$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: OQg4y+yfCkJ+2ylIMpJrwbjSKNNVWNJV8k9yWXGomrI= Subject key identifier: 75:1D:6B:9E:6E:C8:B0:0E:50:9C:DC:A8:5D:17:62:B2:10:70:87:79 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019CA8D7C0C0ADBB568310E1A85F0DC9BBE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1869 Signing time: Sun 01 Mar 2026 10:00:37 +0000 Manifest this update: Sun 01 Mar 2026 10:00:37 +0000 Manifest next update: Mon 02 Mar 2026 10:00:37 +0000 Files and hashes: 1: 1-NGotXyVd5u6UaHxD5f2nrcQOEQ.roa (hash: CEmwfIA1H7zh5ruQudBr6fV+YDMytrDYsrzxognY2aY=) 2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: vjEFlEReK/qAi2DxJFoDAJ7GrtSLAqD1jCAqUqA6oNs=) 3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=) 4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=) 5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=) 6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=) 7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=) 8: QHrKkeb-zPadyOqDqArqdn83L9I.roa (hash: vZ4zR8IWtLoHU/wxZwvDRlZwt0pjAdRgFwNEPLkyXI0=) 9: WslAV_825JQPLHViJvS6-7SpjO8.roa (hash: JqcF2I2MrBJ1ORO2fF2DTvDCzLlhafV9FcudZtrayuE=) 10: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=) 11: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=) 12: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=) 13: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=) 14: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d7:c0:c0:ad:bb:56:83:10:e1:a8:5f:0d:c9:bb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Mar 1 10:00:37 2026 GMT Not After : Mar 2 10:00:37 2026 GMT Subject: CN=751d6b9e6ec8b00e509cdca85d1762b210708779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:93:c4:33:af:7f:d9:0f:93:6f:49:cd:8e: e5:d5:1f:c3:a8:0f:02:77:1e:94:7f:ee:15:17:3b: ef:b5:34:3a:8c:b0:c4:1d:90:35:3a:f9:5d:a2:bd: 36:3f:13:b4:94:d0:3e:10:db:d6:1c:33:12:09:41: c3:38:bc:b3:3c:83:83:9a:ca:c8:02:5d:ac:7b:e3: ad:fd:67:25:41:7d:17:59:ab:9a:81:7a:7d:06:0b: 30:c7:2c:a0:de:d6:20:2e:b7:72:4d:4f:4d:c8:e1: 01:c5:50:dc:33:19:42:27:84:65:d2:ed:90:e8:da: e6:56:76:5e:fa:67:78:40:a4:93:7e:5c:28:f4:73: 09:cf:a6:14:6b:5a:dc:76:3c:f8:e2:2f:b8:dc:74: 78:f5:42:25:62:9b:e8:11:04:32:2a:3a:2c:ff:ba: ba:11:0d:0c:3f:21:15:c8:0f:7e:5d:fd:5d:60:57: 36:4f:83:4a:31:fd:20:b0:f2:70:89:3d:32:72:94: 5d:c7:77:61:09:23:ff:3c:4e:c1:f9:68:2b:ae:3f: be:5c:53:54:7e:70:c8:6d:f6:a8:4d:0c:ab:14:84: 96:0a:1d:6f:bd:42:99:af:f2:9f:56:77:cb:6f:72: 85:c3:52:53:d8:43:5a:3b:b2:68:40:c9:6f:66:79: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1D:6B:9E:6E:C8:B0:0E:50:9C:DC:A8:5D:17:62:B2:10:70:87:79 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3b:f7:3d:4a:8c:b1:97:fa:8f:c2:a2:1f:8d:ad:07:a0:45: a9:72:4b:d5:12:d4:28:65:07:5d:15:8d:99:81:11:b3:0e:e0: 62:79:a5:d4:83:85:52:2e:4f:aa:01:01:bf:1e:5f:00:87:00: 9c:7d:18:61:2c:27:c9:1e:6f:74:8f:88:cb:04:7a:b1:8c:4d: 63:4b:05:70:57:f4:85:8d:26:31:6a:fd:df:6d:e3:62:18:67: 2e:4c:e7:63:b6:bb:8f:b7:9f:a0:6e:ca:59:af:56:c0:a2:7c: 98:8c:a0:0e:14:ce:f3:7b:f7:f1:dc:fb:24:84:fc:a7:70:74: 4a:53:76:5d:6f:1c:35:69:20:09:68:ab:c9:a2:5b:90:c2:d4: 77:55:80:b9:aa:82:e1:ad:37:7b:a9:42:aa:01:8d:13:ac:2a: 0d:70:b3:e5:23:56:2f:f4:6c:2a:8d:9a:b5:82:c5:cf:e4:7f: 20:41:e5:eb:e8:ce:61:f7:c0:85:cb:86:a5:da:8e:4d:74:bf: ac:8d:31:2d:48:08:fd:2e:e5:8a:75:f3:50:cd:89:d8:96:80: 78:74:24:cf:2a:54:99:30:1e:1c:ec:07:55:c4:1a:04:5d:f0: 2b:cd:b6:65:6b:5a:15:80:b2:b0:c5:44:10:39:fa:a7:28:10: e6:14:b7:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo18DArbtWgxDhqF8NybvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMzAxMTAwMDM3WhcNMjYwMzAyMTAwMDM3WjAzMTEwLwYDVQQD Eyg3NTFkNmI5ZTZlYzhiMDBlNTA5Y2RjYTg1ZDE3NjJiMjEwNzA4Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJaTxDOvf9kPk29JzY7l1R/DqA8C dx6Uf+4VFzvvtTQ6jLDEHZA1Ovldor02PxO0lNA+ENvWHDMSCUHDOLyzPIODmsrI Al2se+Ot/WclQX0XWauagXp9Bgswxyyg3tYgLrdyTU9NyOEBxVDcMxlCJ4Rl0u2Q 6NrmVnZe+md4QKSTflwo9HMJz6YUa1rcdjz44i+43HR49UIlYpvoEQQyKjos/7q6 EQ0MPyEVyA9+Xf1dYFc2T4NKMf0gsPJwiT0ycpRdx3dhCSP/PE7B+Wgrrj++XFNU fnDIbfaoTQyrFISWCh1vvUKZr/KfVnfLb3KFw1JT2ENaO7JoQMlvZnnv4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUda55uyLAOUJzcqF0XYrIQcId5MB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDv3PUqM sZf6j8KiH42tB6BFqXJL1RLUKGUHXRWNmYERsw7gYnml1IOFUi5PqgEBvx5fAIcA nH0YYSwnyR5vdI+IywR6sYxNY0sFcFf0hY0mMWr9323jYhhnLkznY7a7j7efoG7K Wa9WwKJ8mIygDhTO83v38dz7JIT8p3B0SlN2XW8cNWkgCWiryaJbkMLUd1WAuaqC 4a03e6lCqgGNE6wqDXCz5SNWL/RsKo2atYLFz+R/IEHl6+jOYffAhcuGpdqOTXS/ rI0xLUgI/S7linXzUM2J2JaAeHQkzypUmTAeHOwHVcQaBF3wK822ZWtaFYCysMVE EDn6pygQ5hS3xA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:15:35 2026 by rpki-client