$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: AIKvPfgke/JJKGaBHVvv9KZaAahPTZQaEMay+x8c7RI= Subject key identifier: E9:0B:69:32:03:63:49:03:C2:F5:82:46:37:2D:27:6F:77:42:B0:43 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019CA7FC44986767FD7818F6803A94588552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 051A Signing time: Sun 01 Mar 2026 06:00:53 +0000 Manifest this update: Sun 01 Mar 2026 06:00:53 +0000 Manifest next update: Mon 02 Mar 2026 06:00:53 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 5: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: kgYK/8qwusgznxQ7T0u2feMcZvwsE9dE9Oz3i3QqAIg=) 6: RlmY2epIKRhq-2nW5GPMGi-42ho.roa (hash: P+PIwilqQ8xdGydeEaJcPqihgDM4ZC5j7iY8+NEd9i0=) 7: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 8: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 9: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 10: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 11: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 12: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a7:fc:44:98:67:67:fd:78:18:f6:80:3a:94:58:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Mar 1 06:00:53 2026 GMT Not After : Mar 2 06:00:53 2026 GMT Subject: CN=e90b693203634903c2f58246372d276f7742b043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:b5:a2:ed:fa:bb:f1:29:73:cc:6f:c4:ce: 05:bf:e7:c9:95:9f:00:01:f4:2d:1a:dd:e2:b7:fe: 2d:25:6b:3b:0f:a7:11:55:a7:7e:6b:70:4a:aa:06: 3f:fc:ac:25:d8:09:5a:68:58:a1:ec:5a:87:d6:bc: 04:6a:23:c8:c6:ec:1f:f3:bc:48:b7:9b:f0:c3:90: 5b:64:fb:34:47:18:57:5b:1a:eb:1b:7a:7f:a2:07: cf:d0:d8:c3:6c:a8:bf:38:b1:4d:53:38:d4:4b:b3: 3a:de:bd:2b:73:84:9a:2d:25:dc:40:02:43:a7:7c: b5:54:16:ef:ad:24:31:f7:b9:42:79:7b:de:88:60: d1:6b:fb:49:2d:3f:24:a1:69:b4:f4:44:47:3d:f8: f1:85:51:b6:c7:3a:e0:0f:16:ba:6f:7f:60:07:e9: c4:22:37:f3:7c:2a:51:f5:29:8c:e9:c4:98:19:1b: 62:f7:ed:f2:23:a0:bd:e5:9a:54:ae:34:12:a1:32: 47:9e:f8:96:39:ec:51:4b:39:1f:68:4d:15:07:7f: 3e:7c:db:c2:78:08:5e:a1:a0:27:a8:26:98:cc:44: 89:c7:a3:60:e1:10:f7:8f:12:db:ae:80:74:c1:4c: 9b:ad:82:a4:d9:1f:29:28:27:08:0b:86:67:ce:74: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:69:32:03:63:49:03:C2:F5:82:46:37:2D:27:6F:77:42:B0:43 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:27:fb:67:fb:6c:7f:1f:80:88:9a:7d:ba:43:5b:c3:ca: 49:14:80:17:86:b2:82:60:17:c5:db:d2:ad:45:9a:f8:8a:f0: a3:d3:32:69:79:6f:97:68:cc:ec:91:4d:c7:73:1a:89:ee:c7: 98:7a:d4:8e:03:76:fc:8e:40:d1:42:b8:63:63:a3:87:2e:6c: 18:18:71:8b:60:c4:db:a7:ea:9f:9a:25:00:36:b2:0d:52:40: 40:a9:58:33:4a:f1:f2:a9:40:6c:d9:4b:21:1e:13:d2:31:0b: 73:86:1f:c1:94:18:b8:22:a9:b6:8f:c2:07:78:ed:44:ca:17: 7b:c1:f4:84:d1:e9:0f:05:54:00:81:f6:a0:7a:c6:fa:d1:a7: 3a:76:d1:bf:69:65:b1:e0:2d:a2:33:fb:e1:be:46:f0:3b:40: 3f:a2:cf:3a:47:0f:51:98:93:f3:7f:70:43:7a:3e:8f:97:31: 7d:99:92:8b:67:c7:25:a8:1b:1a:74:0c:9a:1c:db:0d:0d:fb: af:32:69:1f:11:7d:4b:d0:63:d8:f7:65:1b:37:5b:ee:85:b2: aa:f8:6a:cc:e2:24:6b:e9:16:32:c2:0b:a3:b0:c3:b1:20:27: e9:c1:24:f1:7b:23:da:69:3d:f4:94:61:89:da:0c:94:65:42: b2:e4:10:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyn/ESYZ2f9eBj2gDqUWIVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwMzAxMDYwMDUzWhcNMjYwMzAyMDYwMDUzWjAzMTEwLwYDVQQD EyhlOTBiNjkzMjAzNjM0OTAzYzJmNTgyNDYzNzJkMjc2Zjc3NDJiMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv61ou36u/Epc8xvxM4Fv+fJlZ8A AfQtGt3it/4tJWs7D6cRVad+a3BKqgY//Kwl2AlaaFih7FqH1rwEaiPIxuwf87xI t5vww5BbZPs0RxhXWxrrG3p/ogfP0NjDbKi/OLFNUzjUS7M63r0rc4SaLSXcQAJD p3y1VBbvrSQx97lCeXveiGDRa/tJLT8koWm09ERHPfjxhVG2xzrgDxa6b39gB+nE IjfzfCpR9SmM6cSYGRti9+3yI6C95ZpUrjQSoTJHnviWOexRSzkfaE0VB38+fNvC eAheoaAnqCaYzESJx6Ng4RD3jxLbroB0wUybrYKk2R8pKCcIC4ZnznSegwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkLaTIDY0kDwvWCRjctJ293QrBDMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSkn+2f7 bH8fgIiafbpDW8PKSRSAF4aygmAXxdvSrUWa+Irwo9MyaXlvl2jM7JFNx3Maie7H mHrUjgN2/I5A0UK4Y2Ojhy5sGBhxi2DE26fqn5olADayDVJAQKlYM0rx8qlAbNlL IR4T0jELc4YfwZQYuCKpto/CB3jtRMoXe8H0hNHpDwVUAIH2oHrG+tGnOnbRv2ll seAtojP74b5G8DtAP6LPOkcPUZiT839wQ3o+j5cxfZmSi2fHJagbGnQMmhzbDQ37 rzJpHxF9S9Bj2PdlGzdb7oWyqvhqzOIka+kWMsILo7DDsSAn6cEk8Xsj2mk99JRh idoMlGVCsuQQ+A== -----END CERTIFICATE-----Generated at Sun Mar 1 16:38:00 2026 by rpki-client