$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json) Hash identifier: hiqaWAf6H+IgFOJuVXXbtwLKNTNWjKFx3PyeBeusnOs= Subject key identifier: D9:AD:F5:76:06:86:10:D9:0C:84:50:C3:E1:AE:6B:0A:5F:53:F2:9B Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019D265F1FB56BAF57D357C63DC3B7B18EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft Manifest number: 18AA Signing time: Wed 25 Mar 2026 19:01:01 +0000 Manifest this update: Wed 25 Mar 2026 19:01:01 +0000 Manifest next update: Thu 26 Mar 2026 19:01:01 +0000 Files and hashes: 1: 1-ezGqblYU88DYGupfRZt0z0P-c.roa (hash: 3e97e1j/lafVJd2urvOUlhx4dA8czMnXPXhILFMWj/s=) 2: 1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa (hash: wdi4t6P4z0mO/iHG5igvsESlCtes6srIYLzkoTbEPEk=) 3: 35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa (hash: cO/Z6F7txV6TpV/V5lfE+W3QYDMUy+GuCUzsuf9Drjg=) 4: 3qqdfy_UnFdVQlDpIxR1zw9DOmI.roa (hash: JXo5pmi2bOioFRZlNCJNAYMl2NAvXPqzIcF0g4BSru0=) 5: 4r8bzeCEedMFCpigvyOV9kliR68.roa (hash: ddYl3tkMrF/CdXtaZ7jFo8cDMwCFUJxUNqXh2ZgMOsw=) 6: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: ONZmjFexyxUfFSwrnBpPSWW5KcTTFozEAoIcYKl9KA8=) 7: 6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa (hash: ES2CFvY9/aMMP3GdeYDhO1AlVTq0AbKmFVcT86x0bsU=) 8: AP29ZUhTpSq5v5F29RLmfRluGGg.roa (hash: Srhc1Pf/7fMSsd5MEwDg1pq9CSvUw5bMKTeun0cG0k0=) 9: BR6ncsWkhB2qv0oqp59JLRJ22t8.roa (hash: Sr6aWOFkIZvhFz7mwZ8Ee2XNqfnohzUvlNMsgOtw6Iw=) 10: RC_GkxlNqDGelGLhmGSuHpzh8YY.roa (hash: zmoFdcBbJpm89sGvucYAsXD3aYu3UDBB8FNuuO1sZ5s=) 11: dJeU2d3NWjx1lsl1DJGshHnRCGI.roa (hash: Ej+gk8v3uPhQQghNflw4x1l6EEeEieQHfKZUGqRTvJ8=) 12: fed42clRt5kmDi1C2nfhRZ3rDno.roa (hash: S/WW2Jm1todEDyUBwm1EX3hFhesOufSJcoOUAWdDFXU=) 13: oaD-F61J8uFaQOVs_EMDy2GWPFM.roa (hash: oRDRlDLCwINYWsifpUB1J8rOuM3NUJ7WcDPWCCey5hM=) 14: wInMghm11FcLBqJT2EV9FM0ZiVY.roa (hash: UusTkTJUi8H8e/4BJF3uND4xQVZ//M68retdZEwQKm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:1f:b5:6b:af:57:d3:57:c6:3d:c3:b7:b1:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Mar 25 19:01:01 2026 GMT Not After : Mar 26 19:01:01 2026 GMT Subject: CN=d9adf576068610d90c8450c3e1ae6b0a5f53f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:cd:d5:e4:ac:d9:ba:76:e0:83:b4:9f:cc: 37:47:82:bf:31:ed:48:86:27:83:e7:ca:0e:6f:17: 3f:16:f5:cc:c3:c7:b1:2e:38:f5:b8:34:41:d1:fc: 2b:58:6c:a1:b4:0c:c2:b9:b4:87:a4:b1:5e:78:b4: d7:0b:bc:03:cc:59:3b:80:17:3c:ac:65:ab:48:3e: 99:9f:e3:c2:cb:a8:d6:16:04:73:25:d0:67:1e:cc: e1:b7:64:f3:10:4b:5e:e3:70:09:18:e8:04:dc:4d: 89:e3:45:8e:e7:31:60:66:9f:e1:2b:31:00:69:59: 89:82:05:73:fb:33:96:99:83:2e:ab:a5:e8:8a:23: cb:1d:aa:e3:a6:08:41:35:f5:7e:0c:81:80:14:eb: 73:8b:d2:38:69:95:4a:07:8c:3b:62:e9:38:f9:5e: 04:dc:84:c3:16:9d:11:43:62:10:f8:77:69:b8:a9: ba:ca:7f:ce:ce:4c:3c:95:c3:b8:93:45:25:b8:c5: dd:15:04:10:7b:46:26:d6:e6:a3:8d:13:00:3f:be: 18:7b:77:48:76:51:d2:79:81:35:83:ae:00:5e:18: 41:53:f4:c3:7d:a6:5b:ba:ab:2c:b0:e5:99:0f:d0: 13:64:a8:e0:20:6f:ae:a5:f6:7f:95:40:1e:25:36: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:F5:76:06:86:10:D9:0C:84:50:C3:E1:AE:6B:0A:5F:53:F2:9B X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:ae:8e:fc:69:04:73:a7:69:2c:ec:07:49:3c:05:74:48: c5:49:91:21:e6:e2:4b:7a:96:a2:b0:13:12:da:e4:23:ab:7e: 4c:7e:c4:64:ed:c7:32:48:24:4a:e3:35:96:7a:31:54:cb:d5: 68:f4:8c:4a:b8:b1:d0:ec:e6:b0:9f:2d:c4:ec:4b:4d:20:40: 33:b7:d5:58:79:73:e7:05:af:65:b4:cf:cd:f2:0d:06:53:f3: 84:45:b8:3a:09:dc:ee:e0:2d:b1:11:fc:c0:b5:1a:b5:b9:e7: a5:60:bf:fb:c8:8f:35:6a:d4:39:7b:25:f3:e8:7b:f1:75:c7: 51:32:2c:b4:6a:88:0e:cb:14:ed:06:43:bb:af:f3:47:db:12: 35:37:5e:09:5b:8a:71:34:f1:bb:74:35:75:0b:63:7a:5b:77: 9b:e2:bd:66:11:86:0f:1a:e7:4a:9d:76:af:65:ba:44:f5:e9: 8e:08:91:e9:47:2a:5d:01:a6:e9:fc:dc:59:d3:89:03:4b:8d: ff:6d:06:7f:9c:78:88:90:23:39:74:17:f2:23:6f:46:9f:51: 36:d8:1c:99:c9:7d:af:94:e5:72:a0:6b:d9:5b:4d:37:3f:a5: ee:97:be:06:5c:0f:7d:43:d7:6f:0d:78:4d:e7:1f:be:d6:fc: 27:fd:bf:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mXx+1a69X01fGPcO3sY6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwMzI1MTkwMTAxWhcNMjYwMzI2MTkwMTAxWjAzMTEwLwYDVQQD EyhkOWFkZjU3NjA2ODYxMGQ5MGM4NDUwYzNlMWFlNmIwYTVmNTNmMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyovN1eSs2bp24IO0n8w3R4K/Me1I hieD58oObxc/FvXMw8exLjj1uDRB0fwrWGyhtAzCubSHpLFeeLTXC7wDzFk7gBc8 rGWrSD6Zn+PCy6jWFgRzJdBnHszht2TzEEte43AJGOgE3E2J40WO5zFgZp/hKzEA aVmJggVz+zOWmYMuq6XoiiPLHarjpghBNfV+DIGAFOtzi9I4aZVKB4w7Yuk4+V4E 3ITDFp0RQ2IQ+HdpuKm6yn/Ozkw8lcO4k0UluMXdFQQQe0Ym1uajjRMAP74Ye3dI dlHSeYE1g64AXhhBU/TDfaZbuqsssOWZD9ATZKjgIG+upfZ/lUAeJTYnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmt9XYGhhDZDIRQw+GuawpfU/KbMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2Oujvxp BHOnaSzsB0k8BXRIxUmRIebiS3qWorATEtrkI6t+TH7EZO3HMkgkSuM1lnoxVMvV aPSMSrix0OzmsJ8txOxLTSBAM7fVWHlz5wWvZbTPzfINBlPzhEW4Ognc7uAtsRH8 wLUatbnnpWC/+8iPNWrUOXsl8+h78XXHUTIstGqIDssU7QZDu6/zR9sSNTdeCVuK cTTxu3Q1dQtjelt3m+K9ZhGGDxrnSp12r2W6RPXpjgiR6UcqXQGm6fzcWdOJA0uN /20Gf5x4iJAjOXQX8iNvRp9RNtgcmcl9r5TlcqBr2VtNNz+l7pe+BlwPfUPXbw14 Tecfvtb8J/2/Ug== -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:31 2026 by rpki-client