$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: FpWKHDvogPUp75XnHlv/X3zrcm6JR4l2T+I0ncNzdbY= Subject key identifier: CB:73:5C:F7:59:9D:6C:44:0A:E4:BB:BD:9C:EC:AB:F3:6A:1C:A6:18 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019CA97CE6FAEE8EB8C55F5A732B90A50103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 185A Signing time: Sun 01 Mar 2026 13:01:00 +0000 Manifest this update: Sun 01 Mar 2026 13:01:00 +0000 Manifest next update: Mon 02 Mar 2026 13:01:00 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: KLNITSlV517b4Qan6MKLyoM8iFI.roa (hash: sXR+lvLvVIC2TEhhA+WkxHLrslGZwv5EeqK9Ngr2eS0=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: 0oc6OrzNozEu1qsjsJi7XOaw6gqfgZwOtf0zStMT3uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:e6:fa:ee:8e:b8:c5:5f:5a:73:2b:90:a5:01:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Mar 1 13:01:00 2026 GMT Not After : Mar 2 13:01:00 2026 GMT Subject: CN=cb735cf7599d6c440ae4bbbd9cecabf36a1ca618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:ce:61:b9:4c:7a:ad:c4:66:27:7b:02:ca: 2d:89:66:be:16:59:be:30:39:f3:2f:af:e9:28:b7: c5:3a:84:1d:b8:cf:cf:ad:13:2b:f7:34:4b:a8:56: d7:93:42:33:c1:bc:c3:99:e9:c7:a4:6f:03:37:8c: be:7f:1b:48:78:2f:2c:3a:53:71:0e:f8:45:ad:ab: f9:b9:6b:75:d3:1f:cd:33:98:13:e7:aa:0e:2e:50: 5b:ce:24:00:fe:6f:b4:11:82:29:57:00:90:72:be: a3:b1:64:d5:b3:31:18:08:b5:71:bf:8a:e9:e9:46: 72:eb:31:5a:0e:be:93:ee:2c:8d:8a:bb:88:ec:7c: c2:da:47:63:31:0c:ad:36:39:39:cc:62:ca:da:27: 65:d4:67:4e:2e:2e:1b:b4:dc:72:da:dd:c2:a1:86: 5d:10:3b:e8:29:aa:c6:12:1f:9e:da:1f:3c:8e:e0: b0:03:01:cf:22:68:b0:de:92:5e:63:d4:83:92:b0: 32:e2:5a:85:39:38:72:d7:c1:b7:56:aa:17:e6:60: 64:2a:ea:a7:a0:47:7e:75:8a:e6:d7:74:d9:2e:05: da:3b:85:87:ec:12:cc:83:ec:7e:0f:f1:1e:ab:0d: be:1a:9b:a2:30:f4:24:d4:eb:6c:9a:1e:91:80:68: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:73:5C:F7:59:9D:6C:44:0A:E4:BB:BD:9C:EC:AB:F3:6A:1C:A6:18 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f7:5b:8e:4c:87:81:17:15:fc:8a:15:ad:08:6b:f1:43:1f: 9d:8a:14:a7:e9:df:cb:75:4e:81:85:2a:8c:f4:7f:49:1e:86: 03:fc:70:b1:d5:29:18:5b:f7:81:b0:c7:c9:1e:85:03:c3:55: c7:53:b9:89:be:38:c9:ef:b4:a7:4f:34:11:43:6a:a9:00:f3: 97:6c:94:7c:62:1e:48:f2:67:51:a1:4e:46:e2:d5:95:9b:e2: 1f:76:6d:17:b7:69:7d:d5:e5:a0:60:d2:2c:18:9f:af:4c:d8: e7:70:45:e8:9a:80:e6:13:d1:48:47:53:1f:a9:71:5f:83:17: 44:81:b2:d6:f3:d9:54:fe:7b:cf:fd:f5:fc:13:a7:ec:cc:fe: f2:36:b4:a6:fd:09:2e:89:d4:f0:fc:5d:06:04:0b:19:fa:4d: b4:16:79:3b:c3:e6:d4:e2:2e:c3:61:3d:98:2d:ea:31:bf:c3: 8c:c8:ad:06:07:47:1e:7f:c1:67:d4:53:eb:65:11:c9:86:87: d8:10:38:0f:d0:ce:eb:54:52:0f:e9:59:bf:6c:bd:55:b1:b1: d9:50:7e:a0:fd:30:0e:d2:95:0f:fa:6f:a6:0f:03:11:f3:d3: 45:41:c9:ce:a4:db:6a:dd:92:c4:fb:a1:12:82:40:9d:65:bc: 6a:b4:b4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfOb67o64xV9acyuQpQEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMzAxMTMwMTAwWhcNMjYwMzAyMTMwMTAwWjAzMTEwLwYDVQQD EyhjYjczNWNmNzU5OWQ2YzQ0MGFlNGJiYmQ5Y2VjYWJmMzZhMWNhNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW3OYblMeq3EZid7AsotiWa+Flm+ MDnzL6/pKLfFOoQduM/PrRMr9zRLqFbXk0IzwbzDmenHpG8DN4y+fxtIeC8sOlNx DvhFrav5uWt10x/NM5gT56oOLlBbziQA/m+0EYIpVwCQcr6jsWTVszEYCLVxv4rp 6UZy6zFaDr6T7iyNiruI7HzC2kdjMQytNjk5zGLK2idl1GdOLi4btNxy2t3CoYZd EDvoKarGEh+e2h88juCwAwHPImiw3pJeY9SDkrAy4lqFOThy18G3VqoX5mBkKuqn oEd+dYrm13TZLgXaO4WH7BLMg+x+D/Eeqw2+GpuiMPQk1Otsmh6RgGgPYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtzXPdZnWxECuS7vZzsq/NqHKYYMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/dbjkyH gRcV/IoVrQhr8UMfnYoUp+nfy3VOgYUqjPR/SR6GA/xwsdUpGFv3gbDHyR6FA8NV x1O5ib44ye+0p080EUNqqQDzl2yUfGIeSPJnUaFORuLVlZviH3ZtF7dpfdXloGDS LBifr0zY53BF6JqA5hPRSEdTH6lxX4MXRIGy1vPZVP57z/31/BOn7Mz+8ja0pv0J LonU8PxdBgQLGfpNtBZ5O8Pm1OIuw2E9mC3qMb/DjMitBgdHHn/BZ9RT62URyYaH 2BA4D9DO61RSD+lZv2y9VbGx2VB+oP0wDtKVD/pvpg8DEfPTRUHJzqTbat2SxPuh EoJAnWW8arS0sw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:49 2026 by rpki-client