$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: u5hHD4KznBgUnY1aVWwqnJrfpgA6K+cC9QQ0/zBiWYc= Subject key identifier: A5:92:AF:8B:52:87:C2:18:8D:B2:CB:25:61:53:2D:B7:F3:F8:A6:33 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019D26963EEED9AF690C2682F2823763856D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 1244 Signing time: Wed 25 Mar 2026 20:01:13 +0000 Manifest this update: Wed 25 Mar 2026 20:01:13 +0000 Manifest next update: Thu 26 Mar 2026 20:01:13 +0000 Files and hashes: 1: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=) 2: 92kon1ZbPqRU1ojElvwcbSZFCJg.roa (hash: JDix+gTyhf3eCiMPRUDwwuH51sP+i0fI6zPIxZOfd6g=) 3: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=) 4: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: A0rNlGyO1GkBIATTNRpCnXsa6PLhKw70QSBVxwqTLF0=) 5: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=) 6: Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa (hash: 0D64FRm+2vpUSJ11ctj2H0QGBlqAOwuUf57RFyWd8mI=) 7: CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa (hash: JDVFtyDyR/x/eL6c4P6MCJwlsUYUOK+LfbQasczNpvA=) 8: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=) 9: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=) 10: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=) 11: P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa (hash: WbzeNFSAMqkRYOfSuJZB8Gq+eo7K35ASCXWClSmDC1M=) 12: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=) 13: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=) 14: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=) 15: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:3e:ee:d9:af:69:0c:26:82:f2:82:37:63:85:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Mar 25 20:01:13 2026 GMT Not After : Mar 26 20:01:13 2026 GMT Subject: CN=a592af8b5287c2188db2cb2561532db7f3f8a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:9a:0f:f3:db:f8:86:b0:f4:77:43:ce:3c: 92:58:a0:b8:f2:28:b3:c0:83:ed:18:15:3f:4f:7a: eb:05:b1:79:14:60:c5:9d:e3:5d:13:ac:a8:e1:81: 19:dc:1a:6b:d9:79:84:f4:f8:44:bb:c1:5f:2e:20: f8:ab:55:71:96:8f:25:9c:a9:54:02:ae:13:16:b8: b1:ef:ba:97:ea:4e:cb:ea:c8:11:d1:34:29:15:4c: fe:05:3a:41:6e:1a:04:f8:c7:a4:af:ca:8a:f6:91: c0:87:7a:fb:74:b9:60:d0:71:9e:7b:f2:83:ed:02: f1:99:67:b2:5f:db:9b:07:3d:5d:52:87:a4:94:6e: 84:7a:97:5e:02:68:80:d3:1d:30:95:48:a3:d0:9d: ac:cb:5e:f0:90:dc:1a:1b:f8:54:72:b2:1b:59:4d: 22:b0:da:a3:ac:18:80:8b:9c:88:89:bd:d4:66:ae: 03:a0:a8:f3:fc:70:6c:52:e2:b6:6a:f2:bc:70:f5: df:eb:f2:95:17:c8:bb:71:97:c4:4f:1b:b3:bf:9f: cd:82:25:bd:77:86:6c:df:30:8f:ba:8f:97:23:42: 6a:57:06:11:83:90:98:31:5a:18:65:13:27:a9:d2: 3a:87:8a:e4:b1:ae:7c:16:de:d6:6d:a2:75:a1:ac: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:AF:8B:52:87:C2:18:8D:B2:CB:25:61:53:2D:B7:F3:F8:A6:33 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:22:fd:8a:cf:64:0d:13:d1:b8:f3:d0:5a:f9:a6:f7:40:96: 9e:48:6d:3a:21:e1:f1:4e:5b:56:de:5c:d8:64:99:ab:7f:e1: 19:42:6f:56:77:c1:64:f4:95:ac:08:c4:2e:03:cf:a4:5d:f5: c7:6a:b0:54:ab:e1:e7:f5:d5:26:75:14:61:1c:28:0e:f1:ac: a5:87:62:ba:d1:48:ab:5f:5a:ce:dc:14:a8:53:c5:3b:71:9c: b9:41:a1:2f:b3:f4:fe:4f:5c:dc:ec:34:4d:00:37:95:67:a1: a3:37:b6:ae:ec:58:ef:1a:54:eb:2a:b6:01:6f:c8:d4:02:f2: 4b:d3:76:24:ed:6d:cd:9b:19:ed:c5:16:9a:98:18:9c:f0:7f: fd:e4:87:07:ca:d4:7d:48:45:e0:4f:26:b3:aa:b3:76:8b:12: 7c:a5:00:37:50:d8:d9:ef:7b:a6:91:ce:90:a9:38:43:03:38: 09:3a:96:3e:2d:36:de:50:5b:ef:84:6e:7e:89:e5:a1:18:99: de:2f:f8:8e:79:41:7f:5a:09:47:c0:40:14:67:a0:7c:7a:4c: c2:6a:0d:11:b4:7d:a6:0b:54:26:32:79:24:21:7e:e9:16:ff: 7e:87:b5:af:fe:0e:80:2a:d5:28:da:32:e5:31:90:be:96:60: 5b:97:c4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlj7u2a9pDCaC8oI3Y4VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMzI1MjAwMTEzWhcNMjYwMzI2MjAwMTEzWjAzMTEwLwYDVQQD EyhhNTkyYWY4YjUyODdjMjE4OGRiMmNiMjU2MTUzMmRiN2YzZjhhNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46maD/Pb+Iaw9HdDzjySWKC48iiz wIPtGBU/T3rrBbF5FGDFneNdE6yo4YEZ3Bpr2XmE9PhEu8FfLiD4q1Vxlo8lnKlU Aq4TFrix77qX6k7L6sgR0TQpFUz+BTpBbhoE+Mekr8qK9pHAh3r7dLlg0HGee/KD 7QLxmWeyX9ubBz1dUoeklG6EepdeAmiA0x0wlUij0J2sy17wkNwaG/hUcrIbWU0i sNqjrBiAi5yIib3UZq4DoKjz/HBsUuK2avK8cPXf6/KVF8i7cZfETxuzv5/NgiW9 d4Zs3zCPuo+XI0JqVwYRg5CYMVoYZRMnqdI6h4rksa58Ft7WbaJ1oayl5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWSr4tSh8IYjbLLJWFTLbfz+KYzMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSL9is9k DRPRuPPQWvmm90CWnkhtOiHh8U5bVt5c2GSZq3/hGUJvVnfBZPSVrAjELgPPpF31 x2qwVKvh5/XVJnUUYRwoDvGspYdiutFIq19aztwUqFPFO3GcuUGhL7P0/k9c3Ow0 TQA3lWehoze2ruxY7xpU6yq2AW/I1ALyS9N2JO1tzZsZ7cUWmpgYnPB//eSHB8rU fUhF4E8ms6qzdosSfKUAN1DY2e97ppHOkKk4QwM4CTqWPi023lBb74RufonloRiZ 3i/4jnlBf1oJR8BAFGegfHpMwmoNEbR9pgtUJjJ5JCF+6Rb/foe1r/4OgCrVKNoy 5TGQvpZgW5fEsg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:14 2026 by rpki-client