$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json) Hash identifier: oHMzoaVZkCzzJK187aKRn2J1QA4qPbq20RjfBJq9g2w= Subject key identifier: EF:32:03:DF:7C:AB:16:BF:EC:FE:D7:AD:E2:A3:A6:7B:FA:2E:3E:82 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019D256FD4DF2D03676D60ED60E1A6C610D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft Manifest number: 04AD Signing time: Wed 25 Mar 2026 14:39:39 +0000 Manifest this update: Wed 25 Mar 2026 14:39:39 +0000 Manifest next update: Thu 26 Mar 2026 14:39:39 +0000 Files and hashes: 1: 0P0PccGabl2UROzHNpVL6McP5Qg.roa (hash: 76WpNJIBr+peyx+50gZb//AOQwGWCVC/EJXftO4PCi4=) 2: 1l5LpSbt4LO3XHIYJI_LrN3FJV0.roa (hash: xMsrRVMMJpp1a3ltT7Qh1hrZ2cgcr3g1zRL4RAaRIxE=) 3: 9E1599NQd-t2hnSgMI8xzy_TxJU.roa (hash: eGi0nRloRS1ibNJKhJIoCOxUIGVgBBarZJJvHFzA8vo=) 4: BHctp5peLCTs15IgHI6PNFs56cI.roa (hash: dMDxy7SquE1gejwHsaxMNWYK515d/w25GvminoMIrOo=) 5: D8HzZ2Ely761i_PYPDmyPkYCZzw.roa (hash: S1u6S3LK1aIAF78tib8847o7YNmmAbNYqh53Pm3qkro=) 6: HCP_VD8b4mdOe-JGMnyHgo--hZk.roa (hash: pvyLcGlIGecUMoV5M5GsvygFi1vo3vW9jA4G5vks5kw=) 7: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=) 8: HzYpraeud05ZDmN-AJxVXrxGYOA.roa (hash: NEILJl6wdvSHKC8uD2ZKy9qsBLomlvGiuDL0VHjaUg4=) 9: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=) 10: P2RoCuT_CKHsxkdgkwYZlRdgYRE.roa (hash: Zyo9+Oi+WWWLYdvSAeJASIYxwOZiSeJJKu/Q/v9i2Qg=) 11: Q_BKX6t84HGUXg0e0q8WSsPRJYc.roa (hash: W3yU5Z0q/qMh486pEaOpBK3CzEWI95dYFtSjBBJI6Q8=) 12: RRAGOwc9RWAoiLni-JofU0ScDBc.roa (hash: AK79EA+r10Rq36/I+iR7tOord6nVkhYzYzvSIDSMeR4=) 13: RYXC-s2POiJkjMH0uBQIaPbkZQg.roa (hash: 0KNVUedRME7Pg9ZHBMj1l6MA7b+d0DS/lm7sgOYQA6k=) 14: UFa1I_DpLPWBMoWazaZ7Aj-lYXQ.roa (hash: ULBGZeOcX0S1EMs6EyOzCOPNkJQzb1PyAovQmVzz8AY=) 15: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=) 16: ZWndahCkt7spmNjVxjAL4hVmKMU.roa (hash: sVYyhg6TFfnrAnLIMnM3NqDW8bMRgYoWQzrNJqbt5BE=) 17: _xNSARvUCywbU3bILGuS8xNlaRw.roa (hash: FTa5QK/bwivrBjmw9Z2kUXL8Dfh3X1WGJq+weX8BtEk=) 18: algNXeBnWxlc8W_yfgEXDKVh734.roa (hash: +8v/ZEG/pBK5GYXIEpGkYZzjhYA72COaS0gR5SOoPO0=) 19: c4Il-JnXROB_VkMf-eIk0R39vBs.roa (hash: xLL28ItsoEWb/fqkyK5VOixb4nmCnjVB1sa6bHGaIOg=) 20: eepAqRbcGyKIkKnNsfV1xpNbcKI.roa (hash: ffBc4y0MNRr5K/Y8NWKgOCwkKEkwoLa3gMCir33NfBw=) 21: g1Cn2Ncb-NH2vPDu1rAM_nngh8A.roa (hash: XqTdmhDShGggEOKrm5wuP3qVSvIEVuXwd+5DD/NUNO0=) 22: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=) 23: jG3Dh9NK1AwrjwwGGFY5wkmMz3c.roa (hash: S6/q0DnQXdPfHXdd6Go0CjgaE+46cnNpdsH/zK3Wgnw=) 24: jP1mAp4ivRGdpfjPi5MQ81juzEk.roa (hash: VShq/3g83Myfw9J0UvpZlr1QsWeOGAnKszts0QlXCUI=) 25: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: As7GDW9YMfYcjAfEiKuyZlFSx7qPgNXDM6Gz++NMJTg=) 26: me9sE9BbC82IQvIzDVSBH4iWPXQ.roa (hash: xc6GADxP9PMb1/VKhxWjvYWWuVG4q4Tt3GZWiAcyWVA=) 27: sCUzc7gXh2PzsffuuhJ6uBlOeMg.roa (hash: U/8gs+Tj9k/OOjSuMy2EgOuC8Nu7+qHY4JJnf6XE25M=) 28: sV8y37MPLL8RWd9qwC40uq9yWVE.roa (hash: lh7Z1sBUtKMv9VJw44+72Tr1TfgyFQInhjWPQXaVkxQ=) 29: sqdXQjfm4onO1QiOFsXJu-JeMZs.roa (hash: Qw1x6srQqo+v0XYWJ9z2CM3xz/OxwTMeNmtDU3qoGRM=) 30: u8kVj0lBe5cHMPhRnrE68JfHUM0.roa (hash: umRtaSL0v8bZn3uUkqNZS49DRfOWVxsSsn2s9L3TZXI=) 31: wD4NGg88WndC9yzTU4xLEQbP1a4.roa (hash: 1N6JcnXJHN0H7GLkTeSYJRGUOZxk0cd6K/lZq+xShtE=) 32: x-4cU282yjxWlayFMXLEcn362Ck.roa (hash: vTVv9q8cxbIj3S7ibhQ/5KV97pcO0DPQCaN6+zpW+48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:6f:d4:df:2d:03:67:6d:60:ed:60:e1:a6:c6:10:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Mar 25 14:39:39 2026 GMT Not After : Mar 26 14:39:39 2026 GMT Subject: CN=ef3203df7cab16bfecfed7ade2a3a67bfa2e3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:df:c5:b4:65:75:18:73:f6:76:dc:f5:e5: ff:f5:9d:ba:c1:a9:ab:b0:1c:04:0e:e4:87:39:50: b7:82:f3:39:de:4c:41:04:95:da:d4:96:3b:ac:7b: 02:da:c4:12:37:5c:0f:7b:b3:5e:d4:88:61:b9:81: 72:f5:20:7a:53:71:59:ad:4a:b0:df:94:92:e7:52: 1a:49:ca:f0:71:8b:87:91:f8:d4:17:25:6a:6e:ea: f6:9d:e2:49:55:13:a3:c2:28:3b:30:81:4d:23:7c: cf:55:c5:26:20:4d:c1:33:7b:04:52:cb:6a:be:60: dd:42:5e:12:23:98:59:dc:5a:c6:ab:14:db:ba:7c: 46:9b:44:65:f6:71:24:c5:c9:4f:bc:34:20:ba:c8: bd:5d:08:71:ea:5c:20:c9:a4:b3:34:4d:d5:bf:c5: dc:61:a6:46:cc:90:ea:f2:82:67:21:03:87:47:bb: c1:b0:5c:76:ae:4d:e3:ee:1f:db:9b:f8:42:62:61: 67:65:7d:e5:77:29:d9:ba:64:88:66:fb:42:fe:fa: 74:13:b2:7f:a2:6e:ac:5d:76:10:1b:54:26:d6:f4: 2f:7d:22:68:80:ec:c9:99:7d:2c:bb:2b:f4:f4:b9: 6c:7b:45:31:60:e2:5e:25:ad:f1:8f:5c:c2:83:4d: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:03:DF:7C:AB:16:BF:EC:FE:D7:AD:E2:A3:A6:7B:FA:2E:3E:82 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a6:25:63:e7:a5:96:16:57:4f:85:71:5f:42:14:f3:94:7b: e7:2f:39:11:d8:a8:67:6a:53:62:fa:ea:ec:4a:9f:f3:5b:ae: 8b:a9:4d:ff:1b:3c:4a:31:b1:a1:34:e9:c2:f1:30:9a:3a:39: 21:a5:f9:07:4f:36:65:83:39:d8:20:b0:31:a5:e9:a0:e5:a2: ec:36:f9:e6:9f:6c:bc:27:9b:92:2f:2d:92:28:b3:e6:32:09: 03:d6:3e:d8:29:f0:26:d9:07:66:4a:58:eb:2d:02:56:1c:de: 7d:39:52:14:5a:fc:2d:f3:c2:24:2f:69:39:a4:1c:42:19:ba: da:0a:6b:0f:ba:de:28:b1:5d:61:08:70:8a:e0:60:44:bc:8b: d5:91:f9:18:fb:8e:9e:11:4e:65:80:34:9a:6a:8b:23:1d:fd: 06:cb:7c:2f:b3:09:a2:a2:18:4c:30:df:4b:e2:67:27:38:b5: f8:ac:30:bf:fc:b7:fa:35:73:74:92:d5:28:c7:83:06:1e:59: c1:f1:e9:25:b5:c2:4f:76:e1:7a:ff:a7:d5:46:ab:89:ad:95: cd:a0:41:62:1c:5c:c8:4e:96:f3:30:e3:38:45:00:45:07:00: c0:6d:f0:30:1f:e3:39:3b:08:a5:50:a1:2c:a9:3c:1e:a8:e6: 7a:73:31:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lb9TfLQNnbWDtYOGmxhDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMzI1MTQzOTM5WhcNMjYwMzI2MTQzOTM5WjAzMTEwLwYDVQQD EyhlZjMyMDNkZjdjYWIxNmJmZWNmZWQ3YWRlMmEzYTY3YmZhMmUzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3fxbRldRhz9nbc9eX/9Z26wamr sBwEDuSHOVC3gvM53kxBBJXa1JY7rHsC2sQSN1wPe7Ne1IhhuYFy9SB6U3FZrUqw 35SS51IaScrwcYuHkfjUFyVqbur2neJJVROjwig7MIFNI3zPVcUmIE3BM3sEUstq vmDdQl4SI5hZ3FrGqxTbunxGm0Rl9nEkxclPvDQgusi9XQhx6lwgyaSzNE3Vv8Xc YaZGzJDq8oJnIQOHR7vBsFx2rk3j7h/bm/hCYmFnZX3ldynZumSIZvtC/vp0E7J/ om6sXXYQG1Qm1vQvfSJogOzJmX0suyv09Llse0UxYOJeJa3xj1zCg01VXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8yA998qxa/7P7XreKjpnv6Lj6CMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKYlY+el lhZXT4VxX0IU85R75y85EdioZ2pTYvrq7Eqf81uui6lN/xs8SjGxoTTpwvEwmjo5 IaX5B082ZYM52CCwMaXpoOWi7Db55p9svCebki8tkiiz5jIJA9Y+2CnwJtkHZkpY 6y0CVhzefTlSFFr8LfPCJC9pOaQcQhm62gprD7reKLFdYQhwiuBgRLyL1ZH5GPuO nhFOZYA0mmqLIx39Bst8L7MJoqIYTDDfS+JnJzi1+Kwwv/y3+jVzdJLVKMeDBh5Z wfHpJbXCT3bhev+n1Uaria2VzaBBYhxcyE6W8zDjOEUARQcAwG3wMB/jOTsIpVCh LKk8HqjmenMxOw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:19:29 2026 by rpki-client