$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: H8eKEDh45A+iRHgj/gzQjQ5BdeWRPrOS/e+qn5ML/Qw= Subject key identifier: 9B:D3:C6:AA:D0:D7:71:DB:9C:6E:CA:A6:D5:DC:C7:6A:7D:71:F5:49 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019D26CD2483A051EEC98B55ADFF37E3BC12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 08EB Signing time: Wed 25 Mar 2026 21:01:11 +0000 Manifest this update: Wed 25 Mar 2026 21:01:11 +0000 Manifest next update: Thu 26 Mar 2026 21:01:11 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=) 8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: b06+B/vx0rfanM6CJ+JjABINTRnGlryGZaDqItjkRQ0=) 10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 12: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:24:83:a0:51:ee:c9:8b:55:ad:ff:37:e3:bc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Mar 25 21:01:11 2026 GMT Not After : Mar 26 21:01:11 2026 GMT Subject: CN=9bd3c6aad0d771db9c6ecaa6d5dcc76a7d71f549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:16:c7:5f:08:85:de:cd:c8:8b:1c:0d:08: dd:ec:64:a6:f5:b7:22:e3:f8:64:f7:a6:a0:d2:58: 1a:5f:61:19:bf:e3:e8:45:56:ed:87:db:ed:52:95: 70:14:4e:71:55:8a:f8:0a:d7:bd:05:b1:a4:55:69: da:8b:c7:86:f6:cc:5e:e2:cb:6e:41:8f:7f:c5:92: e4:94:d9:f3:fd:bb:8a:15:7b:91:9c:e4:22:6d:d8: 09:55:28:aa:d6:65:e9:9b:1b:43:c4:05:38:08:5e: 1d:ac:14:1e:3e:97:bd:80:ed:9c:f5:96:4b:be:2b: fc:0a:93:33:e8:76:08:77:64:8e:1f:f2:d5:f7:ca: 82:ee:6a:d3:e4:66:18:03:58:48:b9:4c:26:1d:01: 3c:63:ce:ff:72:58:19:19:0e:37:d7:9c:39:62:e3: 77:7f:fe:8d:31:73:b9:18:9f:4f:eb:5b:1b:23:ac: 19:a3:a8:a8:e6:79:d9:56:98:b3:13:23:09:4e:74: 41:eb:c3:cc:6d:0f:74:d9:0f:c9:b6:a9:b9:38:a8: 5a:8a:f3:6a:20:7b:d0:5f:cc:7c:9f:76:18:97:a7: 3b:df:23:64:b9:40:de:44:d4:5b:2d:eb:d4:a7:b3: cf:ba:5d:0b:6e:c3:ec:e5:5d:49:86:14:39:51:aa: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:C6:AA:D0:D7:71:DB:9C:6E:CA:A6:D5:DC:C7:6A:7D:71:F5:49 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d4:04:76:35:0b:51:78:44:85:b8:80:76:5a:87:93:46:82: 23:d8:c3:26:24:78:7d:cb:48:85:fd:a0:e5:e7:ea:b4:ec:53: 2a:46:79:f1:bd:3b:0e:1d:0a:3e:13:a6:5b:4b:79:0b:a4:3e: 80:79:58:77:c9:cd:a3:18:8f:78:8b:86:4d:df:e7:af:94:3b: 8f:41:8b:b2:c7:39:e5:82:b6:53:c0:5f:ce:96:66:3a:96:ce: 5d:4b:12:1b:18:77:aa:31:81:ab:ca:6b:65:4e:f1:5a:6e:00: c9:db:3f:8f:cc:81:70:e9:71:ab:a2:82:54:d8:7c:f7:cc:d6: 7c:9b:5c:5b:f8:9b:2f:dd:17:1d:72:90:23:2a:bf:91:a7:30: 33:82:3b:e1:eb:b6:5d:68:7b:f6:3f:30:c0:ef:8e:5f:5d:55: f5:d9:65:98:68:9d:5b:d0:3a:82:c4:bf:14:4d:7a:9e:0e:79: 2b:cf:2d:0a:b0:29:31:dc:2b:8a:bd:b4:0f:58:94:55:0c:bb: a8:6b:76:5f:8d:b7:59:85:a1:50:a2:a3:b4:5a:66:17:06:d9: 5c:90:54:01:64:f2:7f:84:31:8f:3c:46:6c:db:cb:7c:d6:c3: 93:a3:7a:e5:26:e5:08:a6:ea:89:e2:74:1f:c4:b5:18:2d:52: 76:9e:25:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzSSDoFHuyYtVrf8347wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMzI1MjEwMTExWhcNMjYwMzI2MjEwMTExWjAzMTEwLwYDVQQD Eyg5YmQzYzZhYWQwZDc3MWRiOWM2ZWNhYTZkNWRjYzc2YTdkNzFmNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lEWx18Ihd7NyIscDQjd7GSm9bci 4/hk96ag0lgaX2EZv+PoRVbth9vtUpVwFE5xVYr4Cte9BbGkVWnai8eG9sxe4stu QY9/xZLklNnz/buKFXuRnOQibdgJVSiq1mXpmxtDxAU4CF4drBQePpe9gO2c9ZZL viv8CpMz6HYId2SOH/LV98qC7mrT5GYYA1hIuUwmHQE8Y87/clgZGQ4315w5YuN3 f/6NMXO5GJ9P61sbI6wZo6io5nnZVpizEyMJTnRB68PMbQ902Q/Jtqm5OKhaivNq IHvQX8x8n3YYl6c73yNkuUDeRNRbLevUp7PPul0LbsPs5V1JhhQ5UarCcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvTxqrQ13HbnG7KptXcx2p9cfVJMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtQEdjUL UXhEhbiAdlqHk0aCI9jDJiR4fctIhf2g5efqtOxTKkZ58b07Dh0KPhOmW0t5C6Q+ gHlYd8nNoxiPeIuGTd/nr5Q7j0GLssc55YK2U8BfzpZmOpbOXUsSGxh3qjGBq8pr ZU7xWm4Ayds/j8yBcOlxq6KCVNh898zWfJtcW/ibL90XHXKQIyq/kacwM4I74eu2 XWh79j8wwO+OX11V9dllmGidW9A6gsS/FE16ng55K88tCrApMdwrir20D1iUVQy7 qGt2X423WYWhUKKjtFpmFwbZXJBUAWTyf4QxjzxGbNvLfNbDk6N65SblCKbqieJ0 H8S1GC1Sdp4l7A== -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:59 2026 by rpki-client