$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: 9BORur3rjhFKWd+bLwSSjWLHKiSp2ChTgQUAC76CXzA= Subject key identifier: F6:1E:41:70:9E:9C:2D:81:67:74:31:02:40:A6:CD:21:B5:DB:8D:69 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019CAAFD116C3009292796EC17B4342E427D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 17E8 Signing time: Sun 01 Mar 2026 20:00:37 +0000 Manifest this update: Sun 01 Mar 2026 20:00:37 +0000 Manifest next update: Mon 02 Mar 2026 20:00:37 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: jYp2ngvyXiUmkZZ0jB+Kd+sMItCfJVt3xwNuhROKy8s=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:11:6c:30:09:29:27:96:ec:17:b4:34:2e:42:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Mar 1 20:00:37 2026 GMT Not After : Mar 2 20:00:37 2026 GMT Subject: CN=f61e41709e9c2d816774310240a6cd21b5db8d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:6a:e9:4c:5a:8f:74:36:c0:2c:46:d5:c2: 18:e4:79:b7:13:2a:9d:8d:a2:7a:01:80:32:ee:c5: 7b:fd:88:85:16:79:93:20:e7:54:bd:0a:25:ef:bc: db:92:5a:26:6f:fa:59:82:0b:0f:2a:e7:b4:a4:f5: d6:9f:55:2a:22:7a:2e:e6:e8:bc:d3:c4:86:36:e4: 70:7f:c3:a7:03:0b:42:00:18:a2:4d:2c:5a:c5:19: b6:1e:25:78:c7:10:6b:44:0f:e9:ca:fd:81:68:36: c8:c0:98:14:80:bb:4c:15:cf:5a:9d:b5:1e:a3:6e: e0:00:7e:af:26:33:9d:fe:1c:52:97:b5:de:cb:bb: a5:80:9d:a0:db:27:e3:24:f6:6e:fa:1b:5e:b8:17: c4:29:d9:d0:6a:34:b8:71:91:3e:c7:a4:ee:8c:d1: 18:4e:a2:cd:77:e1:c1:b9:f7:4b:fe:b5:e3:60:2b: b0:f3:03:16:35:50:73:f8:4b:60:f4:e8:cf:fc:16: 4f:84:04:76:3f:f4:39:0c:9c:35:66:0e:14:38:29: bd:8b:e7:b0:1d:ac:00:04:6d:f4:97:5f:6f:c4:d7: f1:e7:d4:35:12:ff:67:2d:0c:ce:7b:0e:44:dd:ab: 67:52:41:c5:c5:8c:07:32:c6:11:01:a2:68:02:66: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:41:70:9E:9C:2D:81:67:74:31:02:40:A6:CD:21:B5:DB:8D:69 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f6:fd:45:8b:64:f0:b5:89:55:93:81:68:18:9c:2a:ae:a2: d5:b7:26:00:21:5d:f2:70:24:de:7b:be:fa:0d:cb:44:49:b4: 70:a7:d1:58:c1:6c:3c:1e:06:98:de:8a:c7:60:9a:d6:35:31: 1e:e0:51:29:91:85:92:26:ce:6b:00:03:b5:ab:d7:04:9e:76: f5:fd:20:3b:02:b9:99:aa:d5:0d:c3:d5:dd:0e:0f:d7:45:71: 2b:03:17:2b:5e:51:1e:68:a0:ab:d8:69:8b:0c:95:04:21:36: b9:18:77:cf:00:89:8a:94:37:35:e4:c3:20:5f:22:bb:0f:1b: 1e:15:7e:8a:bc:22:cc:57:da:25:98:f4:1e:66:34:cd:43:cf: 89:d8:c1:99:80:3e:e1:98:80:44:c3:7e:b2:fe:5b:56:34:4f: 05:a3:38:c7:51:de:72:7e:23:5f:27:22:0a:44:9e:99:c7:37: 24:18:c8:9b:d3:65:f8:8a:7c:68:e6:f7:e5:33:26:f0:c7:86: 2b:77:5d:17:bb:3a:72:95:9c:cf:85:85:9a:ba:c7:d3:b4:81: 5b:e0:35:14:82:2f:63:7e:ac:47:fe:b9:d9:2c:e7:d0:28:e7: 85:51:af:44:4a:75:e8:4b:1f:49:0b:75:cf:b6:cb:b5:1e:68: e2:a7:ab:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/RFsMAkpJ5bsF7Q0LkJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMzAxMjAwMDM3WhcNMjYwMzAyMjAwMDM3WjAzMTEwLwYDVQQD EyhmNjFlNDE3MDllOWMyZDgxNjc3NDMxMDI0MGE2Y2QyMWI1ZGI4ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0xq6Uxaj3Q2wCxG1cIY5Hm3Eyqd jaJ6AYAy7sV7/YiFFnmTIOdUvQol77zbklomb/pZggsPKue0pPXWn1UqInou5ui8 08SGNuRwf8OnAwtCABiiTSxaxRm2HiV4xxBrRA/pyv2BaDbIwJgUgLtMFc9anbUe o27gAH6vJjOd/hxSl7Xey7ulgJ2g2yfjJPZu+hteuBfEKdnQajS4cZE+x6TujNEY TqLNd+HBufdL/rXjYCuw8wMWNVBz+Etg9OjP/BZPhAR2P/Q5DJw1Zg4UOCm9i+ew HawABG30l19vxNfx59Q1Ev9nLQzOew5E3atnUkHFxYwHMsYRAaJoAmZ+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYeQXCenC2BZ3QxAkCmzSG1241pMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovb9RYtk 8LWJVZOBaBicKq6i1bcmACFd8nAk3nu++g3LREm0cKfRWMFsPB4GmN6Kx2Ca1jUx HuBRKZGFkibOawADtavXBJ529f0gOwK5marVDcPV3Q4P10VxKwMXK15RHmigq9hp iwyVBCE2uRh3zwCJipQ3NeTDIF8iuw8bHhV+irwizFfaJZj0HmY0zUPPidjBmYA+ 4ZiARMN+sv5bVjRPBaM4x1Hecn4jXyciCkSemcc3JBjIm9Nl+Ip8aOb35TMm8MeG K3ddF7s6cpWcz4WFmrrH07SBW+A1FIIvY36sR/652Szn0CjnhVGvREp16EsfSQt1 z7bLtR5o4qerOw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:06 2026 by rpki-client