$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: p7lFttHTWk8mqUMGVw3FDW9z0/Jf94/Fw64oC6k5LqQ= Subject key identifier: BE:6B:B7:F1:20:39:FF:36:A7:42:76:ED:E7:72:D0:39:97:FF:B3:AB Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019D27A93A499526914BCD8DD3B69C902CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1915 Signing time: Thu 26 Mar 2026 01:01:34 +0000 Manifest this update: Thu 26 Mar 2026 01:01:34 +0000 Manifest next update: Fri 27 Mar 2026 01:01:34 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (hash: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU=) 3: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 4: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 5: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 6: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 7: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 10: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (hash: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: vPPzeItnl54aI42VK4KCEszJzZasDRnSr0aeNz/kNtM=) 14: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 15: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:3a:49:95:26:91:4b:cd:8d:d3:b6:9c:90:2c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Mar 26 01:01:34 2026 GMT Not After : Mar 27 01:01:34 2026 GMT Subject: CN=be6bb7f12039ff36a74276ede772d03997ffb3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:67:28:32:cc:e5:e2:0a:c3:f4:dc:58:81: 54:e0:e6:74:d2:65:f8:43:23:e3:e5:ba:a5:78:2a: 25:4f:58:ac:6e:2f:52:07:13:40:ae:50:a5:db:b4: 4f:fd:9b:75:4b:99:3f:fb:66:60:e0:6d:34:71:ee: a2:a3:92:80:de:7b:65:cd:c4:4b:34:c1:5e:1b:97: fb:fa:cd:d5:91:be:6d:e4:31:c1:0f:28:48:62:dc: 87:8c:0c:43:4c:1f:f8:d8:ac:45:32:46:76:7a:ef: 74:14:34:c9:80:57:ed:82:71:79:0d:d3:b1:fd:7f: ad:53:b9:42:cf:27:31:56:ad:5d:17:fd:f5:63:82: 5f:3c:e2:8f:2a:10:33:0a:3f:66:03:10:5a:8f:e6: 05:26:f8:31:a1:24:6b:ed:da:1e:a3:58:10:b3:97: 17:74:0e:83:51:31:00:bc:f3:cd:a9:f3:79:4d:f3: 47:3b:fb:3d:bb:83:20:53:28:a4:e0:08:9c:f4:a4: d0:1c:31:53:a6:69:17:c1:0b:82:4a:cc:0d:8f:33: 56:90:97:0f:3d:86:5c:ba:f0:a6:16:a2:fa:bc:e8: bc:f2:f6:27:12:2c:68:0d:62:69:b4:7a:9d:37:f4: d3:8c:59:73:b9:38:5e:84:05:2e:1d:c2:06:51:4e: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6B:B7:F1:20:39:FF:36:A7:42:76:ED:E7:72:D0:39:97:FF:B3:AB X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:5b:a5:9f:38:71:ef:35:de:61:a3:2d:ec:53:04:39:56: 24:9e:4f:58:73:64:77:6f:bd:57:a8:90:4e:7a:be:e8:c9:61: 20:e9:2a:6a:20:01:89:44:b8:bb:fc:cb:49:14:a6:83:55:df: b7:64:6d:56:df:00:5d:8d:25:ac:c0:68:fb:8a:d3:1b:71:b6: 32:b8:0c:4b:be:c5:e9:88:bf:d3:cc:69:23:79:e9:3e:8c:2a: aa:b1:95:1f:c6:43:32:b7:c4:95:e1:0c:35:97:d3:be:ce:39: 95:9d:5e:20:8a:82:96:60:38:76:a8:a3:15:23:71:2c:8d:34: 24:44:85:cf:72:32:89:47:73:88:dd:cf:b5:fc:e7:1a:f9:2d: 22:22:0f:b1:73:05:d5:83:b7:38:c1:aa:ec:de:f9:cf:21:29: a0:6d:78:a7:c0:b3:35:bc:5b:62:b8:82:c5:21:19:45:55:53: c7:01:3b:b2:5e:26:8b:d0:b1:82:76:0c:ab:41:02:f1:55:8a: 99:66:82:de:18:f8:92:d9:ed:ff:2e:49:c7:73:dc:0f:e1:93: 0e:af:9e:f8:28:fa:99:47:dc:a0:13:f8:5f:6d:e6:cb:a7:20: da:1a:14:75:a8:77:be:ab:fa:45:8f:f7:3f:d9:9b:f5:75:cf: a9:a9:46:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqTpJlSaRS82N07ackCzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMzI2MDEwMTM0WhcNMjYwMzI3MDEwMTM0WjAzMTEwLwYDVQQD EyhiZTZiYjdmMTIwMzlmZjM2YTc0Mjc2ZWRlNzcyZDAzOTk3ZmZiM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3NnKDLM5eIKw/TcWIFU4OZ00mX4 QyPj5bqleColT1isbi9SBxNArlCl27RP/Zt1S5k/+2Zg4G00ce6io5KA3ntlzcRL NMFeG5f7+s3Vkb5t5DHBDyhIYtyHjAxDTB/42KxFMkZ2eu90FDTJgFftgnF5DdOx /X+tU7lCzycxVq1dF/31Y4JfPOKPKhAzCj9mAxBaj+YFJvgxoSRr7doeo1gQs5cX dA6DUTEAvPPNqfN5TfNHO/s9u4MgUyik4Aic9KTQHDFTpmkXwQuCSswNjzNWkJcP PYZcuvCmFqL6vOi88vYnEixoDWJptHqdN/TTjFlzuThehAUuHcIGUU6wWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5rt/EgOf82p0J27edy0DmX/7OrMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS69bpZ84 ce813mGjLexTBDlWJJ5PWHNkd2+9V6iQTnq+6MlhIOkqaiABiUS4u/zLSRSmg1Xf t2RtVt8AXY0lrMBo+4rTG3G2MrgMS77F6Yi/08xpI3npPowqqrGVH8ZDMrfEleEM NZfTvs45lZ1eIIqClmA4dqijFSNxLI00JESFz3IyiUdziN3PtfznGvktIiIPsXMF 1YO3OMGq7N75zyEpoG14p8CzNbxbYriCxSEZRVVTxwE7sl4mi9CxgnYMq0EC8VWK mWaC3hj4ktnt/y5Jx3PcD+GTDq+e+Cj6mUfcoBP4X23my6cg2hoUdah3vqv6RY/3 P9mb9XXPqalGfQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:26 2026 by rpki-client