$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: vBbhnNfN87zFwmRahxOv+LRM7mQSfWuK+g8HNna1QTk= Subject key identifier: 6E:51:2E:F8:99:3B:50:74:6B:0D:4F:72:C4:EB:8C:DB:14:39:05:D2 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019D28BB7A8B7BF0EB13A065C8ADCFE89DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 190E Signing time: Thu 26 Mar 2026 06:01:08 +0000 Manifest this update: Thu 26 Mar 2026 06:01:08 +0000 Manifest next update: Fri 27 Mar 2026 06:01:08 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: ZMS58CRSKYM2oY0yBdqsJVLYxUssZgXmsfbshu8voQ4=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) 11: yYjK6TLqyOsG3tmiBYFMP1Aoexg.roa (hash: 3ZWyZKdoBkHem28rqJLRhRuGSLJ2oX1IHJZHOWmP0p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:7a:8b:7b:f0:eb:13:a0:65:c8:ad:cf:e8:9d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Mar 26 06:01:08 2026 GMT Not After : Mar 27 06:01:08 2026 GMT Subject: CN=6e512ef8993b50746b0d4f72c4eb8cdb143905d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:a7:7a:65:26:33:01:43:1b:ef:e3:70:73: 72:b8:5f:69:6b:c8:cd:b8:0c:6a:1c:db:ff:d0:cc: 04:a3:05:dd:84:7b:4b:81:30:ce:94:cf:46:8d:f4: dd:f2:2a:ae:8e:e0:e8:89:4a:14:9c:df:38:75:6b: 2c:ba:4d:de:0d:d2:58:1e:60:6b:bb:40:45:82:c0: 49:09:e9:d7:16:83:c4:ce:dd:21:84:40:8e:27:f3: fe:36:a2:2f:de:a1:c0:d5:6e:33:3d:b5:78:f8:69: 15:72:46:ed:66:cb:5f:0a:89:60:ef:d7:ca:8c:37: 4a:55:9a:ef:41:9d:29:d3:e1:cc:7f:73:38:20:a5: 5f:c8:4e:1d:f1:14:bb:55:28:a6:b8:58:95:76:17: d5:3b:6b:5d:be:07:db:e6:81:8f:56:a6:13:93:a8: 3c:3c:43:25:6d:66:57:21:32:01:e6:3a:b4:ab:90: 3c:ab:9a:40:8a:24:44:9d:67:80:e8:2c:7c:5d:61: ba:22:50:95:54:29:7f:49:06:77:92:f0:13:1b:c2: 71:5c:e0:a2:57:15:82:fa:3c:dc:05:b7:8f:06:18: 25:16:e0:f9:6f:bc:a7:ee:19:cd:91:4d:e4:ae:cd: 54:57:97:79:94:ee:a7:31:08:53:83:cc:a2:88:bf: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:2E:F8:99:3B:50:74:6B:0D:4F:72:C4:EB:8C:DB:14:39:05:D2 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:dc:a6:36:da:b9:33:eb:a9:00:da:d3:f1:89:aa:67:99:07: c7:1b:a1:ae:16:98:e3:d8:9f:53:d6:43:34:5b:64:32:bd:fa: bd:ed:60:48:1d:af:80:e0:02:42:f2:69:fa:04:4f:0b:52:5f: e9:99:ce:2e:f6:6c:99:38:34:4f:3d:4a:5f:e1:da:09:35:ce: b1:12:9e:f4:bc:32:3a:34:7e:9a:9e:aa:80:e5:fb:4d:6a:15: a3:c7:2c:ab:8f:5d:d4:65:85:d2:75:ad:10:e4:9b:3f:ce:b3: 6b:07:ca:84:22:94:59:bf:8e:97:e6:83:96:71:93:6d:6b:16: 42:1a:c6:c1:47:9e:e7:b7:a6:67:bc:9b:9a:ac:5a:ea:07:05: b9:b5:a7:0a:62:56:8b:42:59:4c:ca:ea:dd:1d:6d:63:b8:20: 52:0e:6e:b7:90:83:5d:39:36:35:d0:b8:e4:e5:5d:81:7b:28: 7b:ab:9f:92:2a:2c:93:f4:99:9d:37:d7:00:9e:69:cc:36:6e: 4a:2a:87:34:e4:ac:da:a8:38:83:00:11:e5:92:49:a6:9d:23: 94:eb:cd:31:95:17:56:04:74:4a:40:85:a8:28:42:59:a7:f4: e1:92:f9:56:26:84:6b:59:a4:3d:43:35:67:11:a4:98:45:39: ed:bf:da:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou3qLe/DrE6BlyK3P6J2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMzI2MDYwMTA4WhcNMjYwMzI3MDYwMTA4WjAzMTEwLwYDVQQD Eyg2ZTUxMmVmODk5M2I1MDc0NmIwZDRmNzJjNGViOGNkYjE0MzkwNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QinemUmMwFDG+/jcHNyuF9pa8jN uAxqHNv/0MwEowXdhHtLgTDOlM9GjfTd8iqujuDoiUoUnN84dWssuk3eDdJYHmBr u0BFgsBJCenXFoPEzt0hhECOJ/P+NqIv3qHA1W4zPbV4+GkVckbtZstfColg79fK jDdKVZrvQZ0p0+HMf3M4IKVfyE4d8RS7VSimuFiVdhfVO2tdvgfb5oGPVqYTk6g8 PEMlbWZXITIB5jq0q5A8q5pAiiREnWeA6Cx8XWG6IlCVVCl/SQZ3kvATG8JxXOCi VxWC+jzcBbePBhglFuD5b7yn7hnNkU3krs1UV5d5lO6nMQhTg8yiiL/RBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5RLviZO1B0aw1PcsTrjNsUOQXSMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNymNtq5 M+upANrT8YmqZ5kHxxuhrhaY49ifU9ZDNFtkMr36ve1gSB2vgOACQvJp+gRPC1Jf 6ZnOLvZsmTg0Tz1KX+HaCTXOsRKe9LwyOjR+mp6qgOX7TWoVo8csq49d1GWF0nWt EOSbP86zawfKhCKUWb+Ol+aDlnGTbWsWQhrGwUee57emZ7ybmqxa6gcFubWnCmJW i0JZTMrq3R1tY7ggUg5ut5CDXTk2NdC45OVdgXsoe6ufkiosk/SZnTfXAJ5pzDZu SiqHNOSs2qg4gwAR5ZJJpp0jlOvNMZUXVgR0SkCFqChCWaf04ZL5ViaEa1mkPUM1 ZxGkmEU57b/aCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:24:10 2026 by rpki-client