$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json) Hash identifier: u6jWXBpmTC0fpciCFSlrh8q6IXP80YL3qHcbVQF3ZPc= Subject key identifier: E2:A7:96:12:C7:15:6E:C8:3E:62:91:75:76:1A:FA:D5:8B:0D:D8:35 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019D2B4EE6436DD0F587A18296883F34BEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft Manifest number: 1236 Signing time: Thu 26 Mar 2026 18:01:24 +0000 Manifest this update: Thu 26 Mar 2026 18:01:24 +0000 Manifest next update: Fri 27 Mar 2026 18:01:24 +0000 Files and hashes: 1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=) 2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=) 3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=) 4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=) 5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=) 6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=) 7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=) 8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=) 9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=) 10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=) 11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=) 12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=) 13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=) 14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=) 15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=) 16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=) 17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=) 18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=) 19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=) 20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=) 21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=) 22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: DvbxWb+aL+J36k3u0TJNwvJ3Fe3rvWZ5hPbs7wioGu4=) 23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=) 24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=) 25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=) 26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=) 27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:4e:e6:43:6d:d0:f5:87:a1:82:96:88:3f:34:be:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Mar 26 18:01:24 2026 GMT Not After : Mar 27 18:01:24 2026 GMT Subject: CN=e2a79612c7156ec83e629175761afad58b0dd835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:d1:07:f1:d3:fa:12:de:c0:c9:08:3c:d2: 55:47:6c:45:5d:8f:e2:8b:31:f4:82:d8:08:45:4d: 16:fa:a8:ad:3e:95:be:2f:33:e9:ab:39:5b:43:94: 02:c9:75:d3:0d:a0:13:af:4b:d3:c5:ed:e2:a9:10: c9:61:a7:88:13:57:35:bf:73:57:45:4f:48:2d:30: 32:13:c1:fe:e3:79:12:09:ae:6c:75:78:bf:be:d4: ab:a2:7a:88:1e:99:cf:dc:4a:8f:80:4c:37:d6:a4: 9c:89:67:99:8b:49:e4:2c:60:13:6f:3a:b5:72:71: 3e:25:ad:2c:23:b9:2f:1b:99:35:b8:9b:99:f8:19: 44:c2:35:53:fa:df:43:01:9f:88:f3:0d:33:61:64: 44:91:a2:6d:ae:76:f0:77:ea:00:68:68:ae:c2:49: c5:7b:90:cf:83:b2:b0:b6:1c:2f:d2:e8:3d:09:78: d9:69:4b:16:87:e3:eb:96:1a:c8:bf:6d:e2:08:81: 6d:ad:35:eb:ca:8f:a4:78:89:d6:e5:5d:50:56:85: 9d:1e:74:3f:51:f1:ca:d7:97:8f:12:ce:85:fe:04: 25:24:10:84:69:45:9f:e7:65:12:44:ea:27:97:37: 4c:87:8d:f1:04:fd:3e:69:6e:0a:14:41:9c:42:c0: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:96:12:C7:15:6E:C8:3E:62:91:75:76:1A:FA:D5:8B:0D:D8:35 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:24:23:40:e1:90:90:ec:dd:44:64:75:de:27:5d:86:28:a6: 82:89:4f:58:f4:05:71:ca:53:88:2e:cc:63:98:59:05:78:4c: aa:1f:2d:6a:f2:dc:7d:50:b7:1f:e8:cb:49:2b:20:b1:da:ca: d8:7a:4e:f6:32:4b:df:9c:38:7b:64:f0:c9:b8:37:9b:f3:f7: dd:92:a1:c1:d2:12:b9:6e:23:b8:d5:d5:dc:fb:0c:92:1f:ee: 86:20:1c:49:09:c7:51:fb:30:71:cb:03:35:e6:a9:ec:b2:56: c2:b5:a4:a2:0b:37:1c:3b:f6:f8:ed:85:44:72:df:7c:1b:bd: 50:11:fc:0a:ba:3f:15:ad:66:6d:a1:9c:ea:fa:36:1c:79:f5: 59:9a:7a:c7:3b:82:2c:b5:64:b3:ca:93:22:32:8f:ed:4b:06: 36:f5:17:a5:52:6e:3c:4c:cc:9b:ef:ea:14:17:c9:6e:78:31: ce:8f:11:a7:19:28:b9:7c:c0:e5:ed:b1:e5:15:aa:10:bb:3b: ef:2d:75:83:ba:58:09:c0:41:41:2d:01:73:43:64:02:60:49: 3c:dd:15:be:e2:9e:73:b0:d8:81:1a:3f:c2:aa:fc:4a:0a:f4: f3:45:e1:02:25:a0:2e:88:94:2e:62:20:93:ab:b4:62:3e:c6: a5:99:27:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rTuZDbdD1h6GClog/NL7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMzI2MTgwMTI0WhcNMjYwMzI3MTgwMTI0WjAzMTEwLwYDVQQD EyhlMmE3OTYxMmM3MTU2ZWM4M2U2MjkxNzU3NjFhZmFkNThiMGRkODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFDRB/HT+hLewMkIPNJVR2xFXY/i izH0gtgIRU0W+qitPpW+LzPpqzlbQ5QCyXXTDaATr0vTxe3iqRDJYaeIE1c1v3NX RU9ILTAyE8H+43kSCa5sdXi/vtSronqIHpnP3EqPgEw31qSciWeZi0nkLGATbzq1 cnE+Ja0sI7kvG5k1uJuZ+BlEwjVT+t9DAZ+I8w0zYWREkaJtrnbwd+oAaGiuwknF e5DPg7Kwthwv0ug9CXjZaUsWh+PrlhrIv23iCIFtrTXryo+keInW5V1QVoWdHnQ/ UfHK15ePEs6F/gQlJBCEaUWf52USROonlzdMh43xBP0+aW4KFEGcQsDOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKnlhLHFW7IPmKRdXYa+tWLDdg1MB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCQjQOGQ kOzdRGR13iddhiimgolPWPQFccpTiC7MY5hZBXhMqh8tavLcfVC3H+jLSSsgsdrK 2HpO9jJL35w4e2Twybg3m/P33ZKhwdISuW4juNXV3PsMkh/uhiAcSQnHUfswccsD Neap7LJWwrWkogs3HDv2+O2FRHLffBu9UBH8Cro/Fa1mbaGc6vo2HHn1WZp6xzuC LLVks8qTIjKP7UsGNvUXpVJuPEzMm+/qFBfJbngxzo8RpxkouXzA5e2x5RWqELs7 7y11g7pYCcBBQS0Bc0NkAmBJPN0VvuKec7DYgRo/wqr8Sgr080XhAiWgLoiULmIg k6u0Yj7GpZknBA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:29 2026 by rpki-client