$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: UAPMfBsZIMq3eRW9OPgatT5kwdKWVY43GTbYaC/Je6o= Subject key identifier: 48:21:ED:F6:88:74:E4:59:DA:3D:64:F2:64:5D:C9:16:3C:11:22:D2 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019D25835D1625738C0F3AFDD4B222E1B703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1890 Signing time: Wed 25 Mar 2026 15:00:59 +0000 Manifest this update: Wed 25 Mar 2026 15:00:59 +0000 Manifest next update: Thu 26 Mar 2026 15:00:59 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: UdrHwAeKnezzbldHlAn2iA4Cx+kT2f1Cj5+tsH4jlVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:5d:16:25:73:8c:0f:3a:fd:d4:b2:22:e1:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Mar 25 15:00:59 2026 GMT Not After : Mar 26 15:00:59 2026 GMT Subject: CN=4821edf68874e459da3d64f2645dc9163c1122d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:62:de:ef:04:7f:6b:82:e5:ab:f5:35:86: 0a:7d:6f:96:1d:b9:e0:9a:f1:ea:80:37:ef:2c:4d: ff:87:27:49:1a:e0:63:b2:55:2c:05:fd:85:f5:c3: 9b:2c:0f:57:7b:b5:9d:6b:4c:94:e9:14:6c:9f:10: b1:7f:49:67:f3:56:80:31:53:6a:fc:9b:c6:47:a7: 95:d2:8f:79:ce:15:ab:d5:ca:78:1b:b9:14:18:e3: e7:4e:d4:16:2d:ae:d0:b3:91:7f:b3:6d:ed:4f:ba: f7:40:0b:75:0b:e2:0b:17:c1:be:18:42:72:d6:98: ea:48:46:88:47:2d:da:e7:66:10:10:e1:e7:e8:6c: 57:81:a5:e3:49:ca:7b:51:c7:49:2a:74:14:9c:8f: fe:0b:c4:91:1b:5f:67:73:cc:df:c0:82:11:a7:0d: 2a:b7:a6:20:c4:84:b9:d3:d5:94:fe:17:8f:59:bd: 38:e3:04:54:30:46:7b:d4:c2:ab:d7:65:8d:7a:95: 47:18:a9:7d:a6:2f:c8:70:5f:aa:6a:7d:39:d1:dc: 0d:6c:9f:1c:3e:91:fe:c0:00:ff:50:78:11:b2:77: fc:19:54:25:bf:a9:47:fc:b0:c3:91:60:ee:08:17: 4e:2e:25:c8:e1:61:32:48:0a:c4:e0:6d:10:a0:d1: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:21:ED:F6:88:74:E4:59:DA:3D:64:F2:64:5D:C9:16:3C:11:22:D2 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:f1:4c:ff:2b:25:2f:da:b6:18:ea:5e:68:73:6d:68:56: b3:41:87:a0:4c:36:d4:79:61:bd:96:29:af:1d:44:f7:79:ce: 11:fa:ac:9d:1b:33:33:10:07:53:df:7f:b8:43:41:10:9b:bc: ab:6c:61:5f:b9:0d:34:f5:85:d3:77:68:ba:12:3c:38:37:92: 3d:17:5d:1b:3c:d1:60:17:14:60:a3:3b:38:ab:3f:18:e7:52: e9:2b:c4:de:58:6f:66:58:74:6c:94:b5:e0:20:93:c0:1c:22: cf:a8:09:1a:28:da:f3:e1:11:20:a8:6d:f4:42:3b:3e:ef:c0: 0f:01:e4:07:9e:d7:c0:23:f7:f6:0e:4d:41:24:73:71:2d:34: b4:8b:9c:6a:7d:b8:b1:7f:be:82:d6:09:32:11:8e:97:8a:e1: 11:e7:89:b2:74:d5:31:d7:84:ce:98:5e:c8:f8:82:4e:9c:4c: 63:68:6c:10:ca:f4:bb:a1:c0:61:db:6b:b5:e0:a5:e7:40:5c: 9c:04:c8:e7:f4:7a:07:19:fe:6f:d4:78:2a:e9:56:75:53:64: 49:44:f8:62:50:e2:55:cc:f4:1c:1c:f7:61:30:e3:c7:0f:32: 41:8e:ff:55:60:d7:37:4f:1c:98:80:ab:10:b4:64:34:c3:12: 10:73:03:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg10WJXOMDzr91LIi4bcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMzI1MTUwMDU5WhcNMjYwMzI2MTUwMDU5WjAzMTEwLwYDVQQD Eyg0ODIxZWRmNjg4NzRlNDU5ZGEzZDY0ZjI2NDVkYzkxNjNjMTEyMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mhi3u8Ef2uC5av1NYYKfW+WHbng mvHqgDfvLE3/hydJGuBjslUsBf2F9cObLA9Xe7Wda0yU6RRsnxCxf0ln81aAMVNq /JvGR6eV0o95zhWr1cp4G7kUGOPnTtQWLa7Qs5F/s23tT7r3QAt1C+ILF8G+GEJy 1pjqSEaIRy3a52YQEOHn6GxXgaXjScp7UcdJKnQUnI/+C8SRG19nc8zfwIIRpw0q t6YgxIS509WU/hePWb044wRUMEZ71MKr12WNepVHGKl9pi/IcF+qan050dwNbJ8c PpH+wAD/UHgRsnf8GVQlv6lH/LDDkWDuCBdOLiXI4WEySArE4G0QoNGZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgh7faIdORZ2j1k8mRdyRY8ESLSMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA/xTP8r JS/athjqXmhzbWhWs0GHoEw21HlhvZYprx1E93nOEfqsnRszMxAHU99/uENBEJu8 q2xhX7kNNPWF03douhI8ODeSPRddGzzRYBcUYKM7OKs/GOdS6SvE3lhvZlh0bJS1 4CCTwBwiz6gJGija8+ERIKht9EI7Pu/ADwHkB57XwCP39g5NQSRzcS00tIucan24 sX++gtYJMhGOl4rhEeeJsnTVMdeEzpheyPiCTpxMY2hsEMr0u6HAYdtrteCl50Bc nATI5/R6Bxn+b9R4KulWdVNkSUT4YlDiVcz0HBz3YTDjxw8yQY7/VWDXN08cmICr ELRkNMMSEHMDdA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:22 2026 by rpki-client