$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: jisVT4Mg7Obu4NLq0SQsXoK3do9REVKXUzF13qnVoS8= Subject key identifier: 90:0B:F4:19:D4:32:47:FE:69:EF:3C:AD:46:81:A5:43:66:63:83:3F Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019CAB340E16450C136420F124330119806B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 13E5 Signing time: Sun 01 Mar 2026 21:00:41 +0000 Manifest this update: Sun 01 Mar 2026 21:00:41 +0000 Manifest next update: Mon 02 Mar 2026 21:00:41 +0000 Files and hashes: 1: 6xujGy_csnf2vaNZZqZLk3QI2Y0.roa (hash: X3lIyx0pabMGJQ3NnvLZ8f6G7rEOt+MFJaqgfsEDnRU=) 2: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=) 3: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: J2VpmcWbYq56R5qDe05gV5l6a04c/b1AuM9Lvg/j7/k=) 4: I5dgfWLzUhO_tgeDjwIsqP2nt4c.roa (hash: Rqtf2OSGhWaje0nl0At6cS3dvpLNo1vVyhuPsyxiwPo=) 5: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=) 6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=) 7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=) 8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=) 9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=) 10: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=) 11: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=) 12: T7oxV4Rmv2aGG5h-sq_bbfp7cXk.roa (hash: 56UkEBVR91odUYAEuW3iMxqImg8YTpwGiDV/Dlr2y/A=) 13: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=) 14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=) 15: Wwhgun2_ysp8yCC5F09mZrclvZA.roa (hash: pIQ60AN0oth+GgoKfrfPjq9eTtcRAjq4rNp2Li+Crdc=) 16: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=) 17: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=) 18: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=) 19: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=) 20: kbDl7yPpektKwVNxrpjtKZA2nlo.roa (hash: d36zlW6Z2DgAcLCmRqlcx/u7HM97YBnDPEL5pAu6CNE=) 21: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=) 22: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=) 23: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=) 24: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=) 25: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=) 26: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=) 27: xM-FcmqLH2Fk4MxXGNAUdHPs5WA.roa (hash: zAQ/rpcpYL8nwkL4BP7Yry3eVEA7iIIHw5MMjWEuGzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:0e:16:45:0c:13:64:20:f1:24:33:01:19:80:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Mar 1 21:00:41 2026 GMT Not After : Mar 2 21:00:41 2026 GMT Subject: CN=900bf419d43247fe69ef3cad4681a5436663833f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:f5:1d:6d:ef:b9:ab:38:f4:7c:00:b4:f7: 61:6f:73:b2:46:cd:c0:86:62:3b:c3:7b:92:5d:1e: 21:ee:12:fe:60:95:36:42:ba:99:f2:9b:84:e4:15: 31:81:72:e3:ea:04:3c:59:2e:da:76:1d:b6:03:50: 0e:5e:e3:a2:20:36:1f:fd:37:82:cb:b9:3a:96:b3: 76:eb:86:01:e1:6c:05:99:47:a9:9c:c8:b4:79:4e: ba:06:ec:e7:11:fd:be:00:6c:34:40:d9:aa:a4:f7: e1:03:dd:51:14:38:ee:a9:fc:0b:2f:cc:25:7f:49: b7:59:96:c7:b7:e6:f8:1b:64:de:d8:35:34:ff:77: 6d:fe:91:6b:45:d0:82:1d:82:0d:4b:e9:9d:1d:b8: e4:ad:f5:60:eb:d2:6c:8b:3c:2c:44:74:8e:e9:a6: af:4f:04:11:70:9f:2e:c4:db:5e:dc:07:ab:3a:e2: 96:76:4d:fb:9b:a5:6f:2f:2f:0d:cf:a1:ce:01:38: eb:00:35:9b:f3:4e:da:7a:e4:2d:0e:4f:e5:01:2b: 0d:3f:eb:82:5f:67:c7:7a:7c:b8:31:b1:78:e7:a5: 64:fe:91:a4:90:91:f3:23:06:b2:e0:d2:c5:ea:76: f5:da:94:31:9a:dd:52:39:13:89:c3:7a:e4:77:32: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0B:F4:19:D4:32:47:FE:69:EF:3C:AD:46:81:A5:43:66:63:83:3F X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0b:30:0a:43:bb:c4:91:bd:94:3c:d5:1f:1a:12:8e:e2:a9: af:16:0f:17:a8:67:ad:40:da:ac:d3:5b:fb:e1:8c:31:ae:86: 8c:20:e1:08:c4:eb:49:48:26:00:90:66:2f:7a:fd:33:53:91: 8e:fb:ca:11:c2:92:7b:e7:54:7d:24:a4:39:1b:c5:af:6e:ab: 31:eb:dc:ae:a9:c1:40:6a:31:77:e8:72:f1:43:6b:3a:52:12: 48:19:f9:66:34:a7:20:7b:e8:f3:1f:b1:b7:b7:2c:ea:cd:f9: 2e:a9:58:c3:20:7e:80:40:84:71:b1:37:9c:03:e2:e3:81:6f: 97:85:b6:cf:f3:74:67:c9:26:f2:aa:a2:f8:d2:f3:b9:94:50: 99:1c:0c:c0:8f:fa:03:84:42:fc:c0:50:30:76:3e:d1:f8:ee: 0e:87:6e:d3:52:4a:95:e6:db:75:56:cb:65:84:94:4e:17:c7: aa:6b:8d:d7:ac:c9:36:0d:37:eb:02:f4:42:be:33:bd:12:6a: 64:9f:ac:fb:bd:cb:72:e6:f8:b2:06:21:21:91:63:7c:7b:f5: 09:74:27:64:65:b0:e8:2c:d8:15:5a:68:f5:b5:6a:1c:88:34: 85:23:c0:e9:3a:79:d9:b9:c5:98:c3:56:b2:b0:c6:ac:d8:2d: 35:39:79:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNA4WRQwTZCDxJDMBGYBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMzAxMjEwMDQxWhcNMjYwMzAyMjEwMDQxWjAzMTEwLwYDVQQD Eyg5MDBiZjQxOWQ0MzI0N2ZlNjllZjNjYWQ0NjgxYTU0MzY2NjM4MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGj1HW3vuas49HwAtPdhb3OyRs3A hmI7w3uSXR4h7hL+YJU2QrqZ8puE5BUxgXLj6gQ8WS7adh22A1AOXuOiIDYf/TeC y7k6lrN264YB4WwFmUepnMi0eU66BuznEf2+AGw0QNmqpPfhA91RFDjuqfwLL8wl f0m3WZbHt+b4G2Te2DU0/3dt/pFrRdCCHYINS+mdHbjkrfVg69JsizwsRHSO6aav TwQRcJ8uxNte3AerOuKWdk37m6VvLy8Nz6HOATjrADWb807aeuQtDk/lASsNP+uC X2fHeny4MbF456Vk/pGkkJHzIway4NLF6nb12pQxmt1SOROJw3rkdzJZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAL9BnUMkf+ae88rUaBpUNmY4M/MB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgswCkO7 xJG9lDzVHxoSjuKprxYPF6hnrUDarNNb++GMMa6GjCDhCMTrSUgmAJBmL3r9M1OR jvvKEcKSe+dUfSSkORvFr26rMevcrqnBQGoxd+hy8UNrOlISSBn5ZjSnIHvo8x+x t7cs6s35LqlYwyB+gECEcbE3nAPi44Fvl4W2z/N0Z8km8qqi+NLzuZRQmRwMwI/6 A4RC/MBQMHY+0fjuDodu01JKlebbdVbLZYSUThfHqmuN16zJNg036wL0Qr4zvRJq ZJ+s+73Lcub4sgYhIZFjfHv1CXQnZGWw6CzYFVpo9bVqHIg0hSPA6Tp52bnFmMNW srDGrNgtNTl54Q== -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:19 2026 by rpki-client