$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: mf2TK/7aXBGCVV743Db2cRPoDlbrsNeGXHCXcCT0lIY= Subject key identifier: E4:50:F6:91:1A:E5:CA:A6:EA:3F:AA:49:CF:3F:73:F4:8B:FE:54:12 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019D27A886EA0D0CA9453C65ED5556B6BE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 121C Signing time: Thu 26 Mar 2026 01:00:49 +0000 Manifest this update: Thu 26 Mar 2026 01:00:49 +0000 Manifest next update: Fri 27 Mar 2026 01:00:49 +0000 Files and hashes: 1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 4: K9Rcc3WzxcMz5W462D1Uq4gMncI.roa (hash: sMPLEzXi/TLAjcusPwFMkhIofh4njesGN5Oaf9QbDY8=) 5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=) 6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 7: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 8: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 9: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: rJHmGGoYm6+Q4T9GXut9AcHAvhKapzwRiETy9JXcFwg=) 11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) 12: uaZQDhIwfSYmxyJRtqIy_L_zHso.roa (hash: N+ZzHwJkmYGK/5t3l5o1KIYLDvFM99cPQu6Ca7RAknE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:86:ea:0d:0c:a9:45:3c:65:ed:55:56:b6:be:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Mar 26 01:00:49 2026 GMT Not After : Mar 27 01:00:49 2026 GMT Subject: CN=e450f6911ae5caa6ea3faa49cf3f73f48bfe5412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:dd:03:70:e1:b4:fd:ca:57:d2:2a:7a:9e: 75:33:15:41:cb:17:b7:8f:d3:bb:87:2b:e8:5f:b5: 6c:65:60:59:ee:cb:3b:26:58:80:2d:a0:93:f9:27: fd:c0:10:c0:62:71:2f:46:41:e7:5b:bf:f4:dd:93: a6:f2:ce:2a:e7:37:f4:d9:39:fd:10:de:d9:10:87: ae:29:12:40:7e:ca:ce:0d:81:e9:3c:dd:50:ec:eb: 71:2d:7f:64:3a:53:41:0d:c1:f3:ee:0e:c5:70:e0: 92:32:df:55:77:2f:6c:9a:2f:37:99:ff:cb:bf:25: 85:e9:e1:e2:2d:b6:d7:5e:d8:cd:15:2f:5a:e9:13: 54:72:92:a5:7e:4e:8b:b4:68:50:79:c6:f0:18:96: e2:60:f2:83:c8:ce:a1:1d:dd:00:af:b9:86:20:ff: d0:b4:7d:85:9e:6a:18:d7:85:82:30:08:fd:0f:28: 52:8e:e2:67:0b:12:36:48:6e:52:f2:e0:bc:7a:f2: 0d:6b:4c:b5:b9:ae:22:7b:e7:f6:23:70:25:17:8e: 9a:86:ad:ee:63:37:78:6e:bf:23:9c:52:f1:8a:b4: bb:8a:23:69:2a:54:ba:8a:50:ee:0f:f4:80:3e:34: 36:78:a2:a8:3c:80:d8:6b:e5:7d:3e:f7:e7:9e:55: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:F6:91:1A:E5:CA:A6:EA:3F:AA:49:CF:3F:73:F4:8B:FE:54:12 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3c:ed:6d:a4:92:32:e6:b8:c2:16:2a:61:04:d4:54:e0:f1: 24:f2:15:0d:2b:3d:f0:bf:1f:f5:49:f8:f8:82:5f:73:e9:28: 8e:4e:4a:f3:ae:87:57:4b:00:f4:10:9d:33:a7:ac:0c:07:49: 21:c2:37:75:97:d1:71:df:2d:5b:03:d1:93:45:3e:25:4f:3f: 6d:7c:a9:bd:70:1c:90:31:d4:10:d6:6a:2f:bc:aa:08:fe:54: dd:8a:96:b1:07:88:fe:f9:99:89:10:e7:e9:c6:eb:44:0b:ff: e2:41:4f:d3:dc:73:cc:ef:5d:c1:f0:db:a4:eb:75:d0:be:4f: a0:12:e3:1f:98:71:36:85:5a:45:36:6e:87:cb:f4:11:9e:1b: 12:ce:1b:b2:af:bc:0a:02:a9:4f:ac:70:21:77:39:6e:9d:76: 1d:8e:c1:04:49:8c:76:b5:b8:4f:8e:4b:95:ac:ca:23:90:ea: 5f:a2:42:32:cc:6b:e9:b3:d9:00:20:e6:06:95:3a:fd:c4:6a: bf:1a:60:f4:2b:32:9a:b3:e8:8b:50:78:a5:72:c8:f7:63:39: 30:22:76:21:17:00:81:cf:4f:89:c7:f2:85:a6:28:6e:ec:a1: 86:1f:3f:f9:b0:1b:25:4d:3a:21:b4:88:51:fc:cd:dd:ae:f2: 4a:0d:a9:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqIbqDQypRTxl7VVWtr4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMzI2MDEwMDQ5WhcNMjYwMzI3MDEwMDQ5WjAzMTEwLwYDVQQD EyhlNDUwZjY5MTFhZTVjYWE2ZWEzZmFhNDljZjNmNzNmNDhiZmU1NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXLdA3DhtP3KV9Iqep51MxVByxe3 j9O7hyvoX7VsZWBZ7ss7JliALaCT+Sf9wBDAYnEvRkHnW7/03ZOm8s4q5zf02Tn9 EN7ZEIeuKRJAfsrODYHpPN1Q7OtxLX9kOlNBDcHz7g7FcOCSMt9Vdy9smi83mf/L vyWF6eHiLbbXXtjNFS9a6RNUcpKlfk6LtGhQecbwGJbiYPKDyM6hHd0Ar7mGIP/Q tH2FnmoY14WCMAj9DyhSjuJnCxI2SG5S8uC8evINa0y1ua4ie+f2I3AlF46ahq3u Yzd4br8jnFLxirS7iiNpKlS6ilDuD/SAPjQ2eKKoPIDYa+V9PvfnnlXVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORQ9pEa5cqm6j+qSc8/c/SL/lQSMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzztbaSS Mua4whYqYQTUVODxJPIVDSs98L8f9Un4+IJfc+kojk5K866HV0sA9BCdM6esDAdJ IcI3dZfRcd8tWwPRk0U+JU8/bXypvXAckDHUENZqL7yqCP5U3YqWsQeI/vmZiRDn 6cbrRAv/4kFP09xzzO9dwfDbpOt10L5PoBLjH5hxNoVaRTZuh8v0EZ4bEs4bsq+8 CgKpT6xwIXc5bp12HY7BBEmMdrW4T45LlazKI5DqX6JCMsxr6bPZACDmBpU6/cRq vxpg9CsymrPoi1B4pXLI92M5MCJ2IRcAgc9PicfyhaYobuyhhh8/+bAbJU06IbSI UfzN3a7ySg2piQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:28 2026 by rpki-client