$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: kdjTiELSBbkyL5qkG++WSEPHgimCLlzdlT/3+xzNjIs= Subject key identifier: 0A:8C:2C:EC:1A:0C:D7:17:44:77:46:12:0E:2B:13:BA:52:0E:D2:B0 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019CAB34213BE3AA735EC5E4D2F940F872F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1214 Signing time: Sun 01 Mar 2026 21:00:46 +0000 Manifest this update: Sun 01 Mar 2026 21:00:46 +0000 Manifest next update: Mon 02 Mar 2026 21:00:46 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: lM2HILhvlCFX0SXnAjmx0QysIyVy2SrSje85yjNjTb0=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:21:3b:e3:aa:73:5e:c5:e4:d2:f9:40:f8:72:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Mar 1 21:00:46 2026 GMT Not After : Mar 2 21:00:46 2026 GMT Subject: CN=0a8c2cec1a0cd717447746120e2b13ba520ed2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:0e:6b:4a:ea:39:91:24:01:ec:d9:70:0e: 1e:9d:21:86:ec:2a:dc:b2:6e:96:b7:1e:f6:5d:07: 3f:1f:30:a4:c8:34:3d:40:30:f7:d3:59:a6:e3:f3: f2:12:dc:7c:ed:92:f2:75:5b:4b:78:ef:4f:8e:32: 14:8b:6c:4e:b5:76:f2:21:c3:33:9c:e1:ac:b3:8b: 69:79:1a:01:01:86:ed:1f:44:f5:5c:44:09:05:44: e3:e5:fa:96:38:cd:f6:62:48:9e:4f:f6:f2:18:5a: 1e:f7:3b:51:5b:f8:d0:48:2f:0f:d5:95:7e:c1:06: 03:d1:c5:79:1e:d3:61:66:cc:01:17:3f:ac:49:09: 45:07:ca:25:52:5e:15:0a:ef:78:c8:8a:39:c4:ae: ae:1c:19:27:89:c1:21:b2:9c:ec:33:37:2a:b1:48: e0:9a:29:52:94:fb:ec:74:a9:47:04:5c:dc:aa:5d: b5:90:5d:ec:ac:bf:ac:a1:a0:8f:1c:e8:5c:45:81: 33:61:60:b0:1e:6e:a1:b8:5b:25:f4:97:21:88:40: aa:e4:cd:da:48:0f:d5:14:e0:91:5f:25:5b:f4:ea: 7f:34:59:11:84:74:42:54:0a:d9:75:91:a7:44:83: fa:30:60:9f:37:b9:d8:11:e2:f9:97:7c:d2:45:f8: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8C:2C:EC:1A:0C:D7:17:44:77:46:12:0E:2B:13:BA:52:0E:D2:B0 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:80:e1:3b:c0:13:86:5a:76:46:ca:55:7c:46:cd:ab:2e:c4: 75:c7:65:f8:b9:d7:9f:a3:29:ae:01:d5:33:a3:ef:17:1d:d1: 79:e3:7a:2e:24:81:31:1e:46:6c:94:b6:7c:bb:c4:df:6d:cd: 11:9a:77:67:60:1d:6c:65:1a:c6:b8:96:36:27:4e:a6:3c:26: b8:61:38:13:3d:ff:3a:0a:6f:1f:a7:a2:88:d5:b1:60:dd:ef: 6d:bf:ff:2a:78:0c:49:72:12:75:8c:e7:b4:3d:c2:f3:78:89: d9:f0:a6:c2:3b:7a:75:09:99:57:67:5e:85:65:b2:98:a5:53: e5:4e:a7:c3:2b:95:bd:68:90:8c:80:bb:28:b6:17:4c:70:db: 5c:f6:31:8e:1f:cb:c5:1d:ee:ca:90:5e:1e:83:6d:64:36:69: 42:98:2a:b8:85:7e:5d:83:2f:be:ca:fd:2d:76:5d:7f:23:e5: cb:a6:a1:61:04:9e:cb:ec:0a:a2:bd:f3:d6:bd:36:ba:f7:89: e0:60:5e:b1:38:1d:10:44:00:84:f5:b0:3f:f0:ca:60:e9:77: c1:7e:89:50:31:46:d6:5d:40:57:4f:d2:f6:ff:e5:b8:dc:e4: 53:4e:5b:c9:fc:11:7c:ba:6a:02:aa:19:a3:bf:14:df:bf:80: 58:50:3a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNCE746pzXsXk0vlA+HLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMzAxMjEwMDQ2WhcNMjYwMzAyMjEwMDQ2WjAzMTEwLwYDVQQD EygwYThjMmNlYzFhMGNkNzE3NDQ3NzQ2MTIwZTJiMTNiYTUyMGVkMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9MOa0rqOZEkAezZcA4enSGG7Crc sm6Wtx72XQc/HzCkyDQ9QDD301mm4/PyEtx87ZLydVtLeO9PjjIUi2xOtXbyIcMz nOGss4tpeRoBAYbtH0T1XEQJBUTj5fqWOM32YkieT/byGFoe9ztRW/jQSC8P1ZV+ wQYD0cV5HtNhZswBFz+sSQlFB8olUl4VCu94yIo5xK6uHBknicEhspzsMzcqsUjg milSlPvsdKlHBFzcql21kF3srL+soaCPHOhcRYEzYWCwHm6huFsl9JchiECq5M3a SA/VFOCRXyVb9Op/NFkRhHRCVArZdZGnRIP6MGCfN7nYEeL5l3zSRfhRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqMLOwaDNcXRHdGEg4rE7pSDtKwMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4DhO8AT hlp2RspVfEbNqy7Edcdl+LnXn6MprgHVM6PvFx3ReeN6LiSBMR5GbJS2fLvE323N EZp3Z2AdbGUaxriWNidOpjwmuGE4Ez3/OgpvH6eiiNWxYN3vbb//KngMSXISdYzn tD3C83iJ2fCmwjt6dQmZV2dehWWymKVT5U6nwyuVvWiQjIC7KLYXTHDbXPYxjh/L xR3uypBeHoNtZDZpQpgquIV+XYMvvsr9LXZdfyPly6ahYQSey+wKor3z1r02uveJ 4GBesTgdEEQAhPWwP/DKYOl3wX6JUDFG1l1AV0/S9v/luNzkU05byfwRfLpqAqoZ o78U37+AWFA66w== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:46 2026 by rpki-client