$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: mTxO+iMsKcigXkDskO+WNwg0aNrIlz1qnysXYZqw0vs= Subject key identifier: A4:62:D3:34:01:30:D3:FB:45:89:61:4A:EA:9E:69:1C:2E:E0:0E:74 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019CABD975CE26D76E3EF101B919B51D8AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1877 Signing time: Mon 02 Mar 2026 00:01:21 +0000 Manifest this update: Mon 02 Mar 2026 00:01:21 +0000 Manifest next update: Tue 03 Mar 2026 00:01:21 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 6: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 7: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 8: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (hash: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: yo6krFSVzD4wF0lfMUgMnkWfth69/caWZqJ52dsVECM=) 10: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:75:ce:26:d7:6e:3e:f1:01:b9:19:b5:1d:8a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Mar 2 00:01:21 2026 GMT Not After : Mar 3 00:01:21 2026 GMT Subject: CN=a462d3340130d3fb4589614aea9e691c2ee00e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:76:d3:9e:1b:34:50:ca:61:db:66:6d:dc: f6:aa:2d:9e:90:ce:8c:a4:03:d4:b1:c7:49:de:ed: 37:59:b7:fc:68:b3:87:d6:8e:8c:8d:e9:ef:26:88: 1d:4d:df:74:19:46:3b:fd:e3:e4:1d:b8:3b:b8:cc: da:fe:4b:0e:23:e1:13:c6:fb:46:de:20:3a:ff:93: 44:1a:b4:ee:47:d4:f2:0e:67:28:2c:54:e2:4a:2b: 0d:b7:ca:26:7d:37:ce:06:17:d7:3d:14:6d:84:85: 87:27:84:d1:e8:9b:42:85:91:21:07:1f:61:97:41: 53:f7:4a:ac:84:22:ca:15:90:e7:a9:25:09:02:50: 8d:d1:c9:ac:96:4f:4c:f9:66:e4:95:6b:23:a5:cf: 8b:65:38:a5:e2:88:07:d1:1a:70:05:f1:cd:33:30: 85:a0:e4:4a:cb:dd:00:0c:c4:00:3a:4b:84:4c:73: a2:f1:82:ae:5f:ad:96:60:de:01:b8:7d:55:02:90: fc:74:b5:dd:a4:a9:bb:67:c5:17:d1:09:c0:23:63: 54:c5:c5:68:da:79:f9:5d:c9:83:10:b9:0d:2f:45: 77:1e:62:fc:97:1d:2a:1e:f1:83:35:de:7e:3e:68: c6:2a:6f:0e:ad:ca:1e:df:e9:39:7f:45:76:cf:f7: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:62:D3:34:01:30:D3:FB:45:89:61:4A:EA:9E:69:1C:2E:E0:0E:74 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:35:a9:74:78:7f:10:a0:af:34:5d:39:4c:7a:51:45:6d:fc: 9b:f1:08:13:27:4a:c4:1c:7b:53:3f:fd:dc:44:29:08:af:1c: 6a:49:56:c8:94:7e:21:75:34:23:b4:f9:57:00:10:83:8b:46: af:47:b0:3a:75:ec:14:2d:71:b1:d5:74:67:43:05:bb:fa:1c: 8f:34:5e:ae:7d:4b:cf:34:66:18:88:73:6b:c0:3e:52:28:a9: 7b:a3:6c:0c:bb:d0:29:96:42:93:b6:22:75:6d:31:59:e5:e0: 93:60:55:ae:fd:af:cb:8f:4a:f3:85:79:30:4f:71:fa:c4:f0: 8b:58:e8:2b:0a:05:8e:8f:d2:b8:39:02:e3:9b:e3:55:46:a6: 05:fa:08:e8:3a:40:a7:ad:e3:ba:d1:85:b7:01:87:83:71:ce: d5:4a:33:b9:80:fb:31:7f:91:a2:a3:ed:e0:de:92:95:16:5a: be:2e:7e:d5:d0:c5:7d:99:09:eb:97:28:79:75:bc:7a:09:e8: 0a:9f:9b:1f:38:7d:84:60:f6:f8:28:f8:25:47:07:4d:32:e7: 7a:69:a7:55:cf:ec:3a:0c:84:88:c5:e8:ba:55:c0:55:90:fb: 5b:30:ca:c7:49:15:c7:10:de:43:b1:fb:03:f4:17:f8:15:4e: d8:47:d1:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2XXOJtduPvEBuRm1HYqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMzAyMDAwMTIxWhcNMjYwMzAzMDAwMTIxWjAzMTEwLwYDVQQD EyhhNDYyZDMzNDAxMzBkM2ZiNDU4OTYxNGFlYTllNjkxYzJlZTAwZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx12054bNFDKYdtmbdz2qi2ekM6M pAPUscdJ3u03Wbf8aLOH1o6MjenvJogdTd90GUY7/ePkHbg7uMza/ksOI+ETxvtG 3iA6/5NEGrTuR9TyDmcoLFTiSisNt8omfTfOBhfXPRRthIWHJ4TR6JtChZEhBx9h l0FT90qshCLKFZDnqSUJAlCN0cmslk9M+WbklWsjpc+LZTil4ogH0RpwBfHNMzCF oORKy90ADMQAOkuETHOi8YKuX62WYN4BuH1VApD8dLXdpKm7Z8UX0QnAI2NUxcVo 2nn5XcmDELkNL0V3HmL8lx0qHvGDNd5+PmjGKm8Orcoe3+k5f0V2z/d7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRi0zQBMNP7RYlhSuqeaRwu4A50MB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzzWpdHh/ EKCvNF05THpRRW38m/EIEydKxBx7Uz/93EQpCK8caklWyJR+IXU0I7T5VwAQg4tG r0ewOnXsFC1xsdV0Z0MFu/ocjzRern1LzzRmGIhza8A+Uiipe6NsDLvQKZZCk7Yi dW0xWeXgk2BVrv2vy49K84V5ME9x+sTwi1joKwoFjo/SuDkC45vjVUamBfoI6DpA p63jutGFtwGHg3HO1UozuYD7MX+RoqPt4N6SlRZavi5+1dDFfZkJ65coeXW8egno Cp+bHzh9hGD2+Cj4JUcHTTLnemmnVc/sOgyEiMXoulXAVZD7WzDKx0kVxxDeQ7H7 A/QX+BVO2EfRKA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:52 2026 by rpki-client