$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: 6jdCgpIYmFM0tmN+qZf7LTrcKLymvDdP+ouXhi7J7HQ= Subject key identifier: C3:6E:6E:7B:A6:8D:CF:A6:47:9C:6D:54:5D:A4:7A:7B:48:17:2A:9F Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019CAA58F8100BC8C4A82FA330EF41906090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1851 Signing time: Sun 01 Mar 2026 17:01:23 +0000 Manifest this update: Sun 01 Mar 2026 17:01:23 +0000 Manifest next update: Mon 02 Mar 2026 17:01:23 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 3: AzMofwjaFEjY--M2w_hFTS6Doe8.roa (hash: yafDjlpEdmCovrq5jgaaEVAWffNoz5k46A2nsxmxvfM=) 4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 4Gw6mB71IfkB/9hhsNc/MiOHDbqAF1utoIX0mTQta/k=) 8: TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa (hash: +OLGI5HPjva1QCNnk16poRDsJUrrhAXiZgKlpTVLOyE=) 9: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 10: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 11: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 12: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=) 13: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 14: g42Q3rfj3fjhRrs2uUZJTzJHPLw.roa (hash: rei0mXZ0e1OpcgQkOfyol1npQmkAiPOFooYIEbC45BU=) 15: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 16: xBqBXFmQrw0nrQUmLex4ucUbm6k.roa (hash: TnBMggLi5CIQ1hShDDAuB88To8EI50H2RKa7i+0/tRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:f8:10:0b:c8:c4:a8:2f:a3:30:ef:41:90:60:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Mar 1 17:01:23 2026 GMT Not After : Mar 2 17:01:23 2026 GMT Subject: CN=c36e6e7ba68dcfa6479c6d545da47a7b48172a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:52:63:61:73:64:e5:49:55:13:2f:88:6b: a9:48:19:4a:7c:64:c0:81:51:0d:17:59:17:67:3e: f1:9e:91:75:62:70:d5:7b:b1:d1:8c:cd:8f:c4:1c: f0:64:22:4f:f9:a5:a9:ff:64:c3:de:93:f2:b9:2f: 2c:e0:3c:61:43:67:20:9d:09:4a:e2:7e:d4:57:01: 8d:53:cf:af:c1:a6:e4:1d:78:de:7e:e8:7e:10:f7: e3:49:f1:ef:14:d1:9a:bc:e2:2e:c3:f7:6d:3b:ae: c5:a6:6e:7f:4b:1e:9b:90:c5:76:6a:a3:7f:29:90: 71:7f:21:11:23:4d:6c:fd:d6:ab:72:94:08:52:08: 4f:cd:e8:db:e5:b4:bf:ba:08:ac:07:21:a8:ee:e0: 82:df:7f:50:22:41:4d:39:90:c4:bf:de:75:07:14: 0e:f4:06:ea:8f:4e:e7:97:79:44:e3:e2:f1:a9:cb: b6:02:89:dc:cb:68:32:38:a7:b7:73:95:f5:9d:1d: 62:6d:fa:6b:1d:8f:bd:c1:d3:8a:cb:3a:3a:35:6d: b3:5d:41:c2:7f:f5:a7:48:61:81:f5:b7:b1:29:71: f4:50:6a:6a:cd:1f:b6:0d:c0:38:af:52:10:c1:aa: 85:c1:78:20:00:ae:4b:6c:77:ce:f4:d6:f6:83:f0: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6E:6E:7B:A6:8D:CF:A6:47:9C:6D:54:5D:A4:7A:7B:48:17:2A:9F X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:d5:e5:b3:4b:22:8e:c9:1e:e3:0d:17:38:24:79:c3:dd: e2:e5:97:00:24:89:71:25:fe:0e:7c:d9:ac:c1:11:db:9b:d1: fd:6c:fe:87:82:26:26:6c:48:91:7c:87:25:ba:70:fa:f6:7c: 52:58:ea:39:3a:28:3e:55:63:24:f1:97:35:06:ab:9e:71:03: 63:1c:4e:8d:f5:e3:1a:5e:cc:84:b9:04:b4:82:ef:b7:4a:cb: ce:77:b5:9f:0f:b6:0c:db:4b:46:ec:79:4c:48:45:ae:dd:cf: 71:fa:02:33:30:4b:40:ba:1f:b1:56:07:c2:72:31:8f:58:11: e1:05:ae:6a:bd:cf:64:b1:d7:d1:01:f2:9c:f3:3a:ed:9b:5c: f9:e7:1c:20:97:de:73:23:d3:bf:28:b1:a2:09:ab:70:3e:2c: 8f:b8:64:bb:fc:7e:b3:24:22:d8:0d:3c:d6:f2:62:86:2f:41: b6:42:49:65:0c:af:02:63:ce:c8:8c:6c:2f:4c:98:f4:46:5d: 50:24:00:70:de:de:5e:92:c0:fc:ac:17:b7:c0:99:70:9c:d0: 63:8c:e1:f9:dc:a2:bb:9e:9a:b1:b4:57:91:04:84:ea:01:9a: b4:56:46:d8:de:df:33:cc:2f:dd:63:df:dc:2b:71:f8:fb:3e: 3b:72:a2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWPgQC8jEqC+jMO9BkGCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMzAxMTcwMTIzWhcNMjYwMzAyMTcwMTIzWjAzMTEwLwYDVQQD EyhjMzZlNmU3YmE2OGRjZmE2NDc5YzZkNTQ1ZGE0N2E3YjQ4MTcyYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeNSY2FzZOVJVRMviGupSBlKfGTA gVENF1kXZz7xnpF1YnDVe7HRjM2PxBzwZCJP+aWp/2TD3pPyuS8s4DxhQ2cgnQlK 4n7UVwGNU8+vwabkHXjefuh+EPfjSfHvFNGavOIuw/dtO67Fpm5/Sx6bkMV2aqN/ KZBxfyERI01s/darcpQIUghPzejb5bS/ugisByGo7uCC339QIkFNOZDEv951BxQO 9Abqj07nl3lE4+Lxqcu2Aoncy2gyOKe3c5X1nR1ibfprHY+9wdOKyzo6NW2zXUHC f/WnSGGB9bexKXH0UGpqzR+2DcA4r1IQwaqFwXggAK5LbHfO9Nb2g/Bp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNubnumjc+mR5xtVF2kentIFyqfMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtfV5bNL Io7JHuMNFzgkecPd4uWXACSJcSX+DnzZrMER25vR/Wz+h4ImJmxIkXyHJbpw+vZ8 UljqOTooPlVjJPGXNQarnnEDYxxOjfXjGl7MhLkEtILvt0rLzne1nw+2DNtLRux5 TEhFrt3PcfoCMzBLQLofsVYHwnIxj1gR4QWuar3PZLHX0QHynPM67Ztc+eccIJfe cyPTvyixogmrcD4sj7hku/x+syQi2A081vJihi9BtkJJZQyvAmPOyIxsL0yY9EZd UCQAcN7eXpLA/KwXt8CZcJzQY4zh+dyiu56asbRXkQSE6gGatFZG2N7fM8wv3WPf 3Ctx+Ps+O3KiAA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:51 2026 by rpki-client