$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: HJZIkXOvcsgzkFl0Gw6lXz0mOiRDgOK5gSQ+zqX0EjA= Subject key identifier: 6B:AB:A0:F8:CB:1F:DB:92:F4:5F:1D:CB:A4:B9:80:6E:9C:9A:67:8D Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019CAD223EA1E9AAF000652F387F2374D6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1703 Signing time: Mon 02 Mar 2026 06:00:28 +0000 Manifest this update: Mon 02 Mar 2026 06:00:28 +0000 Manifest next update: Tue 03 Mar 2026 06:00:28 +0000 Files and hashes: 1: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 2: H_VfesekEwBudWH_8DQh6aKcOw0.roa (hash: 56IhWo+MgCgnD6PDWUOyAjOU3jZFSSsm3KQcc9WaOgw=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: TikKdyhcJJHNVP2QcDSQnnbiCHs.roa (hash: neErNQQSzB6BBUr7/9orHxARcJ3yH0azsWxDsn+hb5M=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: eaUVfIm/8DiQVDyIF6vdu+emcTA2E8fQb4QmsEXG6pg=) 8: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:3e:a1:e9:aa:f0:00:65:2f:38:7f:23:74:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Mar 2 06:00:28 2026 GMT Not After : Mar 3 06:00:28 2026 GMT Subject: CN=6baba0f8cb1fdb92f45f1dcba4b9806e9c9a678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:4d:eb:f9:dc:c1:c9:a4:52:3a:56:2b:86: bc:77:21:65:cf:51:8c:ea:d3:7c:5d:13:8e:cc:6f: 55:27:a5:7a:71:1d:02:0c:29:dc:52:dd:e9:65:90: 5c:df:ff:23:03:09:fd:c4:cb:61:ad:cb:62:85:9d: 42:2b:56:cd:f1:dc:f8:e2:42:d7:43:06:6e:27:5e: c6:b6:8a:95:ca:94:75:c2:0b:40:c5:61:0e:e6:9a: 74:1e:0c:60:bb:6a:6d:61:b4:ce:7c:3a:1b:1f:8b: bc:77:1b:19:32:93:4b:86:98:5f:4d:c6:94:9a:6d: c6:c7:d2:ed:78:7a:07:c4:0e:31:d8:9f:11:d2:21: f5:a1:2f:7e:c6:74:35:7c:e1:49:02:36:c7:41:fb: 8a:78:fd:c6:1a:fc:eb:76:28:65:0a:51:cb:6a:b8: 68:00:38:0f:5a:32:64:1c:e5:68:da:0b:9c:84:dd: 75:a8:32:0c:02:c9:d7:c1:e1:d1:40:51:15:04:d3: 08:15:1d:3c:34:80:e9:7e:81:26:b0:d4:46:df:e3: fd:92:ed:68:ee:72:0a:3f:52:0f:a5:ef:a3:14:1a: 2b:2a:f0:52:b2:2c:2f:a8:a6:a4:2b:11:c1:45:e2: f5:29:3d:88:19:4e:65:32:c2:15:c6:92:92:6d:fa: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:A0:F8:CB:1F:DB:92:F4:5F:1D:CB:A4:B9:80:6E:9C:9A:67:8D X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:32:64:18:e2:73:43:9a:2c:4b:17:74:eb:99:00:79:51:35: 93:ed:ef:16:cc:84:92:d8:8b:4f:5d:a1:68:4a:03:eb:cf:60: a0:64:1c:0e:63:83:2d:d1:e4:e9:2f:c5:fb:ba:3d:14:b2:d0: 00:2c:88:e6:dd:6c:32:aa:61:49:96:54:f1:11:23:eb:4d:c7: 95:bf:bc:5d:06:7c:7d:f1:3d:22:8e:0c:9b:d3:09:3c:cc:5f: 4c:f9:f1:85:ad:e2:b8:33:97:aa:91:dd:f4:0e:a7:5b:d8:78: 03:31:9b:77:c2:6b:8e:fa:16:cc:78:29:f4:0c:9b:7f:66:b0: 0f:69:d1:46:da:b9:11:b3:34:a2:75:1d:c3:97:11:b2:5b:77: 90:18:eb:b1:4f:b7:ac:4e:12:d6:6d:33:7d:fa:21:8c:8d:5d: 3a:14:1c:e7:23:45:ab:a8:06:63:b8:58:96:64:69:ef:ff:d2: 0b:72:05:a7:4a:94:e7:ff:14:fe:26:7a:e9:46:c9:a1:80:df: 01:21:af:d2:f4:10:91:5d:19:0b:57:35:68:a3:ef:0a:c5:a3: 05:0c:e8:f6:c2:98:18:64:25:d8:73:bc:fa:8c:26:f7:ae:2d: a3:78:25:b9:4e:1f:0f:ea:41:f7:c4:ca:7b:66:25:5f:3c:bc: 24:11:c1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIj6h6arwAGUvOH8jdNagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMzAyMDYwMDI4WhcNMjYwMzAzMDYwMDI4WjAzMTEwLwYDVQQD Eyg2YmFiYTBmOGNiMWZkYjkyZjQ1ZjFkY2JhNGI5ODA2ZTljOWE2NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbJN6/ncwcmkUjpWK4a8dyFlz1GM 6tN8XROOzG9VJ6V6cR0CDCncUt3pZZBc3/8jAwn9xMthrctihZ1CK1bN8dz44kLX QwZuJ17GtoqVypR1wgtAxWEO5pp0Hgxgu2ptYbTOfDobH4u8dxsZMpNLhphfTcaU mm3Gx9LteHoHxA4x2J8R0iH1oS9+xnQ1fOFJAjbHQfuKeP3GGvzrdihlClHLarho ADgPWjJkHOVo2guchN11qDIMAsnXweHRQFEVBNMIFR08NIDpfoEmsNRG3+P9ku1o 7nIKP1IPpe+jFBorKvBSsiwvqKakKxHBReL1KT2IGU5lMsIVxpKSbfrDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuroPjLH9uS9F8dy6S5gG6cmmeNMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzJkGOJz Q5osSxd065kAeVE1k+3vFsyEktiLT12haEoD689goGQcDmODLdHk6S/F+7o9FLLQ ACyI5t1sMqphSZZU8REj603Hlb+8XQZ8ffE9Io4Mm9MJPMxfTPnxha3iuDOXqpHd 9A6nW9h4AzGbd8JrjvoWzHgp9Aybf2awD2nRRtq5EbM0onUdw5cRslt3kBjrsU+3 rE4S1m0zffohjI1dOhQc5yNFq6gGY7hYlmRp7//SC3IFp0qU5/8U/iZ66UbJoYDf ASGv0vQQkV0ZC1c1aKPvCsWjBQzo9sKYGGQl2HO8+owm964to3gluU4fD+pB98TK e2YlXzy8JBHBtA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:43 2026 by rpki-client