$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: a0rCuC/hXZk31eq9jSk//b0b+kZIorL43uyQRywziCY= Subject key identifier: 2D:61:8E:D3:AA:96:89:F3:34:A2:9D:FF:02:9F:B4:9F:9B:8B:17:33 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019CAC7E3945BE6DBDAE6EDC46CE7D3DEEAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 158A Signing time: Mon 02 Mar 2026 03:01:19 +0000 Manifest this update: Mon 02 Mar 2026 03:01:19 +0000 Manifest next update: Tue 03 Mar 2026 03:01:19 +0000 Files and hashes: 1: 0Ila6nByysxmPMkIfb6WYVcnTb0.roa (hash: lMnanUWXHw6aHUoVsi1RbAw8jkgIeDAu7ZezJqSyIEQ=) 2: 1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa (hash: LFWWbBQi+75Z1LKfVRLZ5WcspH2mWTQHRkSS/kiDDGA=) 3: 4aGekIs0rj3iGgyg0A0QgxMIJLQ.roa (hash: jSSGAV/hJOLPxPM6CPuHRQ7BVztFWzCWkaisUdui1tg=) 4: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: vpFvP6D589dNZ199GkhGE2QyMMW0vrswUr54WJYQXsI=) 5: DjqIy3whY0iAK0V4OvhhtvGGxc8.roa (hash: J6ClKo6gWmtX41vPMMEGgdT0yE8BMDFvncNX4O6KPhY=) 6: FsSgrQkr8GXv7PHPNFwr1vaZbP4.roa (hash: zjR1hhmdKGDYMqMZ7wwQ4K8IE1zbHDSW3tiT9XL2pAA=) 7: GEH0KcgFtkEgfOjHGAYLpjaTGlM.roa (hash: pDgheK9VVM6MnVLVYSFwhImHJu+EPJ0spm4cHHYyxB4=) 8: Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa (hash: xl3H7Ui7pyYxDCWSICK+n2RNpa4LQr31FnkPCNajMaE=) 9: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (hash: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q=) 10: XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa (hash: jT8xwpuYth9rIc6SHYbo7yHBo19Prde5zs/tMrFquVw=) 11: _XjBVcAxw5EpqMjyij8I-ToToaQ.roa (hash: +1oHFraLo6Z8PZNhtZgJrurxCoBzuYB7PUKpQ5nbWFQ=) 12: idDB5SsOi3M4d5YPdc4kaYpnsfY.roa (hash: VzSr4liY8PEx5fC0RMBBlkwvYxH1Ole1oxoZXE3bNBo=) 13: kelA1bjmusiDmCW1K47dqweiIW8.roa (hash: bPpEpCtGqf74OwrxtLTkdNIJWgNMPzrtzZREOLihZ2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7e:39:45:be:6d:bd:ae:6e:dc:46:ce:7d:3d:ee:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Mar 2 03:01:19 2026 GMT Not After : Mar 3 03:01:19 2026 GMT Subject: CN=2d618ed3aa9689f334a29dff029fb49f9b8b1733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:e0:c6:19:25:fa:fb:33:dd:fd:69:83:c9: 4f:9a:ac:48:46:9f:38:5a:5f:ce:95:e0:91:97:61: 8d:c7:da:c6:a9:ca:0d:5c:37:49:32:49:06:d8:92: 85:ad:6a:e3:cf:d4:e6:1f:04:a8:3b:19:ea:1b:25: af:2f:78:e4:05:6d:3b:d3:dc:53:31:12:46:60:4a: 25:d6:ff:ad:4c:21:1b:97:f4:d7:b2:f9:46:58:52: 10:bf:36:94:7f:4d:3b:b8:af:0c:09:b0:6e:f7:7b: 10:81:0d:9e:fc:e0:b0:4e:95:43:53:ad:b0:00:b5: 8b:5c:c6:02:16:29:a9:07:01:a3:d5:11:db:ae:67: 7f:58:25:db:90:39:71:bc:fc:c3:90:1f:78:e3:ec: c0:a1:54:7f:ab:0f:67:4e:c9:44:4c:0d:f2:5f:0c: 59:44:4b:5e:b9:fc:0f:ce:11:16:ba:4b:8b:a6:37: f0:1a:30:97:fc:bc:a5:f6:77:32:df:d4:8b:5c:b6: a3:72:20:7f:eb:e4:cc:c1:6c:82:0a:95:e0:e3:a7: 8a:e4:9e:59:bc:2a:52:db:d9:b5:d4:c3:0c:50:6c: 19:74:af:0a:d4:0d:e3:49:cc:ad:57:ea:95:f5:56: 20:a0:9e:57:9f:be:de:a6:4d:8f:bd:4a:be:3b:c5: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:8E:D3:AA:96:89:F3:34:A2:9D:FF:02:9F:B4:9F:9B:8B:17:33 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:82:d2:2d:b0:16:b3:2a:ad:42:c4:e3:b3:e3:bc:02:5a:e8: 17:cf:b4:0a:58:60:d0:38:85:a1:7e:22:ee:13:74:a9:e9:98: 3e:b7:af:e1:6d:2d:82:ae:fb:d1:69:28:e2:f1:80:26:f4:3f: 5c:f7:f3:c3:dc:1e:1f:fe:a7:71:e0:04:4c:44:f6:8b:8d:10: 9d:cd:37:09:ce:69:3f:88:fc:2d:49:82:ef:b2:f8:e6:57:20: 82:b8:a2:a2:77:70:c0:1a:72:4f:d9:14:bb:a9:8e:e1:b1:8a: 58:a3:04:49:c7:97:c2:c9:e0:26:74:25:69:db:ae:24:a1:73: 7f:e7:9a:89:e4:e0:67:9d:4d:67:d9:ba:cd:75:c2:d0:89:04: 13:82:06:c7:b9:24:8e:de:aa:a5:6d:fe:b2:5f:5d:1e:82:49: 7c:46:85:66:78:9c:39:a1:e1:03:21:4d:cc:66:d4:6c:77:63: bf:07:23:35:db:a7:71:2f:fe:b7:05:2c:5a:5b:7d:53:ad:17: 24:7e:2b:a9:e9:d2:cc:a5:70:f5:85:80:df:17:2c:2b:cc:dd: d1:39:d3:90:18:d7:1a:2c:65:b5:ca:25:8b:22:91:f0:d8:1b: 1c:be:2c:cc:ac:be:31:2d:87:bd:95:ed:fc:49:e5:d2:80:92: d9:eb:97:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfjlFvm29rm7cRs59Pe6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMzAyMDMwMTE5WhcNMjYwMzAzMDMwMTE5WjAzMTEwLwYDVQQD EygyZDYxOGVkM2FhOTY4OWYzMzRhMjlkZmYwMjlmYjQ5ZjliOGIxNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLDgxhkl+vsz3f1pg8lPmqxIRp84 Wl/OleCRl2GNx9rGqcoNXDdJMkkG2JKFrWrjz9TmHwSoOxnqGyWvL3jkBW0709xT MRJGYEol1v+tTCEbl/TXsvlGWFIQvzaUf007uK8MCbBu93sQgQ2e/OCwTpVDU62w ALWLXMYCFimpBwGj1RHbrmd/WCXbkDlxvPzDkB944+zAoVR/qw9nTslETA3yXwxZ REteufwPzhEWukuLpjfwGjCX/Lyl9ncy39SLXLajciB/6+TMwWyCCpXg46eK5J5Z vCpS29m11MMMUGwZdK8K1A3jScytV+qV9VYgoJ5Xn77epk2PvUq+O8Vo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1hjtOqlonzNKKd/wKftJ+bixczMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioLSLbAW syqtQsTjs+O8AlroF8+0Clhg0DiFoX4i7hN0qemYPrev4W0tgq770Wko4vGAJvQ/ XPfzw9weH/6nceAETET2i40Qnc03Cc5pP4j8LUmC77L45lcggriiondwwBpyT9kU u6mO4bGKWKMESceXwsngJnQladuuJKFzf+eaieTgZ51NZ9m6zXXC0IkEE4IGx7kk jt6qpW3+sl9dHoJJfEaFZnicOaHhAyFNzGbUbHdjvwcjNduncS/+twUsWlt9U60X JH4rqenSzKVw9YWA3xcsK8zd0TnTkBjXGixltcoliyKR8NgbHL4szKy+MS2HvZXt /Enl0oCS2euXBw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:11:16 2026 by rpki-client