$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: 4ePHE/tcDUI0nsIqT+Q92Dej9ctUyeHuL6MZmhFLJ4s= Subject key identifier: 6B:52:22:3C:0A:2F:EB:23:03:65:49:91:EA:C9:DC:C6:43:C3:E5:40 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019CA8A0F8667EFE84520AD9072F81B9953E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0105 Signing time: Sun 01 Mar 2026 09:00:47 +0000 Manifest this update: Sun 01 Mar 2026 09:00:47 +0000 Manifest next update: Mon 02 Mar 2026 09:00:47 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: RqWkh63VUDohYWJWjYQNZvCHpnYMS/RzHJsWZ36xulg=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a0:f8:66:7e:fe:84:52:0a:d9:07:2f:81:b9:95:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Mar 1 09:00:47 2026 GMT Not After : Mar 2 09:00:47 2026 GMT Subject: CN=6b52223c0a2feb2303654991eac9dcc643c3e540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:2f:7b:4e:78:9e:e5:19:05:9c:12:bd:07: 7f:12:31:ee:59:e5:53:f9:c2:5a:25:fb:c3:8f:87: 7e:ed:30:48:fb:e4:de:6d:03:a1:43:6b:b3:28:a7: a6:d1:49:be:8b:94:c3:ba:e9:ef:b7:28:1e:42:af: 6b:2d:3c:35:90:a8:0b:73:7d:c6:e4:59:38:2d:eb: b6:f4:5c:c0:ea:cb:61:f3:22:ad:0e:0e:a4:ae:9e: 71:26:05:28:4d:1d:52:a6:75:d2:9e:d1:10:b5:0a: ce:27:2e:4a:b4:00:b7:bb:0d:d3:d3:2c:68:c7:d3: 26:99:18:1b:d5:40:ff:40:e3:80:aa:42:37:33:72: 59:4f:31:bb:91:56:c3:27:c6:bf:23:c5:2e:fb:a7: d1:30:56:f1:ad:07:31:68:b3:ca:a0:16:81:5b:cd: 9a:21:16:f5:2c:4c:e9:7a:3d:36:64:86:ba:eb:ea: 94:93:8d:bd:f8:78:df:d0:b7:1b:e1:e4:56:df:73: 76:31:41:ca:f3:d2:40:a9:74:96:ef:1c:e5:38:71: 21:d4:b1:31:c0:52:dd:bd:7b:db:c6:47:b9:23:f5: fa:6d:14:e2:4a:60:ac:10:eb:b1:03:e2:5d:99:f7: 65:96:06:d6:fe:49:c5:d6:0d:92:da:5e:e4:dc:36: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:52:22:3C:0A:2F:EB:23:03:65:49:91:EA:C9:DC:C6:43:C3:E5:40 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:98:28:12:e3:2d:e9:ac:51:e8:a0:38:b2:00:80:9d:c0:53: 7a:cb:b0:b3:d0:73:d8:60:7f:a3:a5:56:ea:c4:42:c7:80:fa: ca:ab:47:24:5b:a2:0d:a6:c1:54:50:fb:50:18:f0:43:cd:4e: 4b:be:9f:ef:95:13:ed:39:fc:bc:45:03:78:0e:fb:69:df:19: 1e:61:2a:12:32:19:6b:1a:23:04:47:14:a9:21:76:89:f5:36: 6c:b0:0e:10:5e:fb:2b:e4:70:2e:d8:ce:99:1b:97:56:05:d4: 33:cf:fe:31:da:23:f0:a9:ff:be:b0:2a:35:28:90:ce:f2:c2: ea:71:9e:c5:3f:a2:a5:e9:ad:7a:72:df:5f:88:27:74:94:b6: fe:d0:48:fc:c0:4c:ec:b9:81:d7:2e:d3:4e:79:39:70:c4:50: 68:9b:70:50:df:ec:2b:5f:3a:b3:6f:1f:d7:0a:c1:78:35:ca: d4:34:e6:db:21:4a:69:41:f6:d0:2e:59:53:c3:6d:38:b2:d0: 3a:c4:83:fc:26:4e:a7:51:59:04:14:70:df:69:63:44:bc:24: 11:e1:88:de:0d:10:40:c6:6e:05:1c:ec:03:e9:8b:c6:15:9a: 9f:19:16:7a:c7:ad:25:df:0a:0f:07:5f:10:a9:48:fa:50:5e: 4b:2e:f3:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooPhmfv6EUgrZBy+BuZU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMzAxMDkwMDQ3WhcNMjYwMzAyMDkwMDQ3WjAzMTEwLwYDVQQD Eyg2YjUyMjIzYzBhMmZlYjIzMDM2NTQ5OTFlYWM5ZGNjNjQzYzNlNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPsve054nuUZBZwSvQd/EjHuWeVT +cJaJfvDj4d+7TBI++TebQOhQ2uzKKem0Um+i5TDuunvtygeQq9rLTw1kKgLc33G 5Fk4Leu29FzA6sth8yKtDg6krp5xJgUoTR1SpnXSntEQtQrOJy5KtAC3uw3T0yxo x9MmmRgb1UD/QOOAqkI3M3JZTzG7kVbDJ8a/I8Uu+6fRMFbxrQcxaLPKoBaBW82a IRb1LEzpej02ZIa66+qUk429+Hjf0Lcb4eRW33N2MUHK89JAqXSW7xzlOHEh1LEx wFLdvXvbxke5I/X6bRTiSmCsEOuxA+JdmfdllgbW/knF1g2S2l7k3DbKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtSIjwKL+sjA2VJkerJ3MZDw+VAMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5goEuMt 6axR6KA4sgCAncBTesuws9Bz2GB/o6VW6sRCx4D6yqtHJFuiDabBVFD7UBjwQ81O S76f75UT7Tn8vEUDeA77ad8ZHmEqEjIZaxojBEcUqSF2ifU2bLAOEF77K+RwLtjO mRuXVgXUM8/+Mdoj8Kn/vrAqNSiQzvLC6nGexT+ipemtenLfX4gndJS2/tBI/MBM 7LmB1y7TTnk5cMRQaJtwUN/sK186s28f1wrBeDXK1DTm2yFKaUH20C5ZU8NtOLLQ OsSD/CZOp1FZBBRw32ljRLwkEeGI3g0QQMZuBRzsA+mLxhWanxkWesetJd8KDwdf EKlI+lBeSy7zBw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:10 2026 by rpki-client