$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: K7zJwkXgkK/JE124OjVbzoOcmp1K1Ipvc6ZdU8W26rQ= Subject key identifier: F5:5E:6F:15:BB:01:54:A0:3F:93:A3:49:14:1D:0B:AC:2C:10:22:53 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019CA9B37979B09DBDA9A94BA883EFAB0378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0D7E Signing time: Sun 01 Mar 2026 14:00:37 +0000 Manifest this update: Sun 01 Mar 2026 14:00:37 +0000 Manifest next update: Mon 02 Mar 2026 14:00:37 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: cv+fMEotiITQJxvG3U4FkJKb7Epn8akOuqyt2IxMPDQ=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:79:79:b0:9d:bd:a9:a9:4b:a8:83:ef:ab:03:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Mar 1 14:00:37 2026 GMT Not After : Mar 2 14:00:37 2026 GMT Subject: CN=f55e6f15bb0154a03f93a349141d0bac2c102253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:ab:b9:94:8c:89:9b:13:5a:ec:95:25:82: 92:85:e3:c1:62:ad:96:ef:25:32:61:b3:df:62:d1: 7d:05:b3:0e:19:eb:d0:c6:c4:b4:fa:3c:95:56:ff: 81:a0:18:d9:57:81:11:da:e7:d1:df:1f:ad:79:8e: cd:52:15:17:40:1e:58:33:bc:99:40:57:12:e4:88: 19:97:1d:6a:ab:20:73:d1:e7:97:1e:64:49:26:e0: 65:2f:5e:d5:b0:9f:b1:48:db:c7:2d:5f:d4:c3:c1: 34:b2:de:a3:0f:f8:25:83:6e:0e:3a:69:93:d7:52: f3:21:13:3a:03:6e:e8:d1:24:3b:cb:83:b7:16:e2: eb:67:0d:12:30:6c:13:39:47:4b:86:e7:ff:1f:36: 93:3c:42:55:23:ff:27:95:90:70:23:3d:40:10:5c: a1:ed:f9:a5:18:47:91:c0:c8:92:d2:77:cb:1a:46: 9c:e5:b7:8c:90:c6:68:8f:2d:e2:6b:e6:d2:6e:ca: a0:11:8f:48:14:0c:d8:05:95:be:40:73:55:0e:0e: de:12:fd:11:de:0b:7a:4e:b4:11:e4:40:7c:8f:66: 49:4d:17:19:4a:e9:38:48:32:c5:c1:9e:47:ef:55: 72:91:de:96:6c:a4:e5:d3:dc:80:a2:6f:78:fa:c7: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5E:6F:15:BB:01:54:A0:3F:93:A3:49:14:1D:0B:AC:2C:10:22:53 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fc:a8:ec:e6:ed:2e:82:dc:4f:88:96:e9:0b:f9:9b:7a:16: 96:62:c3:94:55:23:7c:23:0b:95:5c:e2:d0:f4:91:c8:60:ff: 74:67:8c:f2:f6:4b:74:17:e8:74:23:8f:90:1d:08:f1:2e:ed: 86:a0:ed:19:7b:5a:e8:5d:c1:68:6b:a9:c5:64:b3:c2:36:fb: ea:99:dc:58:d2:d6:5e:d6:b3:8e:24:32:90:a2:96:f4:90:c3: 8d:85:cf:d8:be:47:72:18:95:a9:12:84:1a:2a:3b:e1:7f:47: e4:d6:95:58:2c:92:3b:df:f3:f3:20:4c:d5:04:45:33:5b:0f: 2a:a4:33:76:34:e0:33:25:ff:e3:38:7a:76:25:e2:37:df:01: 99:7c:56:14:a8:ce:5e:c3:5b:2d:a7:1c:47:da:b2:a0:dd:60: 4d:b5:d5:35:f9:bc:aa:0b:52:42:d8:1d:02:ed:d5:37:21:46: db:e3:6e:ac:b0:07:2a:27:9e:ea:41:15:37:d0:49:0e:94:4a: b3:04:a1:79:72:03:e3:a3:e2:86:cc:f3:f8:29:78:19:22:5d: a3:e9:29:98:13:0a:d9:4b:4a:47:7a:a5:e2:ce:50:35:4e:de: 01:5b:d4:21:ec:ed:3a:d5:d7:a0:f6:57:ff:e5:2b:1d:19:ff: a0:e0:bc:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps3l5sJ29qalLqIPvqwN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMzAxMTQwMDM3WhcNMjYwMzAyMTQwMDM3WjAzMTEwLwYDVQQD EyhmNTVlNmYxNWJiMDE1NGEwM2Y5M2EzNDkxNDFkMGJhYzJjMTAyMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtruruZSMiZsTWuyVJYKShePBYq2W 7yUyYbPfYtF9BbMOGevQxsS0+jyVVv+BoBjZV4ER2ufR3x+teY7NUhUXQB5YM7yZ QFcS5IgZlx1qqyBz0eeXHmRJJuBlL17VsJ+xSNvHLV/Uw8E0st6jD/glg24OOmmT 11LzIRM6A27o0SQ7y4O3FuLrZw0SMGwTOUdLhuf/HzaTPEJVI/8nlZBwIz1AEFyh 7fmlGEeRwMiS0nfLGkac5beMkMZojy3ia+bSbsqgEY9IFAzYBZW+QHNVDg7eEv0R 3gt6TrQR5EB8j2ZJTRcZSuk4SDLFwZ5H71Vykd6WbKTl09yAom94+se47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVebxW7AVSgP5OjSRQdC6wsECJTMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfyo7Obt LoLcT4iW6Qv5m3oWlmLDlFUjfCMLlVzi0PSRyGD/dGeM8vZLdBfodCOPkB0I8S7t hqDtGXta6F3BaGupxWSzwjb76pncWNLWXtazjiQykKKW9JDDjYXP2L5HchiVqRKE Gio74X9H5NaVWCySO9/z8yBM1QRFM1sPKqQzdjTgMyX/4zh6diXiN98BmXxWFKjO XsNbLaccR9qyoN1gTbXVNfm8qgtSQtgdAu3VNyFG2+NurLAHKiee6kEVN9BJDpRK swSheXID46Pihszz+Cl4GSJdo+kpmBMK2UtKR3ql4s5QNU7eAVvUIeztOtXXoPZX /+UrHRn/oOC8+w== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:59 2026 by rpki-client