$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: 96oQbwRXPlEMY7xPHwYwxjet4KTk1hwz1NhUguz/Fvc= Subject key identifier: 50:1A:F9:A8:01:1B:D9:AC:A9:C2:01:F4:0F:49:E3:C6:76:42:5D:6F Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019CAC1055EE969713F5DEB1949F262E5754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 1610 Signing time: Mon 02 Mar 2026 01:01:17 +0000 Manifest this update: Mon 02 Mar 2026 01:01:17 +0000 Manifest next update: Tue 03 Mar 2026 01:01:17 +0000 Files and hashes: 1: 3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa (hash: 3EM7kaqylIIwfXdPOEw0QjuIVj1MmMgs2rs+igLT96s=) 2: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 3: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 4: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 5: MAC77AGiw2eaAoPXZSbuYQ5o9Cc.roa (hash: ghyy8oG2hGKa4y9DRVajZ2XWsgYoOvFgJh6c1yjrEXg=) 6: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 7: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 8: _d125rYs_YgWJE2199BRmZF843k.roa (hash: m5skVkixBC7cNTKqYmRl5Rw3Fyg0ZkEkKEj4MY2KXTY=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: euqS42j1OAh5nOlyn6iGDlUghrI.roa (hash: imMqy2oe/VSAfOYacDS+F5V24AlsU8Ttm5UT/4dybaA=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: YygR+MNfrlbAbYvsoKq3Nij52p7eaTr74FEQw0eXBfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:10:55:ee:96:97:13:f5:de:b1:94:9f:26:2e:57:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Mar 2 01:01:17 2026 GMT Not After : Mar 3 01:01:17 2026 GMT Subject: CN=501af9a8011bd9aca9c201f40f49e3c676425d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:a5:ff:8d:0e:d9:55:f9:97:89:70:36:1a: 0c:24:26:58:4f:35:37:12:7a:a6:af:21:cb:98:26: 3a:d9:21:bc:8f:57:a5:98:66:ba:74:19:c6:da:50: 06:36:c8:d2:8f:44:04:b7:a9:7b:4f:93:b0:4a:f2: 8d:03:89:4e:9f:07:4f:f2:92:53:a9:87:63:d4:12: d2:19:e8:e8:fe:3b:9a:76:e1:56:39:59:35:7e:25: e8:ca:24:ce:37:fc:5d:5e:df:ed:df:9e:aa:92:fd: bf:e7:6e:e1:5b:8e:59:15:7b:64:8e:8c:51:61:29: 81:e5:d3:ee:e9:9b:a7:6f:ea:53:c9:a0:5d:93:ea: 11:19:c9:9c:7e:b6:58:21:e2:a5:68:01:d9:fd:8f: d2:10:27:d2:11:b2:b6:14:5a:c5:c6:01:10:f3:17: f8:e5:d3:bb:1f:f5:e3:99:6f:4a:52:5b:ce:40:9b: 92:93:b6:46:e1:2d:fa:9b:98:44:16:30:e3:77:51: 2a:0f:47:41:f8:77:d6:bd:7c:d5:26:1a:41:57:e9: 9d:d7:c5:04:e5:6e:21:12:2f:11:be:99:e1:f5:e4: b4:af:8b:36:56:2c:7c:0e:8e:78:1d:5d:42:4d:f1: b5:ab:89:12:7c:a8:d9:e5:46:78:37:21:32:18:db: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:F9:A8:01:1B:D9:AC:A9:C2:01:F4:0F:49:E3:C6:76:42:5D:6F X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a6:a7:5f:30:61:e9:e1:df:b8:81:ee:d9:67:22:60:f2:d3: 18:1d:22:4e:4b:0f:d7:a1:15:91:ea:c3:0f:5e:72:ea:f4:f0: 2a:da:32:44:bf:48:fa:0c:c9:de:8f:33:82:64:dd:95:04:86: f4:e3:66:14:1c:40:f4:ac:bb:09:1a:5b:6b:37:a5:25:d0:e2: db:97:9a:95:f0:6f:9d:ae:a7:bc:e4:b9:b1:92:ad:ad:7a:05: 8f:86:45:55:5e:4d:03:29:8a:7b:d5:9a:a1:2b:10:8b:0b:5d: 1b:02:3b:fe:6f:19:87:29:df:47:12:c2:cf:e1:1a:8b:e9:33: 83:e0:15:35:91:43:02:e0:64:6e:44:7d:e0:0d:c1:47:70:0c: fb:64:37:10:6c:9d:6d:ae:69:ac:25:3d:1f:ad:26:b2:53:90: af:64:0b:a1:c1:2d:4a:88:3c:25:c5:1e:4b:32:84:75:36:86: ba:bf:cd:aa:f8:ea:02:2a:34:00:13:41:34:21:e4:8c:3a:21: 32:b9:45:80:d8:84:ba:a0:d5:6e:85:06:e4:94:d8:52:e3:26: bf:5c:b9:b8:4b:26:78:03:27:63:55:5b:81:72:1e:66:57:16: c0:f6:24:8b:b2:db:52:78:fc:32:14:b8:db:68:3e:b4:12:2f: a9:e6:a2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysEFXulpcT9d6xlJ8mLldUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMzAyMDEwMTE3WhcNMjYwMzAzMDEwMTE3WjAzMTEwLwYDVQQD Eyg1MDFhZjlhODAxMWJkOWFjYTljMjAxZjQwZjQ5ZTNjNjc2NDI1ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWl/40O2VX5l4lwNhoMJCZYTzU3 EnqmryHLmCY62SG8j1elmGa6dBnG2lAGNsjSj0QEt6l7T5OwSvKNA4lOnwdP8pJT qYdj1BLSGejo/juaduFWOVk1fiXoyiTON/xdXt/t356qkv2/527hW45ZFXtkjoxR YSmB5dPu6Zunb+pTyaBdk+oRGcmcfrZYIeKlaAHZ/Y/SECfSEbK2FFrFxgEQ8xf4 5dO7H/XjmW9KUlvOQJuSk7ZG4S36m5hEFjDjd1EqD0dB+HfWvXzVJhpBV+md18UE 5W4hEi8Rvpnh9eS0r4s2Vix8Do54HV1CTfG1q4kSfKjZ5UZ4NyEyGNv5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAa+agBG9msqcIB9A9J48Z2Ql1vMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqanXzBh 6eHfuIHu2WciYPLTGB0iTksP16EVkerDD15y6vTwKtoyRL9I+gzJ3o8zgmTdlQSG 9ONmFBxA9Ky7CRpbazelJdDi25ealfBvna6nvOS5sZKtrXoFj4ZFVV5NAymKe9Wa oSsQiwtdGwI7/m8ZhynfRxLCz+Eai+kzg+AVNZFDAuBkbkR94A3BR3AM+2Q3EGyd ba5prCU9H60mslOQr2QLocEtSog8JcUeSzKEdTaGur/NqvjqAio0ABNBNCHkjDoh MrlFgNiEuqDVboUG5JTYUuMmv1y5uEsmeAMnY1VbgXIeZlcWwPYki7LbUnj8MhS4 22g+tBIvqeaiVw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:31 2026 by rpki-client