$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: bfok1HEVfY+RUW4HCwkhRsmLJnVFkqpcULTqS/ASDy0= Subject key identifier: 4A:37:5C:9A:2F:D1:BE:9D:7B:64:A7:2C:5A:80:2F:50:D3:79:CA:92 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019D284D890633D49307BE5D6749D1745459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 18DC Signing time: Thu 26 Mar 2026 04:01:02 +0000 Manifest this update: Thu 26 Mar 2026 04:01:02 +0000 Manifest next update: Fri 27 Mar 2026 04:01:02 +0000 Files and hashes: 1: 9q3EYdZ3lfMQxLLXWr1Lu4GLDoA.roa (hash: 83WLeeOeZ990Jlz8T0MeqEiLs0USK5cXzUu6OTKmBQA=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: XBQAk/tGjxM/A4blZVpcLd1HXMldJH25xKBBDKUVlDk=) 3: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (hash: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA=) 4: _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (hash: t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=) 5: anqzHj_RBxYK0oKafgD2zP99QsI.roa (hash: ERFHbW67bqTT3uEBCgeFptdUh/X+KRt4341hnCHBYhg=) 6: k2VMFVozqPnYzXV1s0yW14brgu0.roa (hash: iUK8Oo0pMp3EC1NmFi93MB7dSsN9F4/PHcovJ6wIZ64=) 7: kQ0io2PNAP5BY8r7GxffYcQFx9o.roa (hash: 3jWAN8RtvcrXSZtLqgReLIQU9lIS3iNu48aFnlNqCkE=) 8: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (hash: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8=) 9: qEghLoN1iiF0goU1gVxwFrySfFg.roa (hash: 3jYy81C5LnlKfMQ1I0vpC9e8jd+RkWb8kU2Np75bx8o=) 10: sXYVzlN949bYEOpO7zS9qQzV3hI.roa (hash: e9BBGZUNUZ1LbqXnLLn0ySZ711mfMA/MI8l0i6//fJw=) 11: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (hash: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:89:06:33:d4:93:07:be:5d:67:49:d1:74:54:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Mar 26 04:01:02 2026 GMT Not After : Mar 27 04:01:02 2026 GMT Subject: CN=4a375c9a2fd1be9d7b64a72c5a802f50d379ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:10:9a:23:54:96:56:3b:3a:24:fc:30:bf: 3f:02:4d:55:40:44:0e:21:9f:22:61:ff:fb:99:9b: fb:9e:e5:4a:44:c6:6a:b3:85:01:33:bb:3b:bf:ea: 03:22:73:48:ce:e0:39:0e:e6:91:15:fc:dc:03:00: cf:fe:f3:6c:0e:b9:ac:a5:ff:e1:70:1a:73:9b:bd: d6:cf:2f:95:43:1a:dd:7b:4f:44:32:7f:a4:6d:18: 62:d1:a6:aa:57:9e:f5:44:f7:04:39:9d:58:ce:22: ca:d0:b7:ea:ee:9d:a0:a1:8e:67:34:80:6d:ff:36: 91:d1:82:53:00:0a:b2:9c:2c:d1:75:68:79:71:61: 7f:b9:38:7a:d1:d8:af:0b:a1:f4:8c:eb:de:4b:56: e9:54:f8:66:50:cf:a9:a1:31:58:56:64:65:bf:cf: d4:e6:74:32:b4:d8:6d:eb:04:74:a9:5c:40:b4:67: e2:ad:aa:57:32:a5:72:fe:8a:ce:03:d4:be:6b:98: b5:97:4c:b1:32:0d:d3:29:01:39:1d:48:36:3e:49: 4b:02:bc:bc:cd:1e:17:0f:bf:10:d4:cb:db:c5:f5: 8f:6d:95:71:68:1a:97:46:24:b5:e3:67:f1:c0:bc: 02:0f:33:0d:e8:03:ef:28:1d:2e:99:e7:37:3e:09: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:5C:9A:2F:D1:BE:9D:7B:64:A7:2C:5A:80:2F:50:D3:79:CA:92 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:8c:14:22:65:30:25:cf:95:aa:c7:b6:22:30:45:80:ac: 5f:a6:e2:4b:6e:f6:d0:32:77:9e:f2:cd:c9:2d:51:dd:30:2f: a0:ea:a1:ca:a6:d0:b5:af:e9:7d:56:2e:5e:87:ba:38:c6:30: e3:e7:b3:56:30:b5:63:77:91:11:9b:72:8f:5e:bf:4a:ab:af: 02:df:a7:dd:2e:fa:4d:45:d5:a0:9b:ca:76:24:d0:b7:1d:d8: 0c:53:f4:96:69:90:cf:52:69:ec:2f:19:f0:b4:4d:26:da:cd: bd:54:4c:d3:3d:0b:1c:77:8d:25:4d:9d:87:0f:3b:8f:1a:3a: 7c:6c:59:f6:6c:d9:66:c4:4f:65:0f:90:17:8c:8c:96:31:f8: 23:ff:9f:2c:37:48:1f:98:fd:92:6c:9a:95:52:49:31:ee:de: a0:da:19:5f:2a:d2:41:02:07:0f:ba:21:93:3e:0e:90:10:95: 50:73:2b:1b:54:60:65:f8:f8:b8:36:f1:35:76:2f:70:53:0c: 70:ca:14:b2:02:ec:80:bb:b0:45:2a:8d:19:b7:24:c3:2b:44: df:ee:d3:83:7b:ce:2d:0a:39:80:fe:7e:48:e7:86:72:71:0e: ff:0e:8a:ea:a6:ab:9b:d1:43:41:e3:c3:26:1d:0d:f3:dd:f7: da:57:96:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTYkGM9STB75dZ0nRdFRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMzI2MDQwMTAyWhcNMjYwMzI3MDQwMTAyWjAzMTEwLwYDVQQD Eyg0YTM3NWM5YTJmZDFiZTlkN2I2NGE3MmM1YTgwMmY1MGQzNzljYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEoQmiNUllY7OiT8ML8/Ak1VQEQO IZ8iYf/7mZv7nuVKRMZqs4UBM7s7v+oDInNIzuA5DuaRFfzcAwDP/vNsDrmspf/h cBpzm73Wzy+VQxrde09EMn+kbRhi0aaqV571RPcEOZ1YziLK0Lfq7p2goY5nNIBt /zaR0YJTAAqynCzRdWh5cWF/uTh60divC6H0jOveS1bpVPhmUM+poTFYVmRlv8/U 5nQytNht6wR0qVxAtGfirapXMqVy/orOA9S+a5i1l0yxMg3TKQE5HUg2PklLAry8 zR4XD78Q1MvbxfWPbZVxaBqXRiS142fxwLwCDzMN6APvKB0umec3PgmMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo3XJov0b6de2SnLFqAL1DTecqSMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegOMFCJl MCXPlarHtiIwRYCsX6biS2720DJ3nvLNyS1R3TAvoOqhyqbQta/pfVYuXoe6OMYw 4+ezVjC1Y3eREZtyj16/SquvAt+n3S76TUXVoJvKdiTQtx3YDFP0lmmQz1Jp7C8Z 8LRNJtrNvVRM0z0LHHeNJU2dhw87jxo6fGxZ9mzZZsRPZQ+QF4yMljH4I/+fLDdI H5j9kmyalVJJMe7eoNoZXyrSQQIHD7ohkz4OkBCVUHMrG1RgZfj4uDbxNXYvcFMM cMoUsgLsgLuwRSqNGbckwytE3+7Tg3vOLQo5gP5+SOeGcnEO/w6K6qarm9FDQePD Jh0N89332leWtg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:57 2026 by rpki-client