$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: LmRB4UrVjHe9z5HcNzDon+c6kRUQjZ98LBY1QKQ3bWs= Subject key identifier: 01:5D:EF:A1:01:F2:C8:D1:33:95:2E:8D:BD:9C:92:9E:8C:99:45:72 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019D0DE9914A60437398478A35766CD6FA55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 109E Signing time: Sat 21 Mar 2026 01:01:43 +0000 Manifest this update: Sat 21 Mar 2026 01:01:43 +0000 Manifest next update: Sun 22 Mar 2026 01:01:43 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 6XUw5W_M3EzaqfvE8eeuL5B03o0.roa (hash: PQOjHvKjd9kIbNtHBoVyGVd20P8cKxJlW+bd9y79LQ0=) 3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 4: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 9: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: ofZA3nttSs7vIPIc5OdBnO9u7EQzyctwnYq+WovG7z0=) 10: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:e9:91:4a:60:43:73:98:47:8a:35:76:6c:d6:fa:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Mar 21 01:01:43 2026 GMT Not After : Mar 22 01:01:43 2026 GMT Subject: CN=015defa101f2c8d133952e8dbd9c929e8c994572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:6b:c5:d0:75:a8:34:17:d0:dd:e5:15:e5: 70:61:7d:64:22:7e:28:f6:7d:27:7f:78:26:4e:f7: 46:99:5a:86:b8:12:11:c6:8b:ed:7d:74:2c:5c:ad: 8c:1a:58:93:43:f5:a6:f7:31:56:1e:ce:7a:a5:f1: ef:ee:1d:a9:31:3e:03:d6:5a:8e:7a:e2:a4:8a:8e: 44:4b:cb:b8:aa:4f:6c:bd:89:fe:15:f8:a0:65:2d: 5f:b3:bb:bf:d0:ad:4f:79:45:f7:cf:af:91:68:a9: a4:91:05:97:d7:f0:80:6b:b4:f3:de:a4:18:3a:fe: bb:69:44:75:7e:69:56:7b:13:a5:ca:f7:81:ab:73: c8:c0:b6:b5:be:ec:88:a6:d9:af:b1:a8:80:85:4f: 33:cd:48:5c:24:de:a7:d6:6a:ef:64:81:4d:c5:07: 52:3d:86:de:38:14:46:4f:c9:d2:f4:08:1d:13:ec: aa:67:ca:90:41:62:c5:32:29:91:f4:43:80:89:60: 42:3b:c2:f8:c3:20:00:4b:9e:31:8e:b5:de:2b:d0: 81:fa:07:f1:8e:8c:d9:e0:39:79:ef:63:66:ff:22: fe:46:fe:2c:06:3f:6e:f1:6c:fc:aa:61:eb:16:16: af:df:2c:75:ba:0d:88:27:63:d7:0c:39:74:f4:dc: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:EF:A1:01:F2:C8:D1:33:95:2E:8D:BD:9C:92:9E:8C:99:45:72 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fc:5a:a3:1e:cb:ed:9d:98:97:71:73:bd:c3:e5:c4:87:63: 5b:56:d9:6c:54:6b:0b:13:33:e8:48:14:3a:0e:0c:bc:67:b8: 69:c1:76:d7:07:e8:70:8f:ca:54:5f:50:11:94:53:25:44:34: 49:4d:35:c2:c4:2e:30:75:3d:a0:70:fb:97:05:0b:6b:91:a0: ff:81:46:8f:aa:eb:ac:50:c7:fd:f6:4f:57:99:b5:2b:2f:78: 1e:ec:5e:35:3d:b0:a3:40:ff:60:ff:6b:c7:3f:8f:9f:12:af: 14:b9:d0:fe:80:ee:a0:ee:3c:64:a3:00:97:b6:bc:e0:02:b3: 04:21:76:d9:fc:cf:de:2b:6b:62:6e:2d:2a:c5:6a:1f:f3:06: 9b:29:25:7a:7e:e9:a9:53:ce:b6:f2:75:e5:23:b1:2a:f4:2d: 17:92:27:e6:6c:65:0a:8a:2b:5f:3c:00:f1:22:7b:d0:c9:83: 21:46:78:46:82:27:78:c3:23:5d:73:ce:65:93:eb:d9:46:aa: 20:56:a9:67:c7:83:56:1b:09:93:e4:6e:2d:09:3f:d2:5e:83: a5:bf:3c:8e:80:33:1d:5f:08:18:70:1f:92:6e:b1:1e:ed:3e: ed:14:7d:66:e8:29:d1:76:fb:9f:ff:57:68:90:37:a6:3d:ee: e8:b8:04:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0N6ZFKYENzmEeKNXZs1vpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwMzIxMDEwMTQzWhcNMjYwMzIyMDEwMTQzWjAzMTEwLwYDVQQD EygwMTVkZWZhMTAxZjJjOGQxMzM5NTJlOGRiZDljOTI5ZThjOTk0NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRprxdB1qDQX0N3lFeVwYX1kIn4o 9n0nf3gmTvdGmVqGuBIRxovtfXQsXK2MGliTQ/Wm9zFWHs56pfHv7h2pMT4D1lqO euKkio5ES8u4qk9svYn+FfigZS1fs7u/0K1PeUX3z6+RaKmkkQWX1/CAa7Tz3qQY Ov67aUR1fmlWexOlyveBq3PIwLa1vuyIptmvsaiAhU8zzUhcJN6n1mrvZIFNxQdS PYbeOBRGT8nS9AgdE+yqZ8qQQWLFMimR9EOAiWBCO8L4wyAAS54xjrXeK9CB+gfx jozZ4Dl572Nm/yL+Rv4sBj9u8Wz8qmHrFhav3yx1ug2IJ2PXDDl09NzxUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFd76EB8sjRM5Uujb2ckp6MmUVyMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPxaox7L 7Z2Yl3FzvcPlxIdjW1bZbFRrCxMz6EgUOg4MvGe4acF21wfocI/KVF9QEZRTJUQ0 SU01wsQuMHU9oHD7lwULa5Gg/4FGj6rrrFDH/fZPV5m1Ky94HuxeNT2wo0D/YP9r xz+PnxKvFLnQ/oDuoO48ZKMAl7a84AKzBCF22fzP3itrYm4tKsVqH/MGmyklen7p qVPOtvJ15SOxKvQtF5In5mxlCoorXzwA8SJ70MmDIUZ4RoIneMMjXXPOZZPr2Uaq IFapZ8eDVhsJk+RuLQk/0l6Dpb88joAzHV8IGHAfkm6xHu0+7RR9Zugp0Xb7n/9X aJA3pj3u6LgEYQ== -----END CERTIFICATE-----Generated at Sat Mar 21 08:17:56 2026 by rpki-client