$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: sjTQqt38VoDR+pHb8BdREU4bXyscNbiebLzlb+BjC8k= Subject key identifier: 77:D7:29:5B:3E:92:40:71:AB:2B:B5:8E:51:1E:F7:2E:59:19:9E:47 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D0DB219C3EA634DA69E74E3FD082DD7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 119B Signing time: Sat 21 Mar 2026 00:01:08 +0000 Manifest this update: Sat 21 Mar 2026 00:01:08 +0000 Manifest next update: Sun 22 Mar 2026 00:01:08 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: DgoF33ugI7uB7Cu6o/ipX+Rqx3+b1oVu7L6kR6K8MX4=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:b2:19:c3:ea:63:4d:a6:9e:74:e3:fd:08:2d:d7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 21 00:01:08 2026 GMT Not After : Mar 22 00:01:08 2026 GMT Subject: CN=77d7295b3e924071ab2bb58e511ef72e59199e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:02:47:02:8c:1f:c2:31:53:ee:e3:61:38: a4:1f:60:f4:60:35:e9:17:01:39:a3:5c:5b:fe:0a: fe:cf:0a:09:9a:9c:30:dc:32:39:47:2c:c9:ff:58: 25:16:d9:a0:4f:ff:42:19:65:c0:15:56:05:67:e4: 9a:47:c4:df:23:5b:fe:b0:08:b8:fd:16:82:48:c8: 82:aa:22:e9:0a:42:5f:2b:76:30:2a:31:2c:f4:00: 96:95:fb:bd:27:e7:fc:c8:67:b4:73:4f:74:80:59: ba:96:a0:cc:67:e9:f0:b0:96:c0:46:c3:45:1f:61: 12:6c:7d:4e:2d:e4:e3:79:f9:bc:3e:2b:03:a1:ef: af:b3:a6:55:24:9a:b5:76:88:17:71:96:9d:72:fd: 9a:1a:ff:18:fb:d5:4b:93:b5:fb:4a:97:77:24:0e: c5:54:98:15:5f:2e:e6:a9:43:1a:37:8f:7d:24:76: 14:82:66:90:9f:a1:e8:7e:59:be:2d:12:44:38:13: 5f:d1:48:0f:9e:c0:5c:cb:33:5f:ed:b9:65:0c:1c: 31:49:d7:c1:c6:03:c8:74:8a:39:e9:fa:c7:c0:6c: c0:b0:2a:e8:2a:a0:d3:b1:4e:e4:b7:82:98:84:a1: c1:56:66:b9:4e:75:00:1a:06:96:04:76:9f:e2:dc: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D7:29:5B:3E:92:40:71:AB:2B:B5:8E:51:1E:F7:2E:59:19:9E:47 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:01:3a:5a:d4:83:a6:f9:2f:3f:03:05:01:85:fb:ea:9c:9f: 95:3a:ed:5e:11:5b:03:36:a6:f9:be:58:fd:ef:20:3c:af:26: 74:e1:10:bb:7a:60:6c:60:90:06:60:df:37:dc:97:45:42:b0: 9a:a5:53:7f:79:2e:4d:17:84:c9:b5:e9:a6:77:0f:44:c1:04: 27:0c:b1:af:37:63:ab:8d:6f:79:70:9f:c9:2c:9b:92:c5:70: dd:64:6d:95:93:f4:dd:95:54:53:db:8d:8d:0b:da:1a:d4:72: 48:ae:93:e4:50:5d:e7:33:14:94:b6:4b:e2:41:64:c8:e9:23: cd:62:41:28:d8:53:8d:10:4a:06:e5:42:8d:60:09:71:f2:a4: 82:04:08:a2:c9:79:99:99:28:d4:86:45:52:46:99:f4:1b:89: b8:70:bb:f6:6c:46:a7:43:e0:2e:70:bc:bd:30:9a:05:75:31: 0d:69:27:59:92:7c:70:e1:07:48:e3:f3:a0:0b:20:13:3e:47: b4:72:ad:48:04:91:0a:a7:be:9f:1e:4d:e0:bd:12:36:aa:8d: 54:16:5d:a5:0d:eb:ca:c2:6b:f8:f6:24:89:90:c6:67:ba:07: b9:7c:8e:8a:61:da:24:bd:62:7d:bc:a3:81:6a:23:ca:eb:71: f7:52:a2:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0NshnD6mNNpp504/0ILdfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzIxMDAwMTA4WhcNMjYwMzIyMDAwMTA4WjAzMTEwLwYDVQQD Eyg3N2Q3Mjk1YjNlOTI0MDcxYWIyYmI1OGU1MTFlZjcyZTU5MTk5ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva8CRwKMH8IxU+7jYTikH2D0YDXp FwE5o1xb/gr+zwoJmpww3DI5RyzJ/1glFtmgT/9CGWXAFVYFZ+SaR8TfI1v+sAi4 /RaCSMiCqiLpCkJfK3YwKjEs9ACWlfu9J+f8yGe0c090gFm6lqDMZ+nwsJbARsNF H2ESbH1OLeTjefm8PisDoe+vs6ZVJJq1dogXcZadcv2aGv8Y+9VLk7X7Spd3JA7F VJgVXy7mqUMaN499JHYUgmaQn6Hoflm+LRJEOBNf0UgPnsBcyzNf7bllDBwxSdfB xgPIdIo56frHwGzAsCroKqDTsU7kt4KYhKHBVma5TnUAGgaWBHaf4tzD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfXKVs+kkBxqyu1jlEe9y5ZGZ5HMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQE6WtSD pvkvPwMFAYX76pyflTrtXhFbAzam+b5Y/e8gPK8mdOEQu3pgbGCQBmDfN9yXRUKw mqVTf3kuTReEybXppncPRMEEJwyxrzdjq41veXCfySybksVw3WRtlZP03ZVUU9uN jQvaGtRySK6T5FBd5zMUlLZL4kFkyOkjzWJBKNhTjRBKBuVCjWAJcfKkggQIosl5 mZko1IZFUkaZ9BuJuHC79mxGp0PgLnC8vTCaBXUxDWknWZJ8cOEHSOPzoAsgEz5H tHKtSASRCqe+nx5N4L0SNqqNVBZdpQ3rysJr+PYkiZDGZ7oHuXyOimHaJL1ifbyj gWojyutx91KijQ== -----END CERTIFICATE-----Generated at Sat Mar 21 03:43:27 2026 by rpki-client