$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: DRJniJ9cwkwXfY3GevqoyhY12Gmj3xCetPHhB2gYbZw= Subject key identifier: 66:D5:6A:0B:F5:DD:DE:FD:4A:B2:63:E2:E7:95:2D:05:1A:E1:4A:ED Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019D28169D7C941E6E1D3ED2A2599B7F671A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1489 Signing time: Thu 26 Mar 2026 03:01:03 +0000 Manifest this update: Thu 26 Mar 2026 03:01:03 +0000 Manifest next update: Fri 27 Mar 2026 03:01:03 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: ArwXwrKmXMsVVQAjdriT0zDCyUBENEiwZT1cyC34GFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:9d:7c:94:1e:6e:1d:3e:d2:a2:59:9b:7f:67:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Mar 26 03:01:03 2026 GMT Not After : Mar 27 03:01:03 2026 GMT Subject: CN=66d56a0bf5dddefd4ab263e2e7952d051ae14aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:9d:07:53:b5:91:09:25:ba:f0:de:47:cf: 4a:39:a9:23:dc:38:a7:83:cc:bc:61:05:1f:2e:fb: 38:ed:a3:38:92:88:11:44:5b:49:5c:45:7c:87:b4: f4:ad:bc:22:ef:41:b4:98:f6:26:df:bc:0e:79:fe: d7:c4:92:56:f0:03:6b:de:88:05:1f:6b:12:e7:a2: a2:a1:67:e6:d5:d5:6b:4e:33:3b:17:2e:1c:b7:a9: 27:53:db:3e:30:d4:07:2a:ae:28:d3:48:2b:51:fa: 1e:08:22:9f:68:77:af:5b:38:51:36:60:54:3d:c3: 66:d1:04:d8:2a:29:5a:3f:0b:a0:28:57:98:c1:df: 83:f0:79:23:79:7d:64:c3:99:7e:f5:14:f8:e0:1f: ec:d8:50:9a:f0:75:0e:66:52:a9:af:b8:41:ef:cd: b4:76:c9:e2:13:31:ce:48:62:16:cb:4d:a4:a2:ea: e2:7f:9e:27:5c:c1:20:f0:84:73:b4:47:20:2a:2c: 02:26:dd:cd:81:aa:98:1f:02:0d:b1:f4:f7:5c:3c: fa:e0:0d:a7:fe:14:e7:5b:13:f5:b3:75:44:16:3c: 7c:37:66:4c:a3:34:8b:04:06:43:3e:b0:74:3c:e7: ec:da:dd:76:aa:67:81:70:23:62:fc:6d:84:28:19: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D5:6A:0B:F5:DD:DE:FD:4A:B2:63:E2:E7:95:2D:05:1A:E1:4A:ED X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:02:07:d6:4d:44:87:42:1e:40:7d:81:a8:39:dd:0e:d6: 32:21:2c:ca:88:ad:af:37:38:58:c2:08:39:d0:f8:47:9d:d0: ce:c4:9d:05:b9:d8:e6:45:3d:1b:14:ec:45:3e:84:ec:27:ca: 70:71:a4:84:5e:97:03:2b:52:dc:79:b3:fa:3f:31:32:31:8f: 0c:f4:b2:b2:e3:04:b7:e7:ce:29:10:a5:5a:d4:42:54:87:39: 07:20:ae:55:af:05:61:c1:18:83:60:eb:25:c4:99:05:6c:e0: 97:7a:ee:7a:03:19:21:32:4e:0b:9b:38:c4:8f:b6:9b:32:46: 50:0f:bb:c6:5c:5e:48:28:b1:a2:9d:b4:09:ea:ee:ca:31:7e: 03:64:cf:3f:84:61:bf:03:5a:3f:b9:0d:58:97:c4:d3:36:92: 62:0b:69:e4:07:19:84:0e:f9:1a:1e:7d:e0:bb:be:5d:01:77: 50:73:e6:1c:dd:ff:fa:c1:a0:5d:b7:80:86:60:61:4a:b8:3b: 10:5e:25:90:7d:ff:cf:f5:43:1a:6e:5f:fe:9f:84:1e:aa:79: 1e:57:c9:14:b8:29:27:2c:3f:11:7c:1a:6c:5f:45:09:f2:5e: 66:0b:9e:b6:42:71:1f:49:56:ed:87:f1:a0:1e:66:68:27:95: 24:26:4e:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFp18lB5uHT7Solmbf2caMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMzI2MDMwMTAzWhcNMjYwMzI3MDMwMTAzWjAzMTEwLwYDVQQD Eyg2NmQ1NmEwYmY1ZGRkZWZkNGFiMjYzZTJlNzk1MmQwNTFhZTE0YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ludB1O1kQkluvDeR89KOakj3Din g8y8YQUfLvs47aM4kogRRFtJXEV8h7T0rbwi70G0mPYm37wOef7XxJJW8ANr3ogF H2sS56KioWfm1dVrTjM7Fy4ct6knU9s+MNQHKq4o00grUfoeCCKfaHevWzhRNmBU PcNm0QTYKilaPwugKFeYwd+D8HkjeX1kw5l+9RT44B/s2FCa8HUOZlKpr7hB7820 dsniEzHOSGIWy02kourif54nXMEg8IRztEcgKiwCJt3NgaqYHwINsfT3XDz64A2n /hTnWxP1s3VEFjx8N2ZMozSLBAZDPrB0POfs2t12qmeBcCNi/G2EKBnQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbVagv13d79SrJj4ueVLQUa4UrtMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTsCB9ZN RIdCHkB9gag53Q7WMiEsyoitrzc4WMIIOdD4R53QzsSdBbnY5kU9GxTsRT6E7CfK cHGkhF6XAytS3Hmz+j8xMjGPDPSysuMEt+fOKRClWtRCVIc5ByCuVa8FYcEYg2Dr JcSZBWzgl3ruegMZITJOC5s4xI+2mzJGUA+7xlxeSCixop20CeruyjF+A2TPP4Rh vwNaP7kNWJfE0zaSYgtp5AcZhA75Gh594Lu+XQF3UHPmHN3/+sGgXbeAhmBhSrg7 EF4lkH3/z/VDGm5f/p+EHqp5HlfJFLgpJyw/EXwabF9FCfJeZguetkJxH0lW7Yfx oB5maCeVJCZOzw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:11 2026 by rpki-client