$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: +XqZVP2e1AmJKMTnyoQNSKjpTT3zRmcrgm2NM+lvpp8= Subject key identifier: D8:F6:03:41:18:9B:17:03:EE:6B:E8:F5:88:86:2C:B3:16:11:1A:D9 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019D269654C42149D11BE973EF31473FCBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0D3A Signing time: Wed 25 Mar 2026 20:01:19 +0000 Manifest this update: Wed 25 Mar 2026 20:01:19 +0000 Manifest next update: Thu 26 Mar 2026 20:01:19 +0000 Files and hashes: 1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=) 2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=) 3: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=) 4: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=) 5: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=) 6: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=) 7: QzMyegFOkVY4VnXHpYFz61drfjg.roa (hash: mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=) 8: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=) 9: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=) 10: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=) 11: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=) 12: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=) 13: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=) 14: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: zLNr81xEtQsoZnbWB6eTdtuc6H3fdjlIp7EkxTYKGTI=) 15: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:54:c4:21:49:d1:1b:e9:73:ef:31:47:3f:cb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Mar 25 20:01:19 2026 GMT Not After : Mar 26 20:01:19 2026 GMT Subject: CN=d8f60341189b1703ee6be8f588862cb316111ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:7e:dd:e1:d0:1d:55:a4:3d:81:39:06:de: 9d:c5:13:ad:3d:0b:c0:8d:6c:ff:ed:06:74:04:8d: c5:4d:d1:d3:2a:8c:cd:e1:1f:eb:21:f7:86:76:bb: f7:e3:98:ec:29:16:99:f1:3c:66:49:fb:04:e8:ad: c1:85:85:6f:42:2f:c8:dd:c7:f2:20:90:23:f9:9d: 2d:73:87:9d:9d:38:26:4f:f0:4d:97:85:7e:76:9b: 23:ba:2f:3c:2a:06:15:bb:67:f4:27:f7:ff:71:19: ad:8e:4c:32:ea:24:d9:20:ef:61:94:7a:f8:ce:36: 69:13:6e:7f:ea:46:8b:6b:e3:12:7c:78:4c:f4:bf: e9:45:97:05:44:e7:2a:b8:fa:48:7b:74:d4:1c:1d: 20:c6:4b:50:1a:a1:b5:9d:d7:4b:29:a7:c5:02:ae: c3:ef:94:31:5e:54:02:2a:46:52:53:b6:e8:89:1d: cd:12:a7:ff:6f:c8:d8:8b:43:bd:6d:1e:be:04:91: 48:32:a9:e6:fe:96:55:b2:6d:18:b7:d1:8c:04:b0: 65:9a:ab:1f:03:f9:f1:a7:17:c3:05:eb:2a:9f:10: ce:0f:6c:7f:46:dc:b7:e0:c8:5b:0b:5a:1f:55:51: 28:42:1c:f1:f5:05:07:19:dc:4c:b1:7b:36:b0:26: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:03:41:18:9B:17:03:EE:6B:E8:F5:88:86:2C:B3:16:11:1A:D9 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:11:36:41:34:fe:a7:b4:7c:84:71:31:2a:c2:af:c4:c4:f3: 41:0c:6e:a6:54:7e:3c:58:5e:c7:23:43:02:6a:36:c6:8a:5e: 76:53:ff:5a:ac:5f:5f:08:fe:1d:31:e3:e8:69:ad:4e:e0:b3: b8:f8:fb:bd:93:4b:7d:31:e6:52:73:4e:4f:c8:d0:00:dc:ae: bd:54:34:49:e9:55:71:cb:6a:a7:d9:53:02:56:6e:77:e6:37: 9c:c9:ff:6b:75:e9:d6:8c:ae:a2:f5:7c:8b:67:c7:93:22:8c: e9:e9:23:78:50:09:69:ac:14:be:56:1c:e5:9b:f3:0e:a6:58: 6a:f2:e7:ff:49:10:06:02:61:79:c2:9f:22:2b:0a:9c:fb:e5: a3:20:96:86:37:43:a6:05:a4:09:ca:0e:90:a4:e4:98:61:10: 25:49:ae:20:d3:41:5c:ad:2a:f4:21:b9:04:d8:e3:16:d2:25: 1d:d6:b3:8b:39:78:2a:28:68:68:cf:71:b9:5f:5e:ac:24:53: 73:17:c6:c7:09:ff:5a:de:7c:c5:f3:01:61:02:56:f6:3e:7f: 3a:b4:25:ce:a3:2d:33:82:ad:0a:30:bd:24:e0:bb:ef:74:f9: 2d:5c:8e:2f:d7:b5:8e:0d:91:88:a6:09:01:e4:4b:6a:bd:d9: 36:86:7c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mllTEIUnRG+lz7zFHP8vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD EyhkOGY2MDM0MTE4OWIxNzAzZWU2YmU4ZjU4ODg2MmNiMzE2MTExYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJN+3eHQHVWkPYE5Bt6dxROtPQvA jWz/7QZ0BI3FTdHTKozN4R/rIfeGdrv345jsKRaZ8TxmSfsE6K3BhYVvQi/I3cfy IJAj+Z0tc4ednTgmT/BNl4V+dpsjui88KgYVu2f0J/f/cRmtjkwy6iTZIO9hlHr4 zjZpE25/6kaLa+MSfHhM9L/pRZcFROcquPpIe3TUHB0gxktQGqG1nddLKafFAq7D 75QxXlQCKkZSU7boiR3NEqf/b8jYi0O9bR6+BJFIMqnm/pZVsm0Yt9GMBLBlmqsf A/nxpxfDBesqnxDOD2x/Rty34MhbC1ofVVEoQhzx9QUHGdxMsXs2sCZ+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj2A0EYmxcD7mvo9YiGLLMWERrZMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxE2QTT+ p7R8hHExKsKvxMTzQQxuplR+PFhexyNDAmo2xopedlP/WqxfXwj+HTHj6GmtTuCz uPj7vZNLfTHmUnNOT8jQANyuvVQ0SelVcctqp9lTAlZud+Y3nMn/a3Xp1oyuovV8 i2fHkyKM6ekjeFAJaawUvlYc5ZvzDqZYavLn/0kQBgJhecKfIisKnPvloyCWhjdD pgWkCcoOkKTkmGEQJUmuINNBXK0q9CG5BNjjFtIlHdazizl4KihoaM9xuV9erCRT cxfGxwn/Wt58xfMBYQJW9j5/OrQlzqMtM4KtCjC9JOC773T5LVyOL9e1jg2RiKYJ AeRLar3ZNoZ8ZA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:17:41 2026 by rpki-client