$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: 6DD8BVt0+Z+8OZvilLuDmZoycSRwRWIpv15bkRLWv6c= Subject key identifier: E0:DF:92:B3:DA:F0:0B:3A:0F:CD:6D:07:A7:08:CE:1B:48:B4:70:B8 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019CAA2187821A32779C7FC3559758000780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 189C Signing time: Sun 01 Mar 2026 16:00:49 +0000 Manifest this update: Sun 01 Mar 2026 16:00:49 +0000 Manifest next update: Mon 02 Mar 2026 16:00:49 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 4: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 5: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 6: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 7: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 8: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 9: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 10: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 11: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: 5x88ABPl023BeDVMTUxMB4h3t0dsZABsvPCfZv8QZPk=) 13: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 14: uKWh_c7kBQ-lyI8dk47qyONXsHI.roa (hash: WgzqgSvlC/MGSeG/ABr9wD/AWzOmM4M93N1qF2LKkqc=) 15: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) 16: zIvUzcF8LAJfD49NX4DYYK5vix0.roa (hash: aIpDSiEwa0ERsd3YCkg95P52GrNCpS38VqcltaZclRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:87:82:1a:32:77:9c:7f:c3:55:97:58:00:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Mar 1 16:00:49 2026 GMT Not After : Mar 2 16:00:49 2026 GMT Subject: CN=e0df92b3daf00b3a0fcd6d07a708ce1b48b470b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:9e:09:57:e5:04:ca:3d:f7:24:b6:88:10: b1:b1:47:88:af:b1:10:36:cb:d2:96:7a:37:4d:48: 14:9b:16:aa:2a:76:40:ae:27:5a:13:f1:f6:26:91: c4:2a:86:2c:c2:66:76:07:05:54:6b:e3:ea:48:bd: 3d:34:f3:fc:c4:27:1c:70:75:0d:4e:7a:5a:db:e4: 6f:9c:21:8f:3e:95:fe:1e:a4:88:d6:79:84:4e:aa: 50:61:6e:9b:c6:a1:a9:37:65:29:fd:b5:48:ae:65: ed:5e:c1:b7:03:ea:78:a9:a1:8a:4a:c7:df:de:81: ca:96:26:78:e5:7b:ea:67:1c:10:35:c3:21:02:51: 40:1b:db:f9:16:63:88:de:db:aa:b4:4b:04:e3:2d: ee:82:ff:e6:57:7e:b8:06:c8:57:41:6d:be:8a:21: 0a:38:87:e0:62:28:61:bc:e7:f7:37:f0:88:17:8d: a3:8d:ad:12:75:1d:e5:00:d3:4a:65:0f:d9:bd:ac: ad:03:8b:ee:8c:24:94:35:82:a4:90:44:4e:d3:ab: 8f:57:d7:5e:04:f5:e4:38:00:a0:a2:d8:91:e6:5f: f9:8d:13:24:40:34:ff:da:cc:c6:bb:d3:85:e5:f3: a3:11:e7:4f:0f:6e:26:79:5a:be:5d:c4:5b:11:5a: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:92:B3:DA:F0:0B:3A:0F:CD:6D:07:A7:08:CE:1B:48:B4:70:B8 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:5c:b6:d4:ff:d0:59:b2:15:6e:6f:de:6a:ec:76:6c:b3: 05:2e:a5:0d:74:d0:68:5f:09:3b:89:57:35:3e:c3:fa:0b:a0: 25:0d:4b:41:05:79:ed:a8:60:7e:46:82:1c:14:a0:86:30:69: fa:66:86:38:3c:78:ff:7a:9c:75:cf:23:33:a8:05:55:29:e8: 05:b2:11:ce:27:8a:92:a8:2e:46:1d:63:dc:08:65:52:cc:b7: d9:8b:c4:0a:49:70:b2:4f:80:72:2a:ed:62:b1:e4:82:a0:94: bb:09:87:2f:6b:6d:5b:8b:f2:27:fa:02:11:ec:f1:4b:42:d4: 3a:3a:10:bc:d1:59:eb:1a:77:fb:7f:9b:c3:f5:7d:63:a5:5c: 06:1d:21:59:ba:45:70:2c:a2:cf:bf:50:b6:d2:56:29:32:bf: f7:6b:4a:73:e4:59:40:38:de:6b:30:91:0e:b1:8a:e0:cc:81: 54:09:ab:92:ed:e1:da:30:66:fa:60:6e:5c:f8:ce:2a:54:7d: 97:ae:9d:f4:6b:a4:0a:b9:60:b6:9b:c0:80:8e:6c:50:1d:65: 78:82:5d:64:40:fd:98:77:12:c4:47:d5:4d:d2:33:91:7c:60: 30:15:c6:e6:7c:a9:25:be:e2:7b:65:75:d6:60:d0:96:1b:07: e6:ef:48:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIYeCGjJ3nH/DVZdYAAeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMzAxMTYwMDQ5WhcNMjYwMzAyMTYwMDQ5WjAzMTEwLwYDVQQD EyhlMGRmOTJiM2RhZjAwYjNhMGZjZDZkMDdhNzA4Y2UxYjQ4YjQ3MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDieCVflBMo99yS2iBCxsUeIr7EQ NsvSlno3TUgUmxaqKnZAridaE/H2JpHEKoYswmZ2BwVUa+PqSL09NPP8xCcccHUN Tnpa2+RvnCGPPpX+HqSI1nmETqpQYW6bxqGpN2Up/bVIrmXtXsG3A+p4qaGKSsff 3oHKliZ45XvqZxwQNcMhAlFAG9v5FmOI3tuqtEsE4y3ugv/mV364BshXQW2+iiEK OIfgYihhvOf3N/CIF42jja0SdR3lANNKZQ/ZvaytA4vujCSUNYKkkERO06uPV9de BPXkOACgotiR5l/5jRMkQDT/2szGu9OF5fOjEedPD24meVq+XcRbEVpeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODfkrPa8As6D81tB6cIzhtItHC4MB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCpcttT/ 0FmyFW5v3mrsdmyzBS6lDXTQaF8JO4lXNT7D+gugJQ1LQQV57ahgfkaCHBSghjBp +maGODx4/3qcdc8jM6gFVSnoBbIRzieKkqguRh1j3AhlUsy32YvECklwsk+Acirt YrHkgqCUuwmHL2ttW4vyJ/oCEezxS0LUOjoQvNFZ6xp3+3+bw/V9Y6VcBh0hWbpF cCyiz79QttJWKTK/92tKc+RZQDjeazCRDrGK4MyBVAmrku3h2jBm+mBuXPjOKlR9 l66d9GukCrlgtpvAgI5sUB1leIJdZED9mHcSxEfVTdIzkXxgMBXG5nypJb7ie2V1 1mDQlhsH5u9I5w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:55 2026 by rpki-client