$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: 2HHJC/ldzVNMDl+CXZVE99HF326Ljs4Rq53Dd9khlEA= Subject key identifier: AB:A8:33:63:12:C1:A7:C5:8F:5C:30:6C:B3:89:CB:24:4F:84:A1:C9 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019D24DEE332DA7BBD1386672034DC19C2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 18A1 Signing time: Wed 25 Mar 2026 12:01:20 +0000 Manifest this update: Wed 25 Mar 2026 12:01:20 +0000 Manifest next update: Thu 26 Mar 2026 12:01:20 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: 9GnsNiEe10PMXMuYnOwoBHJXNp8.roa (hash: qjlonO3LiHiL0H3ICrIa63wPE2s5AD0+eRAxpHLDmgU=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: XLClONptBOnoyds7ZRrXVeMA5OI.roa (hash: s9P5DAsWhxNq3izEap6h+SBQrZwu2+rZZv5QCDGjopU=) 7: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 8: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: BVJ/9LTnfVUzyax+WhWvlso7GWHuJMaHvJAt/hphqyk=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:24:de:e3:32:da:7b:bd:13:86:67:20:34:dc:19:c2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Mar 25 12:01:20 2026 GMT Not After : Mar 26 12:01:20 2026 GMT Subject: CN=aba8336312c1a7c58f5c306cb389cb244f84a1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:d9:ba:8e:9e:de:7b:9f:e7:63:a3:58:6e: 92:0e:54:f8:b8:6a:ea:a4:da:36:c7:7b:a4:2a:ba: 45:b8:82:52:3c:7c:b9:3b:84:11:9a:81:82:f2:f1: be:85:e3:94:4f:ee:2d:82:cb:34:ae:cd:2b:dd:16: 1d:46:e4:96:c6:93:8f:b5:c9:ee:73:e1:3c:17:8c: b5:6a:af:f3:13:5a:09:fd:6f:54:24:3f:3a:22:f0: 13:88:4c:83:a4:bb:40:a6:9c:12:9c:57:f8:7a:96: 39:2b:d5:e9:e6:c6:0b:ea:50:8c:7b:92:2a:7b:56: 5a:86:21:82:ba:ca:bb:32:8d:1b:b2:7d:72:c3:6b: b4:e6:ce:a3:13:55:3d:cf:6e:0c:66:06:ff:35:eb: ad:5a:a7:96:26:b4:39:2c:c5:58:63:b8:f7:11:33: 8e:7d:a5:2b:f5:0e:8b:52:bd:cf:62:e3:54:cd:02: 50:b5:b1:c0:75:6a:6e:ba:18:43:03:72:47:e7:c6: c7:1b:65:32:23:c7:aa:42:20:88:6d:99:35:90:ac: dd:26:a4:dc:fe:b9:c2:c2:f8:19:4e:1f:1c:16:91: 7b:ae:ec:ae:49:15:a2:8a:84:25:1d:ca:57:01:0b: d1:aa:cb:50:e3:63:12:43:bc:f4:12:4b:73:3d:6b: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:33:63:12:C1:A7:C5:8F:5C:30:6C:B3:89:CB:24:4F:84:A1:C9 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:36:04:a4:51:f5:76:b9:ef:f7:1a:e7:99:56:8a:d3:55:d0: 53:be:15:d2:2e:ae:cf:ce:f4:05:6c:d4:75:99:70:fd:89:e2: 48:df:70:b1:f9:7b:b8:2e:2e:e3:02:d1:d3:3c:60:7e:4e:de: 76:70:0e:09:53:57:7f:38:30:e2:b0:f2:79:2c:3b:67:c3:b9: 38:c4:af:d7:99:05:da:c6:c0:db:d2:0c:d8:06:89:8b:f5:19: 77:fb:6f:bd:69:df:f7:e8:2b:3a:75:fe:62:b0:c3:a2:87:ac: 90:d0:f0:93:4d:e2:0d:4b:8e:58:d6:80:f9:a5:cc:ed:c8:60: d1:44:f2:59:ed:4b:5c:50:ef:a0:96:ae:31:03:e9:16:d1:c6: 98:9e:72:16:86:05:f1:8c:3d:ff:b1:67:f9:ce:79:45:30:b4: 1c:3e:2d:e7:78:e4:15:3f:f9:6b:61:48:05:bd:d7:dd:c1:0f: 43:04:85:7b:6a:37:33:6b:95:21:57:18:e6:9a:25:b4:c4:be: 10:eb:48:c9:5c:d9:11:ff:8a:a1:78:42:18:9f:04:a3:3a:ee: 0d:bf:d7:c6:29:d2:9f:f2:b2:c7:03:e6:c1:66:c1:ca:37:17: d2:72:f9:3a:26:e8:45:b4:32:b7:ee:eb:50:27:2e:84:0c:d7: f7:39:ad:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0k3uMy2nu9E4ZnIDTcGcKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwMzI1MTIwMTIwWhcNMjYwMzI2MTIwMTIwWjAzMTEwLwYDVQQD EyhhYmE4MzM2MzEyYzFhN2M1OGY1YzMwNmNiMzg5Y2IyNDRmODRhMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO3Zuo6e3nuf52OjWG6SDlT4uGrq pNo2x3ukKrpFuIJSPHy5O4QRmoGC8vG+heOUT+4tgss0rs0r3RYdRuSWxpOPtcnu c+E8F4y1aq/zE1oJ/W9UJD86IvATiEyDpLtAppwSnFf4epY5K9Xp5sYL6lCMe5Iq e1ZahiGCusq7Mo0bsn1yw2u05s6jE1U9z24MZgb/NeutWqeWJrQ5LMVYY7j3ETOO faUr9Q6LUr3PYuNUzQJQtbHAdWpuuhhDA3JH58bHG2UyI8eqQiCIbZk1kKzdJqTc /rnCwvgZTh8cFpF7ruyuSRWiioQlHcpXAQvRqstQ42MSQ7z0EktzPWuv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuoM2MSwafFj1wwbLOJyyRPhKHJMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzYEpFH1 drnv9xrnmVaK01XQU74V0i6uz870BWzUdZlw/YniSN9wsfl7uC4u4wLR0zxgfk7e dnAOCVNXfzgw4rDyeSw7Z8O5OMSv15kF2sbA29IM2AaJi/UZd/tvvWnf9+grOnX+ YrDDooeskNDwk03iDUuOWNaA+aXM7chg0UTyWe1LXFDvoJauMQPpFtHGmJ5yFoYF 8Yw9/7Fn+c55RTC0HD4t53jkFT/5a2FIBb3X3cEPQwSFe2o3M2uVIVcY5poltMS+ EOtIyVzZEf+KoXhCGJ8EozruDb/XxinSn/KyxwPmwWbByjcX0nL5OiboRbQyt+7r UCcuhAzX9zmt9Q== -----END CERTIFICATE-----Generated at Wed Mar 25 21:26:04 2026 by rpki-client