$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: 4UTBjjJ2h0kJAzquwLvjZvU+ISXNoMPd6KXDbmk813w= Subject key identifier: D3:B7:5D:8E:78:A8:E7:FD:3B:22:E0:B6:8B:29:DA:2A:46:69:9B:8B Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019CAE352C337FB7DB8A44708944BB139204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1854 Signing time: Mon 02 Mar 2026 11:00:45 +0000 Manifest this update: Mon 02 Mar 2026 11:00:45 +0000 Manifest next update: Tue 03 Mar 2026 11:00:45 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: 0UMdCD9++s2gCraOOJkJ3E6HtFjHRhCR/KW1YQBoA0w=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:35:2c:33:7f:b7:db:8a:44:70:89:44:bb:13:92:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Mar 2 11:00:45 2026 GMT Not After : Mar 3 11:00:45 2026 GMT Subject: CN=d3b75d8e78a8e7fd3b22e0b68b29da2a46699b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:17:31:d8:b9:c3:ee:78:ed:fb:18:dd:e9: 87:67:59:0f:e7:ef:fc:58:a6:ac:b8:cc:a9:7e:11: 6b:d3:76:d3:d9:14:60:5a:52:ae:45:53:77:bb:ec: 7b:e4:a2:4f:ae:80:8a:19:4f:1f:61:07:72:bd:8b: 60:34:9b:82:e4:10:b6:7f:98:b2:5b:99:03:9d:3e: a0:45:3f:ad:60:5a:61:fe:0f:81:a9:c7:b6:cc:5e: c0:7b:b1:b2:2d:0d:18:a4:10:4e:7e:d4:9d:59:80: ba:fc:53:74:eb:81:39:c1:50:0c:0c:34:2d:f8:c8: f4:ff:67:18:2c:9e:dd:5f:e1:eb:66:ce:ca:ce:9a: b6:9f:33:cf:99:1b:2b:79:ea:98:cd:34:31:7d:d0: a7:6b:21:8e:ba:85:2f:32:01:91:42:c9:ec:c8:76: 5f:f2:6c:23:f9:58:50:08:a3:5d:be:06:e8:0b:8d: 82:e0:18:af:13:20:7d:8d:2a:37:d6:b4:b6:3c:5d: b6:93:d1:d3:5f:b0:0e:ba:38:2c:42:93:76:61:55: d4:2f:6e:11:35:93:45:96:42:92:82:97:2e:a1:f5: 50:d0:f9:9e:98:8d:9b:dc:f5:70:3f:44:e8:72:38: 9f:66:72:70:75:0a:1a:0c:79:e4:f4:9f:00:5f:c5: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:5D:8E:78:A8:E7:FD:3B:22:E0:B6:8B:29:DA:2A:46:69:9B:8B X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b8:46:4b:78:41:31:bb:09:c6:4e:da:c5:f2:bf:e0:f8:83: d8:0c:0d:14:1d:ce:14:32:70:4b:52:29:77:61:5c:da:6a:4f: 67:67:9c:cd:99:c6:ab:b6:6e:d9:49:1c:c9:d1:d8:1a:1d:be: 01:7b:b4:9e:af:0f:da:2f:08:d3:68:4e:43:37:f9:b9:5d:cd: 49:41:ce:42:f8:a6:78:ae:96:ee:1d:48:81:8e:92:b5:46:2a: a6:59:5e:64:1d:4c:52:c5:e3:c5:d8:ac:2b:84:5b:c9:62:14: f4:8f:f8:dc:bd:58:52:cf:70:5f:c2:2f:82:10:42:83:83:e7: 41:35:c8:2e:31:76:e3:d4:c8:41:f5:ec:22:ac:85:9b:fb:28: a3:d1:9b:95:58:b3:9e:d8:6c:bf:c0:86:c2:58:80:3e:46:aa: 4a:2a:cb:5a:ff:ff:dd:6a:ee:24:2f:6e:5a:de:17:5d:c7:6f: 86:79:f7:3b:7f:02:40:f5:cd:fc:3e:64:d8:a5:7b:93:3d:ca: 7b:51:db:6a:56:86:10:09:db:38:43:97:f6:f6:1b:76:e5:56: 2a:b1:48:3e:4a:a2:89:61:7e:a7:3e:6c:4b:e7:59:0f:cc:3e: 98:5a:52:75:9d:d6:9f:6c:33:d9:50:c0:91:f1:e0:97:04:dd: f2:09:69:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNSwzf7fbikRwiUS7E5IEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMzAyMTEwMDQ1WhcNMjYwMzAzMTEwMDQ1WjAzMTEwLwYDVQQD EyhkM2I3NWQ4ZTc4YThlN2ZkM2IyMmUwYjY4YjI5ZGEyYTQ2Njk5YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu8XMdi5w+547fsY3emHZ1kP5+/8 WKasuMypfhFr03bT2RRgWlKuRVN3u+x75KJProCKGU8fYQdyvYtgNJuC5BC2f5iy W5kDnT6gRT+tYFph/g+Bqce2zF7Ae7GyLQ0YpBBOftSdWYC6/FN064E5wVAMDDQt +Mj0/2cYLJ7dX+HrZs7Kzpq2nzPPmRsreeqYzTQxfdCnayGOuoUvMgGRQsnsyHZf 8mwj+VhQCKNdvgboC42C4BivEyB9jSo31rS2PF22k9HTX7AOujgsQpN2YVXUL24R NZNFlkKSgpcuofVQ0PmemI2b3PVwP0TocjifZnJwdQoaDHnk9J8AX8VW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO3XY54qOf9OyLgtosp2ipGaZuLMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrhGS3hB MbsJxk7axfK/4PiD2AwNFB3OFDJwS1Ipd2Fc2mpPZ2eczZnGq7Zu2UkcydHYGh2+ AXu0nq8P2i8I02hOQzf5uV3NSUHOQvimeK6W7h1IgY6StUYqplleZB1MUsXjxdis K4RbyWIU9I/43L1YUs9wX8IvghBCg4PnQTXILjF249TIQfXsIqyFm/soo9GblViz nthsv8CGwliAPkaqSirLWv//3WruJC9uWt4XXcdvhnn3O38CQPXN/D5k2KV7kz3K e1HbalaGEAnbOEOX9vYbduVWKrFIPkqiiWF+pz5sS+dZD8w+mFpSdZ3Wn2wz2VDA kfHglwTd8glpbg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:41 2026 by rpki-client