$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: dMvbaef8Ted0IMdkNjTVQ4p69sMRyAbMI6hZ+N1psyc= Subject key identifier: 7C:50:92:DF:7D:CB:DC:76:B2:63:75:A4:6E:A3:11:EE:31:1C:EC:19 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019D9962A1292F7918AE3FDC08AE9E5C9CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 1048 Signing time: Fri 17 Apr 2026 03:01:10 +0000 Manifest this update: Fri 17 Apr 2026 03:01:10 +0000 Manifest next update: Sat 18 Apr 2026 03:01:10 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 4: IN8_0shZRjqy0BSNcA6vSwjizsE.roa (hash: j3OMYKONkpCF4kIbEhnrl95j/FvtjhK3uRKyc6fY7qM=) 5: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 6: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 7: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 8: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 9: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 10: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 11: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 12: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: AbXYOmslQCVzS1UCz0UNEgFqSZEZv+fCxYUNhEM1tNI=) 13: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 14: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (hash: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=) 15: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:a1:29:2f:79:18:ae:3f:dc:08:ae:9e:5c:9c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Apr 17 03:01:10 2026 GMT Not After : Apr 18 03:01:10 2026 GMT Subject: CN=7c5092df7dcbdc76b26375a46ea311ee311cec19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:99:ec:fb:bd:34:2a:46:3c:a7:a5:3f:aa: 5c:3f:7c:a0:0c:ff:ec:38:ea:40:f1:1f:0d:1a:67: b1:93:c8:f8:46:8b:40:ef:cb:4f:95:06:b7:bf:68: c7:87:08:a2:ee:7c:b1:af:6d:73:e5:9d:32:35:13: 55:1f:1c:5d:f9:6b:dd:86:3e:99:f1:37:b5:ac:30: 4c:b8:a2:84:a2:a6:ba:3f:d3:21:3b:9a:7d:24:4a: 99:f4:a8:ac:62:18:f1:79:2f:5f:9b:68:3d:c1:03: 9b:0d:16:e7:93:61:e1:e1:3c:c0:27:72:c1:9d:f3: 77:d9:78:9c:6e:f3:99:9d:15:32:02:18:33:d3:8d: 20:aa:83:60:04:c5:9e:4c:0b:a8:93:18:b2:33:87: 5f:78:8f:59:61:75:9f:92:48:5c:ca:92:70:2d:52: 4b:fc:ca:38:ef:7d:22:32:8d:24:5f:92:c1:72:c1: 43:ab:7e:79:96:2c:a4:91:03:2c:65:7a:39:73:cd: 5b:e4:e9:71:ec:e1:24:d4:c0:a7:69:e1:40:c9:be: 61:2d:eb:d2:e2:b9:37:ae:94:d4:39:7e:62:d1:e6: 80:73:aa:20:e2:b9:50:d3:7d:9f:e4:93:34:00:06: cb:3b:58:74:83:fd:05:7a:7b:75:6c:75:f3:50:3c: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:50:92:DF:7D:CB:DC:76:B2:63:75:A4:6E:A3:11:EE:31:1C:EC:19 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ae:54:9b:b4:68:36:2b:e0:e8:e9:0b:b1:ba:7a:86:a1:f3: e3:0d:fd:05:d9:e3:cd:c9:75:9a:ae:31:b5:ca:f8:50:71:d4: f5:dc:ba:94:ae:1d:39:11:7b:91:da:cc:8f:0f:62:25:c4:66: ad:64:73:f6:84:9e:04:06:82:23:06:90:f3:e2:e1:6f:e5:df: 02:24:8b:67:7e:14:a7:95:0f:47:b0:01:b5:90:cc:a0:c5:76: 9c:eb:45:61:c4:19:be:dd:77:ac:70:f3:f4:5c:ca:20:7c:cf: cb:b2:fd:5b:43:7f:4b:be:33:50:a7:a2:c7:7a:61:e1:07:24: 46:6d:73:63:3d:f2:e1:f4:31:26:fb:20:74:29:34:44:82:7e: 8f:dc:cc:9d:eb:46:89:d9:01:21:79:37:77:87:24:4d:bb:40: 18:ff:7c:23:cf:90:d7:05:47:13:01:57:e9:08:9d:15:ea:51: 80:6a:b9:76:f2:36:4a:68:79:cf:7d:7e:7b:6e:65:2b:24:f4: 99:3f:b1:3c:72:8a:e5:3c:59:52:66:6d:53:5b:f5:24:8f:7d: 21:1d:cb:b6:1b:9e:70:ed:b8:c1:9a:b1:fd:af:dd:4a:a0:95: 4e:78:60:de:e4:27:22:1f:49:a2:71:c4:31:54:70:5a:5d:2b: ec:bb:cf:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYqEpL3kYrj/cCK6eXJz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwNDE3MDMwMTEwWhcNMjYwNDE4MDMwMTEwWjAzMTEwLwYDVQQD Eyg3YzUwOTJkZjdkY2JkYzc2YjI2Mzc1YTQ2ZWEzMTFlZTMxMWNlYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQGZ7Pu9NCpGPKelP6pcP3ygDP/s OOpA8R8NGmexk8j4RotA78tPlQa3v2jHhwii7nyxr21z5Z0yNRNVHxxd+Wvdhj6Z 8Te1rDBMuKKEoqa6P9MhO5p9JEqZ9KisYhjxeS9fm2g9wQObDRbnk2Hh4TzAJ3LB nfN32XicbvOZnRUyAhgz040gqoNgBMWeTAuokxiyM4dfeI9ZYXWfkkhcypJwLVJL /Mo4730iMo0kX5LBcsFDq355liykkQMsZXo5c81b5Olx7OEk1MCnaeFAyb5hLevS 4rk3rpTUOX5i0eaAc6og4rlQ032f5JM0AAbLO1h0g/0Fent1bHXzUDxv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxQkt99y9x2smN1pG6jEe4xHOwZMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa5Um7Ro Nivg6OkLsbp6hqHz4w39Bdnjzcl1mq4xtcr4UHHU9dy6lK4dORF7kdrMjw9iJcRm rWRz9oSeBAaCIwaQ8+Lhb+XfAiSLZ34Up5UPR7ABtZDMoMV2nOtFYcQZvt13rHDz 9FzKIHzPy7L9W0N/S74zUKeix3ph4QckRm1zYz3y4fQxJvsgdCk0RIJ+j9zMnetG idkBIXk3d4ckTbtAGP98I8+Q1wVHEwFX6QidFepRgGq5dvI2Smh5z31+e25lKyT0 mT+xPHKK5TxZUmZtU1v1JI99IR3LthuecO24wZqx/a/dSqCVTnhg3uQnIh9JonHE MVRwWl0r7LvPqA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:45:29 2026 by rpki-client