$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: MfNKK1ifn7fEcnByfekeKTo68i46Siek5fwXMHPAMdw= Subject key identifier: D5:97:C6:91:32:EC:B9:81:EB:26:D1:42:CA:1E:98:43:A5:5C:D6:41 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019D2703C94F391D3E3D9C0ADCA70579E7E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 189C Signing time: Wed 25 Mar 2026 22:00:52 +0000 Manifest this update: Wed 25 Mar 2026 22:00:52 +0000 Manifest next update: Thu 26 Mar 2026 22:00:52 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: WpHgd6RNe4MtbBm2Huj4km6wEVPMKPyLWkaBLhvm6x4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:c9:4f:39:1d:3e:3d:9c:0a:dc:a7:05:79:e7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Mar 25 22:00:52 2026 GMT Not After : Mar 26 22:00:52 2026 GMT Subject: CN=d597c69132ecb981eb26d142ca1e9843a55cd641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:e0:87:a3:c7:f1:e8:8f:4b:6f:5b:18:4f: 62:4b:dd:8b:f6:ae:e5:ea:ae:a0:aa:fd:12:25:5c: 07:c6:71:a0:2d:48:1b:02:f1:e0:33:63:24:30:2d: 35:fe:03:45:21:c0:5a:a3:42:fc:4d:49:1c:34:59: 67:b8:4a:5b:bb:47:bb:da:63:5c:a5:4c:db:42:05: 58:7e:dd:e9:f7:2b:ce:fe:fb:48:dc:70:0a:9e:5e: 18:bd:18:4a:3c:61:3a:b5:4a:c4:b4:f6:93:4d:2d: e1:05:4e:42:49:0d:71:5a:2b:83:42:a1:0f:3a:ea: 88:9a:18:8b:ce:7e:fc:97:59:8e:53:6d:7a:1c:d8: 2a:a8:ba:92:ae:c3:19:e4:30:4b:e2:11:bc:01:f4: 02:6e:70:32:4d:35:21:74:34:97:ef:57:57:23:93: 59:17:84:bb:23:8d:7f:28:aa:91:85:81:4e:3d:22: e4:c4:49:44:7b:a1:67:36:2e:ea:ea:fa:ae:3f:56: f2:14:d8:01:08:cd:f5:a1:98:6c:b3:94:55:93:69: 8d:81:83:5f:40:6c:cd:73:ac:df:07:c2:bb:97:64: f5:96:28:93:1d:58:13:ae:7e:e7:b4:7c:12:ff:77: a7:2a:59:e8:0d:c2:5a:29:79:db:85:7e:53:2d:f6: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:97:C6:91:32:EC:B9:81:EB:26:D1:42:CA:1E:98:43:A5:5C:D6:41 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:69:bb:ca:bb:81:7d:ba:b0:6f:84:e4:40:38:01:d4:5d:b4: 2d:26:09:15:09:70:f1:c2:9f:2d:e0:78:c7:39:bc:f4:14:61: db:fa:7b:06:4e:5a:ac:1d:f7:fc:62:ab:4e:e4:2d:de:e8:0a: 57:c2:92:87:73:8b:fa:34:d1:de:ea:35:0c:7e:cd:b9:6d:35: d1:e2:16:4b:8d:ef:34:3a:4a:7d:c9:82:4e:45:1a:6f:33:83: 29:d5:37:e3:87:92:a1:b1:cb:2c:89:4c:b6:8c:14:18:16:6a: da:93:7f:7c:93:d6:01:e0:9c:73:5a:09:d3:7c:b4:37:28:e0: cd:ef:05:c8:eb:80:b7:07:5d:62:e9:fc:04:c9:03:8e:57:8b: d6:05:0a:e0:ce:a8:79:fe:2e:5f:25:70:fc:1d:aa:e3:56:eb: 60:ce:04:a3:e1:16:ac:81:c5:54:8f:98:57:ba:c7:45:f1:ac: 0e:dd:2d:4b:01:d2:9c:51:ed:d6:6f:60:da:a4:8f:95:bf:00: 22:b7:d4:e5:cc:24:2b:2b:bf:78:2b:3f:5c:6c:08:ab:b8:ba: ee:de:65:3b:2d:01:94:bf:08:e5:a8:63:41:c1:9c:95:1d:72: e3:be:46:9b:9d:5d:04:15:33:74:ba:3a:f5:61:f5:e1:9e:a8: 7f:eb:7e:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA8lPOR0+PZwK3KcFeefiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMzI1MjIwMDUyWhcNMjYwMzI2MjIwMDUyWjAzMTEwLwYDVQQD EyhkNTk3YzY5MTMyZWNiOTgxZWIyNmQxNDJjYTFlOTg0M2E1NWNkNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2jgh6PH8eiPS29bGE9iS92L9q7l 6q6gqv0SJVwHxnGgLUgbAvHgM2MkMC01/gNFIcBao0L8TUkcNFlnuEpbu0e72mNc pUzbQgVYft3p9yvO/vtI3HAKnl4YvRhKPGE6tUrEtPaTTS3hBU5CSQ1xWiuDQqEP OuqImhiLzn78l1mOU216HNgqqLqSrsMZ5DBL4hG8AfQCbnAyTTUhdDSX71dXI5NZ F4S7I41/KKqRhYFOPSLkxElEe6FnNi7q6vquP1byFNgBCM31oZhss5RVk2mNgYNf QGzNc6zfB8K7l2T1liiTHVgTrn7ntHwS/3enKlnoDcJaKXnbhX5TLfbAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWXxpEy7LmB6ybRQsoemEOlXNZBMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGm7yruB fbqwb4TkQDgB1F20LSYJFQlw8cKfLeB4xzm89BRh2/p7Bk5arB33/GKrTuQt3ugK V8KSh3OL+jTR3uo1DH7NuW010eIWS43vNDpKfcmCTkUabzODKdU344eSobHLLIlM towUGBZq2pN/fJPWAeCcc1oJ03y0Nyjgze8FyOuAtwddYun8BMkDjleL1gUK4M6o ef4uXyVw/B2q41brYM4Eo+EWrIHFVI+YV7rHRfGsDt0tSwHSnFHt1m9g2qSPlb8A IrfU5cwkKyu/eCs/XGwIq7i67t5lOy0BlL8I5ahjQcGclR1y475Gm51dBBUzdLo6 9WH14Z6of+t+yA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:15 2026 by rpki-client