$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json) Hash identifier: CXKMwS/UXrla6aAddc0lM6G/l5crgtgAaeWff8ES7MA= Subject key identifier: 15:EC:91:9C:01:B3:79:EB:F1:82:E0:B8:1A:61:EF:33:B0:26:E1:BE Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 019D284E4F8A79F098B843250FAD46FCF82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft Manifest number: 159C Signing time: Thu 26 Mar 2026 04:01:53 +0000 Manifest this update: Thu 26 Mar 2026 04:01:53 +0000 Manifest next update: Fri 27 Mar 2026 04:01:53 +0000 Files and hashes: 1: 7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa (hash: TjqR9pBqeAaKXzawGJajC/5EzIOxqUpNkIWNRPKzQiY=) 2: 9_XCzJVQ0vHT8hA7DULO66uGe5o.roa (hash: cJQG6xW1gdrrjMHUKHp2S/TQBEdZhKtS4GkWHUfZeGc=) 3: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=) 4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=) 5: ay0VUntTWjhODm52u9TFTTH4EJw.roa (hash: 7gFOBHTqvfcaglUxfgHe1x48kCbMp0iTpGgti6zIr4k=) 6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: D5SpE+YeqC6wt6sWkI4ozk/WdcTwMP+TxiRI84leYHQ=) 7: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=) 8: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=) 9: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=) 10: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4e:4f:8a:79:f0:98:b8:43:25:0f:ad:46:fc:f8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Mar 26 04:01:53 2026 GMT Not After : Mar 27 04:01:53 2026 GMT Subject: CN=15ec919c01b379ebf182e0b81a61ef33b026e1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:31:6a:87:fe:e7:c4:49:a9:37:e7:ba:58: 99:9e:99:cd:84:85:ea:a6:dc:6d:3d:6c:c4:ef:84: 10:9d:ca:17:ee:8a:e8:0b:bc:54:9d:65:f8:1d:82: d9:59:81:b3:03:41:80:92:5c:90:9e:0e:d4:0a:fc: d0:8f:28:2d:e8:6f:de:b4:a6:a3:d2:fd:ac:57:b8: 97:6e:b1:3d:bd:68:3d:f3:40:db:d9:7c:3d:15:34: 34:fe:0b:62:6b:c2:fa:56:92:71:a3:a4:40:63:57: 53:3c:5d:68:64:ae:18:02:b4:b3:49:fb:1c:d9:5a: e9:65:97:30:e4:30:24:92:21:32:83:73:e8:5d:f3: 49:dd:9f:a2:bc:e4:66:da:15:ac:e5:5d:99:6d:90: 78:0e:71:a9:60:f7:5e:cc:af:1b:d6:16:7f:5a:d2: c2:d7:e2:57:e9:8f:ac:65:3a:42:e0:25:57:62:e1: 88:38:5b:2f:55:dd:fc:26:fa:08:2c:18:af:17:e1: 90:2e:23:41:49:b4:4a:9b:3b:84:b0:eb:8f:dd:4a: 63:b0:87:c6:2f:69:a3:00:04:89:02:1a:41:fd:c4: a2:ba:ad:ed:5a:76:55:d3:3c:04:f4:72:7c:e3:d6: d6:3c:bd:25:f4:e5:19:63:5c:90:29:4b:31:05:df: 9d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EC:91:9C:01:B3:79:EB:F1:82:E0:B8:1A:61:EF:33:B0:26:E1:BE X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d8:79:e1:58:80:ef:c7:36:4b:e3:03:2a:a1:9d:ae:8c:03: cf:51:27:9d:c7:e8:64:e4:05:01:3c:69:69:9c:59:4b:b8:49: 50:31:b2:77:91:d3:10:98:b6:0a:67:27:1c:77:55:9d:34:9b: e4:1b:3e:fb:e8:f3:3e:b4:7c:2e:c4:aa:3c:fc:1f:65:d8:f9: 12:9a:47:ab:0a:a7:7c:84:25:f1:3e:dd:9f:71:a3:d1:07:82: 84:ab:6b:6d:c5:3e:c8:c4:e8:f5:5d:0e:c1:67:21:35:bc:97: a2:b7:a0:6b:ce:f8:36:b8:c7:d8:70:22:93:c7:80:42:18:21: 7e:5d:4a:c5:a1:54:3a:31:20:63:6b:5d:8a:fd:de:b9:1d:1e: 18:15:73:51:da:82:e4:dc:bf:f0:c2:19:0c:c6:c9:01:3b:68: b4:c8:85:5a:96:98:6f:ab:8e:7b:c1:c0:15:63:36:ee:0e:8f: da:f0:15:c7:8e:eb:9d:f8:7d:bf:7e:ae:d7:06:7d:7b:36:85: 28:46:79:c2:d1:b8:ba:24:59:7f:6f:21:f6:ce:b9:90:b2:79: b2:71:bb:62:88:a7:2a:3b:5d:db:e4:c7:3a:17:64:8e:3f:cf: 93:ed:68:3d:e2:a9:05:b0:e1:ef:f4:ff:e3:b4:03:ed:20:59: 2c:ac:1f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTk+KefCYuEMlD61G/PgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwMzI2MDQwMTUzWhcNMjYwMzI3MDQwMTUzWjAzMTEwLwYDVQQD EygxNWVjOTE5YzAxYjM3OWViZjE4MmUwYjgxYTYxZWYzM2IwMjZlMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznwxaof+58RJqTfnuliZnpnNhIXq ptxtPWzE74QQncoX7oroC7xUnWX4HYLZWYGzA0GAklyQng7UCvzQjygt6G/etKaj 0v2sV7iXbrE9vWg980Db2Xw9FTQ0/gtia8L6VpJxo6RAY1dTPF1oZK4YArSzSfsc 2VrpZZcw5DAkkiEyg3PoXfNJ3Z+ivORm2hWs5V2ZbZB4DnGpYPdezK8b1hZ/WtLC 1+JX6Y+sZTpC4CVXYuGIOFsvVd38JvoILBivF+GQLiNBSbRKmzuEsOuP3UpjsIfG L2mjAASJAhpB/cSiuq3tWnZV0zwE9HJ849bWPL0l9OUZY1yQKUsxBd+dEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXskZwBs3nr8YLguBph7zOwJuG+MB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNh54ViA 78c2S+MDKqGdrowDz1EnncfoZOQFATxpaZxZS7hJUDGyd5HTEJi2CmcnHHdVnTSb 5Bs+++jzPrR8LsSqPPwfZdj5EppHqwqnfIQl8T7dn3Gj0QeChKtrbcU+yMTo9V0O wWchNbyXorega874NrjH2HAik8eAQhghfl1KxaFUOjEgY2tdiv3euR0eGBVzUdqC 5Ny/8MIZDMbJATtotMiFWpaYb6uOe8HAFWM27g6P2vAVx47rnfh9v36u1wZ9ezaF KEZ5wtG4uiRZf28h9s65kLJ5snG7YoinKjtd2+THOhdkjj/Pk+1oPeKpBbDh7/T/ 47QD7SBZLKwfdw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:04 2026 by rpki-client