$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: UbkbbOwsCu7ccYdfyovDpKe5u9b+KmzcMV8Rct5wu+Q= Subject key identifier: E0:58:CA:01:42:BA:91:61:EF:C1:C1:63:6C:A7:4B:A9:4C:1F:FD:22 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019D284D3B263B729943F80C721B6533D4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0BEA Signing time: Thu 26 Mar 2026 04:00:43 +0000 Manifest this update: Thu 26 Mar 2026 04:00:43 +0000 Manifest next update: Fri 27 Mar 2026 04:00:43 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: 1-vAv7boKnKFGqUtej2dbY5hC7Hs.roa (hash: ywVBqxZJbaC/gTJw5HcGVqUqNC/LAhl2yA0LoFiUvhc=) 4: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: rHPHXnd2788+gWDGLKwhd8nN1SeXCTkzOID2GCYlyR0=) 5: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: g4wrIHIGlRmBjCBIOZWynLiU_RQ.roa (hash: crp+OmNL+gqdA9fGFNYDxasudDTsK6CYTas0oygF0Vs=) 9: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:3b:26:3b:72:99:43:f8:0c:72:1b:65:33:d4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Mar 26 04:00:43 2026 GMT Not After : Mar 27 04:00:43 2026 GMT Subject: CN=e058ca0142ba9161efc1c1636ca74ba94c1ffd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:87:ba:49:a7:3f:41:11:ac:0f:80:a5:13: c9:bf:62:e4:d6:c8:1e:06:82:d6:b9:78:f8:84:fd: 82:af:32:8e:14:51:71:b9:15:46:f1:31:13:39:9a: f7:61:27:55:dc:4d:31:f4:ac:25:db:15:74:3b:9f: 6a:7f:39:c4:60:53:42:e1:55:f0:ed:63:15:4c:af: 79:47:8c:bf:91:24:aa:3b:e2:87:5f:ee:68:a2:75: b2:e4:52:c4:c3:65:35:4d:dd:fd:8b:c6:e8:28:38: c3:6a:ec:4a:bf:d7:a9:5e:4a:3e:fe:84:e4:d6:ca: e5:64:36:0d:e9:6f:3b:bf:59:2f:f0:3d:13:95:fa: fb:aa:20:43:45:0a:f4:87:c6:1a:55:46:6d:b9:92: 50:dd:af:6d:5b:ac:fb:f7:d4:f0:6a:7b:cf:a1:f0: 81:e6:cc:da:ea:f7:74:5c:23:f2:b6:79:7f:8c:f3: 85:b1:fc:0c:c4:ba:f8:c8:35:9a:92:03:e0:88:c8: b9:02:88:57:2b:0c:a3:df:00:5f:5f:9f:28:3d:17: 97:d3:1c:5e:bf:3c:2e:86:5a:d4:01:28:a7:0a:7e: 59:ed:3e:a0:78:4d:c3:e5:d4:36:00:62:fe:c1:76: 93:f0:46:2f:8d:e3:6a:0b:28:7d:af:7e:45:fe:84: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:58:CA:01:42:BA:91:61:EF:C1:C1:63:6C:A7:4B:A9:4C:1F:FD:22 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:21:8a:a8:a5:c4:db:a3:42:10:b4:5d:c4:ff:5d:1e:e5:fe: 92:0c:f3:f8:7a:0e:61:7e:ba:e1:dd:70:30:01:14:31:2b:af: fb:e9:4b:c1:20:c1:9e:b7:bc:ed:e8:35:23:2d:84:c0:fc:9d: f2:5c:c1:19:a0:00:ba:77:99:bc:c0:a7:fc:c3:e5:7f:b8:49: 09:6c:51:40:71:cf:00:22:f5:a2:c5:fd:79:d5:b2:ab:d8:eb: 3e:8f:55:a3:64:22:de:cd:d6:88:fe:ed:06:23:32:95:67:05: 1e:c9:ba:88:d3:23:9c:a8:4d:dd:34:0f:c1:68:27:f1:54:33: 96:e2:9a:02:75:f8:5d:75:b0:56:d1:e1:d1:7f:f5:78:b1:52: c6:c1:df:11:cd:b1:0d:56:ab:29:97:bc:1f:ba:ef:07:4d:f3: 73:ca:0b:82:56:59:46:2e:b3:7e:10:f8:63:72:d8:01:9a:e8: 9e:c8:f2:c4:b6:6a:43:d9:41:7c:6b:0a:55:ff:26:cd:fd:0f: ef:ad:3c:79:65:b5:84:28:23:c3:2b:fa:b9:1a:5b:10:27:1f: c4:3a:4b:0c:04:ff:38:92:d4:7b:65:50:6c:95:2c:5a:3c:58: 42:9d:aa:e9:82:39:3b:f7:18:b6:18:c9:b0:c9:6f:5d:c2:64: 1a:b6:19:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTTsmO3KZQ/gMchtlM9SoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMzI2MDQwMDQzWhcNMjYwMzI3MDQwMDQzWjAzMTEwLwYDVQQD EyhlMDU4Y2EwMTQyYmE5MTYxZWZjMWMxNjM2Y2E3NGJhOTRjMWZmZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEqHukmnP0ERrA+ApRPJv2Lk1sge BoLWuXj4hP2CrzKOFFFxuRVG8TETOZr3YSdV3E0x9Kwl2xV0O59qfznEYFNC4VXw 7WMVTK95R4y/kSSqO+KHX+5oonWy5FLEw2U1Td39i8boKDjDauxKv9epXko+/oTk 1srlZDYN6W87v1kv8D0Tlfr7qiBDRQr0h8YaVUZtuZJQ3a9tW6z799TwanvPofCB 5sza6vd0XCPytnl/jPOFsfwMxLr4yDWakgPgiMi5AohXKwyj3wBfX58oPReX0xxe vzwuhlrUASinCn5Z7T6geE3D5dQ2AGL+wXaT8EYvjeNqCyh9r35F/oR3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBYygFCupFh78HBY2ynS6lMH/0iMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSGKqKXE 26NCELRdxP9dHuX+kgzz+HoOYX664d1wMAEUMSuv++lLwSDBnre87eg1Iy2EwPyd 8lzBGaAAuneZvMCn/MPlf7hJCWxRQHHPACL1osX9edWyq9jrPo9Vo2Qi3s3WiP7t BiMylWcFHsm6iNMjnKhN3TQPwWgn8VQzluKaAnX4XXWwVtHh0X/1eLFSxsHfEc2x DVarKZe8H7rvB03zc8oLglZZRi6zfhD4Y3LYAZronsjyxLZqQ9lBfGsKVf8mzf0P 7608eWW1hCgjwyv6uRpbECcfxDpLDAT/OJLUe2VQbJUsWjxYQp2q6YI5O/cYthjJ sMlvXcJkGrYZ1A== -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:03 2026 by rpki-client