$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: +pv822mB/kWAlg2+0+2WlvUPXtdkbFQ1L1C9woh+f7I= Subject key identifier: C8:90:83:EC:E8:B8:F2:A2:C4:34:64:47:32:F0:55:4D:0D:F7:0F:8E Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019D2772CE2939C6DE4C2C02A2DDA199C4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1891 Signing time: Thu 26 Mar 2026 00:02:08 +0000 Manifest this update: Thu 26 Mar 2026 00:02:08 +0000 Manifest next update: Fri 27 Mar 2026 00:02:08 +0000 Files and hashes: 1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=) 2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: i67WjE4Mvl7hMrZp7vlQtr69NumcqlFHFhdlE43o/U4=) 3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=) 4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=) 5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=) 6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=) 7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=) 8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=) 9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=) 10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=) 11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=) 12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=) 13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=) 14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=) 15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=) 16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:ce:29:39:c6:de:4c:2c:02:a2:dd:a1:99:c4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Mar 26 00:02:08 2026 GMT Not After : Mar 27 00:02:08 2026 GMT Subject: CN=c89083ece8b8f2a2c434644732f0554d0df70f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:08:50:81:f9:12:95:cc:ba:32:e0:16:8f: ef:3e:3f:bf:d5:00:3c:21:d8:89:04:cd:e5:f4:e7: a1:cc:4c:13:89:01:12:cf:b9:b5:7c:18:7f:c6:08: 31:b6:ec:5f:db:1a:93:83:b8:fe:b2:6d:2d:ad:b5: a3:04:56:e7:4f:ec:e8:a9:46:d6:8b:28:a9:a8:be: 90:b5:2d:6c:8d:3b:b5:10:84:07:2d:1a:c3:13:57: f7:5d:4a:df:c7:61:9f:af:cc:9a:3f:56:aa:6b:64: 27:91:c9:a8:65:9e:86:34:38:22:6a:26:44:e4:fc: 14:76:37:a6:f1:25:d8:15:e7:aa:64:a5:83:00:d2: 9e:58:25:f4:03:5d:ff:62:ea:b0:11:da:ae:d0:a8: e1:7a:3a:e6:2e:2d:87:5f:e1:2d:c9:fd:be:b6:39: a8:4e:a9:07:7f:d5:bc:ea:62:de:93:91:79:0c:9b: 55:fe:bf:10:80:67:e6:81:00:eb:16:15:55:94:fa: e1:ae:51:cc:8b:d6:ce:f6:37:bc:01:40:53:42:60: 0c:b5:88:50:da:1d:24:d0:a6:92:15:f8:93:d3:15: 75:d4:82:dd:aa:3f:ad:d8:8b:54:1c:f4:8c:8d:64: ff:34:06:9a:86:15:d4:5a:ea:d2:29:dd:15:bb:88: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:90:83:EC:E8:B8:F2:A2:C4:34:64:47:32:F0:55:4D:0D:F7:0F:8E X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:33:df:bf:5c:e8:bd:a4:0b:0e:78:3f:e6:81:99:d5:28:85: 9e:18:74:e5:e6:ce:ab:41:5b:24:ae:3a:66:7c:a8:6c:10:8a: df:b0:d9:44:99:f8:fb:92:61:42:08:5c:8a:ff:cb:26:fb:3c: 18:9b:7b:96:b0:cd:a5:72:b8:13:45:cc:ba:13:04:a1:e3:47: d7:ad:9a:2a:fe:9f:2b:ce:af:3b:49:df:c4:d6:43:ba:35:6a: 82:6d:53:2a:53:75:19:83:15:49:d5:a8:35:6b:c9:16:94:2f: a4:24:3a:4b:12:00:43:d3:04:88:7d:d7:39:fe:cd:cc:db:2b: 6f:fe:d5:c1:9b:e1:0e:d7:56:ec:a0:dc:c9:b5:92:5c:08:c7: e5:26:2f:ff:ca:6a:86:ca:8e:4d:13:db:d2:b8:b6:04:c3:6b: a0:26:8f:71:76:ea:c4:9d:65:1e:4d:08:61:a7:e2:33:ec:39: 5a:7c:b0:94:d4:c0:db:b1:b6:a6:00:49:5f:1d:8b:f3:07:d2: e5:5e:ac:96:6a:3e:8c:32:22:a9:34:b9:66:29:53:40:31:7a: c5:63:48:8b:50:a4:15:e8:d9:17:5f:ca:cf:8c:2d:5d:11:07: 3c:af:8f:3f:09:c9:55:36:28:2c:1c:2b:b7:63:c4:8d:6d:00: da:ff:59:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncs4pOcbeTCwCot2hmcTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMzI2MDAwMjA4WhcNMjYwMzI3MDAwMjA4WjAzMTEwLwYDVQQD EyhjODkwODNlY2U4YjhmMmEyYzQzNDY0NDczMmYwNTU0ZDBkZjcwZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfQIUIH5EpXMujLgFo/vPj+/1QA8 IdiJBM3l9OehzEwTiQESz7m1fBh/xggxtuxf2xqTg7j+sm0trbWjBFbnT+zoqUbW iyipqL6QtS1sjTu1EIQHLRrDE1f3XUrfx2Gfr8yaP1aqa2QnkcmoZZ6GNDgiaiZE 5PwUdjem8SXYFeeqZKWDANKeWCX0A13/YuqwEdqu0KjhejrmLi2HX+Etyf2+tjmo TqkHf9W86mLek5F5DJtV/r8QgGfmgQDrFhVVlPrhrlHMi9bO9je8AUBTQmAMtYhQ 2h0k0KaSFfiT0xV11ILdqj+t2ItUHPSMjWT/NAaahhXUWurSKd0Vu4jIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiQg+zouPKixDRkRzLwVU0N9w+OMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljPfv1zo vaQLDng/5oGZ1SiFnhh05ebOq0FbJK46ZnyobBCK37DZRJn4+5JhQghciv/LJvs8 GJt7lrDNpXK4E0XMuhMEoeNH162aKv6fK86vO0nfxNZDujVqgm1TKlN1GYMVSdWo NWvJFpQvpCQ6SxIAQ9MEiH3XOf7NzNsrb/7VwZvhDtdW7KDcybWSXAjH5SYv/8pq hsqOTRPb0ri2BMNroCaPcXbqxJ1lHk0IYafiM+w5WnywlNTA27G2pgBJXx2L8wfS 5V6slmo+jDIiqTS5ZilTQDF6xWNIi1CkFejZF1/Kz4wtXREHPK+PPwnJVTYoLBwr t2PEjW0A2v9ZOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:22:16 2026 by rpki-client