$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: /z4RrNk/RqJij2aUKE6/BBmYnIbNdqNZ8EkXdicYfNg= Subject key identifier: B3:87:48:7C:7B:45:43:B5:1B:42:AB:5D:CB:0B:08:9B:AD:75:FF:CB Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019D26CD2D5458C774DF210ACEDD45A02789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 1897 Signing time: Wed 25 Mar 2026 21:01:13 +0000 Manifest this update: Wed 25 Mar 2026 21:01:13 +0000 Manifest next update: Thu 26 Mar 2026 21:01:13 +0000 Files and hashes: 1: 0ZCplUocK0t7bDn-aV_dYdEIf1g.roa (hash: PhCo67AThImAAICRbSKmw/MtJm7M6upTm1QEQIqyWmM=) 2: 9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa (hash: /64m6pcbXCI/USW9luQgRTop6wq7w1tWU4vkxTTIED0=) 3: C7OQreXH5XPqxZsAOPw_HJpsGo0.roa (hash: TIki96X5dEnDUKJ64GkJeMNjvAD8ackJDsoMX6jTIHg=) 4: G1x4whba5RT_Vtli04punRbWO2w.roa (hash: oyOFlbeBxFp4U1nbeagK0NVY5RB+WGnA51lFrV/vpsI=) 5: LiUFUxV8XWhTT5shfLiGfbuAMOw.roa (hash: aRDwRFjTPvq4k8j5/tgsgvtEF8G8MKbtJY2pyhjrrzI=) 6: OJGqgIdJ01gO1owrgbmqcY2GptM.roa (hash: /ZtVL1w4/auWCjNxmR/FovsgC3ZVYneYdjY7NZYxZZc=) 7: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: nUym8vHtMTGxMJ2Vg/F/vn1uvySoD/T9v0xAHVBopu0=) 8: fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa (hash: mgxi+ZbD7+yz67tvJMbZDZV/reH5WuncejcL1UkrxoM=) 9: kD04CUjg_MqICR0s9XTXa_0lsjE.roa (hash: GhUHdSAXykY7wB/NoCCZCZI/ZAtHhgLcQXX44IHbUsI=) 10: pUfEfBxJJ0L_zUfIbchL9AjuyKs.roa (hash: qokHZUKiXCUHjKAfZnVejSkgfD1BBB0fdWuxvKIwBrU=) 11: r5srZe-xUm0Yd0akgceKp5wi398.roa (hash: fg/QInXk+zpCLixKR8FC3dEYblIzWioFCagp25roJXU=) 12: rUQ-48pTHXQnGwITDjHNDmYKStU.roa (hash: 5rjqV6UMpYstWovN2+CGxz0WLz8A3h2zK9p4XttXPdQ=) 13: wonfwrKeB1K76TqPsMaqoDKooXU.roa (hash: SEBH6WAA2Az371IGZKWSIV+f6pZndD0Bpz9/N1ofv9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:2d:54:58:c7:74:df:21:0a:ce:dd:45:a0:27:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Mar 25 21:01:13 2026 GMT Not After : Mar 26 21:01:13 2026 GMT Subject: CN=b387487c7b4543b51b42ab5dcb0b089bad75ffcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:e9:67:01:76:36:33:6e:cb:9b:11:9b:53: 9f:11:bd:d9:0d:37:88:f3:9b:47:0a:87:5b:2a:99: c9:59:76:7d:72:cd:a1:3c:14:8c:e7:fe:d3:df:67: 34:6b:a3:bd:fb:e6:95:80:b2:e8:b8:33:58:9b:15: ab:f8:db:8f:59:47:53:e8:85:7e:25:c7:f0:10:b9: b2:67:37:13:ac:47:e5:1d:6e:af:eb:99:5b:47:b9: 27:8d:5a:fd:bc:c8:1d:25:00:7f:d8:4e:61:c6:1f: 1b:e7:aa:ae:43:13:61:9b:99:ff:ec:f7:15:0d:29: 2d:18:c0:6a:93:dd:b4:47:b9:5b:8b:8e:2d:11:27: 3d:c1:69:a6:6e:34:5e:7c:a7:4f:98:4d:59:ea:1f: 18:42:a8:6f:3c:20:f8:50:b5:3b:0f:e2:dc:98:bd: 69:ac:61:3c:75:c8:fa:07:a5:09:5b:d7:06:42:4b: 81:6f:ec:98:4f:c8:97:0d:4f:93:04:38:89:d4:6c: ee:73:4d:2b:7c:76:8e:69:91:fa:30:99:6c:f9:a2: 9d:95:cd:bf:e1:3f:4a:91:cf:6b:65:9b:32:14:ac: 1b:77:b4:d1:01:66:44:9b:15:4d:02:49:75:73:0a: 10:84:fb:9a:3d:3b:a9:6c:46:7c:91:22:f4:12:36: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:48:7C:7B:45:43:B5:1B:42:AB:5D:CB:0B:08:9B:AD:75:FF:CB X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b7:f7:6f:15:aa:8e:c8:d5:78:dc:3f:25:4d:f7:d8:f6:1d: ac:14:15:0e:6d:51:22:94:ea:8d:c3:ec:9a:1f:16:39:d4:96: db:d1:e9:cf:31:37:18:48:72:ab:6d:c3:87:3b:78:79:0c:30: 3d:08:ba:7c:68:b5:e6:b4:b8:4f:9c:14:64:aa:09:7e:39:60: 47:28:6e:26:a7:bb:13:c9:83:0f:a5:6b:d0:cb:db:6d:95:c9: 31:c6:63:75:be:cc:17:57:2b:67:60:67:a2:f9:7f:62:3d:9f: 18:92:01:4d:69:5b:4e:67:89:8d:b8:ca:3c:73:b5:96:ec:b5: 10:47:d8:ad:ba:a3:0d:8d:c0:77:43:26:23:7f:16:87:b4:fb: f2:70:c0:d7:07:9b:b3:fe:ad:ac:9c:bd:22:7d:41:6a:94:79: 05:bf:28:90:c1:35:02:c8:fd:de:fe:68:5e:01:d6:17:e0:c6: c9:37:47:a3:0a:b2:de:4e:c5:77:9c:0c:85:df:4e:f0:34:04: ae:b6:10:d9:90:62:a9:21:b0:bf:9a:c4:a6:17:02:e2:15:4f: d3:06:af:8e:16:9e:79:0f:b7:bc:1a:bb:e0:b6:e7:5d:1b:16: f2:6e:35:17:02:b9:ec:db:6a:c6:20:88:a9:9d:1e:d2:0f:f6: 64:3b:cb:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzS1UWMd03yEKzt1FoCeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD EyhiMzg3NDg3YzdiNDU0M2I1MWI0MmFiNWRjYjBiMDg5YmFkNzVmZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4TpZwF2NjNuy5sRm1OfEb3ZDTeI 85tHCodbKpnJWXZ9cs2hPBSM5/7T32c0a6O9++aVgLLouDNYmxWr+NuPWUdT6IV+ JcfwELmyZzcTrEflHW6v65lbR7knjVr9vMgdJQB/2E5hxh8b56quQxNhm5n/7PcV DSktGMBqk920R7lbi44tESc9wWmmbjRefKdPmE1Z6h8YQqhvPCD4ULU7D+LcmL1p rGE8dcj6B6UJW9cGQkuBb+yYT8iXDU+TBDiJ1Gzuc00rfHaOaZH6MJls+aKdlc2/ 4T9Kkc9rZZsyFKwbd7TRAWZEmxVNAkl1cwoQhPuaPTupbEZ8kSL0EjZUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOHSHx7RUO1G0KrXcsLCJutdf/LMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLf3bxWq jsjVeNw/JU332PYdrBQVDm1RIpTqjcPsmh8WOdSW29HpzzE3GEhyq23Dhzt4eQww PQi6fGi15rS4T5wUZKoJfjlgRyhuJqe7E8mDD6Vr0MvbbZXJMcZjdb7MF1crZ2Bn ovl/Yj2fGJIBTWlbTmeJjbjKPHO1luy1EEfYrbqjDY3Ad0MmI38Wh7T78nDA1web s/6trJy9In1BapR5Bb8okME1Asj93v5oXgHWF+DGyTdHowqy3k7Fd5wMhd9O8DQE rrYQ2ZBiqSGwv5rEphcC4hVP0wavjhaeeQ+3vBq74LbnXRsW8m41FwK57NtqxiCI qZ0e0g/2ZDvL8w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:10 2026 by rpki-client