$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json) Hash identifier: xfqCp1sz62cGpHAA3ZiLjoQqMIdNq+vc/fEgZwU/X5s= Subject key identifier: 2A:4F:D6:6B:D4:8E:64:BE:E9:11:B6:1C:3E:EF:9D:69:06:FE:55:4D Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Certificate serial: 019D25BA8D4A1C9281084007A1BD426BF70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft Manifest number: 73 Signing time: Wed 25 Mar 2026 16:01:16 +0000 Manifest this update: Wed 25 Mar 2026 16:01:16 +0000 Manifest next update: Thu 26 Mar 2026 16:01:16 +0000 Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=) 2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=) 3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=) 4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=) 5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: NCJPNqtTNyoHs2TMMLFNSyCe/uLnlVYKeam1JnoNCBw=) 6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=) 7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=) 8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=) 9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=) 10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=) 11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:8d:4a:1c:92:81:08:40:07:a1:bd:42:6b:f7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Validity Not Before: Mar 25 16:01:16 2026 GMT Not After : Mar 26 16:01:16 2026 GMT Subject: CN=2a4fd66bd48e64bee911b61c3eef9d6906fe554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:c1:26:a6:b0:6b:67:d1:25:cc:b4:7e:db: 6e:fa:90:8e:37:64:f5:c7:0c:b5:6a:4d:b7:69:87: 12:08:35:e7:d4:9e:6f:c3:53:60:c5:42:aa:00:33: 18:fe:a7:7b:54:e0:a4:6f:c2:3e:dd:7f:73:af:fd: 94:24:20:d8:ef:16:8a:61:d3:78:97:51:ba:10:8f: 6e:48:f8:5b:0b:dc:7f:7d:e9:d3:39:2f:be:8d:02: d9:00:ca:ba:d1:61:1b:86:81:70:22:ea:26:b7:bb: ce:cf:32:51:3f:f5:49:3b:c6:bd:bd:ca:6a:96:7e: 99:be:2c:d7:16:3a:d8:2e:73:9d:28:ff:39:f3:8c: 0e:4f:fe:3e:92:af:3f:10:4f:68:cf:38:2e:0e:b6: 3e:f3:ef:1f:f3:3e:8f:31:f0:22:69:01:c2:4c:39: 3d:c0:c3:83:de:f9:2d:f1:32:81:c5:c2:24:66:bd: c1:0e:89:e6:64:dc:d8:71:40:c1:c2:c0:c6:88:18: 1b:a1:a1:74:9c:f1:95:e8:7b:44:ed:ed:94:e3:cc: 52:43:d0:c0:06:af:41:47:4e:ea:cb:06:18:25:ba: a8:f6:bc:78:c5:d7:07:a7:f4:39:fe:e4:42:31:95: 42:08:75:a2:1f:2f:a3:b9:cf:b1:6f:79:05:08:39: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:D6:6B:D4:8E:64:BE:E9:11:B6:1C:3E:EF:9D:69:06:FE:55:4D X509v3 Authority Key Identifier: keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:45:00:b5:82:a7:6a:f1:93:38:78:66:a8:80:45:5e:13:13: 52:a9:02:bd:44:c7:e7:98:f9:d4:ff:99:04:16:61:23:dc:f3: ec:2d:cd:38:4e:9d:4f:08:39:85:d2:c6:3f:c4:aa:99:50:8d: ca:62:1b:e4:0c:58:19:00:81:9d:78:7a:26:f8:85:24:cd:63: 21:8b:e9:74:b7:f8:22:76:a1:d0:02:00:cf:bf:2e:03:62:37: d9:ab:af:93:35:6b:b9:f1:c2:83:00:d6:e7:d8:30:95:aa:27: ea:43:55:95:71:c3:e9:92:ce:c8:d3:bb:4e:1a:1a:db:a1:c8: 62:05:70:0c:70:dc:ca:af:37:4d:52:24:4b:56:52:56:3b:0e: c9:f0:83:0b:e9:7c:74:f9:19:d1:2b:fb:d2:99:e0:c8:ad:8f: a2:6a:23:7a:c5:0d:34:7b:ac:54:bd:a4:d9:ff:43:5d:0f:d5: dc:b4:38:90:60:d4:91:7c:df:c4:22:3b:44:f5:d8:e8:18:61: 48:fe:a7:b6:d4:23:3b:d2:2b:df:55:ef:5d:30:90:a8:17:6c: 03:5a:57:ae:e2:7d:0d:9c:a4:ff:25:19:e9:58:c9:9f:31:e6: 86:ae:f7:11:61:e0:4c:eb:15:ad:4a:30:fe:ad:81:ce:6d:89: 85:6f:66:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0luo1KHJKBCEAHob1Ca/cKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGMyNGQ0MzdhMGQ1NmI5YmQwYmU0ODhhNjBjZmQ1Y2Nj OGY5YmYwHhcNMjYwMzI1MTYwMTE2WhcNMjYwMzI2MTYwMTE2WjAzMTEwLwYDVQQD EygyYTRmZDY2YmQ0OGU2NGJlZTkxMWI2MWMzZWVmOWQ2OTA2ZmU1NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/BJqawa2fRJcy0fttu+pCON2T1 xwy1ak23aYcSCDXn1J5vw1NgxUKqADMY/qd7VOCkb8I+3X9zr/2UJCDY7xaKYdN4 l1G6EI9uSPhbC9x/fenTOS++jQLZAMq60WEbhoFwIuomt7vOzzJRP/VJO8a9vcpq ln6ZvizXFjrYLnOdKP8584wOT/4+kq8/EE9ozzguDrY+8+8f8z6PMfAiaQHCTDk9 wMOD3vkt8TKBxcIkZr3BDonmZNzYcUDBwsDGiBgboaF0nPGV6HtE7e2U48xSQ9DA Bq9BR07qywYYJbqo9rx4xdcHp/Q5/uRCMZVCCHWiHy+juc+xb3kFCDnhmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpP1mvUjmS+6RG2HD7vnWkG/lVNMB8GA1UdIwQY MBaAFFVMJNQ3oNVrm9C+SIpgz9XMyPm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUt NjliYWExMWQ1NzhmLzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUtNjliYWExMWQ1Nzhm LzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEUAtYKn avGTOHhmqIBFXhMTUqkCvUTH55j51P+ZBBZhI9zz7C3NOE6dTwg5hdLGP8SqmVCN ymIb5AxYGQCBnXh6JviFJM1jIYvpdLf4Inah0AIAz78uA2I32auvkzVrufHCgwDW 59gwlaon6kNVlXHD6ZLOyNO7Thoa26HIYgVwDHDcyq83TVIkS1ZSVjsOyfCDC+l8 dPkZ0Sv70pngyK2PomojesUNNHusVL2k2f9DXQ/V3LQ4kGDUkXzfxCI7RPXY6Bhh SP6nttQjO9Ir31XvXTCQqBdsA1pXruJ9DZyk/yUZ6VjJnzHmhq73EWHgTOsVrUow /q2Bzm2JhW9m5w== -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:25 2026 by rpki-client