$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: MyCa/IOrXjrimGwIJSArZHY5mTjuualTb3qT4gzDLfA= Subject key identifier: 54:30:E7:17:60:9E:5C:21:01:15:30:D3:21:52:22:7F:61:5A:31:AD Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019D26CD0047DAEE66A59A0D5482C53D8CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 153D Signing time: Wed 25 Mar 2026 21:01:02 +0000 Manifest this update: Wed 25 Mar 2026 21:01:02 +0000 Manifest next update: Thu 26 Mar 2026 21:01:02 +0000 Files and hashes: 1: 5CFr6fQyB2vpvdZm5suXapULGkY.roa (hash: MySlISQzcu6EbAQPuhDL4fkVQJfzPvO74yXxzSeC0dc=) 2: 6vOB_0kXFWOVeiswTba6ofOe3mU.roa (hash: G//GVAi7wgZlWL5aVcz26sd32lr8++Cd1gJc7XKITXk=) 3: Cqg-JLEFS3E3SQW_nbJXY_G0YvQ.roa (hash: DReEkN/hfTnnC9nhnsHSBiwG7Yl2oVS+UgMhg+IV99A=) 4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: oA1XAu8l+lceuMiyCo9Pys86zGwqt/bgB5L/P4EWoK4=) 5: K5rhtCQez3UrTdf0FosqAmDCYa0.roa (hash: IQvbhZSaJLy8W0x8oiGtpYn5Yz5K/bEM7HiYoMzUocg=) 6: WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa (hash: OIwtFNjzelXJFPdqGmasyx/BT4Vju2a4sVYVymTpVmo=) 7: afsk4joDpHnoJv62lZtjXF1VD34.roa (hash: 1O4prDUnlN0kF0HrU0LRJ6fiYKcIRVrdQ3x8VBal8ls=) 8: eBHffMc_OQgLVRhR9CGd779MAbw.roa (hash: qhXCq6p6fkTw8jwxWPhjXqKYMhPmkunhkqWsFwzUDmY=) 9: hiOQSBdS2DRbOgKFoMoP7iKhKPs.roa (hash: j5f0I5DLadnNwscMqYSYZ5CP+jl5XYXJweeFVga4Wow=) 10: s4UUnGEQ4xGZfW9HORKgAKeDeDk.roa (hash: bWxNQV0PxOmoVlnQdQ8nP2osJqNNGhv2/QIKGIWI/58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:00:47:da:ee:66:a5:9a:0d:54:82:c5:3d:8c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Mar 25 21:01:02 2026 GMT Not After : Mar 26 21:01:02 2026 GMT Subject: CN=5430e717609e5c21011530d32152227f615a31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:30:70:a3:42:7a:7c:7c:39:0a:00:5a:6c: 13:db:c7:c3:2b:61:cb:43:4d:ab:8b:43:39:d7:64: 2c:cb:64:e4:40:5b:bf:66:78:d6:82:ae:0f:26:46: 96:ca:83:5a:c2:ce:5d:28:f3:d1:1e:f5:74:82:bd: a3:63:e4:89:ae:a3:11:2f:c3:0a:92:76:6c:06:6f: 5c:ba:12:8e:c5:57:f4:d6:b9:e8:db:eb:54:63:1f: d0:ef:61:3c:7a:01:cd:d1:b3:dc:dc:f0:4b:a6:58: cd:49:3a:3d:82:29:8b:9f:79:81:fb:8f:92:51:a1: b0:b2:ca:98:68:0e:6e:2a:87:57:d6:82:54:ed:0b: 15:a4:01:16:eb:a8:03:6b:fa:ce:82:e4:e6:58:7e: 25:cd:4f:fb:46:04:98:fa:bd:1d:91:29:67:ad:c3: 41:8f:a1:36:87:8b:48:da:9d:f7:1a:d2:3d:49:82: 27:30:e8:af:71:61:e5:97:08:e7:e5:ae:0f:d4:77: 49:c5:4c:40:c3:8c:24:e0:cb:42:2b:ad:52:21:24: cf:02:47:11:f5:f5:03:9d:3e:58:73:f9:9b:81:51: f1:c2:ce:a9:7f:e2:68:91:3e:8f:05:f2:3f:f3:a6: 28:d3:2b:04:15:5e:a6:54:54:63:ba:ea:35:d1:d3: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:30:E7:17:60:9E:5C:21:01:15:30:D3:21:52:22:7F:61:5A:31:AD X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:f3:7b:65:cf:38:32:87:d7:9b:6b:98:e0:da:2d:a7:8b: 9c:a8:32:16:db:6c:49:f9:d4:a6:29:f5:1a:fc:cb:18:6a:d5: 11:a2:e8:9d:44:e4:78:18:19:e8:47:c6:bc:6e:e4:88:c6:e6: d1:3e:1f:25:5e:3a:3a:13:3d:7a:c1:49:46:2b:d8:39:74:07: fd:87:74:77:97:d1:9b:0e:db:4b:f7:91:f7:e5:44:c3:62:2a: 71:e6:a7:5b:f3:97:27:ff:ea:54:59:01:be:4c:0d:cb:ec:fa: c9:51:16:60:38:27:13:12:2b:be:15:37:27:dc:69:f2:b7:da: 28:67:c9:d5:5d:7d:e8:12:b6:42:88:91:56:21:d1:ca:cf:a1: a5:70:f4:53:92:48:6c:2f:42:c7:a6:e6:22:af:cd:8a:45:95: 46:e2:91:df:c5:7a:75:ee:20:08:b4:df:f4:02:54:32:4c:72: 88:fe:16:6d:b6:d5:5a:dd:5d:e8:4f:af:ef:a4:5d:0f:27:3a: bc:c8:03:5f:3c:c7:19:c4:db:85:2a:03:9a:7a:63:d1:9c:d1: 11:c4:e2:f8:4f:7d:fa:80:17:96:52:41:5f:bd:13:35:3d:e5: 67:e0:36:fc:07:15:0f:a6:c6:41:a2:a6:63:ed:9d:d0:3e:f6: 7a:47:21:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzQBH2u5mpZoNVILFPYy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMzI1MjEwMTAyWhcNMjYwMzI2MjEwMTAyWjAzMTEwLwYDVQQD Eyg1NDMwZTcxNzYwOWU1YzIxMDExNTMwZDMyMTUyMjI3ZjYxNWEzMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi8wcKNCenx8OQoAWmwT28fDK2HL Q02ri0M512Qsy2TkQFu/ZnjWgq4PJkaWyoNaws5dKPPRHvV0gr2jY+SJrqMRL8MK knZsBm9cuhKOxVf01rno2+tUYx/Q72E8egHN0bPc3PBLpljNSTo9gimLn3mB+4+S UaGwssqYaA5uKodX1oJU7QsVpAEW66gDa/rOguTmWH4lzU/7RgSY+r0dkSlnrcNB j6E2h4tI2p33GtI9SYInMOivcWHllwjn5a4P1HdJxUxAw4wk4MtCK61SISTPAkcR 9fUDnT5Yc/mbgVHxws6pf+JokT6PBfI/86Yo0ysEFV6mVFRjuuo10dN62QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQw5xdgnlwhARUw0yFSIn9hWjGtMB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnfze2XP ODKH15trmODaLaeLnKgyFttsSfnUpin1GvzLGGrVEaLonUTkeBgZ6EfGvG7kiMbm 0T4fJV46OhM9esFJRivYOXQH/Yd0d5fRmw7bS/eR9+VEw2IqceanW/OXJ//qVFkB vkwNy+z6yVEWYDgnExIrvhU3J9xp8rfaKGfJ1V196BK2QoiRViHRys+hpXD0U5JI bC9Cx6bmIq/NikWVRuKR38V6de4gCLTf9AJUMkxyiP4WbbbVWt1d6E+v76RdDyc6 vMgDXzzHGcTbhSoDmnpj0ZzREcTi+E99+oAXllJBX70TNT3lZ+A2/AcVD6bGQaKm Y+2d0D72ekchzw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:28 2026 by rpki-client