$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft File: b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json) Hash identifier: EGb6szI+aEXdDf+lZnmiRujI9V2j/NDQuvvEyjc4KAA= Subject key identifier: B0:0B:E7:CB:11:9D:9D:46:96:A7:00:53:2B:DA:D3:C9:12:54:39:56 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019D27E03A9037C630C461A64DF6F167F078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft Manifest number: 0FA1 Signing time: Thu 26 Mar 2026 02:01:39 +0000 Manifest this update: Thu 26 Mar 2026 02:01:39 +0000 Manifest next update: Fri 27 Mar 2026 02:01:39 +0000 Files and hashes: 1: 02C_yN_pBtrRHfaPFMBLJa0WHZ8.roa (hash: 7dhoMo1eR7pFH0VVu4/1Umj2Sqmm2uRRTNfBAcPSvnQ=) 2: 1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa (hash: fO8iBbvBaMNoHq3COqjue3TAdfcc3LHY54KEjAJ2QqA=) 3: 4gWTFBdbX28RmU-vZWa7w0Na-oY.roa (hash: qVoPT+hSYJGFIxsu7hxtF38NHWCrB7G+eA7b60ig6oM=) 4: B6LIx5SFj-LpvkMusTX6eylqB8Q.roa (hash: 8sXEje/NFZbddnD1ozsYpbMXZouncZaHmKPwgX4Mau8=) 5: C2l9FVRYOzzBJurzWsT0JOwEoX4.roa (hash: 7Sk+vqLvJx0/QulXIfk1zjfce9b9KULZIVzx1MsBroo=) 6: GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa (hash: 5BgcRj7E+Zjch4bi8qsfXSHZRBSk5RcNGFESWPAD6ZM=) 7: HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa (hash: aXoYi4sL26UfttU2AQRoMTdqaFswBst+yXFXy3bMFQI=) 8: Kd5BCnuh7Vfh_ncYW41MRfZTY_g.roa (hash: 550VYYwHjp6DkAL2ALMNefBJad9ffNBJSB4pG2l/Jxc=) 9: Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa (hash: AmlE5tYLPssjw9U4Xmt2RH2S2h07B8JY5rM+qQje4aM=) 10: WpG-HECBoKzNEGH7SZCr2uB_62w.roa (hash: QHsaGRcXtfYHvO3WG+U0BRusuvkiVd+XVkbhpqWYJNE=) 11: YgnciPpG25vPLjs4alvklTckQa0.roa (hash: LMsW71cXkQjTBXqyfbQ1BVncfxCsq9ms60/4uLgDxuQ=) 12: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: k19h+667cXtqqdT2WeQp/X2mtklS8ybuZ1QjQTnZIyU=) 13: gW7JxFR7uiW4ZpkuSJauf4QocGo.roa (hash: cXbpQwceKEQaMo+TbQWEr8PhkuENmJydovPMYT6tg40=) 14: hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa (hash: 049g9W8sXpkKaEFMxqweslPE125wn44hfoXmY1GLrGM=) 15: hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa (hash: NgSV6JkTSImeWP6gCSVbJkpIH9ZghYaqVNR51xDKH60=) 16: z7k8kovlPmv-zBHmb4FIXdtjtc4.roa (hash: 34UjHgoDLPq5cVz9xOQp030/8J4AwYYZjM3LuMub1Pg=) 17: zFi2gp3SKU3c0S_naj_PpCRo6aU.roa (hash: /L5t/XoZ8kDLzebR3QIc1BMtvCbpTdiF6nGgxkPEo1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 02:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:e0:3a:90:37:c6:30:c4:61:a6:4d:f6:f1:67:f0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Mar 26 02:01:39 2026 GMT Not After : Mar 27 02:01:39 2026 GMT Subject: CN=b00be7cb119d9d4696a700532bdad3c912543956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:fc:57:24:0e:fb:86:5c:04:84:98:e3:9d: 1b:00:d3:0c:85:04:31:f3:88:98:10:0b:ca:49:e5: 03:78:80:a7:8b:38:b0:97:ea:9e:8a:6b:1f:a4:e9: af:f4:19:c0:10:85:2d:37:6b:6a:65:27:11:b6:36: 9d:e4:5a:b8:ec:15:73:4a:6d:63:d6:bd:2c:09:a5: 0b:e9:bf:15:28:73:2b:7b:55:d3:05:cd:8d:11:51: f6:ef:d7:5a:45:85:7d:8f:12:e5:80:b6:20:0e:df: f2:3a:94:4d:64:46:42:2c:25:9f:4c:d8:a0:84:56: 5b:62:4c:25:c1:f5:c2:77:25:1d:ed:97:5c:26:f3: ee:48:d9:f3:44:7f:59:29:83:1d:90:1c:73:cb:c5: 90:f8:e0:f4:8f:3a:53:a0:e0:49:3c:c0:42:5c:1c: 38:43:b0:43:06:60:13:26:dd:bd:2e:c7:d2:cf:45: c8:2b:4c:17:b9:2f:3e:f6:fa:5c:57:41:4e:84:bd: fa:00:81:8a:db:03:eb:06:9b:b7:5e:55:53:f9:a6: bb:10:d1:ae:e0:e9:0f:e3:1a:28:07:c6:a7:66:23: 14:6d:e7:3c:49:d6:aa:63:12:8e:4e:3c:b5:fb:81: 96:a9:a0:da:db:64:0f:10:8f:d5:a1:fe:b7:8f:ca: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0B:E7:CB:11:9D:9D:46:96:A7:00:53:2B:DA:D3:C9:12:54:39:56 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e3:3c:e1:0b:dd:1e:f4:91:f6:53:ac:59:d6:5e:4d:40:6e: 01:58:2b:d7:7b:a7:8e:0d:bb:5b:8f:db:2d:55:f7:b9:98:b5: 5e:68:31:16:03:c8:94:ab:ed:dd:66:94:6e:1c:70:fa:cc:77: 7f:4a:63:b1:6e:f0:c8:b6:21:68:b7:0c:4c:2b:06:26:6e:df: f4:0e:9e:2e:37:ef:e1:5c:31:6b:e7:f1:ee:b2:66:8d:cc:b2: b4:7a:07:f6:b1:48:16:17:3a:7f:3d:46:35:37:ae:42:b9:20: c0:b5:a0:1c:cf:63:a3:df:74:63:9a:de:ce:00:88:36:1e:01: 46:94:50:94:8f:5e:76:1f:b0:36:21:f6:a5:a5:b8:f9:b6:20: 9f:b7:b9:f5:9e:64:91:34:92:c3:20:d4:5e:9a:c3:e0:56:86: 73:0d:f7:a9:fb:9d:28:10:94:b6:43:39:5e:7c:b9:62:db:09: 1a:50:d8:a1:a7:5a:f7:58:bb:24:f1:20:b1:e2:80:45:de:69: b3:9c:a5:a9:ad:04:3b:46:a9:e0:ff:a7:46:25:26:82:f8:3b: 90:bb:9e:d5:93:b4:ee:49:cf:c7:fc:e2:a5:74:74:b8:be:ca: e8:e9:91:64:b5:88:8d:55:81:42:18:2b:5a:64:6a:95:57:87: bc:09:d5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n4DqQN8YwxGGmTfbxZ/B4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMzI2MDIwMTM5WhcNMjYwMzI3MDIwMTM5WjAzMTEwLwYDVQQD EyhiMDBiZTdjYjExOWQ5ZDQ2OTZhNzAwNTMyYmRhZDNjOTEyNTQzOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJv8VyQO+4ZcBISY450bANMMhQQx 84iYEAvKSeUDeICniziwl+qeimsfpOmv9BnAEIUtN2tqZScRtjad5Fq47BVzSm1j 1r0sCaUL6b8VKHMre1XTBc2NEVH279daRYV9jxLlgLYgDt/yOpRNZEZCLCWfTNig hFZbYkwlwfXCdyUd7ZdcJvPuSNnzRH9ZKYMdkBxzy8WQ+OD0jzpToOBJPMBCXBw4 Q7BDBmATJt29LsfSz0XIK0wXuS8+9vpcV0FOhL36AIGK2wPrBpu3XlVT+aa7ENGu 4OkP4xooB8anZiMUbec8SdaqYxKOTjy1+4GWqaDa22QPEI/Vof63j8qdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAL58sRnZ1GlqcAUyva08kSVDlWMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeM84Qvd HvSR9lOsWdZeTUBuAVgr13unjg27W4/bLVX3uZi1XmgxFgPIlKvt3WaUbhxw+sx3 f0pjsW7wyLYhaLcMTCsGJm7f9A6eLjfv4Vwxa+fx7rJmjcyytHoH9rFIFhc6fz1G NTeuQrkgwLWgHM9jo990Y5rezgCINh4BRpRQlI9edh+wNiH2paW4+bYgn7e59Z5k kTSSwyDUXprD4FaGcw33qfudKBCUtkM5Xny5YtsJGlDYoada91i7JPEgseKARd5p s5ylqa0EO0ap4P+nRiUmgvg7kLue1ZO07knPx/zipXR0uL7K6OmRZLWIjVWBQhgr WmRqlVeHvAnVGw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:50:17 2026 by rpki-client