$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: WYNC0hPJYNu3efe23jzknEbYs5SKTAEVjrWG5Ilx0fg= Subject key identifier: 5D:86:3C:CA:54:7B:BF:2F:B7:7D:E9:AF:AE:CE:46:1C:74:C8:75:46 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019CA8A0E2711CF41A5BD5E4F2A0415EF27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 1864 Signing time: Sun 01 Mar 2026 09:00:41 +0000 Manifest this update: Sun 01 Mar 2026 09:00:41 +0000 Manifest next update: Mon 02 Mar 2026 09:00:41 +0000 Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=) 2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=) 3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=) 4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=) 5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=) 6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=) 7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=) 8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=) 9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=) 10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=) 11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=) 12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=) 13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: +ZYiB0N6eiWa0q8EaI7tMQEkfSmHw4DTWxN/Lg7a8DI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a0:e2:71:1c:f4:1a:5b:d5:e4:f2:a0:41:5e:f2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Mar 1 09:00:41 2026 GMT Not After : Mar 2 09:00:41 2026 GMT Subject: CN=5d863cca547bbf2fb77de9afaece461c74c87546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:56:c9:75:c9:4b:c2:00:9d:13:6c:c4:81: 3a:ea:9d:72:2c:48:30:04:35:85:15:94:11:05:73: 0a:86:ac:6c:90:89:d3:9d:ae:87:6c:8f:24:81:a2: 9a:24:44:c3:76:13:ab:47:2e:1f:ac:b3:ce:23:2c: ca:4a:bf:bc:18:3b:ae:be:0d:a6:5a:85:14:3d:c0: 07:93:89:82:47:67:97:7b:27:11:8b:c9:17:d2:16: 15:6d:37:ad:9d:5b:cc:ba:2e:3c:7b:32:24:09:bf: e7:da:4c:82:c1:3f:b2:ce:e9:8e:84:61:c2:13:ce: f6:ea:6f:f1:ac:f7:93:aa:eb:3c:9f:57:32:a2:9f: cb:68:be:17:27:ac:42:9b:7e:c9:0c:2c:a3:41:23: e8:59:f4:c7:3e:5d:9e:2c:37:68:78:72:37:11:55: 99:0a:3c:a7:cc:89:f4:2b:56:88:ea:bb:6e:a2:f8: 10:e2:ac:93:e3:c7:00:db:c8:d8:d8:21:35:20:4d: 38:e6:8e:5f:62:b3:b6:93:75:34:e0:26:bb:7b:f1: ee:51:cd:7e:22:7e:1b:1f:85:97:b1:cb:c6:01:01: 58:c0:cb:8d:53:62:52:2d:e1:7c:2a:47:cf:2b:80: bb:59:51:fb:7f:90:d2:8e:ef:3f:2c:6c:ea:8a:e4: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:86:3C:CA:54:7B:BF:2F:B7:7D:E9:AF:AE:CE:46:1C:74:C8:75:46 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d1:9c:2d:1e:de:22:e9:82:08:c0:7b:f0:32:a4:52:81:be: 53:f2:c7:27:5f:b0:25:b0:9b:19:b7:1d:57:6c:05:64:fd:2c: 73:54:c7:5c:e7:0e:43:b8:b7:69:06:6a:c8:80:50:94:02:66: c2:1b:d2:60:dc:37:14:6f:d4:a2:8d:a4:6a:d7:9d:18:71:16: 14:ed:e2:b3:f2:fb:35:d6:77:30:78:2f:f2:33:0d:dc:50:99: 0a:d8:f3:73:34:a2:e6:40:da:de:34:32:4f:e3:d8:6e:b6:32: d6:df:c1:59:47:d6:c3:4e:5f:f9:ab:08:cb:02:a9:f1:6f:9d: 18:11:6c:22:c8:81:d6:bf:fb:50:c5:86:d0:27:c8:a4:60:88: 0c:82:9e:b5:e2:5a:0b:3c:8e:26:18:53:94:32:4a:e9:a2:a7: 67:78:e9:5e:79:37:24:32:0d:d2:2d:70:fe:53:cf:11:94:2c: 77:7a:0d:08:26:5b:d3:0e:51:b3:8c:0b:ff:0a:25:51:4d:16: 19:50:c5:6a:ab:75:91:10:ee:1c:d6:1c:8e:da:47:9e:74:5a: 8f:87:c5:41:6a:0e:fb:4b:d8:d4:f0:a3:bc:f1:e0:7f:35:02: 74:dd:74:6e:f1:af:ea:3a:bc:fd:fe:49:8b:73:0c:19:79:af: d2:52:9d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooOJxHPQaW9Xk8qBBXvJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMzAxMDkwMDQxWhcNMjYwMzAyMDkwMDQxWjAzMTEwLwYDVQQD Eyg1ZDg2M2NjYTU0N2JiZjJmYjc3ZGU5YWZhZWNlNDYxYzc0Yzg3NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs69WyXXJS8IAnRNsxIE66p1yLEgw BDWFFZQRBXMKhqxskInTna6HbI8kgaKaJETDdhOrRy4frLPOIyzKSr+8GDuuvg2m WoUUPcAHk4mCR2eXeycRi8kX0hYVbTetnVvMui48ezIkCb/n2kyCwT+yzumOhGHC E8726m/xrPeTqus8n1cyop/LaL4XJ6xCm37JDCyjQSPoWfTHPl2eLDdoeHI3EVWZ CjynzIn0K1aI6rtuovgQ4qyT48cA28jY2CE1IE045o5fYrO2k3U04Ca7e/HuUc1+ In4bH4WXscvGAQFYwMuNU2JSLeF8KkfPK4C7WVH7f5DSju8/LGzqiuSxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2GPMpUe78vt33pr67ORhx0yHVGMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9GcLR7e IumCCMB78DKkUoG+U/LHJ1+wJbCbGbcdV2wFZP0sc1THXOcOQ7i3aQZqyIBQlAJm whvSYNw3FG/Uoo2katedGHEWFO3is/L7NdZ3MHgv8jMN3FCZCtjzczSi5kDa3jQy T+PYbrYy1t/BWUfWw05f+asIywKp8W+dGBFsIsiB1r/7UMWG0CfIpGCIDIKeteJa CzyOJhhTlDJK6aKnZ3jpXnk3JDIN0i1w/lPPEZQsd3oNCCZb0w5Rs4wL/wolUU0W GVDFaqt1kRDuHNYcjtpHnnRaj4fFQWoO+0vY1PCjvPHgfzUCdN10bvGv6jq8/f5J i3MMGXmv0lKdkw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:48 2026 by rpki-client