$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: 9KtmTjRLkI6uqWZ7cfW0SuCxeeDvOrclAlKGGaxpnzU= Subject key identifier: 74:C4:A9:12:E1:5C:42:87:C4:1F:C0:A8:63:A7:4C:82:03:AA:EE:E6 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019CAAFCF5D730DCC1B7B8D2A14B8281C622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1850 Signing time: Sun 01 Mar 2026 20:00:30 +0000 Manifest this update: Sun 01 Mar 2026 20:00:30 +0000 Manifest next update: Mon 02 Mar 2026 20:00:30 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: yHWgQbZvFrHR7B/nPcI3/vkC37rDDuSo+5iGQSTYNO0=) 2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=) 3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=) 4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=) 5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=) 6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=) 7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=) 8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=) 9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=) 10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=) 11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=) 12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fc:f5:d7:30:dc:c1:b7:b8:d2:a1:4b:82:81:c6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Mar 1 20:00:30 2026 GMT Not After : Mar 2 20:00:30 2026 GMT Subject: CN=74c4a912e15c4287c41fc0a863a74c8203aaeee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:41:50:f2:c1:74:12:f7:ad:56:1b:66:72:ac: e4:54:ae:80:fe:79:2a:2f:35:4c:46:15:a5:e7:4b: 5f:0e:dc:d9:28:97:2e:74:23:c0:c4:fd:1c:e2:7b: 07:50:01:33:56:0e:4c:a3:c1:d5:5c:13:f4:1e:fc: 7c:22:59:08:b6:b9:ac:a5:cf:b5:74:d5:3d:c7:20: 88:69:70:49:39:12:36:88:74:12:95:24:b0:7e:72: f4:43:3a:55:90:a5:99:03:b9:60:83:5b:c4:51:a9: 25:9d:79:02:bc:c0:7b:b8:32:70:90:fa:a9:04:d5: 76:17:bf:ec:2b:6e:20:9c:05:48:e2:58:92:50:67: 8a:48:95:74:c6:5e:fd:ec:22:02:86:6b:cc:40:cb: a3:97:32:32:fb:24:5e:b0:86:19:17:45:2a:1a:e1: d3:1b:5b:ec:07:99:1f:3a:61:8a:90:1e:9f:65:3e: f0:5c:55:1b:be:61:a1:ea:32:60:83:f7:e3:c4:65: 2b:3a:c3:29:a3:19:e0:cb:eb:ef:e4:41:bd:0d:51: a4:97:c5:88:aa:1a:a6:d0:ba:cc:0c:66:a3:03:ff: 9b:e6:12:2a:bd:8d:eb:fa:60:32:de:a7:35:00:ca: 90:e0:1f:d7:c4:0b:01:ef:9e:c8:25:1c:ba:55:d6: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:A9:12:E1:5C:42:87:C4:1F:C0:A8:63:A7:4C:82:03:AA:EE:E6 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:14:4b:b2:8e:e7:ca:0f:a8:f5:50:e3:63:99:6d:04:14:b7: 4a:86:d6:99:dc:8b:00:b1:b9:6e:e4:d9:62:19:f0:d1:dc:78: a3:cd:b9:5c:c7:58:f1:b7:51:b3:06:6f:f3:65:d2:e1:b2:05: 7e:9d:76:0f:c2:83:39:75:c7:4d:4b:13:be:5b:6d:6a:ac:d9: 5a:23:d8:fa:61:e1:74:9c:6f:3f:b9:c0:88:83:88:f6:85:2b: 77:c9:a8:c1:39:e5:cf:da:b2:ff:47:26:2c:6c:59:59:d1:ff: 42:fd:62:02:ab:14:a1:91:a4:a0:3d:6b:c3:a4:ae:70:9a:ba: d9:cd:36:d6:4e:c8:43:0b:41:34:34:c9:e6:5e:a4:15:40:c4: ea:70:48:79:a5:64:a4:ab:cf:be:db:57:03:43:99:ef:58:b2: 4c:4e:cb:4c:e1:ed:e0:b5:ee:c4:64:46:9f:d8:a5:27:17:50: ad:c4:40:aa:e7:2e:76:c5:72:77:ca:8b:9d:e3:74:fc:92:c3: 15:2a:68:66:99:aa:90:ab:25:7b:fb:8a:f8:ca:5d:de:04:cd: 0b:e3:9f:8d:31:7c:8c:bb:ad:ed:25:c1:da:cf:81:19:3b:fa: 7d:74:df:ce:a8:74:91:67:fc:32:98:cd:64:ba:4d:8c:0a:98: 7d:f7:e7:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/PXXMNzBt7jSoUuCgcYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMzAxMjAwMDMwWhcNMjYwMzAyMjAwMDMwWjAzMTEwLwYDVQQD Eyg3NGM0YTkxMmUxNWM0Mjg3YzQxZmMwYTg2M2E3NGM4MjAzYWFlZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EFQ8sF0EvetVhtmcqzkVK6A/nkq LzVMRhWl50tfDtzZKJcudCPAxP0c4nsHUAEzVg5Mo8HVXBP0Hvx8IlkItrmspc+1 dNU9xyCIaXBJORI2iHQSlSSwfnL0QzpVkKWZA7lgg1vEUaklnXkCvMB7uDJwkPqp BNV2F7/sK24gnAVI4liSUGeKSJV0xl797CIChmvMQMujlzIy+yResIYZF0UqGuHT G1vsB5kfOmGKkB6fZT7wXFUbvmGh6jJgg/fjxGUrOsMpoxngy+vv5EG9DVGkl8WI qhqm0LrMDGajA/+b5hIqvY3r+mAy3qc1AMqQ4B/XxAsB757IJRy6VdbR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTEqRLhXEKHxB/AqGOnTIIDqu7mMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBRLso7n yg+o9VDjY5ltBBS3SobWmdyLALG5buTZYhnw0dx4o825XMdY8bdRswZv82XS4bIF fp12D8KDOXXHTUsTvlttaqzZWiPY+mHhdJxvP7nAiIOI9oUrd8mowTnlz9qy/0cm LGxZWdH/Qv1iAqsUoZGkoD1rw6SucJq62c021k7IQwtBNDTJ5l6kFUDE6nBIeaVk pKvPvttXA0OZ71iyTE7LTOHt4LXuxGRGn9ilJxdQrcRAqucudsVyd8qLneN0/JLD FSpoZpmqkKsle/uK+Mpd3gTNC+OfjTF8jLut7SXB2s+BGTv6fXTfzqh0kWf8MpjN ZLpNjAqYfffneQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:47 2026 by rpki-client