$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: 44fI0zFLurynPxwiPPgPnfvipdtd0HE81QYEvuAfZX8= Subject key identifier: DA:50:EF:7E:C7:42:F6:CC:EA:1D:34:6E:F7:78:B7:EB:2C:58:FA:28 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019D284D9B2BB1A56BF5C9EA9F15A1CE4A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1097 Signing time: Thu 26 Mar 2026 04:01:07 +0000 Manifest this update: Thu 26 Mar 2026 04:01:07 +0000 Manifest next update: Fri 27 Mar 2026 04:01:07 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: HBGgTr/JRbFOPbMT/3v4D6vFmXbv+Tplwy0qE4ZAoIY=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 5: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 6: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 7: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 8: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 9: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 10: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 11: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 12: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 13: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 14: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 15: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 16: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:9b:2b:b1:a5:6b:f5:c9:ea:9f:15:a1:ce:4a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Mar 26 04:01:07 2026 GMT Not After : Mar 27 04:01:07 2026 GMT Subject: CN=da50ef7ec742f6ccea1d346ef778b7eb2c58fa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:73:0c:e3:b6:53:86:b8:c8:43:3b:d1:48: f5:c5:ca:47:5b:be:a0:1e:92:a9:7f:69:1a:8a:f6: 08:f1:a6:d3:7f:3a:75:43:57:05:1f:fd:d1:ea:fc: 92:44:41:e2:cf:d8:f3:63:8b:d4:2b:7c:11:78:ea: 4c:d9:24:78:15:f3:f0:cf:f3:39:25:5b:e9:7d:f0: 7e:ea:09:56:c2:9d:4a:20:47:f3:bb:b8:f7:fd:20: c2:a3:aa:cf:fb:5d:25:1d:35:4d:67:ec:ee:1e:66: 07:9d:6c:ae:cc:92:b6:fe:dc:59:a1:24:bf:bf:a7: 11:58:f6:e2:8c:05:94:ce:e2:a5:e7:13:dc:41:4e: 0f:59:62:3d:81:94:75:6b:8f:a0:7f:cb:2a:bb:9c: 58:15:39:f0:03:80:c3:62:88:ce:20:4d:0a:f4:ca: 70:df:19:21:c4:f2:29:97:b2:d3:07:ed:2c:df:03: 3d:6a:0f:eb:e3:04:ac:87:83:ce:42:31:f1:13:0d: 6a:67:c8:ac:cb:68:a8:0d:8a:c6:ce:78:b0:54:f7: 3f:ad:96:57:e2:01:f9:e2:69:f2:2b:b6:b6:37:05: 3d:9e:fc:5e:64:66:7e:94:ce:11:ee:d9:d5:b3:e0: 11:c2:3f:14:24:47:23:da:6e:47:55:99:c2:07:8c: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:EF:7E:C7:42:F6:CC:EA:1D:34:6E:F7:78:B7:EB:2C:58:FA:28 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:ae:b6:83:2d:80:fc:48:cb:d6:fe:13:13:ec:b7:9c:68:24: 97:90:f1:88:59:3b:46:eb:55:86:3f:5a:01:42:f8:da:4c:b4: 1f:a2:d1:4f:e2:ad:d4:f7:36:c3:5f:6c:f0:2e:a0:c5:cb:98: d1:1b:43:e0:e8:a4:a6:37:4e:b7:dd:ab:27:4a:f5:c5:e2:24: b1:ca:5b:1e:c4:c2:17:c9:b3:fd:df:a9:2a:2d:ae:b4:6f:cd: 57:4f:ba:ab:74:b2:fd:77:51:42:d7:c2:23:d2:13:c6:f9:99: a8:bf:08:cc:c6:48:f0:2f:30:25:c0:56:ab:e0:81:c0:24:d7: a7:59:1c:7b:d5:49:88:13:49:b9:69:b7:13:5b:91:d2:e1:05: 62:99:9f:37:ed:9c:50:22:cb:7b:57:22:49:0a:2c:55:6b:04: 84:f3:ba:c3:cd:1c:ca:e2:bc:c2:1e:d8:74:3b:e5:ec:2c:12: 6c:4e:7d:4b:da:b2:c2:ac:a9:7b:03:f7:82:c1:96:58:fb:81: 79:f4:21:79:b9:48:dd:ac:e0:fa:da:03:a7:76:a7:71:88:66: fb:a1:42:3e:08:8b:64:5f:46:29:d2:63:5d:e1:b2:be:2f:ce: af:8e:b0:28:d1:9b:d5:1e:3f:1b:96:47:a0:f9:10:c0:cd:e1: df:5f:27:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTZsrsaVr9cnqnxWhzkpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMzI2MDQwMTA3WhcNMjYwMzI3MDQwMTA3WjAzMTEwLwYDVQQD EyhkYTUwZWY3ZWM3NDJmNmNjZWExZDM0NmVmNzc4YjdlYjJjNThmYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2hzDOO2U4a4yEM70Uj1xcpHW76g HpKpf2kaivYI8abTfzp1Q1cFH/3R6vySREHiz9jzY4vUK3wReOpM2SR4FfPwz/M5 JVvpffB+6glWwp1KIEfzu7j3/SDCo6rP+10lHTVNZ+zuHmYHnWyuzJK2/txZoSS/ v6cRWPbijAWUzuKl5xPcQU4PWWI9gZR1a4+gf8squ5xYFTnwA4DDYojOIE0K9Mpw 3xkhxPIpl7LTB+0s3wM9ag/r4wSsh4POQjHxEw1qZ8isy2ioDYrGzniwVPc/rZZX 4gH54mnyK7a2NwU9nvxeZGZ+lM4R7tnVs+ARwj8UJEcj2m5HVZnCB4y0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpQ737HQvbM6h00bvd4t+ssWPooMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6a62gy2A /EjL1v4TE+y3nGgkl5DxiFk7RutVhj9aAUL42ky0H6LRT+Kt1Pc2w19s8C6gxcuY 0RtD4OikpjdOt92rJ0r1xeIkscpbHsTCF8mz/d+pKi2utG/NV0+6q3Sy/XdRQtfC I9ITxvmZqL8IzMZI8C8wJcBWq+CBwCTXp1kce9VJiBNJuWm3E1uR0uEFYpmfN+2c UCLLe1ciSQosVWsEhPO6w80cyuK8wh7YdDvl7CwSbE59S9qywqypewP3gsGWWPuB efQheblI3azg+toDp3ancYhm+6FCPgiLZF9GKdJjXeGyvi/Or46wKNGb1R4/G5ZH oPkQwM3h318nrg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:11 2026 by rpki-client