$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: Fox9PLQK8CMo+dXG9Sco0UQJLcXwQonmS8B4qMTLQ2A= Subject key identifier: C9:EF:7A:14:87:F6:91:B2:61:3B:F1:55:B0:F3:91:7E:AF:F1:7F:B2 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019CAA21F1C5065296A0D5215F10D0D79A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 178C Signing time: Sun 01 Mar 2026 16:01:17 +0000 Manifest this update: Sun 01 Mar 2026 16:01:17 +0000 Manifest next update: Mon 02 Mar 2026 16:01:17 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: dsUSIN62PRlYT8jPC/npFpizB6glnfL/C/+McAjXx8Y=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:f1:c5:06:52:96:a0:d5:21:5f:10:d0:d7:9a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Mar 1 16:01:17 2026 GMT Not After : Mar 2 16:01:17 2026 GMT Subject: CN=c9ef7a1487f691b2613bf155b0f3917eaff17fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:76:19:f5:b5:ba:c0:1a:6c:ca:f1:f6:fd: 57:1e:af:b6:60:06:47:b9:5e:a7:57:8a:cf:40:4c: 1d:0a:a8:d9:a7:6f:1b:c5:09:92:5d:39:f9:e9:fb: 2b:54:45:9b:8a:bd:87:7b:d8:8e:0e:30:51:00:ab: 3d:30:42:4a:89:dc:1d:5a:da:6d:cf:c0:6b:b9:7d: f3:93:1d:e6:0c:6d:94:4e:d7:ba:ed:45:ca:d3:5a: db:b5:98:38:8f:cf:ed:ec:84:16:bb:18:bb:b1:b8: 43:a4:60:2e:a9:4e:ab:6d:22:16:05:fa:bf:d3:e8: 20:b7:12:21:77:99:76:b9:25:bc:c9:3f:24:53:b8: 4d:6d:c2:a9:0b:ca:b1:cc:14:df:a0:e5:19:f9:9e: 4c:6b:36:64:5c:cb:91:e7:84:06:8c:34:1e:86:9d: a2:83:32:ab:00:e8:73:b5:7b:8e:0b:3d:20:d0:78: db:20:df:45:8a:6b:49:96:f6:06:f2:f5:b2:93:75: 3b:38:51:cf:81:e6:2e:51:a8:b0:86:fa:4b:b9:a0: 14:23:ac:10:7c:96:5a:e5:9b:5d:41:7b:3c:da:a3: f8:48:95:f0:1d:8d:1d:a6:1d:f0:00:85:f4:83:b3: 77:8a:15:26:0c:ad:23:49:f6:91:d1:aa:d7:53:c9: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:7A:14:87:F6:91:B2:61:3B:F1:55:B0:F3:91:7E:AF:F1:7F:B2 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e9:9f:2f:97:c5:30:b4:65:3d:58:3b:8f:62:0c:30:4a:d6: bb:be:86:bd:72:fc:46:a0:2f:6c:74:37:58:16:f3:47:4a:17: 82:22:54:98:10:c6:67:cf:10:89:71:15:58:94:52:da:1e:cf: da:2a:72:bc:e6:67:b4:e5:b0:85:14:e7:8a:55:fa:9b:2b:61: 18:74:26:8a:32:c3:b0:5d:96:df:cf:b0:6b:c0:f4:bc:40:40: d2:88:cc:cb:6e:c2:f5:09:dd:40:be:a5:2e:86:94:0a:ac:70: 4f:2b:a8:67:39:2d:30:30:2c:09:ba:e2:14:7a:24:a8:71:21: 0a:ae:81:d2:15:b0:7a:eb:d3:45:4a:36:80:88:46:a3:44:9a: 6a:98:3e:a0:12:84:4f:80:24:aa:4c:5c:13:b8:d9:80:e8:da: 59:e1:f1:0d:7e:ab:c0:19:98:10:d5:d9:d3:4c:a8:b4:34:d4: 23:96:b2:37:89:83:f1:23:a3:d4:55:48:2d:04:24:16:bf:62: 8f:cd:40:0a:7b:17:0f:99:6a:a4:5f:7f:d1:41:6b:54:b6:a1: 5e:a2:15:d1:c7:43:f1:29:8c:30:bd:d3:f8:7f:26:dd:ce:35: 04:a4:78:05:92:82:0d:a8:cf:13:46:bc:ab:6b:d1:b9:a4:9c: d8:06:9f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIfHFBlKWoNUhXxDQ15prMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMzAxMTYwMTE3WhcNMjYwMzAyMTYwMTE3WjAzMTEwLwYDVQQD EyhjOWVmN2ExNDg3ZjY5MWIyNjEzYmYxNTViMGYzOTE3ZWFmZjE3ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZ2GfW1usAabMrx9v1XHq+2YAZH uV6nV4rPQEwdCqjZp28bxQmSXTn56fsrVEWbir2He9iODjBRAKs9MEJKidwdWtpt z8BruX3zkx3mDG2UTte67UXK01rbtZg4j8/t7IQWuxi7sbhDpGAuqU6rbSIWBfq/ 0+ggtxIhd5l2uSW8yT8kU7hNbcKpC8qxzBTfoOUZ+Z5MazZkXMuR54QGjDQehp2i gzKrAOhztXuOCz0g0HjbIN9FimtJlvYG8vWyk3U7OFHPgeYuUaiwhvpLuaAUI6wQ fJZa5ZtdQXs82qP4SJXwHY0dph3wAIX0g7N3ihUmDK0jSfaR0arXU8k1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnvehSH9pGyYTvxVbDzkX6v8X+yMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOmfL5fF MLRlPVg7j2IMMErWu76GvXL8RqAvbHQ3WBbzR0oXgiJUmBDGZ88QiXEVWJRS2h7P 2ipyvOZntOWwhRTnilX6mythGHQmijLDsF2W38+wa8D0vEBA0ojMy27C9QndQL6l LoaUCqxwTyuoZzktMDAsCbriFHokqHEhCq6B0hWweuvTRUo2gIhGo0Saapg+oBKE T4AkqkxcE7jZgOjaWeHxDX6rwBmYENXZ00yotDTUI5ayN4mD8SOj1FVILQQkFr9i j81ACnsXD5lqpF9/0UFrVLahXqIV0cdD8SmMML3T+H8m3c41BKR4BZKCDajPE0a8 q2vRuaSc2Aafgw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:55 2026 by rpki-client