$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: vd92/FJJiPdfFtJD+Id/FvVpe3C9Wh4e4UapUns99k0= Subject key identifier: F0:A3:23:34:04:30:FB:AE:BB:72:DB:2F:24:76:6F:1B:B8:2A:65:70 Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019CACB4EBFF15A28FFCF78DCF7EA7C2AA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 1906 Signing time: Mon 02 Mar 2026 04:01:03 +0000 Manifest this update: Mon 02 Mar 2026 04:01:03 +0000 Manifest next update: Tue 03 Mar 2026 04:01:03 +0000 Files and hashes: 1: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=) 2: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=) 3: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=) 4: cjuW9zHucIxHadivGPbPdZXZ_58.roa (hash: +/HavscS0K4ByxH8Sd+pAVMLMiLtpvePtkXZTD1HVWg=) 5: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=) 6: kHJAbRZAn8BmDoNVsIR_1TrPdwU.roa (hash: MQR9UxJH6mrGqbSYbaZNH4TCjTvPKDgCy2uSCTLGIl4=) 7: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 1wE7YkuLp7MNekXxYWx6iFFrsbnUXjHLUGSeKfdZcXo=) 8: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=) 9: qd72DKJaICZWiagHwebWP0vFOJ8.roa (hash: /V0/an8AE34Kq1g8LUh0t2FSys6TP8h7lRi/4uGrR90=) 10: tzdUVDYS3OHwMrXXdtLM-vAaw8M.roa (hash: uF0Li5lv3J1pHIyW/fznYQy0uM8WILwKnjHcwOAJFEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b4:eb:ff:15:a2:8f:fc:f7:8d:cf:7e:a7:c2:aa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Mar 2 04:01:03 2026 GMT Not After : Mar 3 04:01:03 2026 GMT Subject: CN=f0a323340430fbaebb72db2f24766f1bb82a6570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:58:17:08:e9:af:3b:61:70:75:30:2b:bc: 5b:dd:38:93:87:15:b7:09:54:0e:88:e1:af:ce:f1: 4a:b5:2f:fa:72:a3:34:f1:e1:d1:5f:89:91:cf:1c: b2:e0:2a:ed:8b:87:17:8f:b2:f9:55:ce:47:de:eb: 2d:52:13:eb:cf:ff:cd:70:a6:ca:d0:f9:9c:1e:32: 4a:21:87:d8:bb:68:4d:44:d2:fe:64:81:ba:2b:22: 72:0e:e6:48:2c:7f:83:c2:a8:8c:ce:7b:ec:50:fe: 7c:33:fe:b3:3a:4a:0f:b7:8f:8f:d5:83:76:8c:24: 8c:7c:8b:6b:22:ff:0f:44:eb:42:6a:7b:96:9f:5a: c0:58:ba:4d:a9:7d:be:75:34:79:3d:85:7a:3b:b2: 13:00:70:ee:03:06:2d:ee:2e:b9:0b:12:c0:b3:e3: 8e:ea:ce:7d:85:96:0c:6c:94:eb:6a:b0:d3:8f:d5: ce:30:24:51:25:90:63:eb:1b:73:ee:22:5f:a6:51: 34:ac:5d:db:57:ed:d4:aa:10:a0:8b:46:6c:2f:07: c6:b0:bf:07:22:01:04:2e:f6:f7:d0:a5:fe:70:ae: 7f:c4:e7:09:b6:bf:71:30:ef:f5:a0:d2:e2:c4:6a: 16:98:35:e6:46:23:56:8a:e9:49:6e:f3:ce:eb:40: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A3:23:34:04:30:FB:AE:BB:72:DB:2F:24:76:6F:1B:B8:2A:65:70 X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4c:d8:f1:d6:3d:51:b2:c0:29:44:31:e1:f6:a1:71:d2:02: e9:54:ff:42:06:14:bb:d7:86:8c:32:1d:d8:7e:e5:b8:97:6c: 16:e3:95:9e:5e:9f:e5:b0:ea:69:20:4a:1b:7e:5b:82:b9:04: 4b:d2:b5:87:b0:e8:4e:93:4c:f1:ef:ba:97:9b:c0:bd:d2:97: df:05:5f:d6:2a:11:e9:a6:3d:04:e5:0f:d8:ac:00:85:6d:b2: 5b:42:df:d9:f5:c7:12:e4:e9:38:55:8c:2b:17:db:87:eb:fd: e8:ba:f5:75:da:67:d3:4f:3a:2a:12:71:82:75:94:7c:aa:ed: 0a:78:58:78:5a:4b:2c:c4:67:01:f8:a3:37:ef:5a:f1:2f:d6: f9:58:68:a7:6f:fb:71:52:4f:43:b6:1e:2f:7f:c8:cb:77:b4: e7:0c:7d:5b:d5:c6:94:71:f5:3c:8d:7b:4e:88:84:6d:f2:61: 00:d7:e2:39:0c:5b:3c:a3:a3:1a:29:bc:d5:41:ae:93:35:6d: 69:c2:f9:97:ce:c4:2c:db:86:35:9c:bc:af:13:71:b5:75:22: cf:fa:51:63:62:d5:ec:f9:07:4d:20:7d:ce:c5:45:e2:85:4e: d3:6f:a7:25:50:d6:b8:c6:60:56:fb:17:04:27:c1:d7:80:e1: a2:17:bb:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystOv/FaKP/PeNz36nwqpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwMzAyMDQwMTAzWhcNMjYwMzAzMDQwMTAzWjAzMTEwLwYDVQQD EyhmMGEzMjMzNDA0MzBmYmFlYmI3MmRiMmYyNDc2NmYxYmI4MmE2NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZYFwjprzthcHUwK7xb3TiThxW3 CVQOiOGvzvFKtS/6cqM08eHRX4mRzxyy4Crti4cXj7L5Vc5H3ustUhPrz//NcKbK 0PmcHjJKIYfYu2hNRNL+ZIG6KyJyDuZILH+DwqiMznvsUP58M/6zOkoPt4+P1YN2 jCSMfItrIv8PROtCanuWn1rAWLpNqX2+dTR5PYV6O7ITAHDuAwYt7i65CxLAs+OO 6s59hZYMbJTrarDTj9XOMCRRJZBj6xtz7iJfplE0rF3bV+3UqhCgi0ZsLwfGsL8H IgEELvb30KX+cK5/xOcJtr9xMO/1oNLixGoWmDXmRiNWiulJbvPO60CQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCjIzQEMPuuu3LbLyR2bxu4KmVwMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEzY8dY9 UbLAKUQx4fahcdIC6VT/QgYUu9eGjDId2H7luJdsFuOVnl6f5bDqaSBKG35bgrkE S9K1h7DoTpNM8e+6l5vAvdKX3wVf1ioR6aY9BOUP2KwAhW2yW0Lf2fXHEuTpOFWM Kxfbh+v96Lr1ddpn0086KhJxgnWUfKrtCnhYeFpLLMRnAfijN+9a8S/W+Vhop2/7 cVJPQ7YeL3/Iy3e05wx9W9XGlHH1PI17ToiEbfJhANfiOQxbPKOjGim81UGukzVt acL5l87ELNuGNZy8rxNxtXUiz/pRY2LV7PkHTSB9zsVF4oVO02+nJVDWuMZgVvsX BCfB14Dhohe7Bg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:43 2026 by rpki-client