$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: Sbf1dNgbdFB1J5vYAuvF7NowacxUiFfgI2VtzpP5lnI= Subject key identifier: 52:56:38:D6:D9:D7:D9:B5:8D:E5:40:59:33:33:AD:C1:9D:E4:4E:D9 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019CAAFCFDDEE3EC45407AB3A2C6C107D294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1877 Signing time: Sun 01 Mar 2026 20:00:32 +0000 Manifest this update: Sun 01 Mar 2026 20:00:32 +0000 Manifest next update: Mon 02 Mar 2026 20:00:32 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: lWKDifi0ciQS302/ldO1V8E4+SnGVfChWl+ihxETViY=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 5: GhSjihUm1uIJFnECZEmwr6wzeVM.roa (hash: RkS6d7zu9YD56Sn9sum8A/6fzlDw2CcrqIAmhYKwNY4=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 8: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 9: bXta14-WukP-sD3mvhrFJ-diblM.roa (hash: mvaQ8RJneVflOpMmhLqVGEU4MjH5zJ3p7ErO9d6FawE=) 10: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 11: vtlW7KcHy2quDtxiMcXh5ACZAJE.roa (hash: jwkMxNX7GEGE3hAf5FaeLuIWqkCqM1RbyuM2bownKWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fc:fd:de:e3:ec:45:40:7a:b3:a2:c6:c1:07:d2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Mar 1 20:00:32 2026 GMT Not After : Mar 2 20:00:32 2026 GMT Subject: CN=525638d6d9d7d9b58de540593333adc19de44ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:df:a6:28:68:55:fa:b7:7f:7d:54:21:01: 3d:cb:0e:92:65:0d:77:42:8a:ee:c3:69:51:e6:f8: 5a:50:c7:66:dc:06:1f:c0:de:52:39:ee:94:2b:70: 47:5a:df:d6:9c:bf:bc:5d:aa:ae:00:1f:db:db:0c: 5a:51:4d:f1:0e:5f:9b:14:a2:30:ce:d2:79:77:00: ac:4e:cf:47:17:ca:4e:1d:e6:4b:ce:28:2d:9d:3a: 1a:6d:89:43:a6:6e:6f:88:b2:0b:b5:93:a1:05:f0: 1d:f8:97:28:ec:ef:e1:b1:63:1f:18:ba:a1:f9:b3: 95:f1:c2:ac:05:ad:7c:b4:80:1d:01:a1:ab:b9:e4: f2:a8:29:23:06:15:44:fd:52:6e:72:16:7f:b4:45: 1b:f7:1f:ca:6f:6f:b1:d3:30:40:e0:eb:90:bb:5f: 52:45:d7:30:e9:06:c2:c5:d0:2e:ad:4b:2a:2e:a1: db:a4:be:ac:58:73:ee:01:bd:e5:45:7f:ae:55:60: 24:cf:1a:2a:93:ad:0e:c0:66:cc:53:2e:6a:11:aa: e0:26:60:00:b9:e8:dc:79:95:fd:8f:fc:7f:06:17: 3f:88:e3:6f:23:1f:6f:fc:77:eb:49:f3:b2:65:88: cd:32:0f:67:eb:1e:2a:ee:50:fa:58:c1:fb:93:4a: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:38:D6:D9:D7:D9:B5:8D:E5:40:59:33:33:AD:C1:9D:E4:4E:D9 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:bf:9a:47:01:e3:20:69:a6:15:64:76:c8:7b:60:39:ed:d2: 96:35:6e:e3:6a:84:57:ab:58:d8:06:d2:d7:30:fe:23:29:14: 13:95:54:f2:89:1b:51:e4:a8:d3:92:4e:a6:bf:ce:97:f1:df: 14:c7:a4:dc:0f:8d:07:1e:3e:8a:b8:00:ec:2a:92:b2:44:00: 7f:dd:af:e9:a9:2a:e2:25:16:6a:02:be:eb:05:1c:f9:43:53: 62:43:4d:32:30:57:cc:7e:b6:38:f4:71:b0:90:fe:1e:e9:25: a9:c6:ba:45:ec:8a:32:20:9b:15:c5:36:b1:76:78:e6:2b:fe: c2:94:94:cb:e4:bc:ff:d2:d8:35:5a:9a:0f:3b:37:96:94:95: 18:e0:3c:2c:87:07:91:00:3b:6f:06:19:90:c3:be:04:73:42: 30:5f:85:59:0f:a5:42:21:92:39:ef:d7:ad:09:93:34:b6:9a: f4:90:09:83:98:7e:30:c0:07:a5:51:a0:a8:df:1d:6c:6f:91: 03:07:d0:a4:6d:73:95:0d:16:fd:0c:46:16:d1:2a:cd:04:bc: 43:8e:09:8e:54:9e:62:70:f8:ab:0d:0c:c3:a6:08:40:60:9e: 1f:9e:de:41:08:27:5e:e4:e6:47:ea:d6:be:cd:6c:eb:28:1b: 08:34:21:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/P3e4+xFQHqzosbBB9KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMzAxMjAwMDMyWhcNMjYwMzAyMjAwMDMyWjAzMTEwLwYDVQQD Eyg1MjU2MzhkNmQ5ZDdkOWI1OGRlNTQwNTkzMzMzYWRjMTlkZTQ0ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCnfpihoVfq3f31UIQE9yw6SZQ13 Qoruw2lR5vhaUMdm3AYfwN5SOe6UK3BHWt/WnL+8XaquAB/b2wxaUU3xDl+bFKIw ztJ5dwCsTs9HF8pOHeZLzigtnToabYlDpm5viLILtZOhBfAd+Jco7O/hsWMfGLqh +bOV8cKsBa18tIAdAaGrueTyqCkjBhVE/VJuchZ/tEUb9x/Kb2+x0zBA4OuQu19S Rdcw6QbCxdAurUsqLqHbpL6sWHPuAb3lRX+uVWAkzxoqk60OwGbMUy5qEargJmAA uejceZX9j/x/Bhc/iONvIx9v/HfrSfOyZYjNMg9n6x4q7lD6WMH7k0opxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJWONbZ19m1jeVAWTMzrcGd5E7ZMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr+aRwHj IGmmFWR2yHtgOe3SljVu42qEV6tY2AbS1zD+IykUE5VU8okbUeSo05JOpr/Ol/Hf FMek3A+NBx4+irgA7CqSskQAf92v6akq4iUWagK+6wUc+UNTYkNNMjBXzH62OPRx sJD+Huklqca6ReyKMiCbFcU2sXZ45iv+wpSUy+S8/9LYNVqaDzs3lpSVGOA8LIcH kQA7bwYZkMO+BHNCMF+FWQ+lQiGSOe/XrQmTNLaa9JAJg5h+MMAHpVGgqN8dbG+R AwfQpG1zlQ0W/QxGFtEqzQS8Q44JjlSeYnD4qw0Mw6YIQGCeH57eQQgnXuTmR+rW vs1s6ygbCDQhBA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:55 2026 by rpki-client