$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: kfYjyr216g8xJkxEtI2k2I9hQtOPzlaY14WW3s2hcDo= Subject key identifier: AE:E1:59:BD:31:AB:BF:6E:C4:FF:CA:86:A9:F7:5B:B4:CE:B1:BA:B4 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019D25F18A4E4EE6EDD1750C8518531CB0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1892 Signing time: Wed 25 Mar 2026 17:01:19 +0000 Manifest this update: Wed 25 Mar 2026 17:01:19 +0000 Manifest next update: Thu 26 Mar 2026 17:01:19 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: gJm0MDh8cZuyut0OWwTHVDZAisa4TcLU3IcdVtWVquc=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:8a:4e:4e:e6:ed:d1:75:0c:85:18:53:1c:b0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Mar 25 17:01:19 2026 GMT Not After : Mar 26 17:01:19 2026 GMT Subject: CN=aee159bd31abbf6ec4ffca86a9f75bb4ceb1bab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:a5:0e:86:c9:b6:b5:04:8d:0f:db:c6:80: e9:6b:8c:ae:d7:88:5f:a5:da:54:cf:7f:85:e2:97: 0d:a4:33:e4:3e:22:f9:65:48:d4:f2:f8:c1:20:47: cd:63:d7:0d:48:3d:cf:13:93:8e:11:af:c8:f4:bf: 49:0f:bb:9f:2f:47:9d:fe:51:81:87:f2:71:5c:21: c4:8a:c8:d3:fd:14:02:93:53:8b:e7:6a:21:a7:9f: 56:d4:8f:43:bc:56:dc:da:9f:a5:bf:78:f1:9d:c0: 6f:19:22:aa:37:cd:8e:59:11:d2:9e:a3:80:64:38: fd:33:00:a4:ec:e0:d5:95:72:3c:12:d8:ec:89:be: b4:19:5f:e6:ac:31:2d:0e:85:23:a7:54:1c:ef:2a: d3:07:83:9d:17:f3:c0:f8:7b:e9:5d:53:f7:93:4e: e6:e7:9f:f4:bc:df:86:3a:77:65:8e:ad:87:f9:59: 3c:9d:59:b0:a1:b3:ac:5a:77:57:4e:17:a1:be:46: fd:66:d5:60:6f:3a:65:e5:ca:8a:f3:f7:4d:5c:97: 3e:21:86:e6:dd:ed:80:f3:2b:bd:92:73:39:f5:64: b7:1b:a0:d0:9f:41:ce:69:79:13:bd:f9:74:0c:d4: 82:3b:58:9c:8b:51:c2:70:be:73:0c:37:04:93:f9: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E1:59:BD:31:AB:BF:6E:C4:FF:CA:86:A9:F7:5B:B4:CE:B1:BA:B4 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:e4:3b:f3:4c:53:96:e9:31:5f:02:35:fe:93:ea:8a:bb: 91:08:ce:cf:59:e0:4c:fe:75:56:43:db:05:78:f7:cb:42:2a: 8f:8f:ac:d3:aa:9c:83:0c:e3:0f:8e:a2:ff:4c:f3:d1:67:fe: 7d:0f:33:af:3c:bb:3c:6f:ba:a9:83:35:f6:0d:e1:a6:73:db: d9:22:77:8e:d9:eb:37:24:f0:88:2f:07:1e:03:4b:ab:76:81: 57:e7:8f:e0:9c:7c:ea:eb:35:48:28:67:02:bc:de:8e:b5:75: 61:f1:0d:a8:69:72:a5:e7:ab:bc:15:e4:cf:fb:70:9d:10:d7: 4d:1f:08:76:34:22:ce:aa:09:bf:99:43:85:04:94:8e:86:d4: ee:8a:97:0a:44:a0:d6:14:ad:2f:e0:ff:9d:e6:49:bf:8e:86: 91:a5:80:7f:e6:a9:9d:d1:de:50:44:c0:33:8e:db:3b:8f:50: 09:cd:b2:2b:59:1b:e4:44:43:7c:04:c1:0b:87:54:bb:5e:4b: 9f:7f:e3:0b:35:0c:96:c3:cc:fa:03:e3:69:9f:3e:3e:05:81: a5:e2:3b:a3:ff:f9:c2:7a:c3:a4:a5:cc:0a:0e:e2:7a:c9:91: c9:19:0f:da:e0:65:00:36:47:80:f2:06:c6:70:60:5c:a2:c7: a6:8d:9d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8YpOTubt0XUMhRhTHLCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMzI1MTcwMTE5WhcNMjYwMzI2MTcwMTE5WjAzMTEwLwYDVQQD EyhhZWUxNTliZDMxYWJiZjZlYzRmZmNhODZhOWY3NWJiNGNlYjFiYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGWlDobJtrUEjQ/bxoDpa4yu14hf pdpUz3+F4pcNpDPkPiL5ZUjU8vjBIEfNY9cNSD3PE5OOEa/I9L9JD7ufL0ed/lGB h/JxXCHEisjT/RQCk1OL52ohp59W1I9DvFbc2p+lv3jxncBvGSKqN82OWRHSnqOA ZDj9MwCk7ODVlXI8Etjsib60GV/mrDEtDoUjp1Qc7yrTB4OdF/PA+HvpXVP3k07m 55/0vN+GOndljq2H+Vk8nVmwobOsWndXThehvkb9ZtVgbzpl5cqK8/dNXJc+IYbm 3e2A8yu9knM59WS3G6DQn0HOaXkTvfl0DNSCO1ici1HCcL5zDDcEk/lNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7hWb0xq79uxP/Khqn3W7TOsbq0MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxzkO/NM U5bpMV8CNf6T6oq7kQjOz1ngTP51VkPbBXj3y0Iqj4+s06qcgwzjD46i/0zz0Wf+ fQ8zrzy7PG+6qYM19g3hpnPb2SJ3jtnrNyTwiC8HHgNLq3aBV+eP4Jx86us1SChn ArzejrV1YfENqGlypeervBXkz/twnRDXTR8IdjQizqoJv5lDhQSUjobU7oqXCkSg 1hStL+D/neZJv46GkaWAf+apndHeUETAM47bO49QCc2yK1kb5ERDfATBC4dUu15L n3/jCzUMlsPM+gPjaZ8+PgWBpeI7o//5wnrDpKXMCg7iesmRyRkP2uBlADZHgPIG xnBgXKLHpo2dow== -----END CERTIFICATE-----Generated at Thu Mar 26 02:41:49 2026 by rpki-client