$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: 0vJrIAWJZ2qPYrMI/A2LRe72aq3ys6eHFZIqB9z1Cv4= Subject key identifier: 52:8F:E6:75:FE:9C:04:7F:9E:9C:A2:C8:3B:45:7E:3D:1E:5E:6F:71 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019D27044DB889521B9F8B61238336982ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1892 Signing time: Wed 25 Mar 2026 22:01:26 +0000 Manifest this update: Wed 25 Mar 2026 22:01:26 +0000 Manifest next update: Thu 26 Mar 2026 22:01:26 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 8: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 9: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 10: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 11: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 12: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: 31YiMUeh5OUDQ4rQ4AObtUDojjHD7irMsJNTnaFjaL8=) 13: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 14: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 15: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 16: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 17: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 18: p1SWpdWXGLbEBPrhZY5QfK82wIw.roa (hash: VfVL2JfcEVzWDqasnouu2XzXkqrAe9JpcBaMStaIF8Y=) 19: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:4d:b8:89:52:1b:9f:8b:61:23:83:36:98:2a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Mar 25 22:01:26 2026 GMT Not After : Mar 26 22:01:26 2026 GMT Subject: CN=528fe675fe9c047f9e9ca2c83b457e3d1e5e6f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:41:bc:33:63:8d:e4:4c:43:fb:03:56:c5: 4f:73:e1:d1:b8:a0:da:f8:dd:db:96:70:9b:90:13: 17:29:46:98:ff:24:33:d1:e9:42:89:f9:12:83:0a: 4b:81:d7:d7:44:c1:7c:95:e7:6d:ef:87:5f:fe:f9: 75:ba:b7:1a:0a:d0:3e:fa:bb:21:21:3b:26:75:0b: b8:c6:9b:10:51:88:0a:8a:6e:9a:d4:72:14:b0:05: 07:b3:02:5a:d0:d5:6a:81:ee:53:48:ea:9f:b9:21: 9d:ef:08:45:0b:18:9f:90:67:e1:bd:54:11:fd:a5: d1:c5:66:b5:13:0e:1e:c1:9b:83:45:d5:ea:02:3c: a4:19:66:14:24:89:48:e7:54:8f:83:93:25:cd:ff: f7:f6:84:d0:92:3c:03:45:bb:c2:bd:52:88:1f:9f: de:4f:19:b4:ad:ba:f9:e8:dc:b6:69:5a:56:dc:cf: c6:26:49:c7:90:38:b8:cc:f0:58:1b:1a:e4:dc:92: b2:85:1f:9a:5d:97:1f:af:9d:f8:76:c1:b0:ff:99: d6:4c:58:02:4e:c2:2b:ff:d9:57:be:f4:51:59:fb: 0b:a0:89:81:7d:3a:af:47:74:71:f5:de:08:a8:da: f7:68:db:eb:f6:cd:a9:ae:50:a4:03:be:e4:a7:68: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:E6:75:FE:9C:04:7F:9E:9C:A2:C8:3B:45:7E:3D:1E:5E:6F:71 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:15:fb:da:50:b5:97:03:e7:85:91:a5:a5:d2:e1:84:57:78: da:6b:e9:11:79:bd:51:fd:87:4c:ba:06:93:7c:4f:c2:f0:04: 8f:d8:63:68:e7:0b:bd:cc:18:63:de:cd:64:e3:61:22:e9:32: 7e:37:d5:fb:db:e4:c1:29:e3:b8:e3:d2:58:a9:8d:17:4e:95: 7c:44:0b:f9:a1:f4:ac:71:88:e0:cf:d9:d2:e6:f5:58:b5:df: b6:7f:09:50:2f:e3:7a:72:30:8a:cf:88:fe:04:52:29:62:1a: 97:78:88:dd:64:92:01:0a:00:ee:4c:6d:d8:40:98:7f:3c:a3: 0c:b5:e9:5d:a0:6a:dc:ba:c4:78:8a:14:c1:44:8e:ef:24:c2: da:6d:a8:9c:68:60:fa:81:7f:fa:ee:ba:7b:40:27:0e:77:52: e7:39:93:9a:95:0d:c0:2a:ce:a0:a6:f9:a2:36:41:21:07:53: 62:af:a1:e2:e3:9e:5d:02:67:2f:e6:fa:20:51:46:7b:22:93: 4c:75:6e:7e:81:99:57:a0:47:2e:ef:1f:58:cb:cf:29:29:99: b2:16:0c:54:ef:70:50:79:67:48:14:ad:6f:78:fb:ea:c3:52: b0:cb:e0:a7:9d:1d:a1:1d:77:bd:b6:36:52:45:f5:f0:be:3d: be:df:63:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBE24iVIbn4thI4M2mCrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMzI1MjIwMTI2WhcNMjYwMzI2MjIwMTI2WjAzMTEwLwYDVQQD Eyg1MjhmZTY3NWZlOWMwNDdmOWU5Y2EyYzgzYjQ1N2UzZDFlNWU2ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5BvDNjjeRMQ/sDVsVPc+HRuKDa +N3blnCbkBMXKUaY/yQz0elCifkSgwpLgdfXRMF8ledt74df/vl1urcaCtA++rsh ITsmdQu4xpsQUYgKim6a1HIUsAUHswJa0NVqge5TSOqfuSGd7whFCxifkGfhvVQR /aXRxWa1Ew4ewZuDRdXqAjykGWYUJIlI51SPg5Mlzf/39oTQkjwDRbvCvVKIH5/e Txm0rbr56Ny2aVpW3M/GJknHkDi4zPBYGxrk3JKyhR+aXZcfr534dsGw/5nWTFgC TsIr/9lXvvRRWfsLoImBfTqvR3Rx9d4IqNr3aNvr9s2prlCkA77kp2gsawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKP5nX+nAR/npyiyDtFfj0eXm9xMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxX72lC1 lwPnhZGlpdLhhFd42mvpEXm9Uf2HTLoGk3xPwvAEj9hjaOcLvcwYY97NZONhIuky fjfV+9vkwSnjuOPSWKmNF06VfEQL+aH0rHGI4M/Z0ub1WLXftn8JUC/jenIwis+I /gRSKWIal3iI3WSSAQoA7kxt2ECYfzyjDLXpXaBq3LrEeIoUwUSO7yTC2m2onGhg +oF/+u66e0AnDndS5zmTmpUNwCrOoKb5ojZBIQdTYq+h4uOeXQJnL+b6IFFGeyKT THVufoGZV6BHLu8fWMvPKSmZshYMVO9wUHlnSBStb3j76sNSsMvgp50doR13vbY2 UkX18L49vt9jHQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:51 2026 by rpki-client