$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: GAVWCxSwG6zMPlgSR5Eibb/iMybpzVVUbZbfkjMIMfw= Subject key identifier: D1:E8:45:55:8E:AC:25:59:57:D3:2E:5C:2B:EE:D4:C7:DD:03:A2:E4 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019CEAEF5BE875013CCD4DC6C93AC8F67986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1189 Signing time: Sat 14 Mar 2026 06:01:20 +0000 Manifest this update: Sat 14 Mar 2026 06:01:20 +0000 Manifest next update: Sun 15 Mar 2026 06:01:20 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: dRbxZqi8Zp/bke9VZa0WtQ/cJ7TttTexxtLo4iXC2+U=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ea:ef:5b:e8:75:01:3c:cd:4d:c6:c9:3a:c8:f6:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 14 06:01:20 2026 GMT Not After : Mar 15 06:01:20 2026 GMT Subject: CN=d1e845558eac255957d32e5c2beed4c7dd03a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:84:c0:f0:14:d1:39:a8:d9:76:ed:af:94: 70:9f:f4:5b:f6:d8:33:f9:a7:36:42:2a:15:06:57: 39:56:8c:51:91:ab:bc:71:08:cd:4d:cd:b6:b8:ab: aa:08:14:e9:d3:fd:65:8a:a4:9d:34:e9:64:8e:76: 28:74:90:e5:95:db:d9:03:e2:f4:55:d5:b3:2e:e7: 8c:39:25:7f:ca:51:dc:19:35:8c:2d:df:40:f1:d6: 2d:f4:5f:71:65:1c:91:17:6a:d6:e4:98:86:c3:83: 21:0d:ef:6e:c3:f0:1d:bd:26:bf:25:35:58:65:e1: 8a:25:62:35:3f:24:c0:03:2a:a8:49:20:40:22:5d: d5:e3:eb:d6:69:9b:b4:da:f6:ec:3b:f8:88:65:84: 31:47:d7:66:e4:94:ea:cd:f9:ce:11:e2:89:1d:77: f4:3b:82:af:b5:39:ee:af:52:58:57:db:0b:ff:9e: 08:57:b9:80:5f:1e:ee:01:d7:c8:05:ab:1f:77:60: 36:aa:b3:02:c7:2b:6c:20:5e:67:d0:08:92:59:b2: 27:64:66:5e:d5:3d:aa:09:09:e3:d6:27:36:59:fa: 7d:ed:cd:fa:29:44:9f:cb:4e:44:50:b0:06:3e:a5: c3:28:98:4f:c7:43:f9:32:83:a1:f1:0e:1a:ec:17: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E8:45:55:8E:AC:25:59:57:D3:2E:5C:2B:EE:D4:C7:DD:03:A2:E4 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:45:f7:fd:e5:e2:df:04:8a:d7:52:ad:85:7e:42:8b:76:9b: a3:21:cf:3c:3d:a2:e9:14:17:af:e4:52:39:3a:a2:0a:e5:90: 16:ff:4c:84:a0:50:5f:99:10:55:c7:88:65:9e:45:18:0a:d7: c3:e5:7a:11:65:63:a7:80:15:ff:90:25:b5:24:0f:da:da:a3: dc:63:18:ed:f7:80:c1:e4:1b:b7:b5:84:2b:29:7a:bf:86:43: 42:ba:3d:6c:28:39:13:85:4e:3c:75:c0:30:41:48:bd:74:f6: 38:9d:cf:e8:81:9d:93:60:01:d9:5f:f6:cc:72:10:ca:de:77: d3:56:eb:7b:54:f0:ef:4d:38:fa:5e:b6:26:e5:5c:1b:99:7c: c6:9e:2d:b5:59:be:af:9e:c4:0a:5c:98:da:bc:b3:f7:41:a8: 2e:32:a6:b0:ba:55:5c:f7:96:d8:85:70:b9:f4:bc:75:ff:6a: 9e:43:fc:f2:4a:7a:99:80:8f:23:85:e6:20:c1:e5:fb:c3:f4: 67:4e:bf:1d:63:41:02:01:1e:d2:e5:bf:eb:b4:65:11:48:71: ad:3c:30:4a:79:0f:6e:f1:1a:46:d4:ed:56:a7:fd:35:c4:4a: 58:6a:d5:30:c1:31:b5:bb:ff:8f:17:f2:23:5e:f1:a9:65:7b: 01:e4:85:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzq71vodQE8zU3GyTrI9nmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzE0MDYwMTIwWhcNMjYwMzE1MDYwMTIwWjAzMTEwLwYDVQQD EyhkMWU4NDU1NThlYWMyNTU5NTdkMzJlNWMyYmVlZDRjN2RkMDNhMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPWEwPAU0Tmo2Xbtr5Rwn/Rb9tgz +ac2QioVBlc5VoxRkau8cQjNTc22uKuqCBTp0/1liqSdNOlkjnYodJDlldvZA+L0 VdWzLueMOSV/ylHcGTWMLd9A8dYt9F9xZRyRF2rW5JiGw4MhDe9uw/AdvSa/JTVY ZeGKJWI1PyTAAyqoSSBAIl3V4+vWaZu02vbsO/iIZYQxR9dm5JTqzfnOEeKJHXf0 O4KvtTnur1JYV9sL/54IV7mAXx7uAdfIBasfd2A2qrMCxytsIF5n0AiSWbInZGZe 1T2qCQnj1ic2Wfp97c36KUSfy05EULAGPqXDKJhPx0P5MoOh8Q4a7BfpzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHoRVWOrCVZV9MuXCvu1MfdA6LkMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0X3/eXi 3wSK11KthX5Ci3aboyHPPD2i6RQXr+RSOTqiCuWQFv9MhKBQX5kQVceIZZ5FGArX w+V6EWVjp4AV/5AltSQP2tqj3GMY7feAweQbt7WEKyl6v4ZDQro9bCg5E4VOPHXA MEFIvXT2OJ3P6IGdk2AB2V/2zHIQyt5301bre1Tw7004+l62JuVcG5l8xp4ttVm+ r57EClyY2ryz90GoLjKmsLpVXPeW2IVwufS8df9qnkP88kp6mYCPI4XmIMHl+8P0 Z06/HWNBAgEe0uW/67RlEUhxrTwwSnkPbvEaRtTtVqf9NcRKWGrVMMExtbv/jxfy I17xqWV7AeSF9g== -----END CERTIFICATE-----Generated at Sat Mar 14 15:05:30 2026 by rpki-client