$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: B2ww/bPv/aDagN5Z6j9keoYkrdexetlvoKjZIUale9o= Subject key identifier: 9A:7F:1C:D2:20:FF:F9:42:28:67:03:33:58:A4:FD:22:DC:33:8B:AF Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019D26965A88C364406F2BDEE6466C39B28E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 13F3 Signing time: Wed 25 Mar 2026 20:01:20 +0000 Manifest this update: Wed 25 Mar 2026 20:01:20 +0000 Manifest next update: Thu 26 Mar 2026 20:01:20 +0000 Files and hashes: 1: 44aGJKnw5Hesx37y7qMcSZ1iMsI.roa (hash: gXCpn8JpVZnLs233LPUlWa8pDJaZD06hjtiYiLo5D/g=) 2: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=) 3: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=) 4: 5eKnFrezKqp3RFybwrKD6RzHZeY.roa (hash: Y43namxpY84cm0E5KqxDyJ0xhF6ivsfdIzgc9v2etVc=) 5: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=) 6: Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa (hash: 9VIUPXOuLKIWThDUo3hV+lRqsAnOw3iAcmnqTjK/WTI=) 7: GAfFh1K7-2DSrU9YyyevDu6GoAI.roa (hash: oAnnKyrmJ66q7il8XCcxKmZFYj/swRA7KwF/cg/lhdo=) 8: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: Y83yC1BeNtQFcdDoicfyqa4ctl4sKmq/9ZwMbSApl3Y=) 9: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=) 10: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=) 11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=) 12: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=) 13: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=) 14: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=) 15: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=) 16: xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa (hash: KH1JqVr3kTbgL0PPszybvYJtN44mCFq5r1mmiGKHDpM=) 17: yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa (hash: 3jx8WLBTA4o7Ytgp7aYJ5rkqcrsl0J+rRTYWA5viX9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:5a:88:c3:64:40:6f:2b:de:e6:46:6c:39:b2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Mar 25 20:01:20 2026 GMT Not After : Mar 26 20:01:20 2026 GMT Subject: CN=9a7f1cd220fff9422867033358a4fd22dc338baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:8e:ef:ff:a2:ae:44:a0:6f:bd:a6:d4:01: 45:b6:77:7a:3f:7c:51:69:78:26:36:8d:22:b2:8c: f2:a6:65:00:99:4a:b8:79:a5:9d:00:98:f3:cb:c7: 78:b0:75:37:71:f3:0e:b2:27:6b:d9:01:0b:9a:2a: 4b:d8:18:15:b5:5c:47:9e:2e:32:58:f2:78:6e:eb: 5a:a0:49:c7:07:34:df:4a:eb:9e:5c:57:59:51:79: 29:16:8a:01:6f:b8:57:51:19:e4:b5:65:d5:28:9a: 65:9f:5a:2d:3e:00:45:1d:49:8f:1b:64:2d:3f:be: 3f:2f:a1:ff:c1:73:95:6c:4f:2a:40:5d:fb:b0:81: 6c:b2:f4:06:47:98:2f:de:b9:f0:c0:85:57:50:a8: aa:0f:3c:a1:c3:0d:4d:45:6b:50:29:d6:62:cf:fe: f4:dc:fa:37:dc:be:bc:13:84:06:4f:dc:69:c9:8a: 60:33:d8:c0:b1:16:55:d0:9a:67:de:9a:c6:1f:53: 68:8c:17:8f:13:38:12:87:ec:05:ba:23:0d:76:a7: b8:f5:7b:22:bf:53:f0:a7:8c:24:03:b2:0c:44:82: 04:77:32:31:be:51:fa:fc:eb:d9:49:3b:8b:05:06: 33:94:17:99:eb:f8:db:29:64:f3:73:1a:77:d8:cf: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:1C:D2:20:FF:F9:42:28:67:03:33:58:A4:FD:22:DC:33:8B:AF X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bd:e3:cb:c2:ed:79:15:ba:bc:4f:5f:eb:54:b6:ea:f1:8f: 8f:da:5b:2f:ef:69:d3:5b:dc:d2:86:db:47:07:a4:73:dd:1a: d7:83:b1:5a:71:a0:f3:0c:96:1d:76:67:c9:81:77:a4:bf:34: 42:6a:a9:bb:46:51:82:99:5f:05:e8:d1:76:d9:3e:9f:37:47: 6b:3f:20:19:21:fc:1f:26:cf:83:0e:48:97:6c:aa:8b:8e:9e: 33:c2:42:71:b3:e1:e2:14:55:ea:55:3c:d4:ed:9f:60:0c:1a: d5:a3:5c:ad:43:33:b5:25:bb:82:69:d5:4a:ee:9b:3e:ee:23: d3:50:c4:9d:38:6f:84:1e:6c:f1:c9:cb:f4:25:8c:cf:d2:c5: cc:d7:9a:7d:87:99:93:80:34:fe:cc:3a:57:7e:df:50:e6:4a: 9a:b1:6f:4b:3e:b6:72:ec:77:cf:37:cf:2c:ee:d5:4f:6e:74: f2:8a:9e:7d:a5:9e:99:85:bf:ff:a5:5d:96:e8:4b:f6:2a:b9: a6:b0:90:12:75:96:43:f1:09:f4:c0:70:a4:97:39:af:53:66: bc:69:dc:97:1c:d6:45:8d:7e:fb:4b:9d:bc:00:97:9a:f8:7a: ad:1d:7f:28:cd:a3:96:c3:85:e2:02:cb:4f:30:7b:bd:65:95: be:bf:8c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mllqIw2RAbyve5kZsObKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMzI1MjAwMTIwWhcNMjYwMzI2MjAwMTIwWjAzMTEwLwYDVQQD Eyg5YTdmMWNkMjIwZmZmOTQyMjg2NzAzMzM1OGE0ZmQyMmRjMzM4YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7+O7/+irkSgb72m1AFFtnd6P3xR aXgmNo0isozypmUAmUq4eaWdAJjzy8d4sHU3cfMOsidr2QELmipL2BgVtVxHni4y WPJ4butaoEnHBzTfSuueXFdZUXkpFooBb7hXURnktWXVKJpln1otPgBFHUmPG2Qt P74/L6H/wXOVbE8qQF37sIFssvQGR5gv3rnwwIVXUKiqDzyhww1NRWtQKdZiz/70 3Po33L68E4QGT9xpyYpgM9jAsRZV0Jpn3prGH1NojBePEzgSh+wFuiMNdqe49Xsi v1Pwp4wkA7IMRIIEdzIxvlH6/OvZSTuLBQYzlBeZ6/jbKWTzcxp32M8hPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp/HNIg//lCKGcDM1ik/SLcM4uvMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb3jy8Lt eRW6vE9f61S26vGPj9pbL+9p01vc0obbRwekc90a14OxWnGg8wyWHXZnyYF3pL80 Qmqpu0ZRgplfBejRdtk+nzdHaz8gGSH8HybPgw5Il2yqi46eM8JCcbPh4hRV6lU8 1O2fYAwa1aNcrUMztSW7gmnVSu6bPu4j01DEnThvhB5s8cnL9CWMz9LFzNeafYeZ k4A0/sw6V37fUOZKmrFvSz62cux3zzfPLO7VT2508oqefaWemYW//6VdluhL9iq5 prCQEnWWQ/EJ9MBwpJc5r1NmvGnclxzWRY1++0udvACXmvh6rR1/KM2jlsOF4gLL TzB7vWWVvr+M9g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:06:02 2026 by rpki-client