$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: 3Ik5oOISA62fcYmkWEKjjhmfBiSNI4MY22shd8Azaas= Subject key identifier: D9:2F:2E:56:43:11:21:43:12:2F:CF:E3:5A:9D:AB:D3:3B:6A:5E:FA Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019CAC0FD5A7CD5D98A472BB930B08E6EA42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 33 Signing time: Mon 02 Mar 2026 01:00:44 +0000 Manifest this update: Mon 02 Mar 2026 01:00:44 +0000 Manifest next update: Tue 03 Mar 2026 01:00:44 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: NKugH99BWkmmfJdjE8vkIdlDu1MbetbZrOUlAAm1hNI=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:0f:d5:a7:cd:5d:98:a4:72:bb:93:0b:08:e6:ea:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Mar 2 01:00:44 2026 GMT Not After : Mar 3 01:00:44 2026 GMT Subject: CN=d92f2e5643112143122fcfe35a9dabd33b6a5efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:b0:e4:ba:2d:8a:4e:ca:11:09:82:b3:b0: a7:07:6e:02:c5:af:60:76:ac:8b:3a:09:e9:cc:4c: 20:08:b0:61:d5:5e:da:12:a2:a7:fe:31:f1:f8:49: e9:ae:6d:cd:65:8c:de:54:84:f7:a6:7d:66:9d:78: 1e:d4:33:0b:72:d5:be:4e:a5:2b:53:2e:87:73:09: d4:09:c8:ec:a0:6c:b3:c8:aa:31:f0:3a:cc:bb:02: 11:53:28:02:2d:e3:51:2f:1d:c6:1d:36:dd:0a:b3: be:e0:73:16:c7:5b:1a:36:8c:9f:fd:7f:c5:1e:a9: 03:25:30:6f:a8:41:de:0a:83:26:37:66:3f:87:1a: 6f:c6:be:66:da:59:87:13:63:b0:e7:bc:df:d5:40: 3c:b1:b0:bf:e5:13:68:d9:73:90:c6:3f:d6:0e:27: c9:4a:a4:a5:2a:c1:3a:7a:e2:7e:e2:f7:35:d6:88: 78:63:a2:fb:6e:c3:3e:27:d5:a9:20:08:e7:ee:38: 13:f5:ea:d4:f8:07:11:1e:35:46:dd:9a:13:ce:04: 48:d6:06:d9:bf:18:cd:a7:a5:26:e8:fd:4d:1a:87: b7:ac:11:58:b7:0e:00:43:65:34:dc:63:b2:5d:57: db:6e:78:74:17:6a:56:40:00:0f:1c:58:5c:24:6c: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2F:2E:56:43:11:21:43:12:2F:CF:E3:5A:9D:AB:D3:3B:6A:5E:FA X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2f:8a:ce:5a:12:41:47:15:75:8a:30:45:42:42:62:6d:9f: 97:a6:a7:fd:32:d1:ad:e0:f9:cd:d5:0f:60:d2:44:fd:e6:1b: f6:c5:bf:54:15:24:f9:fc:0b:3f:ea:26:f9:8c:47:77:06:99: e8:06:64:55:af:5d:8f:77:96:05:36:f8:17:de:64:15:74:82: 42:3b:06:35:11:10:4a:fd:23:8d:bc:70:35:72:d7:20:26:25: 66:3f:f7:43:b1:6e:88:f9:10:1d:2c:22:31:48:2a:f6:82:52: 97:32:96:0f:f5:8a:8c:6f:2f:e5:ef:e7:63:08:ff:0c:8c:a1: c8:5f:9c:90:41:f4:d3:50:dd:20:8a:86:bc:c0:dc:af:66:a5: 0f:8d:7e:77:b7:a9:1c:dc:de:5b:21:27:d2:24:42:d3:6d:5f: fb:6e:3d:44:47:20:ce:63:23:2b:6c:a8:d1:a9:9a:93:04:1f: 7d:8c:9b:9a:ed:82:b9:5e:20:b6:79:0b:10:74:62:04:1b:e7: a6:b4:e2:b5:41:54:9d:e8:86:da:82:fe:d0:3e:11:02:e5:58: 10:85:22:ab:c4:f3:f9:5e:71:a8:54:de:06:30:ef:c5:b1:e4: fd:e3:4e:98:46:46:2d:2e:7b:cf:b1:82:02:93:6e:4e:0e:e2: 91:e1:27:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysD9WnzV2YpHK7kwsI5upCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwMzAyMDEwMDQ0WhcNMjYwMzAzMDEwMDQ0WjAzMTEwLwYDVQQD EyhkOTJmMmU1NjQzMTEyMTQzMTIyZmNmZTM1YTlkYWJkMzNiNmE1ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKw5Lotik7KEQmCs7CnB24Cxa9g dqyLOgnpzEwgCLBh1V7aEqKn/jHx+Enprm3NZYzeVIT3pn1mnXge1DMLctW+TqUr Uy6HcwnUCcjsoGyzyKox8DrMuwIRUygCLeNRLx3GHTbdCrO+4HMWx1saNoyf/X/F HqkDJTBvqEHeCoMmN2Y/hxpvxr5m2lmHE2Ow57zf1UA8sbC/5RNo2XOQxj/WDifJ SqSlKsE6euJ+4vc11oh4Y6L7bsM+J9WpIAjn7jgT9erU+AcRHjVG3ZoTzgRI1gbZ vxjNp6Um6P1NGoe3rBFYtw4AQ2U03GOyXVfbbnh0F2pWQAAPHFhcJGzC9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkvLlZDESFDEi/P41qdq9M7al76MB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji+KzloS QUcVdYowRUJCYm2fl6an/TLRreD5zdUPYNJE/eYb9sW/VBUk+fwLP+om+YxHdwaZ 6AZkVa9dj3eWBTb4F95kFXSCQjsGNREQSv0jjbxwNXLXICYlZj/3Q7FuiPkQHSwi MUgq9oJSlzKWD/WKjG8v5e/nYwj/DIyhyF+ckEH001DdIIqGvMDcr2alD41+d7ep HNzeWyEn0iRC021f+249REcgzmMjK2yo0amakwQffYybmu2CuV4gtnkLEHRiBBvn prTitUFUneiG2oL+0D4RAuVYEIUiq8Tz+V5xqFTeBjDvxbHk/eNOmEZGLS57z7GC ApNuTg7ikeEnQw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:08:42 2026 by rpki-client