$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: 5XTq7On4J8vqmk13sNblj/L/lRj9WasWlFhHlb5W+14= Subject key identifier: 8D:C8:F6:58:2B:AC:3C:25:93:32:F6:18:89:58:8E:89:22:DB:02:1E Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019CAC1044B9529E6972F712E8216FEDC088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1757 Signing time: Mon 02 Mar 2026 01:01:13 +0000 Manifest this update: Mon 02 Mar 2026 01:01:13 +0000 Manifest next update: Tue 03 Mar 2026 01:01:13 +0000 Files and hashes: 1: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=) 2: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 3: CxlxSB7tcWfBem6YW61R44h6GhE.roa (hash: BHIL6DBpe/hobhcIvwtijWBrf1OIrw1UVNWnYFympy8=) 4: D-7YC0jpVTIQath83uZMJLfQ2IQ.roa (hash: JegIasilvxHF8rZXeuoy6Yvs3A38CnO4o94vJGZ80U8=) 5: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 6: Fiisplv3w9_pcxosla-tTkhAJ08.roa (hash: P97Lb0EUKlBvkmhA1xwdZkUEdqeyjS045eltxd5n80c=) 7: GlHMn8Ac9t5ZvDEbYAhtuQSkGM4.roa (hash: K9Ze643io+v0s/t61J/3y9sxrmycIalKmeKG49S3328=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: NdUEJfK_xEs3cSypnGMIV-8iyD8.roa (hash: Z4bfMbAh0Na8/x8kMqJmLOARmWsuKYzxiO9RbbfF2so=) 11: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 12: SFnLmcRXNoAvKmHKtCKbBqiDke8.roa (hash: PBomLl2Jg/1jBfjMIeHic9H2KfOA2H8CNEl1uZ5aGRg=) 13: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 14: ZcGYcKVXXeGiVyW6QryfRkeaRJ4.roa (hash: C3BhkrCJHBXL5w9ujnG5EyYJwKSXCAqKdIZcqBfXito=) 15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: cSOGsA5HkZA+EOViUu/hv2NWersCHVGWNPZzgMD3rp0=) 16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 17: iuRgfu21PTYsbZmCXChlKNQrvwY.roa (hash: bBVTlacYWROGx5pT6t29eLcMFfwpCwecFakjUlLqFkQ=) 18: uFdeFfyqWzWzy9XpWgp6RzS5Po4.roa (hash: S0V35aejjxrKec51/7roxw6JaJ93CJSt3HkBa4plctg=) 19: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 20: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 21: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:10:44:b9:52:9e:69:72:f7:12:e8:21:6f:ed:c0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Mar 2 01:01:13 2026 GMT Not After : Mar 3 01:01:13 2026 GMT Subject: CN=8dc8f6582bac3c259332f61889588e8922db021e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:79:eb:37:eb:62:9a:05:f4:90:89:dc:47: 34:43:85:2a:61:a9:77:5f:f1:2f:77:81:95:9e:db: bd:a7:46:1d:b1:c2:f1:3c:bd:dc:fc:d9:5a:67:32: 9f:60:93:25:ee:2a:7c:8c:86:4a:1b:ad:a8:28:11: 7c:3a:d2:0a:c3:ba:e5:4c:c8:6a:05:4f:33:77:b5: 23:31:e6:46:64:82:fc:77:f9:76:2a:1b:77:97:2e: 3a:e5:3c:9f:04:8a:a6:23:70:58:98:af:f9:24:bf: dd:1d:63:61:03:3e:a1:a8:a0:19:c3:fb:1c:cf:54: 1a:41:c9:91:d8:4c:53:06:45:d8:2a:23:71:85:ee: da:94:0c:9a:b6:db:02:fd:79:14:7b:13:02:eb:e6: 6a:0d:37:4d:ea:87:04:c5:ef:aa:35:7a:ad:9a:27: 22:00:17:dd:75:b6:b4:48:9a:5c:1c:28:f6:e1:52: 71:42:a7:1d:bc:20:e1:02:9c:d6:34:52:74:3f:e3: e9:4a:a0:cb:6a:bb:49:e1:23:17:96:29:d6:45:ca: 86:19:d3:4e:17:05:75:7d:57:80:7d:de:6c:81:90: 70:b5:e8:c1:fb:f2:74:6a:e8:ea:d4:8c:b5:ca:f4: ff:60:7e:fe:39:da:de:51:f8:ab:8a:ea:f4:b0:72: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:F6:58:2B:AC:3C:25:93:32:F6:18:89:58:8E:89:22:DB:02:1E X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4a:c9:8f:83:6b:0b:30:ad:00:37:c2:5a:3c:1c:36:17:ad: 59:9f:19:22:76:17:74:6d:ca:99:d0:ac:91:a3:f0:4a:a3:08: 35:41:60:5b:1c:1e:b1:39:b0:a3:01:81:81:1e:39:e9:8c:38: 9e:73:5b:07:b2:03:35:ee:f4:cd:f7:7b:af:d5:6a:d2:a6:8a: 88:e9:9c:b8:9d:52:33:51:50:a7:21:11:01:87:30:c4:b9:2f: 8c:d2:b8:66:27:03:07:6f:c1:9a:92:0b:2f:53:42:a9:ec:f6: bd:0f:ef:3d:56:01:8d:ff:40:9f:6a:84:63:77:40:a6:f7:9e: 43:ab:e0:25:f3:14:5b:6e:2c:59:44:00:ee:12:6f:a3:25:dc: 41:b4:65:f2:24:98:9a:d5:13:f5:40:93:21:0d:1b:20:3d:eb: 05:5f:4d:d7:51:8f:85:a3:7e:59:6c:81:7d:fc:14:27:9a:c2: 76:27:84:5c:e5:25:d9:f2:92:75:c7:bf:cc:55:b6:c1:3f:7b: 4d:0c:c3:25:8a:4f:f2:35:02:2c:cb:5e:6c:e1:85:49:c7:f1: f7:f4:1c:33:7f:67:e0:e9:82:75:93:92:af:67:91:dd:b0:62: 86:ff:f5:e2:b3:e6:7f:12:39:04:5f:49:93:6c:ef:54:39:06: 46:5a:27:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysEES5Up5pcvcS6CFv7cCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMzAyMDEwMTEzWhcNMjYwMzAzMDEwMTEzWjAzMTEwLwYDVQQD Eyg4ZGM4ZjY1ODJiYWMzYzI1OTMzMmY2MTg4OTU4OGU4OTIyZGIwMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23F56zfrYpoF9JCJ3Ec0Q4UqYal3 X/Evd4GVntu9p0YdscLxPL3c/NlaZzKfYJMl7ip8jIZKG62oKBF8OtIKw7rlTMhq BU8zd7UjMeZGZIL8d/l2Kht3ly465TyfBIqmI3BYmK/5JL/dHWNhAz6hqKAZw/sc z1QaQcmR2ExTBkXYKiNxhe7alAyattsC/XkUexMC6+ZqDTdN6ocExe+qNXqtmici ABfddba0SJpcHCj24VJxQqcdvCDhApzWNFJ0P+PpSqDLartJ4SMXlinWRcqGGdNO FwV1fVeAfd5sgZBwtejB+/J0aujq1Iy1yvT/YH7+OdreUfiriur0sHI3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3I9lgrrDwlkzL2GIlYjoki2wIeMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASErJj4Nr CzCtADfCWjwcNhetWZ8ZInYXdG3KmdCskaPwSqMINUFgWxwesTmwowGBgR456Yw4 nnNbB7IDNe70zfd7r9Vq0qaKiOmcuJ1SM1FQpyERAYcwxLkvjNK4ZicDB2/BmpIL L1NCqez2vQ/vPVYBjf9An2qEY3dApveeQ6vgJfMUW24sWUQA7hJvoyXcQbRl8iSY mtUT9UCTIQ0bID3rBV9N11GPhaN+WWyBffwUJ5rCdieEXOUl2fKSdce/zFW2wT97 TQzDJYpP8jUCLMtebOGFScfx9/QcM39n4OmCdZOSr2eR3bBihv/14rPmfxI5BF9J k2zvVDkGRlonDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:28:48 2026 by rpki-client