$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: lUHzh+g7e/EUFpYh+rBYhGm21JVQl3LGZZ4f7iYLkLI= Subject key identifier: C5:91:88:BF:E1:67:AA:A8:A3:5E:60:C3:26:ED:83:45:5C:66:F8:58 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019CAA58F1471E894FBFD0471DEA7721281A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1857 Signing time: Sun 01 Mar 2026 17:01:21 +0000 Manifest this update: Sun 01 Mar 2026 17:01:21 +0000 Manifest next update: Mon 02 Mar 2026 17:01:21 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: 12zUK8H2ocxB1mXf4irvzaA2HJa9t2nq3jjhlrBm8sA=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:f1:47:1e:89:4f:bf:d0:47:1d:ea:77:21:28:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Mar 1 17:01:21 2026 GMT Not After : Mar 2 17:01:21 2026 GMT Subject: CN=c59188bfe167aaa8a35e60c326ed83455c66f858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:a1:06:4c:1d:7d:e1:4b:4c:2f:b6:c7:d2: d2:75:32:db:88:b9:05:bc:b9:14:eb:1a:93:e2:2b: 43:c5:ec:48:66:3c:d2:57:2d:34:6b:6c:98:35:73: dd:ba:3c:ad:2e:fb:f6:8c:d0:a6:32:c4:3a:27:2b: 89:b9:eb:82:f9:16:63:7e:85:a0:ef:b3:bd:2b:bb: 99:c9:fb:c0:11:86:60:18:e2:c5:e5:84:f1:ef:bf: 36:eb:e3:aa:93:5d:a8:9c:df:ed:f7:e2:07:93:6c: 50:2f:51:00:10:f7:b3:26:30:5e:4f:86:a9:fe:a9: f5:b7:2e:5b:66:43:40:85:71:98:a0:13:f5:93:af: 90:dc:cf:d9:7d:ef:37:69:4b:f3:02:91:96:65:62: 6c:d9:67:0b:ca:1b:1b:5d:79:62:02:ff:40:39:c2: b9:96:d1:a7:6e:25:83:07:9a:60:66:10:ca:a0:06: c1:1b:da:12:7e:e8:6e:d3:25:d3:f8:c9:5c:9f:87: 68:b5:d2:ac:f2:0c:c5:7e:c6:47:c7:a5:42:ba:bf: 29:e9:66:6d:1f:3f:b2:77:a9:e0:4c:4d:1b:97:67: f7:a2:82:a1:ea:dd:cb:31:7a:31:44:40:d8:32:d3: 83:bf:64:d8:c3:b9:51:1c:db:cd:45:0b:f4:c5:3e: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:88:BF:E1:67:AA:A8:A3:5E:60:C3:26:ED:83:45:5C:66:F8:58 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:15:11:f9:50:40:c9:2b:90:1a:5a:42:7d:9f:4e:ba:99:64: 0e:ef:f0:5f:53:2d:4c:08:83:3d:a9:62:42:5a:44:97:15:ba: 73:80:c8:81:2f:ea:66:e9:87:49:f7:01:6e:64:ea:4b:8c:3e: 20:82:ab:47:0e:88:f6:a1:5f:91:1e:eb:40:f9:5e:1e:4d:d7: 35:86:dc:1a:30:73:8b:21:ea:95:6e:6c:bf:2a:97:b8:0d:30: 8e:fc:5d:86:73:76:1e:33:eb:21:c1:0b:5a:a7:a4:c7:7f:19: a1:4c:b5:77:08:3d:79:01:fb:de:c0:81:71:97:7f:9c:f5:37: 87:c4:83:8c:0c:2e:5a:02:2e:0f:c4:23:58:92:1f:73:e5:1c: 68:49:97:18:bc:7b:b4:42:99:8d:f4:5b:73:77:eb:1d:26:31: 30:fd:f3:bc:3a:04:5b:df:37:07:32:a0:4a:be:32:b5:ef:83: a5:7c:9e:0a:3c:9f:ee:b6:73:dd:e5:cf:16:75:56:f1:1d:92: 56:a8:4d:34:1b:c9:11:96:d4:a1:69:c5:a7:79:6c:d7:c8:2d: 44:40:70:ca:e1:20:6a:49:58:11:81:30:18:16:1a:76:21:30: 48:5d:de:c8:0d:10:68:4e:d2:35:46:ad:f3:ce:85:30:68:d2: 30:1a:42:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWPFHHolPv9BHHep3ISgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMzAxMTcwMTIxWhcNMjYwMzAyMTcwMTIxWjAzMTEwLwYDVQQD EyhjNTkxODhiZmUxNjdhYWE4YTM1ZTYwYzMyNmVkODM0NTVjNjZmODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiuhBkwdfeFLTC+2x9LSdTLbiLkF vLkU6xqT4itDxexIZjzSVy00a2yYNXPdujytLvv2jNCmMsQ6JyuJueuC+RZjfoWg 77O9K7uZyfvAEYZgGOLF5YTx77826+Oqk12onN/t9+IHk2xQL1EAEPezJjBeT4ap /qn1ty5bZkNAhXGYoBP1k6+Q3M/Zfe83aUvzApGWZWJs2WcLyhsbXXliAv9AOcK5 ltGnbiWDB5pgZhDKoAbBG9oSfuhu0yXT+Mlcn4dotdKs8gzFfsZHx6VCur8p6WZt Hz+yd6ngTE0bl2f3ooKh6t3LMXoxREDYMtODv2TYw7lRHNvNRQv0xT6ydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWRiL/hZ6qoo15gwybtg0VcZvhYMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThUR+VBA ySuQGlpCfZ9OuplkDu/wX1MtTAiDPaliQlpElxW6c4DIgS/qZumHSfcBbmTqS4w+ IIKrRw6I9qFfkR7rQPleHk3XNYbcGjBziyHqlW5svyqXuA0wjvxdhnN2HjPrIcEL Wqekx38ZoUy1dwg9eQH73sCBcZd/nPU3h8SDjAwuWgIuD8QjWJIfc+UcaEmXGLx7 tEKZjfRbc3frHSYxMP3zvDoEW983BzKgSr4yte+DpXyeCjyf7rZz3eXPFnVW8R2S VqhNNBvJEZbUoWnFp3ls18gtREBwyuEgaklYEYEwGBYadiEwSF3eyA0QaE7SNUat 886FMGjSMBpCYA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:39:49 2026 by rpki-client