGRepyGiNvRdg/cV/1mWxJMNcxnr2/vm0M2LDVs/zbiSPDJ zYJzSjeg2Olt3YN12hLrpuNL4Xy4JHePbIh0vcdL8yv9BWAzuczgVdxY8ENHf2F1 CrIfpPbj2qBzJHerHmSJ4uTQ0l8aXhgg4o1N1yNtiSrhEj2fTm81eMXx0pccsB2U I4tP+KGebwvtTw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:31 2026 by rpki-client