$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: FH+S5OA6aU1dddK6bJi5zUVqMntEWzboss0AkEU0cFc= Subject key identifier: E8:E3:6A:3D:6F:CF:6E:84:9E:75:C1:EA:B4:39:BC:6C:39:D9:E0:FB Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019D31F5660008EDFC15271909AC66B0C85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 189C Signing time: Sat 28 Mar 2026 01:00:59 +0000 Manifest this update: Sat 28 Mar 2026 01:00:59 +0000 Manifest next update: Sun 29 Mar 2026 01:00:59 +0000 Files and hashes: 1: 9erLWxF1i2Yda53dAoQL85cyRkQ.roa (hash: HcHl1aLLGyWyupRGZPmxNJ07j4g0I7ADLsDIJrI6OWA=) 2: GQiwBku-A5AZLc3avjt2f6r__BY.roa (hash: /sgvG1yd4aMwAy5Ru1eFPap5cgqJXUuTDaejadWpONE=) 3: KSQwvTcsugLeF8ojPhELBKcj4Vw.roa (hash: 9l2WRr+rrJBrqb+AyibzJsgOlsg/AuUh8/D4ng4z+vQ=) 4: SCVJdWoRmH545gbM0DgpC1jcOnU.roa (hash: cnGnIwzj7a9yMWu26KJot1qAUH3CJ8AY59GR+q3RFlo=) 5: WspMkb0p51mqI6CuSe5VuWipa0M.roa (hash: irxEvyIWUgOHMwq1N9qORbjVDA2FSkyh31LjTzt2wmg=) 6: ZmDWBkTRxBEt7eOvAGxI4ejJXRI.roa (hash: 4M3edEvw4um6hyXUTM5nV4KdfiUrbAeRuOpOMqVgH7w=) 7: ev4p5UC95DYulsJCA9cdXoaT76s.roa (hash: zACQ+LVNdYL8laZ9viOyRqqo+Dy/VXCfui0X6gmWGIQ=) 8: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: TEU8vdp3MonGG7xEXI0+DWSg+ZEdSHadGj0aGvb0iDs=) 9: pE8M2TbspfgGizKPo-eHgEwMXpo.roa (hash: FBu5TKtrrPKwi3n1Wm4wF0JEluk4YeXT4bYDomJA4O4=) 10: v38e3j02THySXqkb5HchPvBe2-U.roa (hash: gT8zWmgwHK6wYraJegRxM73OA8zJN0ZGTcjtlfQRATU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:f5:66:00:08:ed:fc:15:27:19:09:ac:66:b0:c8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Mar 28 01:00:59 2026 GMT Not After : Mar 29 01:00:59 2026 GMT Subject: CN=e8e36a3d6fcf6e849e75c1eab439bc6c39d9e0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:79:2d:64:f8:20:13:29:8a:fb:32:b8:0e: 0a:9b:68:e5:65:dd:5c:39:b7:05:7a:d1:ef:ed:cb: 87:df:ef:29:e1:8c:f3:98:8c:5b:37:b4:ca:22:c1: cb:a0:5e:c2:8b:23:fb:3d:f4:c1:a8:8b:69:74:5c: 4e:7f:dc:71:dd:f7:6a:a5:85:cb:0c:de:c0:23:43: e3:fa:4b:90:5c:d7:40:bb:c8:34:1e:1c:40:6a:6a: 77:a5:80:79:f3:c9:8f:42:a3:a7:45:d8:de:98:b2: 19:70:c4:26:07:73:59:f4:c7:92:c3:22:42:c1:5b: 3a:9a:ed:17:85:8a:e5:1d:be:75:d2:c4:c5:5f:d0: 1f:23:5d:b5:e7:21:ae:3e:f5:80:9e:c1:4e:bd:78: 6e:13:21:ed:8e:6e:84:2c:b4:fd:d2:b8:e5:18:f0: c6:5e:62:4f:10:8b:5d:c2:c6:cc:ea:1b:9c:94:5f: c7:a6:1f:32:42:4c:08:bb:67:08:47:4f:27:5e:11: 7d:a1:7e:33:c3:14:b2:1a:5a:be:1f:f0:1b:18:f8: 52:cc:71:e5:d2:5f:31:4b:34:6b:58:ce:ce:2d:d1: e1:56:c0:17:53:7e:2e:1f:bd:6d:8e:b4:aa:88:18: 86:34:f4:79:46:e5:f1:ec:ef:15:07:a9:ab:a3:a3: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:6A:3D:6F:CF:6E:84:9E:75:C1:EA:B4:39:BC:6C:39:D9:E0:FB X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bb:61:95:3a:67:83:ad:c9:df:36:b7:cf:0d:c6:89:a3:d8: 4b:63:4f:17:59:d4:f8:c6:76:f8:f8:9c:c5:a4:c0:c6:92:76: ec:6f:6f:ab:47:17:68:fd:22:db:89:e0:0b:21:4b:42:e6:74: 53:28:74:c5:2a:55:18:a3:8a:35:28:56:61:0f:7a:06:29:6d: 7b:79:16:1a:24:eb:aa:a9:f2:2c:f5:94:13:9e:58:f4:49:57: a4:40:f1:12:cc:23:90:44:8d:48:2f:41:39:25:ff:d7:60:26: 13:5a:21:c8:2e:38:fb:64:f1:cd:07:28:84:f6:cf:79:54:26: 9f:d5:c5:fb:a4:a0:0a:04:fb:4a:9a:37:3e:d0:3b:35:98:44: 19:bc:6d:fa:8f:12:b0:79:2b:54:87:b1:f4:48:7a:3c:7f:4b: 8d:df:2c:f9:f2:c9:60:01:f0:8f:0b:2a:9c:ab:04:65:f7:29: 3a:ef:65:e3:75:64:83:f8:33:1d:d3:e6:2a:64:0a:77:63:3c: a2:09:6e:e7:d9:ec:d1:b6:52:50:d4:dc:35:ad:16:2b:e6:41: 78:f2:0f:72:ea:94:47:22:58:68:cf:55:78:69:bb:78:3e:53: 3c:ef:f1:b4:3c:d6:3c:84:de:e0:3a:54:86:0e:a2:da:6c:dc: b4:55:f0:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0x9WYACO38FScZCaxmsMhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMzI4MDEwMDU5WhcNMjYwMzI5MDEwMDU5WjAzMTEwLwYDVQQD EyhlOGUzNmEzZDZmY2Y2ZTg0OWU3NWMxZWFiNDM5YmM2YzM5ZDllMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmR5LWT4IBMpivsyuA4Km2jlZd1c ObcFetHv7cuH3+8p4YzzmIxbN7TKIsHLoF7CiyP7PfTBqItpdFxOf9xx3fdqpYXL DN7AI0Pj+kuQXNdAu8g0HhxAamp3pYB588mPQqOnRdjemLIZcMQmB3NZ9MeSwyJC wVs6mu0XhYrlHb510sTFX9AfI1215yGuPvWAnsFOvXhuEyHtjm6ELLT90rjlGPDG XmJPEItdwsbM6huclF/Hph8yQkwIu2cIR08nXhF9oX4zwxSyGlq+H/AbGPhSzHHl 0l8xSzRrWM7OLdHhVsAXU34uH71tjrSqiBiGNPR5RuXx7O8VB6mro6NL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjjaj1vz26EnnXB6rQ5vGw52eD7MB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbthlTpn g63J3za3zw3GiaPYS2NPF1nU+MZ2+PicxaTAxpJ27G9vq0cXaP0i24ngCyFLQuZ0 Uyh0xSpVGKOKNShWYQ96Bilte3kWGiTrqqnyLPWUE55Y9ElXpEDxEswjkESNSC9B OSX/12AmE1ohyC44+2TxzQcohPbPeVQmn9XF+6SgCgT7Spo3PtA7NZhEGbxt+o8S sHkrVIex9Eh6PH9Ljd8s+fLJYAHwjwsqnKsEZfcpOu9l43Vkg/gzHdPmKmQKd2M8 oglu59ns0bZSUNTcNa0WK+ZBePIPcuqURyJYaM9VeGm7eD5TPO/xtDzWPITe4DpU hg6i2mzctFXwzQ== -----END CERTIFICATE-----Generated at Sat Mar 28 08:42:17 2026 by rpki-client