$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: PCRqF/N4KxW6t7vzhy6nKi6MzPAEghdprpmD25Mx7rc= Subject key identifier: 22:EB:17:DD:49:08:BF:56:35:C4:78:B4:33:E1:B4:1D:39:85:D2:1A Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019D2695C76C6A37616F759BEDE6C0AF0152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0D87 Signing time: Wed 25 Mar 2026 20:00:43 +0000 Manifest this update: Wed 25 Mar 2026 20:00:43 +0000 Manifest next update: Thu 26 Mar 2026 20:00:43 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: rG1tqcPp8MVGg7ejUSA86Jv6pyMqJF0MKH1Olo2SI+Y=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:95:c7:6c:6a:37:61:6f:75:9b:ed:e6:c0:af:01:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Mar 25 20:00:43 2026 GMT Not After : Mar 26 20:00:43 2026 GMT Subject: CN=22eb17dd4908bf5635c478b433e1b41d3985d21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:ed:bc:03:68:1f:c3:51:bd:71:42:82:cc: ca:d3:ba:28:db:68:45:72:23:12:d5:96:66:0f:97: 26:42:03:98:b4:c7:98:a4:c1:5c:56:73:05:5c:da: ca:27:35:21:04:f2:da:5c:fa:c3:18:3a:af:10:8d: 62:5a:2e:58:ec:1b:df:38:38:a3:9f:32:74:cb:9d: 90:7a:7d:ca:21:16:e6:62:b9:b9:61:24:f9:b6:55: e8:6f:53:55:50:20:0e:fd:52:3f:20:42:f5:a7:14: 1e:d7:54:20:70:4e:28:9e:ea:19:ed:21:ba:f0:17: 92:4e:8c:eb:06:61:4e:47:a6:67:ac:39:c5:56:75: 41:75:2f:95:d9:b7:db:b7:de:ce:21:9d:eb:e0:7b: 4b:c4:3f:3c:c3:e4:68:56:95:71:c9:f3:ac:61:12: 93:25:70:7c:df:71:fb:31:0a:58:ea:37:c3:90:f8: 27:e1:d8:6d:be:5b:bb:ab:8d:d4:02:46:39:18:3b: ec:78:c6:90:82:d7:19:c5:79:1b:48:4c:96:ca:bd: 79:81:71:24:ba:bd:50:7b:0e:58:b5:b5:9a:66:8a: df:4d:20:25:c7:af:48:a0:b2:cd:46:2f:c4:df:55: d7:2b:a8:4b:0c:04:9f:56:40:94:48:08:c4:65:9f: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EB:17:DD:49:08:BF:56:35:C4:78:B4:33:E1:B4:1D:39:85:D2:1A X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:37:56:db:63:f4:02:d4:a4:ff:f2:dd:40:25:80:e2:96:54: 1b:4d:58:80:10:07:1a:2b:b1:29:78:7b:15:b0:71:30:f0:e0: 41:9b:b0:89:de:e6:2a:69:74:5a:9b:8d:b7:b7:47:95:7d:5b: 8b:f8:42:da:90:76:91:1d:cc:fb:c8:cb:f6:0d:7c:44:26:bd: c1:db:d5:59:76:15:f2:2d:a0:2a:a9:4e:1a:d2:00:ef:b1:98: 33:e7:c6:f4:60:ba:fa:a4:df:7b:02:fa:34:e6:61:f9:b1:7d: 5e:f5:10:e3:43:6a:40:b5:e5:98:44:a6:26:9c:17:d7:48:24: 53:69:74:c7:a7:99:87:bd:db:e2:cb:39:87:c4:af:0b:5f:7c: c6:ca:26:89:fd:c9:45:84:a9:88:6f:27:b2:a8:56:26:12:09: 4d:3d:71:74:52:f7:79:45:3b:60:73:cb:d2:6f:b6:6e:39:7e: 1e:d9:c7:51:9c:62:8c:d5:49:81:4e:9a:fb:61:66:f9:2c:1c: 81:2b:16:36:d6:54:72:0b:1c:c5:6f:0f:8b:18:26:b0:f8:58: 04:21:20:4c:24:7f:ab:a3:53:64:f6:63:82:7e:95:34:74:de: 05:53:61:19:0a:98:7c:ed:b3:b4:1f:ba:9a:95:33:ed:3b:96: 46:03:6d:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlcdsajdhb3Wb7ebArwFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMzI1MjAwMDQzWhcNMjYwMzI2MjAwMDQzWjAzMTEwLwYDVQQD EygyMmViMTdkZDQ5MDhiZjU2MzVjNDc4YjQzM2UxYjQxZDM5ODVkMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sPtvANoH8NRvXFCgszK07oo22hF ciMS1ZZmD5cmQgOYtMeYpMFcVnMFXNrKJzUhBPLaXPrDGDqvEI1iWi5Y7BvfODij nzJ0y52Qen3KIRbmYrm5YST5tlXob1NVUCAO/VI/IEL1pxQe11QgcE4onuoZ7SG6 8BeSTozrBmFOR6ZnrDnFVnVBdS+V2bfbt97OIZ3r4HtLxD88w+RoVpVxyfOsYRKT JXB833H7MQpY6jfDkPgn4dhtvlu7q43UAkY5GDvseMaQgtcZxXkbSEyWyr15gXEk ur1Qew5YtbWaZorfTSAlx69IoLLNRi/E31XXK6hLDASfVkCUSAjEZZ/GjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLrF91JCL9WNcR4tDPhtB05hdIaMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDdW22P0 AtSk//LdQCWA4pZUG01YgBAHGiuxKXh7FbBxMPDgQZuwid7mKml0WpuNt7dHlX1b i/hC2pB2kR3M+8jL9g18RCa9wdvVWXYV8i2gKqlOGtIA77GYM+fG9GC6+qTfewL6 NOZh+bF9XvUQ40NqQLXlmESmJpwX10gkU2l0x6eZh73b4ss5h8SvC198xsomif3J RYSpiG8nsqhWJhIJTT1xdFL3eUU7YHPL0m+2bjl+HtnHUZxijNVJgU6a+2Fm+Swc gSsWNtZUcgscxW8PixgmsPhYBCEgTCR/q6NTZPZjgn6VNHTeBVNhGQqYfO2ztB+6 mpUz7TuWRgNtmw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:27 2026 by rpki-client