$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: ooLGanUGqALdv9jPdrRp0OgsqYEQ03TFym3B3kRSWb4= Subject key identifier: 5A:7F:85:D8:B1:69:13:A0:B7:10:BB:E0:76:2F:66:A1:62:63:06:85 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019CACEBC3CD118383ED5868484039539B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0BC5 Signing time: Mon 02 Mar 2026 05:00:58 +0000 Manifest this update: Mon 02 Mar 2026 05:00:58 +0000 Manifest next update: Tue 03 Mar 2026 05:00:58 +0000 Files and hashes: 1: 0z8pTI41iPuVrCQVQ1wuJedcLng.roa (hash: e+SXHoPepQrK1mT7vZuMdVv/Sb/mCHdwtmRTk5f2KY0=) 2: 1-1lvKVidMjz9SqtbPt81s0r7r0I.roa (hash: ZlBElaLY1A20NV3b70L3QV0eyy9Ku8m61r7maErkkKY=) 3: 2_-FI-AoJnOM9FRj9JIZ87TxIGU.roa (hash: fYqLfLAgXXv2j6Hlh2bmzcVErlr45q7qc3mJo6wcwjY=) 4: 38r2X0leHHTAmJ6zVJSwuzoD2E0.roa (hash: uyTAZ2GgNW9/wIH0EkQGQyRV3AY/RO2eHsNraGcFPPk=) 5: 3PUBNkz9FwV2NNGvr5c1xPHsrKs.roa (hash: Iue6j8hQXBufFHKI47UYN7vcS1Nx2fj3o4JuzfixAMQ=) 6: CZCLA3Cj6YYp_k_a7y0b2rbgyzo.roa (hash: SaDoVmzs9e3hbWzh+uCnOLVQP2mnuXiNzqqPyyTBq2o=) 7: F0KEI4lW7Epb_3eoekIpwBqbc2E.roa (hash: UC+E/xpST3sk4LrjHrlkIcP31YMZn/3d6DZdEgG8Rdg=) 8: JrpsDD8G_9HrVRADrUGdVzpQ0GM.roa (hash: PfSJmHGRfRFt+GOTf/z8aUHtcRQ35VQoUt2Ubm4KDs4=) 9: JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa (hash: C2FzGkWqusy1+L9+G5l/4MmyS4qSpGF23YAr4kNJZHQ=) 10: Latg5HfFxVV45cY_wXpQ9M7y2UM.roa (hash: AMl3v5ozRzV/5w1KglWOLAOe0okRBu64taR6MmvtD44=) 11: MLJuInjQg3zDgPHSYlxPnBCsr8w.roa (hash: z204xX29eUWjwP65eKvX0LnffzPLMfSulEeLcZJVV/s=) 12: N0sDm-EFGV2amFYWHwErrX3Dbus.roa (hash: Xmo1dvVrCIWSNTaeVoMmKU+6tNLC/YtQosQjQwiD/3c=) 13: NcdnAUjF0ZmvIFIsYxSjccA1H5U.roa (hash: yrpUGMxgOjNevSVTIVpW6O91noTiRG2R4yZAODEyOJ0=) 14: UypHuJtN1zmqt0Zba9DljNJ2WgY.roa (hash: PFDshKDp/mzgsdaZsjSV8dCLT3xJ6p+HUpwQxcGrMuI=) 15: X8VKPIZs2cxgP7KAitegaaOStYA.roa (hash: UyQbpqHhpeql1FOSwNKPw4wVEieRWnlJTJJzgyGrAow=) 16: _opU9Zflr19Qgw9wxcT5CzBzFeE.roa (hash: hVBzTOs1aH7AxZYfWOOyLBurJardjc8RPMc3Hjjv5+g=) 17: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: qVbtrFf0SH8GthPkrPBxow/kR4teiWBJ5ZuaL1lvBx4=) 18: aqPgWOakmp5fii05oBo6v_tlmAQ.roa (hash: 4j9frFtx7FlfahOenBDreDRrYBvvkfNPAcv1Ywz2/HM=) 19: enYE37jQOciNrH4vp2_3FdUT0io.roa (hash: PoAlpwtftho9gluuF95P6FYOuD1hDRKv7R9Nta21XGo=) 20: j6F5nKl7VxhTCPP7Z6aypppg1qg.roa (hash: b/KmdMBh7vGAQW3XZYIqLqb1iW1YZRpjzYx/XN6MR5Y=) 21: j6ZEfuBoBwoJsq_P8O7JAQCMW2w.roa (hash: SGo/KKeiXkzjoKtnxVRa/5ncyP+lv+PUCdh1kKaxLxc=) 22: j6h2wYXBGU0po-975zEbDRhXVP8.roa (hash: VuTt2+GtidZibv9WAUHaogEOazxD2GyG76InT6TAm6k=) 23: l7FVy9qV9r7TJi_Vr2KpMSypfts.roa (hash: BO7WgU3AlrlmLiXeaJCpacGRr3Q1uOzmvzOfD3QKH6s=) 24: nFU8l0SuNs4mLVgObqGXtp6gnoI.roa (hash: dp4PPf/CcvyLdCI3a30WQB7bcOJJ7sLxhjedTuWlcA0=) 25: ol5o-VeacDxR8G56FJbb2bssCJU.roa (hash: HWf9NNfp469bQ5Wf7jn4TMJbz+S/ZW2Aq8n1tyLEU+8=) 26: qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa (hash: h1N79r6IwikpSxLGbvCodpvdgy0jF1MGCYu94qAhjf4=) 27: s5_XzwQfnjREeGyxGEXKHTbuCec.roa (hash: f2LNPZwtscDHDTcGq3OeJusAQETPe2+DG2C2X0YawWI=) 28: t9VfVoic7D0Eb12yRbnLassyYY8.roa (hash: OIvXTMlAaBLVGYWH+/8UMptxQ45gYDbOsCNpVMjE62A=) 29: tEnzcmF181z_Fz4dFzQyfZ882o4.roa (hash: RBYNG12SzCTfXGwx/F5qbQVTQCBmyDYwNw6MWUM/ecc=) 30: uBIYg6HBl9Jf8Kf0_1APF11RXj4.roa (hash: Cy62Nntc/tzkP5N8nJbuKZSP38j9mL0EAGyc0aabhl4=) 31: wTgQ6fCMDPpS81pwpnjiyHzyTpc.roa (hash: ixnoZEKtVyJai2PVSvQa52pLsUnTfY2h9ItkAule9hg=) 32: y6XyUstS_SjZUuRcmwKI2O2hK4g.roa (hash: 6KaNgtch9hdulImqbKsvBI0tlfN0LaRnEF0phbzSwYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:c3:cd:11:83:83:ed:58:68:48:40:39:53:9b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Mar 2 05:00:58 2026 GMT Not After : Mar 3 05:00:58 2026 GMT Subject: CN=5a7f85d8b16913a0b710bbe0762f66a162630685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:80:0b:61:f4:25:0f:73:9d:e5:a4:90:4d: f4:8f:4e:10:9a:47:f6:1b:8b:ca:1f:81:56:65:bb: da:a7:74:25:2f:b8:13:b4:31:50:76:5a:ed:fb:59: c0:c1:56:7d:2d:ba:48:26:74:98:36:58:8a:5b:8b: db:58:4e:07:1f:5b:17:b6:a0:8d:2b:67:91:d8:b1: c6:c6:f2:f4:13:39:b9:4b:01:fb:e7:8c:6d:26:05: 6c:eb:15:0e:60:c1:d0:bf:75:4b:4b:76:e7:13:a1: 32:50:86:4a:23:49:24:01:51:30:e9:6f:44:92:f4: c1:6e:b3:34:3c:c5:9a:1c:e3:a1:cc:01:eb:58:06: e2:18:c7:05:af:37:b7:88:c2:c0:f7:f4:97:d4:fa: 92:21:42:13:47:5d:bb:b1:65:a0:3b:56:86:04:3e: a4:c4:ea:58:62:62:4a:5a:a3:5c:a0:14:e2:dc:4e: bc:89:a0:66:55:23:da:fb:ae:d8:c9:d3:94:f3:0f: d0:79:ec:ca:f3:c2:17:f4:44:7c:b1:91:31:d1:eb: 9b:17:5f:8b:c3:cd:2c:be:3b:b5:78:13:9e:99:2e: 92:6a:e3:87:35:66:8a:69:91:44:bf:27:30:95:76: df:97:8b:91:3d:ed:12:ef:4f:c7:81:4b:b4:2c:cf: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7F:85:D8:B1:69:13:A0:B7:10:BB:E0:76:2F:66:A1:62:63:06:85 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:48:a1:04:81:ff:c5:59:24:0b:9c:29:6f:87:88:70:d1:ae: 7f:25:07:d5:af:46:e4:62:bb:82:74:3c:84:8d:5f:12:61:b3: 59:16:54:bb:ce:0b:03:5b:9b:fd:34:46:10:07:00:09:25:b1: 4e:d5:66:20:1f:c9:c9:52:f5:4b:25:2e:0b:58:5c:83:d3:5e: a3:02:a5:7b:5c:0a:39:07:6a:fa:42:59:78:b5:e1:bc:a2:70: 04:c3:e3:d9:f7:47:72:70:b1:3f:e8:13:1e:42:19:e7:e0:c2: 4b:ca:d0:41:71:30:4a:6f:ca:65:76:8b:90:ec:b2:7e:01:3a: 7f:58:4d:be:40:99:d4:78:e5:56:d5:94:72:e4:e2:e7:54:21: 65:05:b7:a0:1c:fd:ae:0f:e4:22:45:12:09:54:7b:5a:b1:dd: 2b:ef:04:0b:74:08:cb:34:89:f4:01:b4:c0:a9:7d:cd:96:31: 1d:35:c6:59:08:74:2d:57:23:7e:1a:e6:87:59:53:c3:3b:a6: 3d:0c:ea:56:a8:d4:d0:2d:15:fb:45:b1:b3:79:df:6d:74:57: fd:b5:6e:f3:29:e7:96:79:3a:26:62:05:76:38:6f:74:8d:5b: 63:41:ba:83:f4:87:0a:2f:b6:5a:ce:9d:56:08:db:29:59:bc: 56:c2:7c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys68PNEYOD7VhoSEA5U5sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMzAyMDUwMDU4WhcNMjYwMzAzMDUwMDU4WjAzMTEwLwYDVQQD Eyg1YTdmODVkOGIxNjkxM2EwYjcxMGJiZTA3NjJmNjZhMTYyNjMwNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h+AC2H0JQ9zneWkkE30j04Qmkf2 G4vKH4FWZbvap3QlL7gTtDFQdlrt+1nAwVZ9LbpIJnSYNliKW4vbWE4HH1sXtqCN K2eR2LHGxvL0Ezm5SwH754xtJgVs6xUOYMHQv3VLS3bnE6EyUIZKI0kkAVEw6W9E kvTBbrM0PMWaHOOhzAHrWAbiGMcFrze3iMLA9/SX1PqSIUITR127sWWgO1aGBD6k xOpYYmJKWqNcoBTi3E68iaBmVSPa+67YydOU8w/QeezK88IX9ER8sZEx0eubF1+L w80svju1eBOemS6SauOHNWaKaZFEvycwlXbfl4uRPe0S70/HgUu0LM/n/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp/hdixaROgtxC74HYvZqFiYwaFMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEihBIH/ xVkkC5wpb4eIcNGufyUH1a9G5GK7gnQ8hI1fEmGzWRZUu84LA1ub/TRGEAcACSWx TtVmIB/JyVL1SyUuC1hcg9NeowKle1wKOQdq+kJZeLXhvKJwBMPj2fdHcnCxP+gT HkIZ5+DCS8rQQXEwSm/KZXaLkOyyfgE6f1hNvkCZ1HjlVtWUcuTi51QhZQW3oBz9 rg/kIkUSCVR7WrHdK+8EC3QIyzSJ9AG0wKl9zZYxHTXGWQh0LVcjfhrmh1lTwzum PQzqVqjU0C0V+0Wxs3nfbXRX/bVu8ynnlnk6JmIFdjhvdI1bY0G6g/SHCi+2Ws6d VgjbKVm8VsJ8xw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:20 2026 by rpki-client