$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: ARzG16inhDWF33QuqzeUT9Uq8gKP79FKk7HuYhRnxSc= Subject key identifier: 44:E4:93:E4:58:6F:A1:17:D6:99:C7:17:4C:A5:64:72:B8:CD:84:A0 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019D25BA8971C81F32D22C7E34FCD1D34DE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 146E Signing time: Wed 25 Mar 2026 16:01:15 +0000 Manifest this update: Wed 25 Mar 2026 16:01:15 +0000 Manifest next update: Thu 26 Mar 2026 16:01:15 +0000 Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=) 2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=) 3: AJLP9JiL00zLQVdWs1QaU1UT0i4.roa (hash: rln/wA7IR5Ivsdngw+7h4V6CmOpdbKfoxbL3+mwh54k=) 4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: akEyYbVzUVq3IboAmzDJM7I6OjgrUnJ6o5KnFdMqkFE=) 5: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=) 6: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=) 7: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=) 8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=) 9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=) 10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=) 11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=) 12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=) 13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=) 14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:89:71:c8:1f:32:d2:2c:7e:34:fc:d1:d3:4d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Mar 25 16:01:15 2026 GMT Not After : Mar 26 16:01:15 2026 GMT Subject: CN=44e493e4586fa117d699c7174ca56472b8cd84a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:a4:10:05:eb:37:65:49:08:6c:39:30:62: b1:5c:8d:2c:40:be:33:a5:59:71:be:2e:a9:62:0a: 93:eb:22:e6:67:97:6b:46:95:23:c6:4b:e0:e8:eb: e2:cc:31:25:ea:3e:2b:04:ef:b7:80:ca:7c:9b:9c: 22:a7:8a:c1:5d:8c:da:ed:54:2f:1e:aa:ad:04:21: be:50:c7:71:4e:dd:84:18:d5:5e:45:3f:7c:76:a8: bf:e7:72:77:9a:ef:ba:2c:e1:60:6e:a7:76:dd:74: 44:b5:f6:4d:86:dc:06:39:8b:e6:cb:2b:d8:11:c3: 72:61:9c:65:eb:47:28:3a:fb:de:94:45:42:5f:72: 29:f6:d9:1e:7e:34:b9:ee:c1:90:af:b4:36:1c:bf: 92:d7:c5:19:0e:36:61:59:2f:6b:60:56:2a:ae:0b: 64:02:a1:b4:b3:43:33:a6:4e:93:5f:75:48:4f:0d: 58:13:c5:8c:62:dd:29:03:4c:1f:ad:9d:93:e6:a5: f5:72:c7:ca:c1:fa:56:78:ca:ad:e2:0f:fd:97:47: c0:d2:28:2b:22:1a:5d:72:38:00:05:dd:5b:49:05: 7e:d8:70:fa:a5:58:21:ce:37:48:dc:a3:1a:c1:7d: 76:4a:fc:82:32:9d:ce:3d:b2:2b:db:b6:2e:03:e7: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E4:93:E4:58:6F:A1:17:D6:99:C7:17:4C:A5:64:72:B8:CD:84:A0 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:69:dc:af:07:0c:10:ff:60:fc:9d:ea:f3:08:0f:31:32:8d: a3:b1:45:0a:da:00:6f:15:0a:48:2e:66:c8:fd:06:45:d8:1b: 7e:be:f5:b8:0c:09:33:1d:c0:40:40:6b:78:ea:d8:25:c4:3b: 51:21:f2:9f:83:65:ff:95:2b:63:84:fb:46:7d:c8:97:8d:95: 77:42:54:64:03:13:11:e8:ca:29:7b:2d:5a:39:ff:8a:46:05: 59:7a:e5:7d:03:e5:2b:7d:c3:05:22:78:6b:23:15:c8:d5:ff: 95:dc:c5:74:50:77:3c:12:04:4c:63:d6:6f:0d:3a:12:62:20: 8b:ea:0b:ab:04:b6:63:fc:8a:0d:52:37:a4:7c:e1:4d:fb:7c: f3:32:55:46:3e:4e:76:3b:58:60:4f:13:3c:ac:38:3d:de:be: e1:ba:27:59:8b:8d:55:c2:27:7b:78:c3:9d:c7:77:5f:ea:57: 4a:9c:83:e0:b2:a4:f2:21:e6:48:86:df:57:1b:31:5d:40:51: 3b:45:6a:8a:19:cf:13:54:62:9f:c1:7d:4e:8a:68:4c:c6:18: 4f:99:3a:74:cb:e2:40:6f:58:88:40:e2:b5:46:53:fb:9f:76: dc:da:0b:cc:4b:31:a4:45:60:d5:8f:76:26:af:9a:e6:d8:e4: 6b:8c:3b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0luolxyB8y0ix+NPzR003oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYwMzI1MTYwMTE1WhcNMjYwMzI2MTYwMTE1WjAzMTEwLwYDVQQD Eyg0NGU0OTNlNDU4NmZhMTE3ZDY5OWM3MTc0Y2E1NjQ3MmI4Y2Q4NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFikEAXrN2VJCGw5MGKxXI0sQL4z pVlxvi6pYgqT6yLmZ5drRpUjxkvg6OvizDEl6j4rBO+3gMp8m5wip4rBXYza7VQv HqqtBCG+UMdxTt2EGNVeRT98dqi/53J3mu+6LOFgbqd23XREtfZNhtwGOYvmyyvY EcNyYZxl60coOvvelEVCX3Ip9tkefjS57sGQr7Q2HL+S18UZDjZhWS9rYFYqrgtk AqG0s0Mzpk6TX3VITw1YE8WMYt0pA0wfrZ2T5qX1csfKwfpWeMqt4g/9l0fA0igr IhpdcjgABd1bSQV+2HD6pVghzjdI3KMawX12SvyCMp3OPbIr27YuA+cjHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETkk+RYb6EX1pnHF0ylZHK4zYSgMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmncrwcM EP9g/J3q8wgPMTKNo7FFCtoAbxUKSC5myP0GRdgbfr71uAwJMx3AQEBreOrYJcQ7 USHyn4Nl/5UrY4T7Rn3Il42Vd0JUZAMTEejKKXstWjn/ikYFWXrlfQPlK33DBSJ4 ayMVyNX/ldzFdFB3PBIETGPWbw06EmIgi+oLqwS2Y/yKDVI3pHzhTft88zJVRj5O djtYYE8TPKw4Pd6+4bonWYuNVcIne3jDncd3X+pXSpyD4LKk8iHmSIbfVxsxXUBR O0VqihnPE1Rin8F9TopoTMYYT5k6dMviQG9YiEDitUZT+5923NoLzEsxpEVg1Y92 Jq+a5tjka4w7Ag== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:12 2026 by rpki-client