$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: KtEKwLlo/syHpAvLV/jbCJprYsNfxmVFljH7ExOz8f8= Subject key identifier: 74:BC:E9:5A:AB:5D:67:3B:12:24:E1:16:68:A5:82:29:29:12:1A:52 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019CAB3452BC208B3326ECE5EFA019FEFBAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0E8B Signing time: Sun 01 Mar 2026 21:00:58 +0000 Manifest this update: Sun 01 Mar 2026 21:00:58 +0000 Manifest next update: Mon 02 Mar 2026 21:00:58 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 3LWYsdlmVQ6awcGV+kevq81fv+PKQ6gbWDjI2m6Y+8Y=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:52:bc:20:8b:33:26:ec:e5:ef:a0:19:fe:fb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Mar 1 21:00:58 2026 GMT Not After : Mar 2 21:00:58 2026 GMT Subject: CN=74bce95aab5d673b1224e11668a5822929121a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:3c:43:42:28:06:46:7c:ec:e6:75:a6:90: 38:ba:7d:45:bc:da:45:e7:7d:b9:34:ec:1e:a2:af: 1e:2c:ea:9f:db:9e:11:55:a4:74:9e:30:1a:d1:28: 5f:d1:ef:1e:dc:2e:81:07:3c:73:fd:3f:7d:2a:07: 0b:3a:21:ed:82:eb:35:f4:05:c5:b6:f8:5f:3b:58: 38:e3:29:a9:54:e3:77:c9:97:75:f0:16:22:e8:cd: b8:af:26:64:8a:c1:f4:a4:82:92:d2:e6:3a:de:25: a9:ed:aa:55:3a:8d:02:c9:b1:56:45:0e:26:2e:b8: 25:f4:d9:b9:43:a3:c9:5d:d0:74:95:15:7b:73:b2: b9:29:6f:35:7f:10:b5:40:ce:05:02:c2:78:ee:3c: af:ea:68:2a:dc:ec:05:78:88:73:70:ca:4c:dc:03: 0a:6c:72:81:a2:5d:ef:4d:b4:07:bc:da:2f:8f:5b: 21:01:e5:e1:19:1f:5f:78:c9:95:a7:83:50:8a:fb: 3c:a0:5a:9e:4a:f5:04:1d:7b:04:5c:8d:50:ca:5e: a3:c9:4f:f5:27:7e:37:ba:f5:5e:78:76:cc:48:6a: 46:7a:f8:54:f3:4b:70:6b:db:4e:1d:7e:36:aa:f5: 35:5a:6d:00:96:61:eb:b8:5f:01:08:26:2c:eb:ee: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:E9:5A:AB:5D:67:3B:12:24:E1:16:68:A5:82:29:29:12:1A:52 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f1:2a:46:31:a9:f0:16:79:77:fb:75:0c:7f:b4:c6:b1:e2: 72:07:3c:c0:1c:f8:85:7c:d4:c8:f4:9a:0a:13:61:6c:f3:78: a2:36:81:48:3e:18:5f:b6:d9:71:53:ee:2b:20:87:7b:9a:c2: 20:6b:68:15:87:6c:04:27:9e:e0:d5:56:cd:b5:e9:b9:ea:8f: 2d:29:ac:84:c9:dd:f0:2e:da:c6:30:d0:5b:03:c0:a1:42:87: 4d:80:fd:f9:12:e4:42:f8:4c:10:37:b9:ad:57:c7:87:db:2e: 48:df:91:35:fc:b7:ce:c6:1a:e8:85:d8:74:b1:bc:8e:c8:b5: 8b:ce:f7:0b:9c:ba:68:13:93:6c:42:74:50:65:b4:bc:99:76: 2a:29:bf:db:3b:6c:70:1a:8c:4f:55:3f:e5:ea:2a:65:97:00: ff:fd:bb:a2:44:e5:5e:eb:d0:61:d8:57:ea:39:04:d1:ec:d0: c7:85:8e:75:4b:94:8a:1b:aa:b8:71:f4:5e:6a:ea:45:e4:80: c0:f5:6f:ec:45:a6:b4:6b:79:a0:e5:6d:ca:e7:7d:ea:d1:41: 92:8f:f1:25:ea:a7:ec:0f:ba:a0:85:c6:ef:9a:cc:bc:f1:e0: c3:3c:a7:f4:0b:17:ca:d5:be:11:e0:d3:38:76:8d:f0:f3:29: 2b:ff:f2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNFK8IIszJuzl76AZ/vusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMzAxMjEwMDU4WhcNMjYwMzAyMjEwMDU4WjAzMTEwLwYDVQQD Eyg3NGJjZTk1YWFiNWQ2NzNiMTIyNGUxMTY2OGE1ODIyOTI5MTIxYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkng8Q0IoBkZ87OZ1ppA4un1FvNpF 5325NOweoq8eLOqf254RVaR0njAa0Shf0e8e3C6BBzxz/T99KgcLOiHtgus19AXF tvhfO1g44ympVON3yZd18BYi6M24ryZkisH0pIKS0uY63iWp7apVOo0CybFWRQ4m Lrgl9Nm5Q6PJXdB0lRV7c7K5KW81fxC1QM4FAsJ47jyv6mgq3OwFeIhzcMpM3AMK bHKBol3vTbQHvNovj1shAeXhGR9feMmVp4NQivs8oFqeSvUEHXsEXI1Qyl6jyU/1 J343uvVeeHbMSGpGevhU80twa9tOHX42qvU1Wm0AlmHruF8BCCYs6+67iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS86VqrXWc7EiThFmilgikpEhpSMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/EqRjGp 8BZ5d/t1DH+0xrHicgc8wBz4hXzUyPSaChNhbPN4ojaBSD4YX7bZcVPuKyCHe5rC IGtoFYdsBCee4NVWzbXpueqPLSmshMnd8C7axjDQWwPAoUKHTYD9+RLkQvhMEDe5 rVfHh9suSN+RNfy3zsYa6IXYdLG8jsi1i873C5y6aBOTbEJ0UGW0vJl2Kim/2zts cBqMT1U/5eoqZZcA//27okTlXuvQYdhX6jkE0ezQx4WOdUuUihuquHH0XmrqReSA wPVv7EWmtGt5oOVtyud96tFBko/xJeqn7A+6oIXG75rMvPHgwzyn9AsXytW+EeDT OHaN8PMpK//yCg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:48:18 2026 by rpki-client