$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: LeZ7CDhsbD+9ScBDG3jMAilV79xADqxHjqQY1v7heH4= Subject key identifier: 97:DB:D8:A5:04:9A:60:97:D7:5E:F2:F4:E2:22:F0:63:14:D0:64:68 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019D2772230CA8BA0DDA892A3A6B287534CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0BEC Signing time: Thu 26 Mar 2026 00:01:24 +0000 Manifest this update: Thu 26 Mar 2026 00:01:24 +0000 Manifest next update: Fri 27 Mar 2026 00:01:24 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 4: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 5: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 6: ONqPurqrHVMfwrJOahm-hLa_T5g.roa (hash: ZlEZvfK7OYrNuzavDM8lorWGQ5ktu+dv/s2X755rVok=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: zoGtrY91RjCBu4ySigwgyaMe+ihOLU1OmbR0BQnEbFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:23:0c:a8:ba:0d:da:89:2a:3a:6b:28:75:34:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Mar 26 00:01:24 2026 GMT Not After : Mar 27 00:01:24 2026 GMT Subject: CN=97dbd8a5049a6097d75ef2f4e222f06314d06468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:5b:00:7b:74:c6:c0:9a:ad:95:2d:d3:ad: 3a:90:7d:b5:0e:53:9f:b9:71:7e:29:89:48:25:2b: 26:33:6f:2a:63:b7:9d:7e:ff:8d:6b:b1:dd:2d:49: e1:5a:67:73:5b:e0:b3:a0:8e:c7:86:13:93:3a:ab: 87:0f:2f:3e:a1:14:8f:eb:26:80:30:fb:7a:e8:eb: 7e:96:b5:ce:ac:5a:68:47:78:2a:0a:3e:d8:06:9a: 5c:27:c2:f0:1d:e8:df:1e:fa:cc:18:9e:83:81:6a: 42:92:90:ca:5a:46:94:d9:4b:d0:ba:af:4b:ba:30: 3d:c6:77:86:a8:ef:a0:79:7a:0b:7f:45:f8:db:47: 99:ae:9e:ad:95:71:e7:e6:df:83:02:6d:a9:3e:a7: 02:79:29:dc:92:3f:44:ae:5b:54:7b:86:63:d6:a7: 10:3c:bf:1a:91:d1:a5:f8:19:fb:5a:14:f0:54:d1: dc:57:0b:51:8c:f5:0c:71:03:87:61:dc:93:68:04: 14:25:4c:fc:90:2b:58:5c:d2:e9:20:0d:fb:05:24: ff:1b:8f:c5:c5:c5:3a:dc:9b:a2:0d:96:d1:01:04: fd:9c:78:5a:75:22:e6:73:78:43:ac:b6:45:83:21: 5d:d5:c6:37:58:42:de:c1:bb:01:6d:51:29:00:3f: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DB:D8:A5:04:9A:60:97:D7:5E:F2:F4:E2:22:F0:63:14:D0:64:68 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ad:35:46:15:97:35:cb:02:de:84:33:a0:a3:cf:22:5c:cd: c6:8b:1a:fa:a5:ee:02:58:b9:83:12:41:c5:50:bd:30:db:24: e7:83:cf:3b:e8:22:b3:76:ca:da:e1:3b:a4:27:60:4d:2e:aa: ab:77:0b:d6:da:be:64:08:6b:de:74:94:da:b4:87:55:fc:f8: 01:27:13:e0:5c:df:d2:05:53:66:47:9e:75:30:f6:a7:43:84: 36:aa:9e:f7:e5:ee:f9:05:70:6d:15:7d:f4:14:98:6e:b8:b7: 29:54:dd:bc:9b:64:18:81:5c:2c:65:77:e6:7d:3b:64:d5:e7: ba:17:a6:c1:72:92:21:59:e1:09:27:ac:0b:09:1b:60:ab:9b: 81:94:92:9b:24:11:40:7f:17:bb:b4:c5:14:31:78:12:47:60: 55:0a:84:99:df:df:28:92:23:9f:ea:4e:0c:95:1e:9a:99:74: 50:12:38:68:7d:b7:2e:2a:ed:b6:45:f7:6a:83:fb:11:03:47: 59:45:e9:d6:22:1f:82:a0:89:d2:33:b6:3b:3b:50:b6:e2:db: 0e:8b:76:5f:5c:e9:20:cd:9c:3a:3a:24:fc:87:28:d3:c2:fb: 49:a9:c3:59:f8:9d:8a:07:b9:ac:f9:cc:61:74:6b:bd:25:c4: 99:34:5c:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nciMMqLoN2okqOmsodTTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD Eyg5N2RiZDhhNTA0OWE2MDk3ZDc1ZWYyZjRlMjIyZjA2MzE0ZDA2NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusVbAHt0xsCarZUt0606kH21DlOf uXF+KYlIJSsmM28qY7edfv+Na7HdLUnhWmdzW+CzoI7HhhOTOquHDy8+oRSP6yaA MPt66Ot+lrXOrFpoR3gqCj7YBppcJ8LwHejfHvrMGJ6DgWpCkpDKWkaU2UvQuq9L ujA9xneGqO+geXoLf0X420eZrp6tlXHn5t+DAm2pPqcCeSnckj9ErltUe4Zj1qcQ PL8akdGl+Bn7WhTwVNHcVwtRjPUMcQOHYdyTaAQUJUz8kCtYXNLpIA37BST/G4/F xcU63JuiDZbRAQT9nHhadSLmc3hDrLZFgyFd1cY3WELewbsBbVEpAD8SYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfb2KUEmmCX117y9OIi8GMU0GRoMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK01RhWX NcsC3oQzoKPPIlzNxosa+qXuAli5gxJBxVC9MNsk54PPO+gis3bK2uE7pCdgTS6q q3cL1tq+ZAhr3nSU2rSHVfz4AScT4Fzf0gVTZkeedTD2p0OENqqe9+Xu+QVwbRV9 9BSYbri3KVTdvJtkGIFcLGV35n07ZNXnuhemwXKSIVnhCSesCwkbYKubgZSSmyQR QH8Xu7TFFDF4EkdgVQqEmd/fKJIjn+pODJUempl0UBI4aH23LirttkX3aoP7EQNH WUXp1iIfgqCJ0jO2OztQtuLbDot2X1zpIM2cOjok/Ico08L7SanDWfidige5rPnM YXRrvSXEmTRcXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:58:58 2026 by rpki-client