$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: 28IOluY6BEE819d3BfJ6z9sDILTOGHlvSJM5jHoo+mY= Subject key identifier: E3:E1:6E:8B:B6:39:0B:C8:ED:5E:D3:42:6D:3A:7F:03:28:30:67:10 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019D329A65AD8BAEB3141089B709C0244255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0732 Signing time: Sat 28 Mar 2026 04:01:12 +0000 Manifest this update: Sat 28 Mar 2026 04:01:12 +0000 Manifest next update: Sun 29 Mar 2026 04:01:12 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: eyuBOyXr7N2/Ua9HKpmp/Y7cGdSlTAN2p29EcUKgxxY=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:9a:65:ad:8b:ae:b3:14:10:89:b7:09:c0:24:42:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Mar 28 04:01:12 2026 GMT Not After : Mar 29 04:01:12 2026 GMT Subject: CN=e3e16e8bb6390bc8ed5ed3426d3a7f0328306710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:5a:e7:a6:89:f9:2e:60:d3:6b:42:b3:70: 3b:37:91:bd:6b:86:b1:9a:d4:d7:76:4b:35:c6:7a: f4:2f:75:a0:09:91:1f:f1:ff:25:37:72:1a:5e:9b: bc:9d:96:e1:60:b9:8c:5c:53:0f:30:5e:b9:f1:3f: 11:a9:21:f9:0d:75:cd:4a:3e:16:6f:5b:99:61:4b: aa:fe:73:ac:05:c8:1d:ce:a8:b0:d5:32:3f:06:cb: 1b:92:c1:5b:d0:a6:13:f6:60:f7:49:9a:b4:69:90: a1:2b:c0:47:b0:c4:ac:92:4b:18:c3:e0:6f:1d:b5: 0e:70:65:44:80:d0:5d:1e:e9:e4:14:45:91:55:0f: 10:50:84:20:56:b2:b4:9f:98:f1:a1:96:0d:a0:3b: 1d:b7:5f:00:54:77:d1:a7:e8:be:79:87:56:81:d5: 35:31:c8:2c:41:dc:ef:4e:19:b2:35:1c:d7:f2:0c: d3:51:ef:e2:e4:fb:2e:69:e0:57:4e:e6:c3:8e:a6: 78:47:a0:5a:bf:84:05:61:91:9b:11:0d:42:2b:db: 88:73:ff:ed:67:fe:79:aa:aa:d3:c0:5b:0e:f4:05: a6:09:b6:0a:eb:5a:38:f6:51:c2:ce:2c:10:16:c7: aa:f1:ff:eb:cf:9a:23:6f:c9:51:3f:c1:06:7e:4f: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:6E:8B:B6:39:0B:C8:ED:5E:D3:42:6D:3A:7F:03:28:30:67:10 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2b:df:c0:5d:83:c3:43:95:7d:e1:fe:d0:1c:70:31:09:9f: 7a:fc:40:40:be:48:18:08:fe:75:a7:4e:91:4e:b5:32:96:ae: aa:fe:84:b4:03:aa:25:f6:fa:55:d0:c9:11:a0:5a:f0:4f:14: a3:cc:54:18:f9:ee:52:82:fa:3f:16:8e:48:33:4e:85:b4:9f: b6:07:cb:96:93:ad:5e:ba:ee:89:97:67:65:e2:0d:ea:16:60: 19:e7:12:3e:1f:6f:5f:47:7d:9b:dc:2f:fe:bf:03:3f:29:2e: 19:95:bf:5e:a2:ff:5e:93:4c:57:6d:56:6b:e5:7b:fd:d4:69: 11:c1:a6:d4:b3:9f:9c:0a:ec:e4:35:2d:83:45:41:bb:0a:f4: 53:b1:1c:b3:ed:ef:b6:da:a7:cc:df:70:c8:a1:ea:da:62:2e: 4d:f9:9f:aa:ff:4a:02:15:9e:8d:17:96:11:00:e4:8a:ba:40: c5:f5:4d:44:17:17:98:24:84:52:23:b5:99:d1:0d:59:d8:48: 7f:03:30:f4:8e:e9:cf:05:4a:7a:c7:dd:2c:9e:ed:24:67:68: 6d:9d:14:4e:67:ee:5c:85:fd:a0:0e:2e:b3:62:2c:a8:56:9c: bf:e1:20:26:d1:dc:be:5b:ee:68:d2:d1:ba:8a:4b:19:6c:ef: 17:20:d6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ymmWti66zFBCJtwnAJEJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMzI4MDQwMTEyWhcNMjYwMzI5MDQwMTEyWjAzMTEwLwYDVQQD EyhlM2UxNmU4YmI2MzkwYmM4ZWQ1ZWQzNDI2ZDNhN2YwMzI4MzA2NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYda56aJ+S5g02tCs3A7N5G9a4ax mtTXdks1xnr0L3WgCZEf8f8lN3IaXpu8nZbhYLmMXFMPMF658T8RqSH5DXXNSj4W b1uZYUuq/nOsBcgdzqiw1TI/BssbksFb0KYT9mD3SZq0aZChK8BHsMSskksYw+Bv HbUOcGVEgNBdHunkFEWRVQ8QUIQgVrK0n5jxoZYNoDsdt18AVHfRp+i+eYdWgdU1 McgsQdzvThmyNRzX8gzTUe/i5PsuaeBXTubDjqZ4R6Bav4QFYZGbEQ1CK9uIc//t Z/55qqrTwFsO9AWmCbYK61o49lHCziwQFseq8f/rz5ojb8lRP8EGfk+4fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPhbou2OQvI7V7TQm06fwMoMGcQMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCvfwF2D w0OVfeH+0BxwMQmfevxAQL5IGAj+dadOkU61Mpauqv6EtAOqJfb6VdDJEaBa8E8U o8xUGPnuUoL6PxaOSDNOhbSftgfLlpOtXrruiZdnZeIN6hZgGecSPh9vX0d9m9wv /r8DPykuGZW/XqL/XpNMV21Wa+V7/dRpEcGm1LOfnArs5DUtg0VBuwr0U7Ecs+3v ttqnzN9wyKHq2mIuTfmfqv9KAhWejReWEQDkirpAxfVNRBcXmCSEUiO1mdENWdhI fwMw9I7pzwVKesfdLJ7tJGdobZ0UTmfuXIX9oA4us2IsqFacv+EgJtHcvlvuaNLR uopLGWzvFyDW9w== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:49 2026 by rpki-client