$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: XV4Z/IubFANQA/OMenGNfjMHWRclIBaYbpIGD6dhgdQ= Subject key identifier: CF:71:E0:0C:E8:96:88:27:1F:A2:97:30:58:2F:BA:B2:94:AB:44:D5 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019D2704D51D47F975C7348A15D42FFE5E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 1082 Signing time: Wed 25 Mar 2026 22:02:01 +0000 Manifest this update: Wed 25 Mar 2026 22:02:01 +0000 Manifest next update: Thu 26 Mar 2026 22:02:01 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: y/VwSqrp2lqdfECtpa7rjzZ3dsXikVRIpegkE2OuuC4=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:d5:1d:47:f9:75:c7:34:8a:15:d4:2f:fe:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Mar 25 22:02:01 2026 GMT Not After : Mar 26 22:02:01 2026 GMT Subject: CN=cf71e00ce89688271fa29730582fbab294ab44d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:82:89:7f:27:2c:56:d0:07:8b:ea:0d:cf: 50:2f:1f:cf:d3:d4:55:d6:5f:40:bb:ee:e1:cf:76: fe:2e:c9:85:2e:9d:ff:20:fa:e4:79:99:23:8b:cd: f9:a5:d1:a4:aa:7a:5e:74:d1:12:a9:60:fa:3f:8b: d3:7e:d7:50:ea:7a:e1:e8:c9:ab:38:73:10:6b:9e: 1a:71:95:57:89:dc:18:6d:36:9b:c9:54:aa:be:5f: cc:91:6b:b2:2a:86:d2:a7:a2:d7:67:1e:a3:43:a2: af:c7:4c:68:04:36:d4:21:49:db:55:43:ee:4b:c1: 83:2c:51:c3:fe:23:72:5a:84:a9:63:7e:bf:03:6e: a5:35:67:f0:82:5e:d9:e2:56:ef:48:da:6f:64:96: 9f:20:13:4e:26:a3:99:33:f0:de:9e:1d:52:8e:09: ae:28:65:dd:0a:b6:e3:18:2b:dc:12:2f:d8:28:9e: a2:eb:c8:71:2b:a1:6f:aa:20:60:f1:65:81:f1:7c: 47:7f:4d:0c:0f:31:a5:9d:e5:d0:fc:8f:8a:1f:0a: db:b0:06:0f:1c:fe:e7:cc:70:8f:6a:39:64:85:96: 73:62:7c:b4:94:ad:31:af:a5:ea:0f:c3:96:8a:db: b3:01:ea:a6:47:fc:68:2a:79:16:b0:15:3e:0c:f5: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:E0:0C:E8:96:88:27:1F:A2:97:30:58:2F:BA:B2:94:AB:44:D5 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fa:21:64:9d:d9:c1:04:b9:37:99:d0:20:78:ed:e1:6b:19: 57:0f:76:cf:f8:6c:eb:f8:07:3b:47:24:0a:ef:36:9e:32:a6: 4f:72:f3:13:1a:71:06:86:c7:d4:d7:5e:fd:f5:14:fb:b4:c1: 39:8d:64:97:d3:80:c3:48:79:f0:0f:71:7f:08:65:bd:2a:db: d6:f5:f2:5f:b3:49:63:61:c9:f3:89:17:2c:5c:c2:e9:32:c4: 57:55:09:02:44:29:2b:7d:3d:37:46:7a:42:ec:2c:fe:ee:27: af:75:90:db:82:e5:32:7f:c4:c9:3a:b4:1e:76:e6:b7:62:d4: 82:26:0f:e2:91:41:83:67:1b:4e:58:a9:8f:ee:2e:c7:cc:6b: e5:e3:fb:57:9e:69:6d:32:2a:dd:16:9a:f5:41:5f:af:d4:f3: 8c:0b:5c:a7:72:ab:3e:af:6c:95:bf:74:97:71:67:ee:5f:9a: d4:84:c3:32:23:14:85:53:44:ad:09:9f:fd:d9:97:74:fa:47: 24:5b:01:96:b7:ea:8c:50:75:59:2d:a3:f3:1f:1a:84:f7:b5: ad:dc:a5:5c:11:4e:30:d0:c9:79:92:5c:29:8d:e9:6c:99:e2: 22:b3:6f:b9:10:65:20:0f:ba:ea:6c:71:86:bc:c6:2c:e1:5a: 24:2a:f8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBNUdR/l1xzSKFdQv/l4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMzI1MjIwMjAxWhcNMjYwMzI2MjIwMjAxWjAzMTEwLwYDVQQD EyhjZjcxZTAwY2U4OTY4ODI3MWZhMjk3MzA1ODJmYmFiMjk0YWI0NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m+CiX8nLFbQB4vqDc9QLx/P09RV 1l9Au+7hz3b+LsmFLp3/IPrkeZkji835pdGkqnpedNESqWD6P4vTftdQ6nrh6Mmr OHMQa54acZVXidwYbTabyVSqvl/MkWuyKobSp6LXZx6jQ6Kvx0xoBDbUIUnbVUPu S8GDLFHD/iNyWoSpY36/A26lNWfwgl7Z4lbvSNpvZJafIBNOJqOZM/Denh1Sjgmu KGXdCrbjGCvcEi/YKJ6i68hxK6FvqiBg8WWB8XxHf00MDzGlneXQ/I+KHwrbsAYP HP7nzHCPajlkhZZzYny0lK0xr6XqD8OWituzAeqmR/xoKnkWsBU+DPWYpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9x4AzolognH6KXMFgvurKUq0TVMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/ohZJ3Z wQS5N5nQIHjt4WsZVw92z/hs6/gHO0ckCu82njKmT3LzExpxBobH1Nde/fUU+7TB OY1kl9OAw0h58A9xfwhlvSrb1vXyX7NJY2HJ84kXLFzC6TLEV1UJAkQpK309N0Z6 Quws/u4nr3WQ24LlMn/EyTq0Hnbmt2LUgiYP4pFBg2cbTlipj+4ux8xr5eP7V55p bTIq3Raa9UFfr9TzjAtcp3KrPq9slb90l3Fn7l+a1ITDMiMUhVNErQmf/dmXdPpH JFsBlrfqjFB1WS2j8x8ahPe1rdylXBFOMNDJeZJcKY3pbJniIrNvuRBlIA+66mxx hrzGLOFaJCr4SA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:30 2026 by rpki-client