$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: lmIEZzIZgWxZIDZ7mHQCJR3W1+s/9xHchWAnF5Yik9o= Subject key identifier: A0:23:28:84:87:E5:9A:5B:02:B6:AD:B7:D7:07:F3:A4:A4:81:A0:C3 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019D284E011FE260339555689C746B43AC7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 04:01:33 +0000 Manifest this update: Thu 26 Mar 2026 04:01:33 +0000 Manifest next update: Fri 27 Mar 2026 04:01:33 +0000 Files and hashes: 1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=) 2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: 9AaBv2kCgunyBMSQ7HyTIaf4tcX9VkATQkfPsL5VRnI=) 3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=) 4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=) 5: KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa (hash: I4wHLPw8A0l6Nh6OwevrOypXlF/JR2vemPdaafwkJEI=) 6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=) 7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=) 8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=) 9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=) 10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=) 11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4e:01:1f:e2:60:33:95:55:68:9c:74:6b:43:ac:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Mar 26 04:01:33 2026 GMT Not After : Mar 27 04:01:33 2026 GMT Subject: CN=a023288487e59a5b02b6adb7d707f3a4a481a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:cf:a2:3a:81:7f:fa:cf:81:02:be:5b:5d: 87:eb:20:a3:a3:90:48:ea:bd:3f:f0:b0:35:3d:d6: 9e:30:d3:7f:64:69:2b:56:24:79:65:4d:4f:38:c8: f6:4c:a2:2d:d8:46:1d:a4:7f:36:9c:f1:e7:cd:5b: db:39:36:34:8c:29:bc:6e:e6:9d:bb:e0:a0:29:47: 3e:48:80:d4:b5:42:e0:b2:51:04:fa:27:39:5e:02: ce:f3:58:05:79:ad:85:37:61:a0:f1:75:38:0a:74: 18:15:c2:16:40:da:2e:8b:22:4c:86:8e:97:52:eb: 66:6e:74:b6:3b:64:97:0f:99:fc:1b:af:11:17:cc: 07:84:03:3b:96:77:36:f1:7b:00:dc:e1:70:09:f8: d0:d8:46:86:b6:e5:fb:04:55:1e:ad:19:e5:ef:aa: 3f:6f:14:d2:a5:f8:74:ff:1c:09:c3:eb:ff:d2:cf: 76:9c:8f:10:36:67:5c:65:9d:87:12:b9:20:4a:57: e2:a4:fd:78:66:de:89:19:11:da:13:aa:25:19:82: 72:fb:af:a7:cb:bf:f6:05:1c:c4:e1:d2:b4:fe:18: 77:8e:64:a6:7a:8c:3f:08:68:3e:b0:ec:3f:94:8f: 83:37:b3:c0:67:cb:bf:57:18:c9:4e:f9:d9:c2:4e: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:28:84:87:E5:9A:5B:02:B6:AD:B7:D7:07:F3:A4:A4:81:A0:C3 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:16:d7:9e:ca:a2:ba:6b:52:c0:e7:14:a9:6c:16:41:9b:cd: 42:11:fb:79:5c:ef:0f:3d:62:60:f0:e7:29:24:a4:42:1a:ea: f2:d6:dc:6c:92:c7:6c:75:e0:56:62:78:47:a9:ef:69:1d:c0: 82:47:72:ba:83:83:e3:22:77:ff:1d:ae:98:97:85:2d:a9:c8: 5b:2a:06:92:a9:f2:6d:10:0f:2c:5a:5c:c1:a8:61:89:c9:fe: 59:80:78:2a:bf:e0:60:cf:b7:66:a1:c4:9a:a9:7a:cc:3e:bc: 93:96:0f:b0:68:9b:09:02:e9:d9:7f:00:ec:b3:b7:a9:98:7f: 4f:6a:17:1c:be:7b:82:b8:bd:fa:fa:f9:8b:11:47:29:f1:03: be:aa:b4:40:c6:ec:ba:55:6b:85:d3:c4:50:e0:a9:86:68:cb: 58:23:92:9c:8b:2b:55:9e:59:fc:0c:87:d5:b7:c7:22:4b:94: 12:8a:fe:11:73:7d:f9:14:07:fd:75:13:12:25:be:4b:f6:b0: 0a:f2:22:0e:a2:19:85:dc:5e:09:c6:2f:71:32:c3:b3:8f:43: 27:54:59:d0:aa:12:30:43:87:2e:5b:cb:33:ca:7b:7e:ab:49: 89:2b:cb:23:ad:43:c7:30:1e:53:4f:78:b3:4e:9c:4d:be:6e: 8a:25:86:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTgEf4mAzlVVonHRrQ6x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMzI2MDQwMTMzWhcNMjYwMzI3MDQwMTMzWjAzMTEwLwYDVQQD EyhhMDIzMjg4NDg3ZTU5YTViMDJiNmFkYjdkNzA3ZjNhNGE0ODFhMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHPojqBf/rPgQK+W12H6yCjo5BI 6r0/8LA1PdaeMNN/ZGkrViR5ZU1POMj2TKIt2EYdpH82nPHnzVvbOTY0jCm8buad u+CgKUc+SIDUtULgslEE+ic5XgLO81gFea2FN2Gg8XU4CnQYFcIWQNouiyJMho6X UutmbnS2O2SXD5n8G68RF8wHhAM7lnc28XsA3OFwCfjQ2EaGtuX7BFUerRnl76o/ bxTSpfh0/xwJw+v/0s92nI8QNmdcZZ2HErkgSlfipP14Zt6JGRHaE6olGYJy+6+n y7/2BRzE4dK0/hh3jmSmeow/CGg+sOw/lI+DN7PAZ8u/VxjJTvnZwk42ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAjKISH5ZpbAratt9cH86SkgaDDMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRbXnsqi umtSwOcUqWwWQZvNQhH7eVzvDz1iYPDnKSSkQhrq8tbcbJLHbHXgVmJ4R6nvaR3A gkdyuoOD4yJ3/x2umJeFLanIWyoGkqnybRAPLFpcwahhicn+WYB4Kr/gYM+3ZqHE mql6zD68k5YPsGibCQLp2X8A7LO3qZh/T2oXHL57gri9+vr5ixFHKfEDvqq0QMbs ulVrhdPEUOCphmjLWCOSnIsrVZ5Z/AyH1bfHIkuUEor+EXN9+RQH/XUTEiW+S/aw CvIiDqIZhdxeCcYvcTLDs49DJ1RZ0KoSMEOHLlvLM8p7fqtJiSvLI61DxzAeU094 s06cTb5uiiWGAw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:30 2026 by rpki-client