$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: DveZwydwcGmP943q73rDVjMqOQpfqtxslEfq+oHRQmI= Subject key identifier: 35:0D:B9:1D:28:33:80:C3:6F:44:C3:DE:B9:24:C0:F7:DC:B9:58:56 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019D25BA9DA5DC536BBCBD2E0CB3F3AE23A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1890 Signing time: Wed 25 Mar 2026 16:01:20 +0000 Manifest this update: Wed 25 Mar 2026 16:01:20 +0000 Manifest next update: Thu 26 Mar 2026 16:01:20 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: sqh2mmlldZCgZAtDELs21OJBT8/nUTPL+0ZQOFhBc0I=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 6: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 7: pdyHb8mFNixwJ_XvAUyJS_Ow2g4.roa (hash: OBr/r8tvBWJlq/QSHh/DOJUhlx6WHps7Ga/Udvbou0U=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:9d:a5:dc:53:6b:bc:bd:2e:0c:b3:f3:ae:23:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Mar 25 16:01:20 2026 GMT Not After : Mar 26 16:01:20 2026 GMT Subject: CN=350db91d283380c36f44c3deb924c0f7dcb95856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:bb:55:a7:12:28:41:b7:45:63:35:d0:e9: a8:e5:09:7c:ce:15:44:b4:e3:59:b2:39:3b:ea:c3: 8a:6b:57:20:3f:5f:c4:9b:02:c3:3c:7c:ce:1b:39: 43:2a:95:5e:54:d4:bb:d6:ca:a1:18:83:ce:5c:f4: b9:de:ca:51:40:2f:8d:f8:22:da:14:75:f9:e6:60: 6b:b1:2a:aa:e2:f8:91:67:95:03:ad:a2:43:ec:ba: 0f:0e:ef:dd:fc:e7:a7:ca:e1:b7:40:7c:91:28:fa: 11:89:ae:19:4a:ab:af:6c:de:06:a6:b0:b2:4c:98: d9:78:e9:6a:ae:70:22:26:24:7e:c1:65:bb:4d:dd: 4e:02:d6:b2:d3:5c:cf:b5:78:57:bb:55:27:1f:98: 45:eb:13:1e:fb:fe:9e:f8:d3:cf:c1:fb:01:01:41: dd:e7:39:89:82:98:c2:bb:5b:3a:0e:ea:a4:55:87: a5:43:11:8e:87:30:53:3d:1d:02:c6:82:93:8a:c5: 03:72:09:b1:de:fe:80:92:c3:a1:8e:0f:c2:02:9e: 04:7b:71:4f:47:cc:56:87:b5:df:3b:27:ec:7e:2e: fe:f7:8c:41:ab:1b:18:de:93:db:da:31:df:86:31: 2b:e7:8a:9b:65:d1:00:73:1c:7c:6c:c4:2b:d6:81: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:B9:1D:28:33:80:C3:6F:44:C3:DE:B9:24:C0:F7:DC:B9:58:56 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:55:38:a4:50:0a:66:df:b4:2e:e8:81:ad:67:e5:1f:29:39: 0d:5f:10:39:c6:25:5a:ff:b4:f7:30:6f:62:8a:be:f6:1f:f8: 03:30:0f:7c:17:38:b5:1f:8f:37:99:1b:a0:59:14:f7:2d:52: 88:0c:1f:4a:e8:8d:6b:06:ed:8a:c6:43:ef:40:3d:2e:5d:04: 4a:fd:87:1f:40:2b:e0:3a:7b:c3:75:8f:13:c8:9a:29:36:94: 38:a0:c4:aa:e3:47:9c:8e:15:ec:81:68:e7:43:77:94:d8:77: 15:e8:9b:d2:18:62:93:8c:76:16:71:ff:a5:98:5b:58:47:31: 0a:54:9c:63:69:8e:f6:48:61:7b:c8:61:87:5d:6e:ee:ae:33: a8:ce:70:7e:f7:2d:18:1b:c3:02:42:2b:6f:a4:ba:e5:69:65: b7:dd:cc:00:13:d0:14:e0:39:d9:9a:b5:77:cd:d5:73:84:07: a1:80:9e:eb:8f:6b:a2:26:24:f4:a1:fc:d2:23:19:93:57:76: a5:ab:28:79:ef:0d:a3:f2:4e:ba:bb:1d:1d:e4:a8:e0:6e:99: f1:76:2c:20:c4:00:1b:33:e0:72:3f:0b:7c:ca:00:3d:91:e7: 68:37:7c:be:4a:32:44:c1:cc:03:1e:bd:73:60:db:36:c7:4a: 0c:ed:dc:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lup2l3FNrvL0uDLPzriOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMzI1MTYwMTIwWhcNMjYwMzI2MTYwMTIwWjAzMTEwLwYDVQQD EygzNTBkYjkxZDI4MzM4MGMzNmY0NGMzZGViOTI0YzBmN2RjYjk1ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUe7VacSKEG3RWM10Omo5Ql8zhVE tONZsjk76sOKa1cgP1/EmwLDPHzOGzlDKpVeVNS71sqhGIPOXPS53spRQC+N+CLa FHX55mBrsSqq4viRZ5UDraJD7LoPDu/d/OenyuG3QHyRKPoRia4ZSquvbN4GprCy TJjZeOlqrnAiJiR+wWW7Td1OAtay01zPtXhXu1UnH5hF6xMe+/6e+NPPwfsBAUHd 5zmJgpjCu1s6DuqkVYelQxGOhzBTPR0CxoKTisUDcgmx3v6AksOhjg/CAp4Ee3FP R8xWh7XfOyfsfi7+94xBqxsY3pPb2jHfhjEr54qbZdEAcxx8bMQr1oEzoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUNuR0oM4DDb0TD3rkkwPfcuVhWMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblU4pFAK Zt+0LuiBrWflHyk5DV8QOcYlWv+09zBvYoq+9h/4AzAPfBc4tR+PN5kboFkU9y1S iAwfSuiNawbtisZD70A9Ll0ESv2HH0Ar4Dp7w3WPE8iaKTaUOKDEquNHnI4V7IFo 50N3lNh3Feib0hhik4x2FnH/pZhbWEcxClScY2mO9khhe8hhh11u7q4zqM5wfvct GBvDAkIrb6S65Wllt93MABPQFOA52Zq1d83Vc4QHoYCe649roiYk9KH80iMZk1d2 pasoee8No/JOursdHeSo4G6Z8XYsIMQAGzPgcj8LfMoAPZHnaDd8vkoyRMHMAx69 c2DbNsdKDO3ckA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:21:51 2026 by rpki-client