$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: Y4ZAxPKGVG54rQam/VaufSWw6a4CrnFCN0+4m/KBNkI= Subject key identifier: 3D:3A:60:0B:14:4A:3B:51:AB:56:3F:32:EF:50:59:10:A8:ED:AE:D4 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019CA7FD3B7BDECE81CEDC76847B31B58E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 15AA Signing time: Sun 01 Mar 2026 06:01:56 +0000 Manifest this update: Sun 01 Mar 2026 06:01:56 +0000 Manifest next update: Mon 02 Mar 2026 06:01:56 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: JCjv1F8Fkh+7BwVn71VDqT0r1Uc5DQn9B852ln68bn4=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a7:fd:3b:7b:de:ce:81:ce:dc:76:84:7b:31:b5:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Mar 1 06:01:56 2026 GMT Not After : Mar 2 06:01:56 2026 GMT Subject: CN=3d3a600b144a3b51ab563f32ef505910a8edaed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:95:20:9d:92:a4:8f:8a:b7:a8:a4:0e:ec: 02:4e:21:17:d8:34:ea:c3:bd:c0:4f:ff:3e:c9:80: 0d:be:47:c0:b8:af:7c:02:4d:7d:0b:6c:a8:02:cf: 6f:9b:ea:6e:30:92:20:a6:cb:9b:9d:13:a7:99:d4: 0b:31:20:38:01:24:1f:61:11:1d:0b:52:3e:bc:d4: df:4c:4b:b1:dc:da:83:0b:b2:0c:1b:8b:29:0e:7f: 5f:eb:9f:88:93:63:cf:f6:9c:a5:e3:32:0a:9f:92: c3:6c:b0:7d:4f:67:ef:b2:6e:0a:62:c3:dd:47:13: bd:76:a5:93:52:e1:84:d1:b8:58:f8:89:c1:73:d2: 11:7c:9f:00:88:30:a3:0d:1e:96:34:cd:b7:50:1d: 68:d5:fe:d2:4f:52:fc:4b:e5:45:e1:98:79:72:22: 5e:2d:09:1e:1b:e3:48:29:82:c7:54:58:db:99:cd: 46:c1:0f:1d:0f:a1:c6:e2:5e:4d:1c:0d:06:02:1d: da:3c:67:fb:56:1f:a7:cb:ab:26:e0:5a:be:b1:b4: f7:b2:28:0a:15:32:bb:57:dd:d1:76:ea:c4:1e:10: db:67:62:c5:3f:be:ee:78:9e:f0:45:e7:df:eb:d2: 2f:cb:27:86:5d:b7:6b:ff:aa:ad:72:04:dc:c9:d4: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:60:0B:14:4A:3B:51:AB:56:3F:32:EF:50:59:10:A8:ED:AE:D4 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:03:a8:e7:9e:2b:1e:6a:a5:0b:ea:f1:20:0f:47:58:34:54: 90:34:ae:d5:c4:58:fa:6e:88:a2:fe:0f:c6:77:bf:fa:77:01: 3d:74:5b:e4:de:64:ed:99:4c:3a:b1:f5:c5:cd:3b:ca:91:38: 59:9b:a4:32:a1:4e:0d:a5:64:d6:b5:7f:eb:04:51:9e:58:c8: cb:6b:5f:90:d1:14:39:d7:47:61:71:e8:a6:fb:73:ee:94:37: 4d:ad:7f:90:b1:e3:cf:7b:e0:21:2f:76:7c:2d:1f:59:e1:6d: 10:a7:58:f1:1c:b9:65:8a:d0:6c:05:34:dc:22:30:b5:f5:ac: a1:dc:11:e7:f9:6b:61:b5:c5:c8:81:3a:e1:af:5f:57:05:a2: da:40:ac:7f:d3:4d:53:23:d5:bc:18:a9:24:0f:40:9c:a2:00: b0:13:18:45:54:02:cb:f2:e0:21:1f:c4:fd:b1:51:a1:7f:4f: 28:8e:9d:06:e2:ec:23:3e:57:82:bb:e1:d0:a9:2d:a5:14:2f: 20:07:85:82:8c:a3:61:63:d8:e3:14:91:38:48:db:dd:7e:88: ef:ec:34:1c:7d:17:e9:41:ed:d3:48:d4:38:67:8a:86:ab:90: 94:50:2f:0c:ba:5c:fe:e5:7c:5b:80:83:29:2a:89:c9:17:4a: 8a:32:a1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyn/Tt73s6Bztx2hHsxtY4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMzAxMDYwMTU2WhcNMjYwMzAyMDYwMTU2WjAzMTEwLwYDVQQD EygzZDNhNjAwYjE0NGEzYjUxYWI1NjNmMzJlZjUwNTkxMGE4ZWRhZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gKVIJ2SpI+Kt6ikDuwCTiEX2DTq w73AT/8+yYANvkfAuK98Ak19C2yoAs9vm+puMJIgpsubnROnmdQLMSA4ASQfYREd C1I+vNTfTEux3NqDC7IMG4spDn9f65+Ik2PP9pyl4zIKn5LDbLB9T2fvsm4KYsPd RxO9dqWTUuGE0bhY+InBc9IRfJ8AiDCjDR6WNM23UB1o1f7ST1L8S+VF4Zh5ciJe LQkeG+NIKYLHVFjbmc1GwQ8dD6HG4l5NHA0GAh3aPGf7Vh+ny6sm4Fq+sbT3sigK FTK7V93RdurEHhDbZ2LFP77ueJ7wReff69IvyyeGXbdr/6qtcgTcydT6LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD06YAsUSjtRq1Y/Mu9QWRCo7a7UMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAOo554r HmqlC+rxIA9HWDRUkDSu1cRY+m6Iov4Pxne/+ncBPXRb5N5k7ZlMOrH1xc07ypE4 WZukMqFODaVk1rV/6wRRnljIy2tfkNEUOddHYXHopvtz7pQ3Ta1/kLHjz3vgIS92 fC0fWeFtEKdY8Ry5ZYrQbAU03CIwtfWsodwR5/lrYbXFyIE64a9fVwWi2kCsf9NN UyPVvBipJA9AnKIAsBMYRVQCy/LgIR/E/bFRoX9PKI6dBuLsIz5Xgrvh0KktpRQv IAeFgoyjYWPY4xSROEjb3X6I7+w0HH0X6UHt00jUOGeKhquQlFAvDLpc/uV8W4CD KSqJyRdKijKhHw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:38:18 2026 by rpki-client