$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: yU5E6qOsh3NLu6Yzx8qFgSPp57i6XaFtETrUWx2YR1Q= Subject key identifier: B4:FB:5A:7C:A1:13:F7:91:7B:49:52:25:36:21:90:96:F0:61:F3:B2 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019CABA1D27775FABDA3E5C5AB0A6776F3EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0C61 Signing time: Sun 01 Mar 2026 23:00:34 +0000 Manifest this update: Sun 01 Mar 2026 23:00:34 +0000 Manifest next update: Mon 02 Mar 2026 23:00:34 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: 4wbGqjSPoipUYZZGTnuQTYCbiacr8GGDG8CQl0vzdoA=) 3: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 4: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 5: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 6: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 7: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 8: W2eSFC_4gh04okdgRf3_hsQK3Xw.roa (hash: WkbXWqZc/vyUOtNoiaVhfeE0d2NY2cvspuOm3bo2kWY=) 9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 10: YCsacyli-ZJiRvdWb710ZYYUcYY.roa (hash: oMEBmA2pOS9QOHbZe4xmnW0i90X9387qbX0v7gcv8aU=) 11: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 12: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 13: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 14: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a1:d2:77:75:fa:bd:a3:e5:c5:ab:0a:67:76:f3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Mar 1 23:00:34 2026 GMT Not After : Mar 2 23:00:34 2026 GMT Subject: CN=b4fb5a7ca113f7917b49522536219096f061f3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:f4:e2:6e:48:6a:32:bb:53:5c:48:e8:cf: e1:f4:23:48:55:f3:69:28:12:d5:00:1e:17:b8:a3: 42:ea:8b:9a:31:74:7f:8e:6b:6a:32:0f:74:1b:e2: 2a:a3:2b:72:71:bf:7f:9f:10:e7:71:ec:f1:07:21: 7d:a2:a1:6e:73:d9:ca:09:ac:6d:c8:12:58:73:64: 33:50:93:76:b9:55:8c:11:92:f4:ae:b3:65:eb:fa: e0:6f:91:38:f3:a0:d0:c6:1b:4d:d4:44:44:f2:bf: ec:b0:70:51:64:02:ae:0d:2d:8a:58:5e:15:8a:a0: e1:e2:c7:a8:42:19:98:25:a5:ed:67:4b:0c:98:e1: 57:81:a0:85:e7:42:0e:3e:ce:ca:be:3b:fd:47:b6: a5:08:b6:5a:f1:ee:6e:9c:5f:cb:6a:66:e7:28:92: fe:62:f4:ff:f5:cb:31:63:43:d5:43:5c:56:b0:f2: b1:00:04:32:3f:b5:e6:99:58:76:f5:e8:4b:5b:c9: bc:db:17:ab:17:4e:62:f1:90:f4:f3:f0:cf:37:b2: 2f:52:b7:01:71:78:ed:ee:6e:08:b7:6f:d5:a1:03: f3:6a:d8:d3:d4:86:3c:e6:8e:90:49:97:0e:ab:c2: 68:53:d2:46:e7:0e:78:32:9b:ad:43:59:12:a5:14: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:5A:7C:A1:13:F7:91:7B:49:52:25:36:21:90:96:F0:61:F3:B2 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:87:dc:ff:42:55:8b:68:22:b0:89:a9:08:a2:77:3d:c9:2f: 08:1e:7d:8f:a1:69:4e:d5:39:1e:5a:62:4b:d1:83:11:d3:7b: 04:0b:79:ca:fe:8f:7c:b0:af:15:db:cf:5f:b5:61:8f:4d:fb: 6a:6c:8f:b0:97:8a:f3:1b:6d:88:3b:46:6a:4e:5c:cf:be:4d: 35:04:3e:3a:68:5c:c1:14:e4:aa:07:22:61:4d:c5:39:f8:48: 4b:23:59:34:96:fe:dc:1f:04:af:10:41:06:84:38:57:fa:5e: f5:9d:0f:cc:7b:8a:f4:16:17:1a:16:98:4e:58:e5:71:34:5b: 36:de:ff:10:69:2c:2f:f2:91:30:d9:bd:0c:bf:0c:13:dc:e0: 5e:e7:3a:d0:01:13:74:c1:05:4c:c8:b5:0c:0d:98:cf:72:c7: ab:ed:fd:c2:c3:41:82:60:ba:7a:c2:97:d2:95:64:1c:0f:d8: cd:9f:89:31:11:8a:34:14:4d:36:84:08:2f:20:06:cf:c6:37: ca:4a:5d:d4:9f:59:13:85:5f:76:0f:ea:6f:98:a8:6a:00:3f: 59:38:85:c5:b3:3b:be:2c:55:5d:71:1f:a1:96:88:33:5f:7c: 14:7c:50:b0:40:05:e3:f6:30:6c:ed:a6:05:86:b0:ed:84:1d: ff:7c:90:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrodJ3dfq9o+XFqwpndvPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMzAxMjMwMDM0WhcNMjYwMzAyMjMwMDM0WjAzMTEwLwYDVQQD EyhiNGZiNWE3Y2ExMTNmNzkxN2I0OTUyMjUzNjIxOTA5NmYwNjFmM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13H04m5IajK7U1xI6M/h9CNIVfNp KBLVAB4XuKNC6ouaMXR/jmtqMg90G+Iqoytycb9/nxDncezxByF9oqFuc9nKCaxt yBJYc2QzUJN2uVWMEZL0rrNl6/rgb5E486DQxhtN1ERE8r/ssHBRZAKuDS2KWF4V iqDh4seoQhmYJaXtZ0sMmOFXgaCF50IOPs7Kvjv9R7alCLZa8e5unF/LambnKJL+ YvT/9csxY0PVQ1xWsPKxAAQyP7XmmVh29ehLW8m82xerF05i8ZD08/DPN7IvUrcB cXjt7m4It2/VoQPzatjT1IY85o6QSZcOq8JoU9JG5w54MputQ1kSpRSJQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT7WnyhE/eRe0lSJTYhkJbwYfOyMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIfc/0JV i2gisImpCKJ3PckvCB59j6FpTtU5HlpiS9GDEdN7BAt5yv6PfLCvFdvPX7Vhj037 amyPsJeK8xttiDtGak5cz75NNQQ+OmhcwRTkqgciYU3FOfhISyNZNJb+3B8ErxBB BoQ4V/pe9Z0PzHuK9BYXGhaYTljlcTRbNt7/EGksL/KRMNm9DL8ME9zgXuc60AET dMEFTMi1DA2Yz3LHq+39wsNBgmC6esKX0pVkHA/YzZ+JMRGKNBRNNoQILyAGz8Y3 ykpd1J9ZE4Vfdg/qb5ioagA/WTiFxbM7vixVXXEfoZaIM198FHxQsEAF4/YwbO2m BYaw7YQd/3yQvA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:24:46 2026 by rpki-client