$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: 6kT7tFr5hVTNoanVA20cFbAYO2wfiMChBBx1v/ovcPI= Subject key identifier: 34:1B:1C:EC:77:82:45:9F:4B:96:19:19:F6:4C:A6:FC:87:69:EB:12 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019CAD903923395FEC99ED632CCDC56E30FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0C62 Signing time: Mon 02 Mar 2026 08:00:36 +0000 Manifest this update: Mon 02 Mar 2026 08:00:36 +0000 Manifest next update: Tue 03 Mar 2026 08:00:36 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: /vjoRJMMyHFcdVAtZjB8/nmq0z2DNqqykijV/qxh6dg=) 3: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 4: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 5: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 6: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 7: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 8: W2eSFC_4gh04okdgRf3_hsQK3Xw.roa (hash: WkbXWqZc/vyUOtNoiaVhfeE0d2NY2cvspuOm3bo2kWY=) 9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 10: YCsacyli-ZJiRvdWb710ZYYUcYY.roa (hash: oMEBmA2pOS9QOHbZe4xmnW0i90X9387qbX0v7gcv8aU=) 11: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 12: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 13: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 14: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:90:39:23:39:5f:ec:99:ed:63:2c:cd:c5:6e:30:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Mar 2 08:00:36 2026 GMT Not After : Mar 3 08:00:36 2026 GMT Subject: CN=341b1cec7782459f4b961919f64ca6fc8769eb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:79:17:e4:60:b6:46:85:2b:61:af:34:59: 8b:a0:5c:69:2e:73:f3:b7:36:5d:0d:8a:6b:0e:c3: 00:22:67:bf:5a:f9:08:be:33:03:57:34:8c:d7:dc: c1:cd:17:b0:31:4a:dd:4e:17:63:77:92:72:28:64: 65:1d:39:d6:ac:9d:af:d9:3e:80:1a:29:20:cb:73: c4:d9:b6:56:b9:e9:a2:b2:3f:26:12:05:19:d6:9f: f0:d2:b9:7e:40:b4:2a:ce:de:ac:93:65:01:78:c0: 21:c5:05:0b:4a:44:74:a3:d0:36:fb:5b:f9:ca:c7: b4:ca:cb:86:23:c0:8c:d5:8b:b8:09:6a:4a:35:52: a7:67:17:22:38:39:f1:f6:b3:86:c6:13:5a:b4:6b: 47:e7:d5:83:40:10:1a:ea:dd:19:57:7a:4f:ca:05: c4:a7:51:1c:7a:0e:1f:70:f0:ca:e3:fb:2c:46:39: 5b:ef:b7:6e:7e:c7:37:11:7f:90:11:ae:c7:db:46: ad:54:9e:11:ce:41:20:c0:f6:87:23:de:e8:d1:c4: c8:5d:90:0b:54:32:e1:e8:9d:bc:2e:74:b6:57:65: f9:d3:81:ef:bf:bd:1e:95:28:0a:16:c5:cc:33:a0: c5:7c:93:0a:1f:aa:87:63:4a:4f:14:40:1e:a5:6e: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:1C:EC:77:82:45:9F:4B:96:19:19:F6:4C:A6:FC:87:69:EB:12 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:15:ea:11:6c:11:79:ed:51:c6:f6:ce:0a:ad:3d:54:bb:eb: 8b:db:da:88:d2:8c:fd:79:ad:42:26:b0:a2:e0:c5:61:f4:d0: f9:32:30:98:9c:79:2d:d7:1b:5a:9e:bd:90:a5:07:48:cf:59: 2e:1a:3d:4b:40:5e:9e:53:ce:23:28:22:06:d7:5a:50:dc:e5: 6c:de:e5:08:68:37:57:36:4f:63:a1:d9:d2:04:83:e2:17:66: 75:aa:5b:e9:ec:4f:ea:7a:b6:8c:a5:5c:12:c2:2b:4e:73:7f: 84:97:2d:03:13:9a:6a:84:b0:43:9c:13:33:0f:ca:d2:aa:19: 26:d4:5a:65:eb:39:04:71:6d:3e:ca:7d:d0:d7:d1:e5:37:d8: 0b:42:e1:b8:83:23:06:b9:38:0b:7c:c1:89:9d:5d:f0:d9:d9: 9a:ae:54:18:2b:be:82:3d:a6:eb:3b:50:d9:c6:2a:27:f9:a6: aa:18:27:6d:98:53:32:d8:e5:75:32:05:25:b3:47:ff:55:f0: f5:b8:b4:e1:c1:34:87:39:a5:e7:ba:8a:34:fa:c6:e1:2b:42: f4:c2:03:a5:52:ec:5f:76:f7:0d:5a:ca:10:3f:75:7c:3e:48: 41:7d:b9:a3:4e:66:4d:ac:bb:d6:45:e2:31:f5:f8:d5:9a:10: f2:83:8a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytkDkjOV/sme1jLM3FbjD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMzAyMDgwMDM2WhcNMjYwMzAzMDgwMDM2WjAzMTEwLwYDVQQD EygzNDFiMWNlYzc3ODI0NTlmNGI5NjE5MTlmNjRjYTZmYzg3NjllYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqt5F+RgtkaFK2GvNFmLoFxpLnPz tzZdDYprDsMAIme/WvkIvjMDVzSM19zBzRewMUrdThdjd5JyKGRlHTnWrJ2v2T6A Gikgy3PE2bZWuemisj8mEgUZ1p/w0rl+QLQqzt6sk2UBeMAhxQULSkR0o9A2+1v5 yse0ysuGI8CM1Yu4CWpKNVKnZxciODnx9rOGxhNatGtH59WDQBAa6t0ZV3pPygXE p1Eceg4fcPDK4/ssRjlb77dufsc3EX+QEa7H20atVJ4RzkEgwPaHI97o0cTIXZAL VDLh6J28LnS2V2X504Hvv70elSgKFsXMM6DFfJMKH6qHY0pPFEAepW5ObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQbHOx3gkWfS5YZGfZMpvyHaesSMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhXqEWwR ee1RxvbOCq09VLvri9vaiNKM/XmtQiawouDFYfTQ+TIwmJx5LdcbWp69kKUHSM9Z Lho9S0BenlPOIygiBtdaUNzlbN7lCGg3VzZPY6HZ0gSD4hdmdapb6exP6nq2jKVc EsIrTnN/hJctAxOaaoSwQ5wTMw/K0qoZJtRaZes5BHFtPsp90NfR5TfYC0LhuIMj Brk4C3zBiZ1d8NnZmq5UGCu+gj2m6ztQ2cYqJ/mmqhgnbZhTMtjldTIFJbNH/1Xw 9bi04cE0hzml57qKNPrG4StC9MIDpVLsX3b3DVrKED91fD5IQX25o05mTay71kXi MfX41ZoQ8oOKMw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:34 2026 by rpki-client