$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: AvafC2gnscXEIZz2UhdZ/I3wM1YaBUWp5Z62JbxUOEo= Subject key identifier: A4:20:5A:EF:6C:74:15:B5:A0:E8:C8:C8:7B:33:B4:B7:6D:CF:B7:FE Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019D2A72AECBBE8009FA2653D25A0B1892A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0EAC Signing time: Thu 26 Mar 2026 14:00:52 +0000 Manifest this update: Thu 26 Mar 2026 14:00:52 +0000 Manifest next update: Fri 27 Mar 2026 14:00:52 +0000 Files and hashes: 1: 83OVzlvIqdDKmb_5wBRC0WcFjfM.roa (hash: 8PFHggPnaezbnMW4+XspuMTvGK1XDvaIsNpmC/tZiA8=) 2: 8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa (hash: pt73BuJ/y3ShDrV/pgMGCwb8k6XcsAIy36ogWlsMzYQ=) 3: 93xRwXpEpvdfu9D_C-KrLh1b6As.roa (hash: leXeXBLmLha3JNSqzQ4BFegXrFN7Eijpd8KQkk0NAh4=) 4: MoLMeFuKRB5fSqCUEGIMd9NqbII.roa (hash: 2nEk1yywEjq90iYPNBoF+GySwSGBEmj1Y+cZziwwoak=) 5: N7KzbnSCtBZxo6leDNHJYf_fUpw.roa (hash: /UrnKy1zrMq95TUGKkiYPqqZU6gx6ujjcxvogPKd0Oo=) 6: P_6IShMFNgR5rYiKUd5B4hkOq_g.roa (hash: UoRcEGme82B9sqi+ETxLhQLp8oMIQLyedB9QtBQNKpY=) 7: RPo8eB7TZwH-qoRrhBhooLWyEQ8.roa (hash: UPu1koY4JF1LcA8p6+irpfb83+3cPePZ79AIb+7ynxA=) 8: c39XLxbuf04BBQGWyZ8HrunasNs.roa (hash: qIVoFOvsadu807fb8uoOZyhJ816nDFPiWTVq0YiWMP4=) 9: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: WAvoSWhJuEvghO1OqMesLh/KI3+cxj8bB5yXCpx54tM=) 10: kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa (hash: Euiqd1yuKucYUcEoHqhT7bG61J5J4k6BCCOLw+qgcsQ=) 11: pBk0yt_6vuxeGY1jU4yJ8-yRUFM.roa (hash: fe08iune66Qa8TNGXx66Qrxz/FmbKuSxTs3zQ3rIYZQ=) 12: qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa (hash: rrRJdISE3OX5lQS17cb4m8EoKPH8zP9CsSTb1fh6uuA=) 13: xjNLjU3b2WsIHiu-UnAiZx4zW0A.roa (hash: 3AhW2nrmM5OnTh+BBjpHS3tXRibur6Y4nLYhWncigUQ=) 14: zEBs86zGS_SSxBEkDz6-kuaSJLU.roa (hash: +izB1O36HKhSNVBtwLzkamZR78LVdjBtAu54YXie8sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:72:ae:cb:be:80:09:fa:26:53:d2:5a:0b:18:92:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Mar 26 14:00:52 2026 GMT Not After : Mar 27 14:00:52 2026 GMT Subject: CN=a4205aef6c7415b5a0e8c8c87b33b4b76dcfb7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:5e:83:5b:99:58:77:b2:c3:42:71:38:5c: 6a:af:58:c5:c2:9a:0b:9c:3b:09:2f:76:82:c0:2e: a6:ff:b8:51:86:d5:fa:63:c3:a7:bc:c7:71:ea:e8: d1:d1:0f:ee:26:90:06:8d:94:d6:0e:ed:68:58:eb: 3a:88:dc:d7:80:8f:f4:aa:3f:75:56:52:7a:c7:44: 34:c3:36:a9:b1:cd:23:64:be:87:24:f2:77:78:0c: 54:93:46:96:5d:bf:d7:89:b4:d5:9d:6c:57:e4:13: 12:a8:7f:28:f1:e0:3c:10:af:bc:fe:be:a6:d4:66: 9d:d1:90:77:ad:a6:ae:e2:b7:84:81:d0:ab:a2:a7: a3:c5:96:7f:79:2c:ef:e6:8c:a8:26:80:eb:72:46: bd:f6:ca:cc:99:f4:d8:66:43:69:6b:95:4d:a6:08: 8c:47:65:f1:aa:d6:35:0c:ae:b5:4c:43:e0:97:e0: 92:64:5a:0a:ff:73:48:2d:9a:16:60:e2:b9:a4:8d: 75:07:5b:6a:e4:6f:af:4a:fd:94:1e:1b:a6:b7:f3: 6d:32:46:5c:e0:89:46:9d:1a:c5:a9:28:d9:ef:b6: b1:ac:5b:c2:83:98:df:5e:b7:3e:82:3d:09:b0:0b: ae:ce:d9:bb:d5:2f:61:9e:71:a8:09:47:55:de:a4: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:5A:EF:6C:74:15:B5:A0:E8:C8:C8:7B:33:B4:B7:6D:CF:B7:FE X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:4d:ab:a3:1a:4c:c9:ce:ff:59:7a:53:b8:ab:ff:fb:86:6e: 63:85:c2:1f:2b:3e:00:8f:7c:ad:41:bb:2d:d3:59:b4:6f:a9: f4:7f:90:b0:2a:5c:4f:67:68:63:d7:56:e8:4d:b7:76:e6:42: a9:ca:57:c0:f9:51:24:78:58:b0:96:df:1f:ea:1f:00:45:26: ab:b0:34:4f:cb:0c:50:11:14:c9:90:6c:33:47:a0:db:ad:28: ed:cf:c8:a2:35:a7:20:9d:a9:fb:f0:ed:42:52:ec:e4:6b:e4: 7e:f4:82:a3:53:2d:a1:16:86:3b:76:6d:4d:ce:93:fa:47:bd: 02:6d:da:fc:47:86:a2:2b:4e:10:05:3a:2f:50:49:d8:cb:e2: 87:a6:4e:df:43:57:df:78:fa:68:a2:c1:bd:03:7f:92:68:0f: bc:be:c0:db:6e:bd:87:0d:2c:74:55:87:43:9e:e0:fe:e7:04: fa:3e:ef:42:c3:5c:d2:48:ff:bf:83:5c:fe:31:76:b1:0a:d5: a6:6a:e9:27:e6:d3:21:6e:4f:bc:dc:f3:79:e2:9e:30:62:4c: 92:16:a2:64:38:1e:a9:9d:3f:e9:23:59:79:ee:e1:8c:06:93: 5c:bd:7f:85:8a:a5:75:1d:00:fa:92:e5:12:62:45:b3:25:d9: ea:e3:8f:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qcq7LvoAJ+iZT0loLGJKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjYwMzI2MTQwMDUyWhcNMjYwMzI3MTQwMDUyWjAzMTEwLwYDVQQD EyhhNDIwNWFlZjZjNzQxNWI1YTBlOGM4Yzg3YjMzYjRiNzZkY2ZiN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM9eg1uZWHeyw0JxOFxqr1jFwpoL nDsJL3aCwC6m/7hRhtX6Y8OnvMdx6ujR0Q/uJpAGjZTWDu1oWOs6iNzXgI/0qj91 VlJ6x0Q0wzapsc0jZL6HJPJ3eAxUk0aWXb/XibTVnWxX5BMSqH8o8eA8EK+8/r6m 1Gad0ZB3raau4reEgdCroqejxZZ/eSzv5oyoJoDrcka99srMmfTYZkNpa5VNpgiM R2XxqtY1DK61TEPgl+CSZFoK/3NILZoWYOK5pI11B1tq5G+vSv2UHhumt/NtMkZc 4IlGnRrFqSjZ77axrFvCg5jfXrc+gj0JsAuuztm71S9hnnGoCUdV3qQfEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQgWu9sdBW1oOjIyHsztLdtz7f+MB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1U2roxpM yc7/WXpTuKv/+4ZuY4XCHys+AI98rUG7LdNZtG+p9H+QsCpcT2doY9dW6E23duZC qcpXwPlRJHhYsJbfH+ofAEUmq7A0T8sMUBEUyZBsM0eg260o7c/IojWnIJ2p+/Dt QlLs5GvkfvSCo1MtoRaGO3ZtTc6T+ke9Am3a/EeGoitOEAU6L1BJ2Mvih6ZO30NX 33j6aKLBvQN/kmgPvL7A2269hw0sdFWHQ57g/ucE+j7vQsNc0kj/v4Nc/jF2sQrV pmrpJ+bTIW5PvNzzeeKeMGJMkhaiZDgeqZ0/6SNZee7hjAaTXL1/hYqldR0A+pLl EmJFsyXZ6uOPAA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:35 2026 by rpki-client