$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: AbUg1I3SdH0NGDUrFvl2pwv1rb0p5m0Poh8BET5RroU= Subject key identifier: D8:04:C5:BD:C1:D7:58:89:F6:A9:E9:A7:27:D2:CB:28:DE:05:B4:83 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019D2B17156E2E9DE01FED87CE664CA66E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 16DF Signing time: Thu 26 Mar 2026 17:00:26 +0000 Manifest this update: Thu 26 Mar 2026 17:00:26 +0000 Manifest next update: Fri 27 Mar 2026 17:00:26 +0000 Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 7: 7IDWuY26T4UCJ4M5vwbNefIa4Ds.roa (hash: 2aXs1iZiP1C/zRertFgP1ov5IhcFnyEWbQzgQUvTZx0=) 8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: KNddkZdYEf+fLzShxgnRc6675Wvp6UCbLBz2tHT7aH4=) 11: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 12: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 13: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 14: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=) 15: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 16: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 17: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 18: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 19: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 20: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=) 21: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=) 22: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=) 23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 31: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=) 32: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:17:15:6e:2e:9d:e0:1f:ed:87:ce:66:4c:a6:6e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Mar 26 17:00:26 2026 GMT Not After : Mar 27 17:00:26 2026 GMT Subject: CN=d804c5bdc1d75889f6a9e9a727d2cb28de05b483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:37:53:57:ff:9b:40:cc:38:35:72:83:4c: 32:1a:fa:1c:6d:bb:5c:7a:0e:65:f4:e7:20:bf:32: 12:75:5f:2d:75:e2:c0:54:d7:b6:6c:65:4d:96:27: 8b:49:74:3f:22:0f:28:39:7a:ca:74:3a:d2:52:0c: df:be:b6:42:e4:ce:d7:05:60:e4:7f:46:2b:a4:d7: ce:2d:1e:e7:34:23:8a:6a:19:15:f0:d2:56:69:5d: c7:5e:24:20:37:f5:ff:79:53:b3:3e:68:66:e9:a4: 95:4f:45:58:bb:77:e2:59:2d:d5:5a:2c:08:a8:21: 93:96:11:70:36:ac:50:c6:33:a3:3d:ae:ab:f6:bc: ec:f9:17:e9:2c:34:08:58:15:1b:19:63:4e:51:eb: 6b:72:1b:c7:42:b2:1d:fb:6c:11:72:2e:7f:8e:87: 76:42:36:09:d6:b9:ac:90:44:9d:a9:85:19:96:77: 51:f1:74:ba:7b:c3:4d:aa:90:fa:49:fe:f2:fa:e9: 4f:5d:a6:1c:10:77:d4:74:0e:66:92:f2:2e:a0:70: a4:b7:5c:10:30:8b:4f:25:a2:b3:61:cf:07:8e:f2: 48:b4:ec:45:2b:5f:a9:54:88:f9:08:eb:73:ed:7d: ac:3d:44:5c:1d:9a:d7:7f:1e:c6:94:e7:6e:39:66: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:C5:BD:C1:D7:58:89:F6:A9:E9:A7:27:D2:CB:28:DE:05:B4:83 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b3:01:7b:d3:94:95:55:9d:16:6d:d9:a6:63:35:5a:d5:56: b9:b9:4c:75:f8:be:9e:df:71:8f:f9:74:95:a6:4f:4d:9a:2e: f7:4e:4d:de:18:9d:82:51:c1:c9:ad:70:5e:3a:c7:8c:45:50: a9:3c:75:bf:de:a0:84:d5:c7:44:4b:13:7a:6f:51:c5:73:a9: be:57:62:c9:cc:33:7d:3d:ae:95:d8:96:f8:12:34:f2:bd:d0: ac:68:3e:09:67:8c:4f:5d:14:0a:16:72:0e:72:d5:fe:73:2f: 48:29:59:2f:f2:53:93:83:ef:37:43:bc:c5:81:df:4f:ad:9c: 83:63:4f:4a:99:1f:4d:3e:67:7a:42:04:f7:b4:b9:0c:fe:1e: d8:85:ba:53:a6:a6:56:b7:ed:cf:bc:0b:ba:91:2b:1e:8a:cf: 31:69:3f:c6:d4:35:0c:50:fc:73:29:8b:8a:61:65:62:e3:29: 9d:0c:d9:77:4c:33:56:72:f8:25:ae:f7:64:f8:9a:54:6c:9a: 27:2c:57:99:3c:db:61:d7:15:7d:91:04:46:eb:59:f0:21:d3: 73:6c:19:3b:c1:5a:53:03:65:33:bf:30:c0:08:03:99:0a:b6: fe:de:08:23:78:86:58:74:66:a2:18:c1:53:0b:ac:f8:f6:2d: af:ad:e8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rFxVuLp3gH+2HzmZMpm5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMzI2MTcwMDI2WhcNMjYwMzI3MTcwMDI2WjAzMTEwLwYDVQQD EyhkODA0YzViZGMxZDc1ODg5ZjZhOWU5YTcyN2QyY2IyOGRlMDViNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS83U1f/m0DMODVyg0wyGvocbbtc eg5l9OcgvzISdV8tdeLAVNe2bGVNlieLSXQ/Ig8oOXrKdDrSUgzfvrZC5M7XBWDk f0YrpNfOLR7nNCOKahkV8NJWaV3HXiQgN/X/eVOzPmhm6aSVT0VYu3fiWS3VWiwI qCGTlhFwNqxQxjOjPa6r9rzs+RfpLDQIWBUbGWNOUetrchvHQrId+2wRci5/jod2 QjYJ1rmskESdqYUZlndR8XS6e8NNqpD6Sf7y+ulPXaYcEHfUdA5mkvIuoHCkt1wQ MItPJaKzYc8HjvJItOxFK1+pVIj5COtz7X2sPURcHZrXfx7GlOduOWbvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgExb3B11iJ9qnppyfSyyjeBbSDMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbMBe9OU lVWdFm3ZpmM1WtVWublMdfi+nt9xj/l0laZPTZou905N3hidglHBya1wXjrHjEVQ qTx1v96ghNXHREsTem9RxXOpvldiycwzfT2uldiW+BI08r3QrGg+CWeMT10UChZy DnLV/nMvSClZL/JTk4PvN0O8xYHfT62cg2NPSpkfTT5nekIE97S5DP4e2IW6U6am Vrftz7wLupErHorPMWk/xtQ1DFD8cymLimFlYuMpnQzZd0wzVnL4Ja73ZPiaVGya JyxXmTzbYdcVfZEERutZ8CHTc2wZO8FaUwNlM78wwAgDmQq2/t4II3iGWHRmohjB Uwus+PYtr63o8w== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:54 2026 by rpki-client