$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: FFlk2zXFobYhq3mdSKjoCYw6438b1iCUk+nDJw8DfH0= Subject key identifier: 8B:8A:48:58:9A:43:3F:33:D7:52:02:85:E8:B6:ED:74:1E:4C:0E:8F Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019CAD227CBFF3C876AFDE87353DD546593F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 08AC Signing time: Mon 02 Mar 2026 06:00:44 +0000 Manifest this update: Mon 02 Mar 2026 06:00:44 +0000 Manifest next update: Tue 03 Mar 2026 06:00:44 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=) 8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: lD7sHtbnCZXYyWgMV5h9uI6Jkk3iBTdcVu1l5X5H214=) 10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 12: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:7c:bf:f3:c8:76:af:de:87:35:3d:d5:46:59:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Mar 2 06:00:44 2026 GMT Not After : Mar 3 06:00:44 2026 GMT Subject: CN=8b8a48589a433f33d7520285e8b6ed741e4c0e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:cf:cd:17:ff:75:1b:31:4d:e2:9c:bf:1a: 42:0e:c3:28:ba:b4:ee:7c:6d:ee:dd:26:bd:80:1a: a7:92:62:78:c7:82:ff:ce:d6:e9:cb:55:b6:1a:b0: 79:b6:34:cc:cd:9d:87:fa:74:49:f2:ca:a1:46:3f: 8c:f1:4f:fc:fc:bd:29:ec:7f:5a:94:62:53:0c:1f: ea:90:20:18:e6:69:be:40:64:48:b6:b7:ff:a3:b2: e8:69:45:bf:cb:86:e0:83:a5:3f:6e:f2:a1:68:ae: 2e:28:f4:b5:28:67:2d:c4:c2:64:8d:0d:a4:cc:c7: cc:3e:78:2e:2a:8b:0f:61:5c:88:7a:ab:14:99:6b: 67:d8:fd:d5:d9:d0:6d:d5:a5:a7:30:a3:27:31:16: c4:c4:b9:be:a5:92:c7:0c:29:74:55:6a:d1:5e:2b: 28:65:f4:34:d1:81:c9:c6:e0:e0:c7:1d:b7:86:ce: 9e:57:da:04:95:bb:49:33:9a:97:1b:3b:1d:4f:21: f1:97:93:51:1d:10:b7:67:06:9d:19:bc:84:7a:87: 02:1c:77:6e:f6:d2:89:6b:cf:ce:ad:b8:b0:03:a3: 83:92:bc:af:64:cb:1d:01:b6:94:2b:f6:9b:ee:b1: 75:f1:68:36:49:31:21:9e:40:cc:f4:47:bd:1f:c5: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:48:58:9A:43:3F:33:D7:52:02:85:E8:B6:ED:74:1E:4C:0E:8F X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2b:79:81:8b:42:c5:91:85:fa:6a:e8:f5:a0:3a:e4:fd:14: b5:1a:c1:fe:fa:4c:75:59:e1:de:ed:6e:64:df:37:b5:e2:07: 53:49:99:c4:b6:d1:da:60:bd:60:27:8b:56:42:69:38:f7:a5: 87:63:9d:e9:9c:bb:fd:82:ed:92:57:f6:2b:81:23:37:6b:54: 96:7f:0f:1b:13:a9:65:7b:72:7f:0a:58:0b:f3:73:9d:e9:8d: 6f:89:07:82:19:ed:65:dc:62:85:59:18:b6:14:34:e3:02:3a: 91:3a:44:b5:c1:37:23:53:9a:40:0e:31:dc:69:45:19:48:23: b2:c4:05:64:42:f5:3a:fc:65:fc:70:75:02:45:87:23:83:47: d8:bd:94:6a:1f:4e:a4:e3:05:d8:cf:c6:7f:15:aa:90:f3:f8: 51:d7:01:7d:1c:40:6f:28:1c:d8:54:ab:c3:69:86:c8:89:2a: 25:20:4d:5d:3e:2c:04:71:74:f1:d0:38:7d:20:7e:dd:f5:c1: b5:4e:e7:0d:b8:fa:49:f9:2f:a5:30:50:8b:ad:2d:74:88:2b: 24:ea:c7:a9:f8:4e:4d:11:5b:f1:6e:29:47:2b:f0:8a:f0:cb: 60:b7:14:8c:cf:14:e1:5d:4a:77:df:b2:ac:06:93:be:6b:76: df:28:2b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIny/88h2r96HNT3VRlk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMzAyMDYwMDQ0WhcNMjYwMzAzMDYwMDQ0WjAzMTEwLwYDVQQD Eyg4YjhhNDg1ODlhNDMzZjMzZDc1MjAyODVlOGI2ZWQ3NDFlNGMwZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsvPzRf/dRsxTeKcvxpCDsMourTu fG3u3Sa9gBqnkmJ4x4L/ztbpy1W2GrB5tjTMzZ2H+nRJ8sqhRj+M8U/8/L0p7H9a lGJTDB/qkCAY5mm+QGRItrf/o7LoaUW/y4bgg6U/bvKhaK4uKPS1KGctxMJkjQ2k zMfMPnguKosPYVyIeqsUmWtn2P3V2dBt1aWnMKMnMRbExLm+pZLHDCl0VWrRXiso ZfQ00YHJxuDgxx23hs6eV9oElbtJM5qXGzsdTyHxl5NRHRC3ZwadGbyEeocCHHdu 9tKJa8/OrbiwA6ODkryvZMsdAbaUK/ab7rF18Wg2STEhnkDM9Ee9H8WGuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuKSFiaQz8z11IChei27XQeTA6PMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyt5gYtC xZGF+mro9aA65P0UtRrB/vpMdVnh3u1uZN83teIHU0mZxLbR2mC9YCeLVkJpOPel h2Od6Zy7/YLtklf2K4EjN2tUln8PGxOpZXtyfwpYC/NznemNb4kHghntZdxihVkY thQ04wI6kTpEtcE3I1OaQA4x3GlFGUgjssQFZEL1Ovxl/HB1AkWHI4NH2L2Uah9O pOMF2M/GfxWqkPP4UdcBfRxAbygc2FSrw2mGyIkqJSBNXT4sBHF08dA4fSB+3fXB tU7nDbj6SfkvpTBQi60tdIgrJOrHqfhOTRFb8W4pRyvwivDLYLcUjM8U4V1Kd9+y rAaTvmt23ygraA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:22 2026 by rpki-client