$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: lGCCJzsApezzmH4h+d9usnFo5gPEVqeMj4L6oI/OKyo= Subject key identifier: EB:3A:48:7D:31:05:1C:C6:0D:C2:E6:33:74:5C:2A:E4:EB:70:45:37 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019D2772004DCE5490B525084FC391C88C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 12F7 Signing time: Thu 26 Mar 2026 00:01:15 +0000 Manifest this update: Thu 26 Mar 2026 00:01:15 +0000 Manifest next update: Fri 27 Mar 2026 00:01:15 +0000 Files and hashes: 1: NrZvHsFOgiPwleOeVbwWyHfV_L4.roa (hash: n6jDQhCNCBmdeDrJBLdu1D1nSKApcLfSNNDXjNz/ofc=) 2: Rh6nFKxsMKsnXJYbD_oVhr9Ud1U.roa (hash: JsI2fLRrBOm5bt0cmfaXAQayTYmbH2IpCJK9HVEFdsI=) 3: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: vL0/VW2QxNNb2vUqGpHCEUv+Ln32jI8O3JlHvm1w7Q4=) 4: VzM1AypggKfmNX2sRS2vbR3TxmA.roa (hash: tqGI7CK0r9DehFNJOqKqldLzD4PgT2jyGQAMyhE+/Zk=) 5: ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa (hash: 6BoEMgR0PCrMYtIyRtSeyIGPN0PoOmNZmzd0tHXo3EU=) 6: fD9BwG2lJTji8xqQ2DVkA0J_2g4.roa (hash: 73MVhXAtrYpsnQSFZjVinUD/kayOZxyIGMiP64m+B2U=) 7: jKv6ERIQttCpvoILmqEhuMIUCBU.roa (hash: +ApSat9OPhyaIkri75fm7X1omMYQDzXidRYPTlzmNEE=) 8: kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa (hash: 4yJ7OIn+C8eTelE1cgdNN4SfqUsa616v8W0PFTdO90c=) 9: pCqGah-1s51upQgbjtJnrvE6ytI.roa (hash: Gf3M3iObbLHOXyMwNFbb8llJIyyUbbMZ5NBwYoUaQM4=) 10: xqwqkvhEHHtfKMR1DggBvZ_qWNM.roa (hash: t5OZwhX//N0DuIjrzLkQNjBPbXOPV8gkDPE6FX/cXLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:00:4d:ce:54:90:b5:25:08:4f:c3:91:c8:8c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Mar 26 00:01:15 2026 GMT Not After : Mar 27 00:01:15 2026 GMT Subject: CN=eb3a487d31051cc60dc2e633745c2ae4eb704537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:44:dd:d3:b0:75:00:23:4c:2a:8f:39:b1: 62:38:91:0a:be:1e:8e:c2:24:f3:79:8a:b9:8d:bf: ef:aa:10:d4:6b:44:78:df:4d:4f:e3:b6:fa:17:9d: 4c:43:d0:a7:e7:89:d8:cd:26:22:68:3e:53:67:27: 23:c3:6a:e4:bd:a9:97:05:11:ce:40:f6:2d:7d:70: d2:12:9a:94:71:27:33:c3:18:6c:14:ac:1a:19:8f: 6c:7a:45:04:8b:31:f0:48:21:97:3e:aa:bb:d7:8d: 09:d8:6e:31:d6:59:5e:ae:52:8c:01:27:74:a9:d4: 74:97:e0:ad:25:28:7b:20:d9:3b:76:0c:69:11:51: 66:c1:6d:b8:5a:61:92:71:c4:f7:b3:94:5a:fa:f4: d9:c6:0c:e0:14:5f:97:f5:24:69:a9:21:a2:36:98: c7:90:cb:06:08:03:ba:f2:e9:7c:3e:68:c1:64:cf: 6b:82:82:36:96:50:14:2f:35:02:59:36:78:b2:b9: 76:0f:1a:2d:09:4c:99:80:62:a0:f6:89:04:3d:58: 8c:70:7b:f2:57:ba:8c:10:10:9d:8e:06:77:c6:55: 81:a3:47:51:54:54:c8:1e:9b:0d:c6:8c:d5:cf:ac: 91:1c:03:c4:c1:e0:f4:f1:5b:35:af:86:f0:01:d8: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:48:7D:31:05:1C:C6:0D:C2:E6:33:74:5C:2A:E4:EB:70:45:37 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:2e:ed:17:4d:e9:52:0b:5b:e1:a2:2c:90:1b:af:8a:a4: 24:f9:64:00:fe:81:26:c0:e7:f3:06:f6:62:90:b2:f3:93:d5: 19:42:40:1e:b7:8a:1a:26:00:8c:4e:de:86:91:31:86:7e:4a: 9b:37:58:8a:eb:22:6e:84:13:9c:6c:78:21:da:af:7e:44:8b: 44:02:e8:dd:ca:5d:5b:29:8c:1e:76:31:63:59:92:66:9c:f4: 81:e6:6b:e2:0c:95:cb:84:4e:82:29:4e:9e:a2:60:ab:21:2a: dd:2a:fa:46:38:11:6d:17:57:96:8d:bb:a8:88:5a:ca:e6:b5: 8f:b2:0b:9e:d6:fa:24:f0:ac:58:09:44:91:23:3e:08:49:c9: 61:cf:2f:ea:6d:33:b8:24:3c:46:1f:1f:d4:b3:1d:7e:2e:a1: 73:d6:54:bb:b5:da:7b:29:b8:79:06:8f:4f:dc:24:32:ba:82: b7:00:cc:c6:e4:4e:0b:f8:f9:50:b7:aa:bb:c0:d0:65:e1:79: 56:46:9b:e2:a6:18:7e:45:04:b4:b2:91:08:eb:ae:ce:d2:eb: 97:bd:52:90:e8:99:cf:0b:39:f2:4c:2b:69:28:8f:7d:40:b0: 4d:22:c6:79:0e:46:4c:eb:83:a1:01:96:1a:ce:1a:46:a5:b6: 1a:0e:e7:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncgBNzlSQtSUIT8ORyIyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMzI2MDAwMTE1WhcNMjYwMzI3MDAwMTE1WjAzMTEwLwYDVQQD EyhlYjNhNDg3ZDMxMDUxY2M2MGRjMmU2MzM3NDVjMmFlNGViNzA0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKdE3dOwdQAjTCqPObFiOJEKvh6O wiTzeYq5jb/vqhDUa0R4301P47b6F51MQ9Cn54nYzSYiaD5TZycjw2rkvamXBRHO QPYtfXDSEpqUcSczwxhsFKwaGY9sekUEizHwSCGXPqq7140J2G4x1llerlKMASd0 qdR0l+CtJSh7INk7dgxpEVFmwW24WmGSccT3s5Ra+vTZxgzgFF+X9SRpqSGiNpjH kMsGCAO68ul8PmjBZM9rgoI2llAULzUCWTZ4srl2DxotCUyZgGKg9okEPViMcHvy V7qMEBCdjgZ3xlWBo0dRVFTIHpsNxozVz6yRHAPEweD08Vs1r4bwAdh9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs6SH0xBRzGDcLmM3RcKuTrcEU3MB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/8u7RdN 6VILW+GiLJAbr4qkJPlkAP6BJsDn8wb2YpCy85PVGUJAHreKGiYAjE7ehpExhn5K mzdYiusiboQTnGx4IdqvfkSLRALo3cpdWymMHnYxY1mSZpz0geZr4gyVy4ROgilO nqJgqyEq3Sr6RjgRbRdXlo27qIhayua1j7ILntb6JPCsWAlEkSM+CEnJYc8v6m0z uCQ8Rh8f1LMdfi6hc9ZUu7Xaeym4eQaPT9wkMrqCtwDMxuROC/j5ULequ8DQZeF5 Vkab4qYYfkUEtLKRCOuuztLrl71SkOiZzws58kwraSiPfUCwTSLGeQ5GTOuDoQGW Gs4aRqW2Gg7nJg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:38:43 2026 by rpki-client