$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json) Hash identifier: IIowfNybsvzsKHrAXNKXcdqPFJ/G96W+8Kg8phylm+A= Subject key identifier: FE:AF:77:AE:1B:7D:2B:27:48:83:98:66:26:0A:DB:CC:33:D0:7E:A3 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019D2703BB572E0BF47D0F8236CF6317C769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft Manifest number: 133E Signing time: Wed 25 Mar 2026 22:00:49 +0000 Manifest this update: Wed 25 Mar 2026 22:00:49 +0000 Manifest next update: Thu 26 Mar 2026 22:00:49 +0000 Files and hashes: 1: 3MWi_sarB7UU3XV2Gox6fZeLswg.roa (hash: HWOigSGmjipZJyJg7lhUPHpbYL3EZByxIWX1N59lfc0=) 2: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (hash: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE=) 3: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (hash: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0=) 4: DZyx25x41UHPF3i1Veq-pYVddR4.roa (hash: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ=) 5: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (hash: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E=) 6: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: E6RvJLQ5+pqnmUxEz/0NcZ4WzjtiVj9AGPn2tVZr+B0=) 7: Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa (hash: Osr/NiaK8ha6IKNjhgOfYzSiPqzBhMGmuLXsdthjQ3k=) 8: ay8yAoc88wAj2V0brdWw5VdAYUE.roa (hash: uEoLe7XoIo5DxCpUn3Ll+nX3PqXVlfbcylC6QSJzhLc=) 9: nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa (hash: 0oA4F2JQGbyYxaGrlY3X98PqMdWzLbRbe+bzFWz2G3g=) 10: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (hash: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:bb:57:2e:0b:f4:7d:0f:82:36:cf:63:17:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Mar 25 22:00:49 2026 GMT Not After : Mar 26 22:00:49 2026 GMT Subject: CN=feaf77ae1b7d2b2748839866260adbcc33d07ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:84:7b:c6:9a:ae:b1:eb:1b:46:d5:ee:52: aa:97:57:09:2e:a2:61:e3:f0:b3:ad:ae:94:24:7a: 7c:55:f4:dd:de:bc:9c:ac:70:e4:00:26:e2:62:24: 19:b3:fd:a3:d0:4d:15:5b:ef:e5:8b:05:c0:91:b9: b0:5a:2a:be:f8:7c:97:93:ae:09:db:26:b7:bc:3b: 4f:aa:d4:41:fd:a4:9d:36:9e:93:24:7a:65:ff:1a: e9:ab:6f:83:af:14:2a:e1:8b:6b:f8:49:d5:de:03: 11:b2:c2:c9:86:f8:ae:65:24:42:9a:19:3f:df:96: 2c:90:20:c2:24:3c:25:4a:92:69:ac:13:ce:a3:dd: 85:8a:c6:37:bb:3f:10:59:ab:26:60:3f:24:51:49: 2d:f6:cb:99:e9:c7:be:66:82:d8:fc:0b:63:69:f5: 75:66:97:de:0c:ac:82:0e:49:75:56:6a:f1:50:2f: c1:07:00:f8:9b:03:7d:db:6d:0b:48:9b:6e:02:dd: e4:14:d6:95:21:d8:c1:12:12:f5:1e:0b:8f:c7:07: 7a:4d:5e:30:ec:aa:76:e7:41:9e:a5:a5:a0:6a:23: 0f:b7:b3:cf:2c:d1:75:27:8a:66:05:65:22:93:20: 19:50:12:68:88:b2:b6:50:ef:e9:38:e6:5b:fe:5b: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AF:77:AE:1B:7D:2B:27:48:83:98:66:26:0A:DB:CC:33:D0:7E:A3 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:50:29:d8:76:b4:66:1c:2e:8d:73:f6:6f:37:eb:8b:cd:1a: 42:84:db:58:2e:eb:18:27:69:3b:3a:72:81:ee:53:fa:21:13: 75:72:ce:4b:0a:da:75:7c:17:61:e5:90:0d:ca:6c:19:62:b5: 4a:ec:32:48:96:97:b6:37:b3:b3:dd:f2:b2:02:10:84:4e:35: d5:e1:ef:9e:19:c3:a7:b3:5d:8d:e3:07:76:cc:f0:e2:28:fb: 3b:31:37:41:b5:db:75:66:28:ba:04:15:9e:03:7c:89:4b:22: 6e:fd:83:35:14:ed:1e:65:b2:6e:ba:6f:8b:7d:86:43:d1:0a: 38:ab:8a:cf:a9:e3:57:01:51:7d:ec:68:3e:76:e2:dd:62:f4: ca:5f:90:3a:75:06:a0:3f:ea:16:60:61:c4:bc:6c:9a:ca:15: 67:80:e1:0e:99:25:ec:7a:b5:cd:7c:79:27:a0:da:cc:cc:1a: fe:15:3c:d2:7f:70:2b:e1:e4:94:13:fa:8b:3f:8c:23:5f:34: c8:50:89:fd:e9:d6:08:44:dc:c9:61:7a:58:6a:eb:fb:44:0c: 6c:28:65:8f:4a:af:12:69:96:5b:85:d1:90:b1:13:f7:25:dd: c1:dc:cb:4a:0f:44:d5:b5:b0:e2:f6:e3:b1:93:0c:7e:5a:bf: f7:5d:68:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA7tXLgv0fQ+CNs9jF8dpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMzI1MjIwMDQ5WhcNMjYwMzI2MjIwMDQ5WjAzMTEwLwYDVQQD EyhmZWFmNzdhZTFiN2QyYjI3NDg4Mzk4NjYyNjBhZGJjYzMzZDA3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF+Ee8aarrHrG0bV7lKql1cJLqJh 4/Czra6UJHp8VfTd3rycrHDkACbiYiQZs/2j0E0VW+/liwXAkbmwWiq++HyXk64J 2ya3vDtPqtRB/aSdNp6TJHpl/xrpq2+DrxQq4Ytr+EnV3gMRssLJhviuZSRCmhk/ 35YskCDCJDwlSpJprBPOo92FisY3uz8QWasmYD8kUUkt9suZ6ce+ZoLY/AtjafV1 ZpfeDKyCDkl1VmrxUC/BBwD4mwN9220LSJtuAt3kFNaVIdjBEhL1HguPxwd6TV4w 7Kp250GepaWgaiMPt7PPLNF1J4pmBWUikyAZUBJoiLK2UO/pOOZb/lugRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6vd64bfSsnSIOYZiYK28wz0H6jMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFAp2Ha0 ZhwujXP2bzfri80aQoTbWC7rGCdpOzpyge5T+iETdXLOSwradXwXYeWQDcpsGWK1 SuwySJaXtjezs93ysgIQhE411eHvnhnDp7NdjeMHdszw4ij7OzE3QbXbdWYougQV ngN8iUsibv2DNRTtHmWybrpvi32GQ9EKOKuKz6njVwFRfexoPnbi3WL0yl+QOnUG oD/qFmBhxLxsmsoVZ4DhDpkl7Hq1zXx5J6DazMwa/hU80n9wK+HklBP6iz+MI180 yFCJ/enWCETcyWF6WGrr+0QMbChlj0qvEmmWW4XRkLET9yXdwdzLSg9E1bWw4vbj sZMMflq/911oMg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:19 2026 by rpki-client