$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: uL/+Mz8edhOzSWyUbfBiZ9TguM/bSMSvDPO7nBxccvw= Subject key identifier: 20:A5:ED:0C:7D:93:CF:6B:B7:4D:82:98:8B:9E:14:00:9C:63:E1:04 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019D26284B1D6CB9C1290A7B44B6C15C2B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0146 Signing time: Wed 25 Mar 2026 18:01:07 +0000 Manifest this update: Wed 25 Mar 2026 18:01:07 +0000 Manifest next update: Thu 26 Mar 2026 18:01:07 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: kkGHNCsnSN2PTZ7rmjrqU7U3jHKc4seTb4LFZz54vfY=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:4b:1d:6c:b9:c1:29:0a:7b:44:b6:c1:5c:2b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Mar 25 18:01:07 2026 GMT Not After : Mar 26 18:01:07 2026 GMT Subject: CN=20a5ed0c7d93cf6bb74d82988b9e14009c63e104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c8:99:65:0f:98:1b:8f:d8:8e:09:39:ba:29: a2:f3:0e:84:35:ae:d1:0f:58:10:3d:ac:89:e5:38: f5:da:82:79:53:9d:e9:8a:4d:91:e6:72:32:fe:03: e4:b8:82:16:73:a3:86:02:5f:13:3e:f8:6f:5a:44: 69:56:18:25:7f:3b:70:4f:55:4a:f3:90:2f:28:92: 5f:a8:e3:32:e3:c8:9a:e0:c9:8d:dc:2f:f8:15:9d: 4b:c0:3f:62:54:ff:4d:e3:7f:d8:6b:08:c6:08:ef: fe:2d:44:34:55:04:6f:a8:51:38:18:43:09:d9:d1: 13:dd:0d:d4:26:d8:76:3c:06:99:2f:f8:dd:26:13: 50:07:51:9a:88:b4:24:d7:9e:93:40:2a:8e:9f:57: 46:89:8a:4f:d2:16:ee:cc:26:e5:1b:56:07:0c:91: a7:1a:2e:0e:ed:38:8c:d0:24:3f:5f:75:53:1e:f7: 22:ee:6b:43:4e:6d:f3:30:10:fa:89:3f:ba:57:2f: e3:56:0d:21:e5:00:b5:66:3f:7d:85:ec:cb:c0:9c: c1:46:24:89:ce:a1:9d:d1:5a:eb:67:f9:c0:81:81: 52:b2:49:8a:0f:b6:85:5d:4d:57:f7:b5:77:ac:b1: 89:09:d5:53:18:1e:56:ea:f0:be:cc:2d:56:82:e3: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:ED:0C:7D:93:CF:6B:B7:4D:82:98:8B:9E:14:00:9C:63:E1:04 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:78:4a:48:5b:2a:88:b3:4e:bb:4e:98:4e:cc:71:86:c0:96: 20:83:e5:a9:bd:fd:95:6b:1b:c3:81:33:41:bd:75:85:68:e4: 3e:c9:db:67:48:e0:1a:9b:46:3c:f5:1a:38:25:1a:7e:32:d3: e5:0c:d0:69:14:eb:70:7c:db:e7:ca:03:87:80:02:26:51:ac: f9:b5:b6:ac:3e:8d:60:b5:f2:cc:b8:b9:27:8f:09:95:28:0f: ea:26:6d:0c:32:f3:35:66:07:79:4f:85:18:79:71:6b:f1:6b: 1b:84:07:13:70:40:fe:b8:b4:dc:46:97:40:af:0b:05:60:98: dc:f1:e5:69:3a:43:49:aa:e8:78:63:95:9b:19:2f:15:14:a8: 79:1b:e2:bd:0e:0e:2a:3c:c1:2d:0e:0f:46:e2:c1:a6:99:c8: c1:88:a8:5f:9c:db:b1:48:29:1e:d9:d0:87:89:f0:e8:1e:26: 32:e0:1a:7c:8b:34:26:f9:00:f9:57:b5:8f:b5:b9:35:80:7e: 0b:87:83:0b:56:ab:d6:0b:2e:fb:18:be:f2:95:89:89:9e:32: 99:e3:fd:2c:d0:43:86:54:91:3f:b9:4a:ed:8c:1f:22:ba:0c: 3a:52:3d:38:b7:29:8a:6e:9c:26:46:fc:1a:9f:b1:cb:76:b8: ce:bf:75:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKEsdbLnBKQp7RLbBXCtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMzI1MTgwMTA3WhcNMjYwMzI2MTgwMTA3WjAzMTEwLwYDVQQD EygyMGE1ZWQwYzdkOTNjZjZiYjc0ZDgyOTg4YjllMTQwMDljNjNlMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8iZZQ+YG4/Yjgk5uimi8w6ENa7R D1gQPayJ5Tj12oJ5U53pik2R5nIy/gPkuIIWc6OGAl8TPvhvWkRpVhglfztwT1VK 85AvKJJfqOMy48ia4MmN3C/4FZ1LwD9iVP9N43/YawjGCO/+LUQ0VQRvqFE4GEMJ 2dET3Q3UJth2PAaZL/jdJhNQB1GaiLQk156TQCqOn1dGiYpP0hbuzCblG1YHDJGn Gi4O7TiM0CQ/X3VTHvci7mtDTm3zMBD6iT+6Vy/jVg0h5QC1Zj99hezLwJzBRiSJ zqGd0VrrZ/nAgYFSskmKD7aFXU1X97V3rLGJCdVTGB5W6vC+zC1WguOErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCl7Qx9k89rt02CmIueFACcY+EEMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHhKSFsq iLNOu06YTsxxhsCWIIPlqb39lWsbw4EzQb11hWjkPsnbZ0jgGptGPPUaOCUafjLT 5QzQaRTrcHzb58oDh4ACJlGs+bW2rD6NYLXyzLi5J48JlSgP6iZtDDLzNWYHeU+F GHlxa/FrG4QHE3BA/ri03EaXQK8LBWCY3PHlaTpDSaroeGOVmxkvFRSoeRvivQ4O KjzBLQ4PRuLBppnIwYioX5zbsUgpHtnQh4nw6B4mMuAafIs0JvkA+Ve1j7W5NYB+ C4eDC1ar1gsu+xi+8pWJiZ4ymeP9LNBDhlSRP7lK7YwfIroMOlI9OLcpim6cJkb8 Gp+xy3a4zr91nw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:34:27 2026 by rpki-client