$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json) Hash identifier: MRHx7e9NoHE57ac6aRa5zpgBZsEBO/YQoiFUAgsqsBI= Subject key identifier: 77:35:7D:01:6D:FE:AF:84:67:9A:31:0C:68:9C:67:5D:B1:BD:FC:82 Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Certificate serial: 019CAA21D5F92913914A0E10236F3D339A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft Manifest number: 33 Signing time: Sun 01 Mar 2026 16:01:10 +0000 Manifest this update: Sun 01 Mar 2026 16:01:10 +0000 Manifest next update: Mon 02 Mar 2026 16:01:10 +0000 Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=) 2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=) 3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=) 4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=) 5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: 867OJbL/DnKM+b0z4Nd6ZpQP9BwGNDsL+0+sIqn6rpw=) 6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=) 7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=) 8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=) 9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=) 10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=) 11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:d5:f9:29:13:91:4a:0e:10:23:6f:3d:33:9a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Validity Not Before: Mar 1 16:01:10 2026 GMT Not After : Mar 2 16:01:10 2026 GMT Subject: CN=77357d016dfeaf84679a310c689c675db1bdfc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:1a:72:07:fd:58:d6:a5:31:6b:15:bb:3b: ee:fc:13:2f:64:6b:1d:d7:a2:2e:9c:9d:1e:5d:ba: aa:0e:e9:73:9e:11:b8:54:c6:a2:81:a2:8f:3f:d3: 68:b0:40:82:95:4f:ce:80:c1:6a:8d:a9:8b:03:fe: 1c:3d:3c:f3:57:a4:33:a9:72:4b:04:11:cf:16:6c: 05:de:74:32:53:50:b2:5a:64:11:26:2b:a4:ad:85: cf:e4:cc:eb:1a:4f:eb:47:29:f8:cd:86:df:12:0e: 56:11:18:a6:89:66:7e:9d:2d:23:c8:15:a8:fe:b0: 95:fa:e8:c8:ca:3e:11:3f:cd:bb:30:8e:55:b2:29: 18:43:fa:00:2e:24:48:f2:80:67:35:17:85:7c:b3: 4b:89:70:7d:9e:0e:f2:e4:0d:4e:85:fa:c5:a7:52: 5b:1b:21:1a:4a:30:6c:12:54:fe:56:28:d0:97:91: 77:81:4c:ba:a0:0b:ba:0c:80:fd:7a:7e:2b:4a:27: e0:16:0e:fd:ea:0e:f6:16:ae:af:58:3d:30:4b:f8: 33:3a:dd:88:b6:9f:f5:70:c2:a5:6c:71:e7:fa:5c: 74:a9:ed:04:92:78:74:48:68:59:ba:a0:60:17:5c: cf:94:56:da:e9:12:55:b6:85:fc:f2:18:d1:93:db: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:7D:01:6D:FE:AF:84:67:9A:31:0C:68:9C:67:5D:B1:BD:FC:82 X509v3 Authority Key Identifier: keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4e:a3:97:1f:21:a8:a9:78:28:87:37:9c:d0:c9:3b:6c:dc: 94:ff:c3:68:ef:1f:ff:f8:70:39:a5:36:c5:11:ca:21:ab:3a: bd:de:eb:7c:78:fe:08:f3:7d:13:c6:16:d9:9a:12:86:c9:fe: 4c:c3:a0:f8:91:2d:09:8c:ec:c6:f4:72:67:10:5b:2c:f5:a2: 54:5f:c6:64:6c:cc:a8:43:8c:e9:e7:2a:55:86:17:90:85:a9: 80:87:eb:4a:32:a7:ab:68:92:b5:9a:b7:f9:3e:16:7e:ac:8b: 5b:7a:4c:46:6f:67:af:c9:80:70:13:81:16:5a:f3:35:76:57: bf:80:0a:90:f0:c7:a4:5e:c8:0b:3f:f5:b6:8f:20:86:00:51: 9a:45:6c:da:f3:f0:29:b1:96:2c:23:91:9b:b0:35:b6:8d:fc: c7:9c:8c:5e:dc:2e:73:bf:75:10:6b:a7:5c:74:da:c6:17:56: b9:7b:75:9f:8d:8e:23:fd:71:1a:70:3c:da:4f:b6:44:ca:14: 23:8e:51:b2:b5:f0:17:0d:72:cd:0d:1e:ac:29:1b:fa:68:bb: b9:84:45:df:0e:1e:e3:21:96:e5:56:06:f4:6f:bc:72:86:8e: 58:be:01:37:e2:c0:c2:77:52:d6:a0:20:36:21:8b:be:5c:ba: 67:d7:0d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIdX5KRORSg4QI289M5ooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGMyNGQ0MzdhMGQ1NmI5YmQwYmU0ODhhNjBjZmQ1Y2Nj OGY5YmYwHhcNMjYwMzAxMTYwMTEwWhcNMjYwMzAyMTYwMTEwWjAzMTEwLwYDVQQD Eyg3NzM1N2QwMTZkZmVhZjg0Njc5YTMxMGM2ODljNjc1ZGIxYmRmYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sIacgf9WNalMWsVuzvu/BMvZGsd 16IunJ0eXbqqDulznhG4VMaigaKPP9NosECClU/OgMFqjamLA/4cPTzzV6QzqXJL BBHPFmwF3nQyU1CyWmQRJiukrYXP5MzrGk/rRyn4zYbfEg5WERimiWZ+nS0jyBWo /rCV+ujIyj4RP827MI5VsikYQ/oALiRI8oBnNReFfLNLiXB9ng7y5A1OhfrFp1Jb GyEaSjBsElT+VijQl5F3gUy6oAu6DID9en4rSifgFg796g72Fq6vWD0wS/gzOt2I tp/1cMKlbHHn+lx0qe0Eknh0SGhZuqBgF1zPlFba6RJVtoX88hjRk9thYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc1fQFt/q+EZ5oxDGicZ12xvfyCMB8GA1UdIwQY MBaAFFVMJNQ3oNVrm9C+SIpgz9XMyPm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUt NjliYWExMWQ1NzhmLzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUtNjliYWExMWQ1Nzhm LzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE6jlx8h qKl4KIc3nNDJO2zclP/DaO8f//hwOaU2xRHKIas6vd7rfHj+CPN9E8YW2ZoShsn+ TMOg+JEtCYzsxvRyZxBbLPWiVF/GZGzMqEOM6ecqVYYXkIWpgIfrSjKnq2iStZq3 +T4WfqyLW3pMRm9nr8mAcBOBFlrzNXZXv4AKkPDHpF7ICz/1to8ghgBRmkVs2vPw KbGWLCORm7A1to38x5yMXtwuc791EGunXHTaxhdWuXt1n42OI/1xGnA82k+2RMoU I45RsrXwFw1yzQ0erCkb+mi7uYRF3w4e4yGW5VYG9G+8coaOWL4BN+LAwndS1qAg NiGLvly6Z9cNDg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:44:47 2026 by rpki-client