$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: dfy4uDWe1d43PVHrK/cte99LZlXzlPh/c0+9yokP4DI= Subject key identifier: 7E:B7:78:9C:A2:D0:3B:D9:4A:EE:52:6F:41:33:34:2C:96:A2:C5:C1 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019CAAFD3FB571FC6AE6ADE32F1EBB730443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 13F9 Signing time: Sun 01 Mar 2026 20:00:49 +0000 Manifest this update: Sun 01 Mar 2026 20:00:49 +0000 Manifest next update: Mon 02 Mar 2026 20:00:49 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 8: kV_BrjVm5ak2BohajWeFXkU5WnY.roa (hash: gf0jyat4SEAG7hpeZ/XK4zeXtnW9UimqB92MtzK9bjk=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: X3yubFEpzipl/XAIroBHiMxK4GWF6cRNxaPaJICvxz4=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:3f:b5:71:fc:6a:e6:ad:e3:2f:1e:bb:73:04:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Mar 1 20:00:49 2026 GMT Not After : Mar 2 20:00:49 2026 GMT Subject: CN=7eb7789ca2d03bd94aee526f4133342c96a2c5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:43:e9:25:d6:a8:b3:b4:0a:ec:8c:5f:73: 2a:1f:20:e5:1f:fc:10:ff:05:84:d6:ce:e1:d1:39: ef:1c:da:58:a3:86:ef:78:c3:d2:98:5a:af:2a:d9: a2:9c:ca:14:82:de:a3:94:96:29:dd:56:fe:b5:04: a1:5d:65:6d:04:f4:00:5a:42:f7:2d:69:7d:c6:c6: 3a:8a:77:64:75:54:3d:40:30:0d:be:0c:5f:01:b7: 18:33:a9:de:dd:b0:73:a2:15:62:9c:84:33:14:d4: a0:16:b5:71:aa:94:94:05:12:c4:10:45:d8:66:7d: 23:f2:55:f8:58:4e:60:1d:ef:2d:5a:e5:8f:0d:32: 94:ce:e9:f5:f0:0a:58:c0:37:44:06:bd:6e:97:e1: 01:b2:d6:51:a6:1b:ac:21:35:5b:ac:78:dd:f8:ee: 54:8b:51:73:de:8c:05:86:51:24:4e:86:29:ae:b5: 87:b5:79:3a:d0:51:72:0c:03:7d:36:f9:7e:04:e8: 10:ff:90:7a:bd:1b:5a:47:e3:f8:a0:8b:c8:b1:c6: a0:78:ba:74:75:63:8f:19:20:b0:ea:2a:f7:37:b7: 42:6d:42:c6:ef:7a:2f:b8:96:74:35:9b:26:06:44: b2:65:04:3b:0a:e2:7d:2f:f9:1d:1f:dd:f7:fd:dc: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B7:78:9C:A2:D0:3B:D9:4A:EE:52:6F:41:33:34:2C:96:A2:C5:C1 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:12:6a:e0:ec:4e:fa:fe:04:de:27:a8:18:5a:fc:b0:dc:4f: c1:9d:68:05:eb:3b:4f:19:a1:ac:c5:46:94:8e:07:4e:f9:15: ee:37:94:e2:cb:59:a4:8d:c3:fa:24:ea:3a:66:e1:22:36:cd: d2:40:b3:3b:96:8b:10:f1:30:40:c2:fa:ca:7e:91:dc:cb:41: 77:f1:8f:30:b8:28:11:49:d2:76:2e:97:08:82:ce:e9:24:5c: 59:1a:03:7c:3f:22:44:98:4a:a6:db:d6:44:be:d9:a2:16:50: 55:76:e9:a0:ea:d6:11:74:5c:29:86:ea:34:09:c4:8f:7b:fb: 16:3a:80:77:6a:80:aa:f9:5d:2a:fe:24:e1:e3:cf:68:7b:2a: c9:24:46:49:11:fb:ed:6b:b1:ee:ee:66:84:e3:3f:cb:38:24: 53:5b:9f:18:68:8e:22:f3:5f:e9:65:f6:fc:35:20:32:c9:53: e3:9f:56:4a:59:29:c0:db:98:f0:4d:75:d5:7b:b7:bd:40:47: 84:30:13:d5:77:b3:35:54:4c:19:cc:e8:d9:c1:34:50:9f:a8: 18:ad:b1:01:30:a8:61:32:54:e2:f3:2b:cf:64:0a:56:92:d9: 1b:58:a6:4a:af:b3:c6:6a:47:44:1f:5b:2f:c1:12:34:d3:50: 4b:75:4d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/T+1cfxq5q3jLx67cwRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMzAxMjAwMDQ5WhcNMjYwMzAyMjAwMDQ5WjAzMTEwLwYDVQQD Eyg3ZWI3Nzg5Y2EyZDAzYmQ5NGFlZTUyNmY0MTMzMzQyYzk2YTJjNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1dD6SXWqLO0CuyMX3MqHyDlH/wQ /wWE1s7h0TnvHNpYo4bveMPSmFqvKtminMoUgt6jlJYp3Vb+tQShXWVtBPQAWkL3 LWl9xsY6indkdVQ9QDANvgxfAbcYM6ne3bBzohVinIQzFNSgFrVxqpSUBRLEEEXY Zn0j8lX4WE5gHe8tWuWPDTKUzun18ApYwDdEBr1ul+EBstZRphusITVbrHjd+O5U i1Fz3owFhlEkToYprrWHtXk60FFyDAN9Nvl+BOgQ/5B6vRtaR+P4oIvIscageLp0 dWOPGSCw6ir3N7dCbULG73ovuJZ0NZsmBkSyZQQ7CuJ9L/kdH933/dz28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH63eJyi0DvZSu5Sb0EzNCyWosXBMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxJq4OxO +v4E3ieoGFr8sNxPwZ1oBes7TxmhrMVGlI4HTvkV7jeU4stZpI3D+iTqOmbhIjbN 0kCzO5aLEPEwQML6yn6R3MtBd/GPMLgoEUnSdi6XCILO6SRcWRoDfD8iRJhKptvW RL7ZohZQVXbpoOrWEXRcKYbqNAnEj3v7FjqAd2qAqvldKv4k4ePPaHsqySRGSRH7 7Wux7u5mhOM/yzgkU1ufGGiOIvNf6WX2/DUgMslT459WSlkpwNuY8E111Xu3vUBH hDAT1XezNVRMGczo2cE0UJ+oGK2xATCoYTJU4vMrz2QKVpLZG1imSq+zxmpHRB9b L8ESNNNQS3VN7w== -----END CERTIFICATE-----Generated at Mon Mar 2 02:32:25 2026 by rpki-client