$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: AByAa6J8alH075zrOyRDQAytP0WwPJNurX80uWB2W4s= Subject key identifier: 35:F6:F6:E9:51:34:29:2F:D3:72:AA:B4:75:C4:C3:56:5C:1C:47:AC Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019D2695D8CB0569F015A385E68072B70A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1893 Signing time: Wed 25 Mar 2026 20:00:47 +0000 Manifest this update: Wed 25 Mar 2026 20:00:47 +0000 Manifest next update: Thu 26 Mar 2026 20:00:47 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: KNaDp6n9L6XSkEYIvOiFePZiPB5v1v35EhtGNOCztDI=) 7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=) 13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:95:d8:cb:05:69:f0:15:a3:85:e6:80:72:b7:0a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Mar 25 20:00:47 2026 GMT Not After : Mar 26 20:00:47 2026 GMT Subject: CN=35f6f6e95134292fd372aab475c4c3565c1c47ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:21:60:a9:d5:19:f5:09:ef:e9:ba:23:00: 4d:35:b6:17:65:16:42:7a:d1:ea:45:8e:a8:b4:2e: 80:45:98:45:bf:66:13:85:35:f0:f7:ce:99:5a:d6: c5:ea:27:19:3c:e0:c1:d4:e0:d5:17:fc:b7:23:38: 11:7b:3f:d6:c4:05:9c:b5:1e:59:af:b7:2d:5b:bf: 2f:3c:5c:59:37:2a:09:7b:5b:2a:7b:8b:ec:d4:a8: 64:30:f7:e2:5b:fb:1d:06:ef:85:67:d5:3f:b7:87: 57:bf:14:cc:34:c9:78:5a:45:31:78:d1:6b:f0:fc: 65:ce:6c:5e:e4:6e:b8:1f:31:82:50:24:78:07:d2: 9a:11:5c:29:84:01:d0:b7:2c:ef:3d:65:fd:b5:78: d0:8d:4d:23:e9:7a:6b:0d:81:24:d3:ec:b6:14:ff: fc:2c:fc:db:ad:82:0e:34:41:1c:9d:0b:f1:11:a8: 2c:e3:ff:e4:77:c3:4e:83:31:24:2e:82:9e:c3:17: 26:7a:92:3f:99:76:18:81:98:25:8b:50:3b:4e:de: 63:51:d4:10:60:41:3a:3b:06:fd:59:1e:32:29:d5: eb:a9:1b:83:30:1a:f5:7e:89:88:74:ea:33:2d:25: 13:02:3f:e5:b8:21:10:a5:a9:c7:05:ec:be:fd:9e: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F6:F6:E9:51:34:29:2F:D3:72:AA:B4:75:C4:C3:56:5C:1C:47:AC X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:37:20:67:99:e9:79:86:69:c1:38:5e:6a:60:20:98:02: e4:f9:d0:9b:68:84:27:65:5a:34:13:fd:49:12:6f:79:91:87: e0:67:a5:b3:32:60:2e:ba:51:1a:58:57:e5:46:31:a9:48:72: 80:f9:d1:e9:ca:80:28:1e:ab:21:3f:45:7e:73:f7:79:a5:e4: e4:28:82:95:b4:88:9d:60:55:d0:6f:ec:e3:60:9f:1e:ce:b8: 1c:c9:3b:cb:fe:e2:68:0a:18:37:ac:ae:dc:01:97:50:42:7f: 4f:bf:fe:97:86:c3:64:bd:9e:95:82:f9:f7:af:35:94:c0:bd: a1:29:16:d5:56:76:57:2e:fb:0e:9c:ae:f1:8e:4b:91:ee:5a: 60:1f:32:b0:88:c1:04:32:bf:2f:57:14:b5:0f:7c:73:45:31: 12:fe:a4:6a:26:0f:ed:63:ed:5c:cc:db:3a:9e:86:f2:48:e4: 44:7a:78:c2:22:42:0a:c4:83:d5:02:cd:9a:45:70:8d:38:3c: 53:3e:15:8e:69:3e:8f:27:28:4a:a3:d0:45:03:2e:e1:db:95: f3:97:5f:f1:00:14:44:e0:ba:7b:15:ca:53:bf:eb:ef:a8:6d: 92:23:08:9d:a9:d2:ea:45:0a:2d:09:13:cf:72:41:f8:c0:44: 66:fa:7a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mldjLBWnwFaOF5oBytwqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMzI1MjAwMDQ3WhcNMjYwMzI2MjAwMDQ3WjAzMTEwLwYDVQQD EygzNWY2ZjZlOTUxMzQyOTJmZDM3MmFhYjQ3NWM0YzM1NjVjMWM0N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5chYKnVGfUJ7+m6IwBNNbYXZRZC etHqRY6otC6ARZhFv2YThTXw986ZWtbF6icZPODB1ODVF/y3IzgRez/WxAWctR5Z r7ctW78vPFxZNyoJe1sqe4vs1KhkMPfiW/sdBu+FZ9U/t4dXvxTMNMl4WkUxeNFr 8Pxlzmxe5G64HzGCUCR4B9KaEVwphAHQtyzvPWX9tXjQjU0j6XprDYEk0+y2FP/8 LPzbrYIONEEcnQvxEags4//kd8NOgzEkLoKewxcmepI/mXYYgZgli1A7Tt5jUdQQ YEE6Owb9WR4yKdXrqRuDMBr1fomIdOozLSUTAj/luCEQpanHBey+/Z7uyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX29ulRNCkv03KqtHXEw1ZcHEesMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYs3IGeZ 6XmGacE4XmpgIJgC5PnQm2iEJ2VaNBP9SRJveZGH4GelszJgLrpRGlhX5UYxqUhy gPnR6cqAKB6rIT9FfnP3eaXk5CiClbSInWBV0G/s42CfHs64HMk7y/7iaAoYN6yu 3AGXUEJ/T7/+l4bDZL2elYL59681lMC9oSkW1VZ2Vy77Dpyu8Y5Lke5aYB8ysIjB BDK/L1cUtQ98c0UxEv6kaiYP7WPtXMzbOp6G8kjkRHp4wiJCCsSD1QLNmkVwjTg8 Uz4Vjmk+jycoSqPQRQMu4duV85df8QAUROC6exXKU7/r76htkiMInanS6kUKLQkT z3JB+MBEZvp6Uw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:39 2026 by rpki-client