$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: jpLwC5iWwTxuGb7kp9LjzDguift26esFIUwo5q/CbFU= Subject key identifier: D6:42:92:C9:8E:8F:5F:66:9C:D5:48:C6:53:FA:F7:26:AD:81:E9:C8 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019CADFE6C7A74A08F0787A8378235D26D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 143D Signing time: Mon 02 Mar 2026 10:00:57 +0000 Manifest this update: Mon 02 Mar 2026 10:00:57 +0000 Manifest next update: Tue 03 Mar 2026 10:00:57 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: eYRPQkyIFm+1pNBRp9q71oabSFHgdae1ErVOhFGhi8s=) 7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:fe:6c:7a:74:a0:8f:07:87:a8:37:82:35:d2:6d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Mar 2 10:00:57 2026 GMT Not After : Mar 3 10:00:57 2026 GMT Subject: CN=d64292c98e8f5f669cd548c653faf726ad81e9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:6d:bf:02:55:d1:3c:89:a8:2f:98:38:c3: f3:f0:f2:77:9b:7d:01:fc:a7:df:d4:8f:a9:ff:1b: 6c:10:cd:c4:06:be:4b:69:40:4b:f7:8c:57:ce:9d: 82:43:d0:f3:ff:f0:f5:6e:66:23:8a:cf:da:04:fc: 87:35:2e:e6:2a:5f:54:99:95:0b:24:4e:a0:ff:62: 6c:48:dd:d5:b9:d7:63:86:28:9f:50:e9:e2:55:a1: e5:39:0b:82:07:2f:a3:1d:9c:08:68:62:88:43:e2: a3:df:a1:2e:2b:5c:a9:72:d8:5e:9b:e8:a4:20:d8: b2:cb:08:1f:7b:44:47:13:1c:85:b4:bf:f1:68:8a: af:b9:b9:b3:3a:b0:da:27:65:97:3a:37:18:62:3e: d9:8f:4b:e6:79:9a:e2:08:4f:0e:14:e8:80:06:fe: 16:49:f7:63:8c:4f:f1:a9:e2:22:7b:b9:f1:5b:21: eb:c8:13:c5:40:86:2d:e8:c6:dc:23:81:53:df:5e: a7:11:3f:65:fd:99:3f:0a:2b:d5:78:57:c6:50:a9: 87:66:26:06:1b:f0:5a:37:c0:fb:46:e9:8c:8a:a7: ef:10:50:1d:86:f4:7e:7e:88:c5:73:f3:03:ca:82: 12:59:a0:1e:aa:0e:5c:19:d3:f8:92:c0:7c:66:cf: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:42:92:C9:8E:8F:5F:66:9C:D5:48:C6:53:FA:F7:26:AD:81:E9:C8 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0f:ea:8e:7f:59:10:bc:42:29:df:a7:8f:a4:d8:e6:c4:ac: 58:a7:bd:b7:0e:22:d7:8f:0e:e8:dc:60:78:cc:a1:ab:60:15: 44:a6:14:05:ea:58:ff:f0:c3:48:e2:58:17:2a:9b:8d:63:7d: 2a:26:ab:6c:5a:af:d7:a2:61:bf:32:aa:28:31:2c:72:9c:d2: 78:ad:88:b4:f7:71:bb:6f:53:09:4f:71:57:7b:52:8c:e7:f8: 87:06:9d:08:b5:92:f9:fd:5f:a6:af:fe:12:90:64:a3:e9:07: 64:96:0a:17:e2:10:57:7f:6b:77:2a:cb:4f:c9:9f:5b:6f:d3: e6:b7:b9:ea:35:80:c9:ab:17:0f:bd:47:65:73:b4:77:1d:1c: 9b:a8:d1:5a:c7:17:3f:69:4d:68:1a:82:fb:a8:c9:50:b9:ac: c8:aa:41:21:c8:66:14:01:1f:92:8f:39:2b:50:86:4f:36:f6: ac:d6:f0:4d:ac:7a:fd:21:ac:51:d5:4b:ef:0d:a2:f0:56:4c: a6:29:d7:7c:68:b0:95:85:4e:dc:20:9e:af:fe:ba:52:25:9b: c8:ee:28:9c:30:2d:a5:2f:11:d1:1d:b0:5f:0b:0f:70:b3:f5: f2:36:08:18:52:10:bb:58:db:c0:ae:bb:09:8e:bc:db:c8:70: 0f:ac:fb:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyt/mx6dKCPB4eoN4I10m0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMzAyMTAwMDU3WhcNMjYwMzAzMTAwMDU3WjAzMTEwLwYDVQQD EyhkNjQyOTJjOThlOGY1ZjY2OWNkNTQ4YzY1M2ZhZjcyNmFkODFlOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/htvwJV0TyJqC+YOMPz8PJ3m30B /Kff1I+p/xtsEM3EBr5LaUBL94xXzp2CQ9Dz//D1bmYjis/aBPyHNS7mKl9UmZUL JE6g/2JsSN3VuddjhiifUOniVaHlOQuCBy+jHZwIaGKIQ+Kj36EuK1ypcthem+ik INiyywgfe0RHExyFtL/xaIqvubmzOrDaJ2WXOjcYYj7Zj0vmeZriCE8OFOiABv4W SfdjjE/xqeIie7nxWyHryBPFQIYt6MbcI4FT316nET9l/Zk/CivVeFfGUKmHZiYG G/BaN8D7RumMiqfvEFAdhvR+fojFc/MDyoISWaAeqg5cGdP4ksB8Zs++9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZCksmOj19mnNVIxlP69yatgenIMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ/qjn9Z ELxCKd+nj6TY5sSsWKe9tw4i148O6NxgeMyhq2AVRKYUBepY//DDSOJYFyqbjWN9 KiarbFqv16JhvzKqKDEscpzSeK2ItPdxu29TCU9xV3tSjOf4hwadCLWS+f1fpq/+ EpBko+kHZJYKF+IQV39rdyrLT8mfW2/T5re56jWAyasXD71HZXO0dx0cm6jRWscX P2lNaBqC+6jJULmsyKpBIchmFAEfko85K1CGTzb2rNbwTax6/SGsUdVL7w2i8FZM pinXfGiwlYVO3CCer/66UiWbyO4onDAtpS8R0R2wXwsPcLP18jYIGFIQu1jbwK67 CY6828hwD6z78Q== -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:59 2026 by rpki-client