$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: +xaJ9S7GfAvhKp00thCrN99qKatho5lR4Af/qzSiKL0= Subject key identifier: DA:8F:9E:B7:F4:CF:11:D0:0F:EF:3A:5F:5A:FF:8E:9B:17:DD:3E:AF Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019D288476C54CF9FADBD58A1464F7A23D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 143A Signing time: Thu 26 Mar 2026 05:01:02 +0000 Manifest this update: Thu 26 Mar 2026 05:01:02 +0000 Manifest next update: Fri 27 Mar 2026 05:01:02 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 8: kV_BrjVm5ak2BohajWeFXkU5WnY.roa (hash: gf0jyat4SEAG7hpeZ/XK4zeXtnW9UimqB92MtzK9bjk=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: ZKmj8NPVU/bhjY4Ag/sAoIfdzqmfwVCL+PKG4CLPjws=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:76:c5:4c:f9:fa:db:d5:8a:14:64:f7:a2:3d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Mar 26 05:01:02 2026 GMT Not After : Mar 27 05:01:02 2026 GMT Subject: CN=da8f9eb7f4cf11d00fef3a5f5aff8e9b17dd3eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:de:78:2a:27:3f:05:f6:da:c6:2f:c6:44: 1f:26:3d:22:f5:43:53:1e:f2:24:e3:e3:32:c4:ba: a8:c8:0d:b8:aa:08:70:8b:2f:06:8f:1d:3f:11:a1: c9:7a:31:17:57:a5:8b:d1:6c:c0:a7:62:df:80:ff: fe:20:f5:c9:64:79:a2:b9:23:4c:ee:6e:85:23:75: ab:2d:bf:54:86:9a:24:f0:16:58:4e:6b:64:e8:46: ad:31:88:14:ed:9c:c6:d6:a9:bd:3d:52:f9:cd:1a: 48:06:48:79:54:a1:ab:1b:20:51:e1:34:00:2d:dc: 3d:b2:2d:f3:92:88:90:da:e4:bc:6b:36:20:78:d0: 43:d3:bf:8f:89:f6:bf:6e:3e:e4:f9:10:87:69:37: f0:80:c9:c7:46:df:25:0f:4d:76:64:c6:8f:db:68: 10:0e:db:20:29:5d:7a:04:ab:2a:74:d4:9a:c0:d6: ae:00:6d:d8:23:05:d3:cd:39:00:62:12:f7:b1:8d: 2e:9a:41:d4:f3:34:f4:e9:dc:2f:77:a8:28:06:4a: dc:11:56:65:de:ef:bf:44:ee:7d:5f:76:01:55:f8: 9a:68:d4:1d:bf:56:8a:f3:ef:b7:aa:4c:da:5c:2f: bd:90:de:de:f9:d9:22:5b:04:7a:1d:2f:f3:b2:15: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8F:9E:B7:F4:CF:11:D0:0F:EF:3A:5F:5A:FF:8E:9B:17:DD:3E:AF X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ae:a8:b1:7d:0d:9a:61:cd:f9:91:50:e1:29:55:c3:8a:8d: 21:88:e1:c0:6e:24:bf:42:e4:e2:f4:f8:d4:68:0f:4c:cc:ad: 58:7f:df:51:f1:7c:74:bf:d6:f2:dc:f2:0c:94:45:d4:93:22: 5a:ed:3a:20:04:9c:49:4d:42:30:6a:91:03:2a:45:fa:06:6f: 31:7e:42:0e:e3:ef:f6:d1:2f:0c:f5:87:0a:96:3c:19:a2:18: 7e:d8:83:28:ce:9e:7c:ab:ed:37:d2:21:c0:05:aa:45:19:97: df:72:6a:04:6a:a9:0b:d8:7f:8a:06:6b:bf:cd:b7:77:5b:e5: 7b:8d:b1:f6:ee:84:8e:f2:cd:a4:1b:f7:69:84:71:fc:43:38: fc:a2:39:a0:05:94:70:dd:3e:51:51:5c:bc:f6:ea:e0:37:a8: ab:88:87:22:1a:bf:f9:02:c2:46:2e:08:b1:75:cd:28:96:3f: cc:2b:dc:2f:18:79:0b:f5:f9:de:cf:53:b7:eb:bc:c3:c0:79: 64:b1:5f:d0:cb:23:9c:52:a5:83:2d:85:1a:61:5a:f5:18:8a: 08:5e:e2:3e:a5:74:bb:22:e9:da:79:7b:b6:ed:95:af:b8:04: 6a:5e:19:63:f1:75:70:d0:54:ac:e1:02:3e:b1:ac:79:48:cd: 6d:81:19:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohHbFTPn629WKFGT3oj0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMzI2MDUwMTAyWhcNMjYwMzI3MDUwMTAyWjAzMTEwLwYDVQQD EyhkYThmOWViN2Y0Y2YxMWQwMGZlZjNhNWY1YWZmOGU5YjE3ZGQzZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD3eeConPwX22sYvxkQfJj0i9UNT HvIk4+MyxLqoyA24qghwiy8Gjx0/EaHJejEXV6WL0WzAp2LfgP/+IPXJZHmiuSNM 7m6FI3WrLb9Uhpok8BZYTmtk6EatMYgU7ZzG1qm9PVL5zRpIBkh5VKGrGyBR4TQA Ldw9si3zkoiQ2uS8azYgeNBD07+Pifa/bj7k+RCHaTfwgMnHRt8lD012ZMaP22gQ DtsgKV16BKsqdNSawNauAG3YIwXTzTkAYhL3sY0umkHU8zT06dwvd6goBkrcEVZl 3u+/RO59X3YBVfiaaNQdv1aK8++3qkzaXC+9kN7e+dkiWwR6HS/zshVdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqPnrf0zxHQD+86X1r/jpsX3T6vMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc66osX0N mmHN+ZFQ4SlVw4qNIYjhwG4kv0Lk4vT41GgPTMytWH/fUfF8dL/W8tzyDJRF1JMi Wu06IAScSU1CMGqRAypF+gZvMX5CDuPv9tEvDPWHCpY8GaIYftiDKM6efKvtN9Ih wAWqRRmX33JqBGqpC9h/igZrv823d1vle42x9u6EjvLNpBv3aYRx/EM4/KI5oAWU cN0+UVFcvPbq4Deoq4iHIhq/+QLCRi4IsXXNKJY/zCvcLxh5C/X53s9Tt+u8w8B5 ZLFf0MsjnFKlgy2FGmFa9RiKCF7iPqV0uyLp2nl7tu2Vr7gEal4ZY/F1cNBUrOEC PrGseUjNbYEZJQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:11 2026 by rpki-client