$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: /Z73X6ITg80bXAcQ0FG7PleFQEipYJSJSpljudzy58I= Subject key identifier: E5:37:9C:68:01:F8:89:32:23:EC:12:1E:FE:8E:A0:2C:93:63:18:46 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019CE448431DF68A40F507E819D790B829E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 10D1 Signing time: Thu 12 Mar 2026 23:01:06 +0000 Manifest this update: Thu 12 Mar 2026 23:01:06 +0000 Manifest next update: Fri 13 Mar 2026 23:01:06 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: RIBgBbQowNnkMinFmO32KP+eqDPx0/P53T9GKN0ltXU=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:48:43:1d:f6:8a:40:f5:07:e8:19:d7:90:b8:29:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Mar 12 23:01:06 2026 GMT Not After : Mar 13 23:01:06 2026 GMT Subject: CN=e5379c6801f8893223ec121efe8ea02c93631846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:00:25:3a:dd:0a:1e:b8:45:99:78:b8:37: b5:c9:82:d7:ef:18:ac:fb:23:8f:6a:b2:9d:3b:e5: b7:08:0b:bc:f4:48:6c:98:7c:e3:66:88:e7:04:fa: 67:b3:59:c5:7c:a1:56:33:ed:c0:ec:58:1e:bd:26: a3:58:fb:e1:4b:10:77:98:f7:e6:8f:3b:3c:7f:93: 72:dd:8f:ce:33:32:92:2e:e6:cd:99:7d:c6:f9:d2: db:7e:03:0d:85:65:25:3b:ac:59:ad:2f:79:a5:3a: 68:f0:6f:50:d5:6d:cc:b2:93:ee:dd:e7:2f:29:0e: 37:e2:bb:69:2f:04:8f:99:5c:5c:29:d3:e2:73:a3: df:53:05:ce:3c:23:1d:54:73:d4:c4:de:5a:e8:5c: 4e:1d:83:86:a7:5f:f8:3c:cb:b4:9e:e7:ed:45:b4: ba:1f:da:95:f6:a8:a7:f5:d1:54:f8:f8:81:d5:1b: 6d:c7:6d:c0:42:85:f8:82:32:40:0d:c6:83:f1:2b: 9c:77:87:64:9e:08:e7:59:63:23:c4:87:b1:b3:60: d4:ff:19:83:41:dd:ce:d0:aa:57:a2:e3:d9:58:29: 17:c2:ff:10:7a:49:ff:26:14:9e:e3:0a:c7:ff:85: 6c:7e:a6:82:56:47:1f:25:89:27:bb:b7:24:d7:4a: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:9C:68:01:F8:89:32:23:EC:12:1E:FE:8E:A0:2C:93:63:18:46 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c1:c0:98:f2:5d:ad:d7:30:62:07:a7:b1:fb:0c:e6:c9:a5: 9d:99:4c:46:76:19:cc:39:4d:d5:84:a6:23:80:a2:f2:b6:52: 33:db:68:83:93:16:d7:25:0e:47:aa:8a:e2:6f:c6:a2:3f:4b: 99:a3:32:bc:21:aa:54:5c:b5:5a:8e:37:86:ed:3f:87:6e:ca: 40:24:5d:e8:41:90:1c:a7:c9:5d:57:4f:c1:99:b7:dc:93:70: 11:e6:5c:69:1a:a9:fe:7a:5e:31:1d:89:d4:d8:2b:80:c9:9d: a6:80:0f:be:42:83:9f:6a:84:97:34:8f:de:8f:2d:2b:08:f1: bd:54:d9:40:f5:01:d9:4d:f4:b4:17:76:06:52:08:88:88:0e: d1:af:27:2e:63:41:2f:2a:ab:18:ea:e2:02:05:44:3e:8f:47: 6f:e2:36:f1:9c:b7:d0:c1:ed:34:38:65:95:7e:68:34:b2:4d: eb:96:de:7c:26:10:30:23:3b:74:f6:57:0d:a4:ff:02:4b:b4: 11:dc:75:b6:40:24:24:77:9b:31:90:85:3f:38:5c:3f:f2:9a: a6:28:aa:09:c0:10:e0:cd:4a:7f:08:97:64:ce:9a:88:57:0e: c6:f5:e9:57:4b:8f:39:1c:c1:c5:ba:1c:e8:fc:1c:54:31:c5: bb:19:94:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkSEMd9opA9QfoGdeQuCnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMzEyMjMwMTA2WhcNMjYwMzEzMjMwMTA2WjAzMTEwLwYDVQQD EyhlNTM3OWM2ODAxZjg4OTMyMjNlYzEyMWVmZThlYTAyYzkzNjMxODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5EAJTrdCh64RZl4uDe1yYLX7xis +yOParKdO+W3CAu89EhsmHzjZojnBPpns1nFfKFWM+3A7FgevSajWPvhSxB3mPfm jzs8f5Ny3Y/OMzKSLubNmX3G+dLbfgMNhWUlO6xZrS95pTpo8G9Q1W3MspPu3ecv KQ434rtpLwSPmVxcKdPic6PfUwXOPCMdVHPUxN5a6FxOHYOGp1/4PMu0nuftRbS6 H9qV9qin9dFU+PiB1Rttx23AQoX4gjJADcaD8Sucd4dkngjnWWMjxIexs2DU/xmD Qd3O0KpXouPZWCkXwv8Qekn/JhSe4wrH/4VsfqaCVkcfJYknu7ck10rmfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU3nGgB+IkyI+wSHv6OoCyTYxhGMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsHAmPJd rdcwYgensfsM5smlnZlMRnYZzDlN1YSmI4Ci8rZSM9tog5MW1yUOR6qK4m/Goj9L maMyvCGqVFy1Wo43hu0/h27KQCRd6EGQHKfJXVdPwZm33JNwEeZcaRqp/npeMR2J 1NgrgMmdpoAPvkKDn2qElzSP3o8tKwjxvVTZQPUB2U30tBd2BlIIiIgO0a8nLmNB LyqrGOriAgVEPo9Hb+I28Zy30MHtNDhllX5oNLJN65befCYQMCM7dPZXDaT/Aku0 Edx1tkAkJHebMZCFPzhcP/KapiiqCcAQ4M1KfwiXZM6aiFcOxvXpV0uPORzBxboc 6PwcVDHFuxmUGg== -----END CERTIFICATE-----Generated at Fri Mar 13 08:52:59 2026 by rpki-client