$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: 45iri5wLtkuvnITDMAefCUrEhI8fSaFcAmXb/eiCN0g= Subject key identifier: 27:0A:F6:C6:E5:30:FD:A2:A8:AE:E5:27:E4:63:60:3E:46:8D:25:29 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019D27E010D444E406E0018085DCAE5397DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1898 Signing time: Thu 26 Mar 2026 02:01:28 +0000 Manifest this update: Thu 26 Mar 2026 02:01:28 +0000 Manifest next update: Fri 27 Mar 2026 02:01:28 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: DjWpe60OHw08OC41r6wiOmgqanIHZP1eucqaEaHqWig=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:e0:10:d4:44:e4:06:e0:01:80:85:dc:ae:53:97:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Mar 26 02:01:28 2026 GMT Not After : Mar 27 02:01:28 2026 GMT Subject: CN=270af6c6e530fda2a8aee527e463603e468d2529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:35:b6:66:d2:b1:4a:fd:6b:87:e7:2b:01: b9:54:3c:ca:ef:13:65:c7:f3:76:41:3a:13:33:c9: ff:b7:c4:65:44:a7:5f:81:b3:07:9a:60:78:79:91: b5:47:3e:b7:33:cf:43:1a:04:a1:43:f9:3f:e1:15: 27:2f:ff:2c:de:18:7f:fd:a3:34:d1:69:70:5b:fc: 4b:cb:0a:48:6e:76:2a:63:5d:b7:37:1b:0f:17:97: 0c:b3:3c:39:a7:a9:b9:50:c3:d0:81:71:f3:63:cf: 36:44:a8:e7:e9:fc:13:23:8d:27:3a:19:a7:eb:04: 3a:15:01:b1:ee:df:39:37:e8:82:6f:68:39:40:28: bc:b6:44:aa:ef:72:4c:fb:17:ac:5e:35:6a:9a:55: 07:6f:1f:8a:61:8d:a3:27:68:58:b1:f7:8f:97:47: 7f:37:e1:4f:4b:06:ea:90:3c:95:bb:6c:16:92:95: 69:39:ee:a8:43:44:d5:b2:b2:d5:c1:b8:cb:34:29: 11:20:33:86:dd:f4:cc:20:c4:73:48:44:35:36:ee: e8:bb:b3:2c:32:e3:32:66:3b:48:68:7d:74:c0:33: ea:cf:f1:ab:c1:6c:a9:ae:12:7f:97:4f:73:9f:5e: 00:87:c6:70:89:e0:51:44:f9:f3:f0:8b:1c:fe:16: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:F6:C6:E5:30:FD:A2:A8:AE:E5:27:E4:63:60:3E:46:8D:25:29 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:64:11:43:69:e3:8a:cb:02:1b:f4:05:dd:55:e8:db:31:5a: fb:02:0e:57:85:1b:ab:3d:ef:26:39:8e:7a:84:30:8c:bb:fa: 13:bd:f2:ba:54:cf:26:78:11:3e:6c:aa:d2:c8:a0:e3:49:bb: 31:8d:4e:5b:b5:15:b9:36:99:2b:0f:ad:1e:8f:ce:9f:bf:8e: c5:33:85:57:45:c3:02:98:56:38:dc:a6:d0:34:45:c2:ca:38: eb:8f:2c:af:59:30:04:f9:70:28:3b:45:4d:16:ab:ed:85:e0: c5:9b:32:90:c4:d1:08:b1:1b:b7:c8:89:d3:f6:35:30:18:f0: 44:36:c7:51:91:ec:4a:6a:d4:6d:e8:07:00:d8:e9:98:6d:d7: 5d:69:72:e4:f8:ee:31:c9:7b:9b:1b:90:71:bc:e5:f1:d2:27: e0:83:d0:cb:93:dc:76:da:8e:08:86:b9:4c:07:41:b6:ac:b5: 23:17:4c:8c:62:37:26:84:8e:73:ea:aa:89:cd:63:09:01:8e: f5:37:9c:f7:86:49:1c:ac:26:5c:f0:e0:dc:01:b7:a4:e3:13: 9a:87:14:85:fd:5e:f0:17:26:44:d3:39:f4:47:e4:01:5d:0e: 22:bf:3d:0a:b1:68:04:83:b3:3e:46:36:23:ec:22:45:34:64: 87:c5:b7:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n4BDUROQG4AGAhdyuU5feMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMzI2MDIwMTI4WhcNMjYwMzI3MDIwMTI4WjAzMTEwLwYDVQQD EygyNzBhZjZjNmU1MzBmZGEyYThhZWU1MjdlNDYzNjAzZTQ2OGQyNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwU1tmbSsUr9a4fnKwG5VDzK7xNl x/N2QToTM8n/t8RlRKdfgbMHmmB4eZG1Rz63M89DGgShQ/k/4RUnL/8s3hh//aM0 0WlwW/xLywpIbnYqY123NxsPF5cMszw5p6m5UMPQgXHzY882RKjn6fwTI40nOhmn 6wQ6FQGx7t85N+iCb2g5QCi8tkSq73JM+xesXjVqmlUHbx+KYY2jJ2hYsfePl0d/ N+FPSwbqkDyVu2wWkpVpOe6oQ0TVsrLVwbjLNCkRIDOG3fTMIMRzSEQ1Nu7ou7Ms MuMyZjtIaH10wDPqz/GrwWyprhJ/l09zn14Ah8ZwieBRRPnz8Isc/ha9bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcK9sblMP2iqK7lJ+RjYD5GjSUpMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWQRQ2nj issCG/QF3VXo2zFa+wIOV4Ubqz3vJjmOeoQwjLv6E73yulTPJngRPmyq0sig40m7 MY1OW7UVuTaZKw+tHo/On7+OxTOFV0XDAphWONym0DRFwso4648sr1kwBPlwKDtF TRar7YXgxZsykMTRCLEbt8iJ0/Y1MBjwRDbHUZHsSmrUbegHANjpmG3XXWly5Pju Mcl7mxuQcbzl8dIn4IPQy5PcdtqOCIa5TAdBtqy1IxdMjGI3JoSOc+qqic1jCQGO 9Tec94ZJHKwmXPDg3AG3pOMTmocUhf1e8BcmRNM59EfkAV0OIr89CrFoBIOzPkY2 I+wiRTRkh8W3zw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:07:55 2026 by rpki-client