$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: yEnIrkNNcb2uVXpbc1wDGTiaH+3OhZKUJ2kyDDwE7Tc= Subject key identifier: 56:8A:05:E0:1A:A7:F2:59:5D:AF:FC:3E:BE:B5:EE:B8:B8:38:7E:EF Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019D265F8036728FB5E17CDF02B36DA44D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 089A Signing time: Wed 25 Mar 2026 19:01:26 +0000 Manifest this update: Wed 25 Mar 2026 19:01:26 +0000 Manifest next update: Thu 26 Mar 2026 19:01:26 +0000 Files and hashes: 1: NzMNXeLDcLYIFC344oXjWazxrR4.roa (hash: UgKP2v1WGk4SEP8/PEV1HHI9/43agiNTHs+4EhmSNfE=) 2: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: MRMhTGeu/fJ7PlRSw22CxbBCCzJlbznjoPQF5Gc8HEY=) 3: STnOJRTNql21M2Kz5QY42xiaMM4.roa (hash: 5N7rcDLtfU0kN4gxROhTw9CW7XTPLN7mgLp3zMXOn6o=) 4: Wol6fw44OugIpyfwtURH8iAfI-E.roa (hash: gGDOi1vglKxk1aYaUA2in8OVjOdtb3M/Bet9OhLskOo=) 5: _MGbRQDu2ns3ZgtHHgodxQrWr6M.roa (hash: jDV5qNzh/x2GH+Pt80kizBcWmWTRDyTfwoJ6oLaNVg0=) 6: d7BZIUUqBrS52FwlH2ljflWbZ_A.roa (hash: 9mI4zy/olh2ONX+uGlVWvbZVvFWOt7oaz33dGchSk8s=) 7: fbA42s8Kmn6_qiii4C2mgQXSZaY.roa (hash: wv9Hm3pzXU0ti/JP4SWAksa5yQa0BXn03rMeZYg4wgo=) 8: pbj7BlyoAhp9vFcoK7aeUx0ZoFE.roa (hash: Xb5omDyQG1K2G5xJyofbR13JuOlhM5SRdb6qoh7Mgs0=) 9: qIBcgoxGaTpRyT1GVIURNEpjT0U.roa (hash: vzZMI2J8AcgNX06ElvLWaU+DX1AEJ/xGwsQNinRF8Xk=) 10: uHuUzzjJV0HUtV7aunxTY6hSyL0.roa (hash: ywDDk4Da2VFEPAZYkJbPbp7ZppYitudvQc1nou/VXXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:80:36:72:8f:b5:e1:7c:df:02:b3:6d:a4:4d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Mar 25 19:01:26 2026 GMT Not After : Mar 26 19:01:26 2026 GMT Subject: CN=568a05e01aa7f2595daffc3ebeb5eeb8b8387eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:33:82:7f:53:41:c2:17:00:4c:29:8f:bb: 1d:70:76:78:c8:0b:57:4c:ab:a5:af:84:83:eb:8b: b4:e2:6a:99:cb:f4:89:9d:c4:93:89:e9:f9:07:62: 46:60:78:a6:0f:d2:f8:fa:c4:bd:69:67:d6:13:28: 86:b3:e6:74:f4:c7:86:4e:ca:aa:f6:47:97:f2:2c: 2c:2a:2f:4e:e1:d0:25:d8:e3:0f:14:96:d5:91:19: 70:18:a5:14:c7:cf:97:f5:eb:9b:a4:ed:b6:e0:dc: c1:de:90:f5:59:4f:11:4d:5c:3a:e9:14:17:88:c2: 0c:4a:7d:fe:5e:9f:00:10:c5:fd:83:02:2b:52:7a: 74:12:39:0e:ef:6d:84:9a:9f:4a:31:91:69:05:29: 27:20:12:7f:7d:ef:77:ed:56:54:3e:58:27:f6:59: 87:4c:4e:f9:fa:ed:7e:90:60:50:00:6e:52:25:2d: 9f:e8:5e:44:4f:2b:9a:10:e3:2b:56:97:8c:34:17: 3e:0e:14:e8:87:0d:b3:07:63:94:40:82:be:4a:34: ed:05:3c:69:9e:4b:64:54:89:29:7b:d6:b8:aa:84: ea:6f:4a:e6:79:ab:cc:a8:90:4d:af:ce:6b:ca:35: 26:c8:06:39:b9:bb:19:f1:9e:ee:49:57:f9:84:98: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:05:E0:1A:A7:F2:59:5D:AF:FC:3E:BE:B5:EE:B8:B8:38:7E:EF X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:87:26:87:04:db:42:9c:8f:d8:9d:3f:8c:91:1d:49:3c:59: 1f:cb:3f:e3:f5:6c:f4:96:a8:85:c8:94:35:c0:a6:9e:2d:cd: 2d:ec:25:c1:7c:f5:c1:09:04:0e:41:85:b1:c2:a6:b1:ff:c8: bb:27:82:98:6f:7b:ec:d6:78:7d:f1:23:47:ae:e4:f3:a8:39: e4:ce:1c:04:74:84:9d:e4:98:cc:10:bc:be:e4:e2:e1:12:fc: 15:30:d6:6c:01:77:3c:fc:b0:95:e2:02:a6:3c:c1:44:7a:45: 9c:30:9b:29:c5:50:88:15:80:d3:31:5e:8a:41:f3:8f:9d:5b: 0e:dc:b2:b4:70:ab:87:ba:62:65:5f:30:74:c3:18:10:6b:fd: 07:7f:67:9c:e8:8c:4e:da:09:e5:c8:59:a1:f2:17:08:21:42: e4:52:52:1c:dc:c4:d5:3e:ef:a0:3a:d7:75:1c:3c:5d:2d:f0: 73:6f:f6:b8:6c:95:40:32:16:8d:e7:e8:f7:54:c3:29:df:25: ad:d0:0a:37:ca:32:70:15:2c:c8:93:85:31:c5:09:45:50:11: a2:03:0e:bf:8b:8a:9d:16:85:50:c0:c9:6e:59:1c:93:c2:f6: dc:30:dc:69:b0:1b:99:17:67:07:62:6c:b1:53:ca:2f:df:ec: ec:42:89:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX4A2co+14XzfArNtpE0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMzI1MTkwMTI2WhcNMjYwMzI2MTkwMTI2WjAzMTEwLwYDVQQD Eyg1NjhhMDVlMDFhYTdmMjU5NWRhZmZjM2ViZWI1ZWViOGI4Mzg3ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX8zgn9TQcIXAEwpj7sdcHZ4yAtX TKulr4SD64u04mqZy/SJncSTien5B2JGYHimD9L4+sS9aWfWEyiGs+Z09MeGTsqq 9keX8iwsKi9O4dAl2OMPFJbVkRlwGKUUx8+X9eubpO224NzB3pD1WU8RTVw66RQX iMIMSn3+Xp8AEMX9gwIrUnp0EjkO722Emp9KMZFpBSknIBJ/fe937VZUPlgn9lmH TE75+u1+kGBQAG5SJS2f6F5ETyuaEOMrVpeMNBc+DhTohw2zB2OUQIK+SjTtBTxp nktkVIkpe9a4qoTqb0rmeavMqJBNr85ryjUmyAY5ubsZ8Z7uSVf5hJim/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaKBeAap/JZXa/8Pr617ri4OH7vMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYcmhwTb QpyP2J0/jJEdSTxZH8s/4/Vs9JaohciUNcCmni3NLewlwXz1wQkEDkGFscKmsf/I uyeCmG977NZ4ffEjR67k86g55M4cBHSEneSYzBC8vuTi4RL8FTDWbAF3PPywleIC pjzBRHpFnDCbKcVQiBWA0zFeikHzj51bDtyytHCrh7piZV8wdMMYEGv9B39nnOiM TtoJ5chZofIXCCFC5FJSHNzE1T7voDrXdRw8XS3wc2/2uGyVQDIWjefo91TDKd8l rdAKN8oycBUsyJOFMcUJRVARogMOv4uKnRaFUMDJblkck8L23DDcabAbmRdnB2Js sVPKL9/s7EKJww== -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:03 2026 by rpki-client