$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json) Hash identifier: Glro6dYcs2aA0uOtunfVu5snZjWV4LbosDprJNnHPoI= Subject key identifier: E6:98:C0:22:61:AB:43:D4:0F:01:2C:C4:2A:D0:EC:0D:EB:78:85:BD Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019D33AD0CB0581FF03D35E995046FAD256C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft Manifest number: 1898 Signing time: Sat 28 Mar 2026 09:01:12 +0000 Manifest this update: Sat 28 Mar 2026 09:01:12 +0000 Manifest next update: Sun 29 Mar 2026 09:01:12 +0000 Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=) 2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=) 3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=) 4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: J02i3iHFe3BWLUptEhnRcdtX8ieDME2njO9IndcILMY=) 5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=) 6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=) 7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=) 8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=) 9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=) 10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=) 11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=) 12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=) 13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:ad:0c:b0:58:1f:f0:3d:35:e9:95:04:6f:ad:25:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Mar 28 09:01:12 2026 GMT Not After : Mar 29 09:01:12 2026 GMT Subject: CN=e698c02261ab43d40f012cc42ad0ec0deb7885bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:bd:59:0c:53:9a:29:15:40:2b:64:7e:44: 32:3c:f4:a0:b4:6a:2c:eb:02:fa:0a:bf:f9:2f:13: 5a:7a:3b:35:57:d1:f7:a9:98:33:d3:7a:aa:59:64: b0:df:16:f9:75:da:e5:64:6b:d2:01:59:2a:bd:e9: 89:d5:0b:6e:ae:ea:ab:0b:90:93:31:28:2d:cb:76: dd:1b:13:e3:cf:07:1e:f6:63:58:fe:a6:05:53:7d: 37:e3:ed:6b:45:21:f1:fb:1f:a3:d9:65:a4:91:92: 52:f3:ff:56:7e:5b:39:8b:4f:07:07:40:bb:be:88: e8:e0:d3:b0:3d:40:15:61:d3:cf:b7:f8:c7:c5:f0: 9a:c9:32:5e:8f:fd:02:1b:8d:e1:f6:a4:71:89:83: 4d:82:9b:e4:45:28:43:0b:a9:28:9f:6d:54:8f:1e: ef:4e:6a:ee:b1:9b:a8:75:28:b7:37:11:87:c9:2e: 49:0d:11:1c:05:18:ca:98:00:c9:56:48:37:85:2e: 3b:51:d4:63:10:16:b5:a1:95:1f:12:41:d8:9c:2a: 46:93:23:c3:6e:be:9d:8b:d4:fe:3a:88:c3:62:fb: a0:d6:4b:e5:53:02:94:1a:86:8a:99:c0:61:8d:69: 33:3a:ea:f0:61:31:9c:28:73:f3:d9:51:5a:e8:dd: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:C0:22:61:AB:43:D4:0F:01:2C:C4:2A:D0:EC:0D:EB:78:85:BD X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9c:86:69:13:5e:05:82:6e:a2:9e:37:21:e5:ff:53:7e:c7: 89:83:c1:86:5e:cb:be:13:b3:60:08:97:f6:52:41:07:c6:00: e3:33:55:9b:65:cb:c0:37:ff:bf:51:a0:b7:75:16:ab:ee:16: df:80:1e:ed:cb:5d:74:0e:4f:e0:6a:39:35:ee:1c:23:9c:7d: 51:d0:df:39:3f:e3:9b:3b:ee:3b:26:2f:56:49:9a:b4:b9:fa: 3c:a1:63:08:05:51:ce:4e:93:fc:e7:58:f7:ba:71:e7:4a:1c: d6:55:7a:2f:93:5e:2a:50:52:2e:db:7d:c0:c9:bc:b0:2b:85: d5:90:77:93:0b:d0:12:ee:be:19:79:1b:df:eb:92:f5:e9:aa: e9:a2:00:a3:29:fa:6d:63:69:b9:89:2a:e7:ca:70:60:5c:98: a9:48:ee:82:6f:9b:ee:8c:96:ef:d6:86:79:ec:56:39:ad:b3: 88:ef:4f:30:c7:e6:f4:d0:28:14:eb:69:03:d4:e2:21:b3:98: 0f:1f:29:04:80:b9:a1:58:ac:21:04:e2:a5:4c:63:c0:cd:4d: e9:a9:7e:c1:7d:ae:23:9e:7f:b4:c3:e8:b6:07:9c:e2:82:1c: d8:92:56:ab:e1:31:26:37:90:93:c0:96:3c:67:08:c2:dd:f9: f0:ef:c4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zrQywWB/wPTXplQRvrSVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwMzI4MDkwMTEyWhcNMjYwMzI5MDkwMTEyWjAzMTEwLwYDVQQD EyhlNjk4YzAyMjYxYWI0M2Q0MGYwMTJjYzQyYWQwZWMwZGViNzg4NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO69WQxTmikVQCtkfkQyPPSgtGos 6wL6Cr/5LxNaejs1V9H3qZgz03qqWWSw3xb5ddrlZGvSAVkqvemJ1QturuqrC5CT MSgty3bdGxPjzwce9mNY/qYFU3034+1rRSHx+x+j2WWkkZJS8/9Wfls5i08HB0C7 vojo4NOwPUAVYdPPt/jHxfCayTJej/0CG43h9qRxiYNNgpvkRShDC6kon21Ujx7v TmrusZuodSi3NxGHyS5JDREcBRjKmADJVkg3hS47UdRjEBa1oZUfEkHYnCpGkyPD br6di9T+OojDYvug1kvlUwKUGoaKmcBhjWkzOurwYTGcKHPz2VFa6N3ZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaYwCJhq0PUDwEsxCrQ7A3reIW9MB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpyGaRNe BYJuop43IeX/U37HiYPBhl7LvhOzYAiX9lJBB8YA4zNVm2XLwDf/v1Ggt3UWq+4W 34Ae7ctddA5P4Go5Ne4cI5x9UdDfOT/jmzvuOyYvVkmatLn6PKFjCAVRzk6T/OdY 97px50oc1lV6L5NeKlBSLtt9wMm8sCuF1ZB3kwvQEu6+GXkb3+uS9emq6aIAoyn6 bWNpuYkq58pwYFyYqUjugm+b7oyW79aGeexWOa2ziO9PMMfm9NAoFOtpA9TiIbOY Dx8pBIC5oVisIQTipUxjwM1N6al+wX2uI55/tMPotgec4oIc2JJWq+ExJjeQk8CW PGcIwt358O/E5w== -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:44 2026 by rpki-client