$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: zS+4CJBl0fiI6PiK8LH6ZZzi33lkqXwMykifQLNJhHg= Subject key identifier: FE:D6:5B:D7:A1:C4:D5:9A:B3:F1:98:38:D5:81:11:CB:29:37:AA:3C Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019D38D3D5C33E133A3C02069B802613E3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 18C0 Signing time: Sun 29 Mar 2026 09:01:39 +0000 Manifest this update: Sun 29 Mar 2026 09:01:39 +0000 Manifest next update: Mon 30 Mar 2026 09:01:39 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 6: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 7: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 8: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (hash: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: B6a+gHDeAS1gydN0EQ3Znj36cZE07CkqmhuGUoG2z5I=) 10: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d3:d5:c3:3e:13:3a:3c:02:06:9b:80:26:13:e3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Mar 29 09:01:39 2026 GMT Not After : Mar 30 09:01:39 2026 GMT Subject: CN=fed65bd7a1c4d59ab3f19838d58111cb2937aa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:f3:8c:bb:39:a3:44:80:35:9b:bb:0b:86: 03:26:0b:84:2f:0b:6c:a7:53:59:85:a2:f2:75:d2: 67:7d:87:cd:ff:83:40:4d:f7:7b:9c:19:f8:81:b2: 6b:37:61:cd:a8:ee:83:c3:72:16:0a:b0:ec:53:1e: 39:5c:a4:49:42:19:02:3e:4e:a1:ed:4c:e0:f0:be: 46:68:3f:e7:79:72:ba:f9:ce:16:d1:57:e9:7a:4c: 5c:20:6b:38:89:60:75:e8:96:8b:be:b7:17:be:5f: 91:e5:85:8d:89:e4:d3:56:cb:6f:75:b6:c5:6f:d8: dd:2e:a3:58:06:41:2d:82:64:2b:6f:7d:0f:56:2c: 61:c4:1a:3a:12:69:c5:5e:94:0d:69:68:e8:63:f1: be:aa:41:e4:61:65:61:0e:8e:69:18:38:88:33:28: 46:f8:90:a9:6a:63:bc:72:51:ad:09:6a:af:0d:23: cc:80:52:1a:81:1c:40:b0:92:ee:55:bc:20:f3:a2: 22:8e:98:9a:b6:54:88:63:56:ab:8f:5b:39:de:1f: 48:38:2b:bd:9f:be:ad:8c:e6:44:9a:39:4d:65:07: e6:a9:d4:87:28:52:3f:35:c5:5b:52:b8:7b:11:1a: b2:2e:e3:eb:ab:9b:19:88:d1:ef:f0:e5:4e:f6:5f: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D6:5B:D7:A1:C4:D5:9A:B3:F1:98:38:D5:81:11:CB:29:37:AA:3C X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:af:82:9a:96:c9:0f:88:05:e2:cd:1c:97:d4:cb:3f:bd: 10:79:e6:ad:c0:d4:30:e8:49:3d:08:29:08:43:52:bd:d4:74: 8e:32:37:b7:61:22:6c:9c:6d:61:da:e9:1e:65:1a:f4:c4:6a: 79:e4:eb:7d:62:ad:0a:1f:89:30:7d:c3:ba:9e:b1:00:7a:1f: 6e:b6:9b:e3:f1:20:91:9b:34:ce:2d:f9:91:de:07:58:d7:ea: c1:90:1a:d7:e1:98:5b:71:fe:47:70:a9:22:8f:15:c2:3d:44: f2:a0:08:f1:26:14:71:76:e5:d1:bf:36:b9:70:9c:56:64:c4: a8:02:d5:fb:f8:e9:12:cc:1f:ee:a3:c4:6a:00:83:35:dd:d6: 7f:0d:70:5d:38:ec:13:cf:1f:e2:9c:76:1e:7c:3a:1f:30:d6: 55:80:92:a5:a1:81:3a:0b:a4:63:db:cc:58:49:c8:48:7e:a8: b8:8e:7a:f8:d6:37:e7:7d:07:1e:83:d2:07:87:1d:e9:4c:67: fc:f3:be:b1:d1:69:6f:38:03:d9:47:a5:e6:dc:40:3d:75:f9: 18:a2:29:2b:ab:86:60:04:e5:ba:3d:ba:c6:85:2f:2b:77:68: 27:49:f2:94:93:bf:ea:34:8e:d5:d3:bc:41:1e:4c:cf:ce:d9: 3b:ab:58:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0409XDPhM6PAIGm4AmE+PhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMzI5MDkwMTM5WhcNMjYwMzMwMDkwMTM5WjAzMTEwLwYDVQQD EyhmZWQ2NWJkN2ExYzRkNTlhYjNmMTk4MzhkNTgxMTFjYjI5MzdhYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHDzjLs5o0SANZu7C4YDJguELwts p1NZhaLyddJnfYfN/4NATfd7nBn4gbJrN2HNqO6Dw3IWCrDsUx45XKRJQhkCPk6h 7Uzg8L5GaD/neXK6+c4W0VfpekxcIGs4iWB16JaLvrcXvl+R5YWNieTTVstvdbbF b9jdLqNYBkEtgmQrb30PVixhxBo6EmnFXpQNaWjoY/G+qkHkYWVhDo5pGDiIMyhG +JCpamO8clGtCWqvDSPMgFIagRxAsJLuVbwg86IijpiatlSIY1arj1s53h9IOCu9 n76tjOZEmjlNZQfmqdSHKFI/NcVbUrh7ERqyLuPrq5sZiNHv8OVO9l8++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7WW9ehxNWas/GYONWBEcspN6o8MB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZyvgpqW yQ+IBeLNHJfUyz+9EHnmrcDUMOhJPQgpCENSvdR0jjI3t2EibJxtYdrpHmUa9MRq eeTrfWKtCh+JMH3Dup6xAHofbrab4/EgkZs0zi35kd4HWNfqwZAa1+GYW3H+R3Cp Io8Vwj1E8qAI8SYUcXbl0b82uXCcVmTEqALV+/jpEswf7qPEagCDNd3Wfw1wXTjs E88f4px2Hnw6HzDWVYCSpaGBOgukY9vMWEnISH6ouI56+NY3530HHoPSB4cd6Uxn /PO+sdFpbzgD2Uel5txAPXX5GKIpK6uGYATluj26xoUvK3doJ0nylJO/6jSO1dO8 QR5Mz87ZO6tYMw== -----END CERTIFICATE-----Generated at Sun Mar 29 12:39:54 2026 by rpki-client