$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: 7IluAYQhr8hWqV0PmT9nhp0Nlo7YBwPOo4IyxEjzasM= Subject key identifier: 39:4A:53:5C:C3:68:65:3E:BD:4F:01:42:50:C1:AE:FF:52:93:AB:DD Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019D315099AB25108B201CC4CF8858D06D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 1088 Signing time: Fri 27 Mar 2026 22:00:58 +0000 Manifest this update: Fri 27 Mar 2026 22:00:58 +0000 Manifest next update: Sat 28 Mar 2026 22:00:58 +0000 Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=) 2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=) 3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=) 4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=) 5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: 1T9uOu+TsC7UgSzzS7dOUWweTYYya6esRCyAKvRe3Qs=) 6: VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa (hash: oJkOn3Ta/qcPYaOJNNPCoBCLyVWoWrgC98ecap5l1lY=) 7: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=) 8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=) 9: jwno-855Ovj1-3M5zUJzR6aIImg.roa (hash: v10OVfxKZFL1KckYWItkzie2JuQkYgbQ7uuTgDSLZ4I=) 10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:50:99:ab:25:10:8b:20:1c:c4:cf:88:58:d0:6d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Mar 27 22:00:58 2026 GMT Not After : Mar 28 22:00:58 2026 GMT Subject: CN=394a535cc368653ebd4f014250c1aeff5293abdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:0a:67:3d:d1:ea:88:97:4c:46:7d:17:bf: 7a:3b:71:64:f9:a8:ad:ab:bd:91:5e:6b:29:fb:25: a4:46:e1:42:e6:17:95:17:e4:e2:f0:24:4a:29:51: a2:9c:3a:55:3a:cf:36:20:1b:ee:f8:fa:c6:23:fc: bb:75:9b:d3:83:ea:7a:29:4e:b3:0c:48:88:d3:e4: d6:39:dc:9f:ed:3d:81:e1:7c:98:fe:d0:6b:7c:12: 24:c5:ed:7a:1f:bc:7f:5f:b7:7e:6b:5b:25:3b:44: 6e:5a:a7:10:1b:bf:21:8b:06:73:a8:28:4b:b0:2a: 65:62:eb:b3:b2:4d:17:d6:16:40:fa:9b:73:64:68: 7e:84:d2:2c:17:12:d9:67:56:e2:d2:f2:61:e9:93: c3:4a:d4:a8:03:7c:5c:fd:12:6f:30:6a:73:8a:ea: fc:f6:a8:02:fd:55:eb:a9:4d:4f:35:3e:54:61:99: b8:04:4c:d8:e1:80:35:90:38:3b:b8:79:c2:b6:1d: 56:7a:3e:a7:4f:24:7e:a3:ed:b5:c2:69:d4:a5:7a: b1:af:fd:7a:f6:cb:cc:e7:e2:df:0c:29:fa:62:a2: eb:85:1e:fd:7c:b7:90:8a:f9:6b:e5:1a:81:d0:a6: 50:80:a1:88:c0:55:08:2e:32:8b:27:8b:7d:0e:9c: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:53:5C:C3:68:65:3E:BD:4F:01:42:50:C1:AE:FF:52:93:AB:DD X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d1:74:23:f1:ba:ff:9e:c0:f1:fe:ea:d2:21:bd:8c:3e:b2: 76:75:9a:c4:36:c4:e2:3a:57:e4:ca:b1:f7:9a:a9:51:6a:55: 56:a6:fc:29:0d:57:9e:83:6b:bd:f5:f8:20:00:1d:e2:e5:b9: ef:57:65:59:f1:95:ea:57:ec:31:0b:3a:7b:7e:81:53:c7:15: f9:54:dc:11:0d:47:50:f3:aa:bf:97:c4:06:76:69:1a:6b:03: ce:ee:03:57:76:f0:4a:b7:63:ca:7b:a9:2b:b8:4a:8f:29:77: db:e1:3a:a1:1d:00:19:95:de:c5:09:26:5d:54:99:58:e7:33: 5d:69:d8:a6:dd:ff:5e:69:bc:da:09:4f:51:bd:e9:27:10:41: 41:bd:5a:53:fa:9e:81:5e:d7:22:ae:4f:84:1f:73:cc:d5:f1: ed:7d:a3:29:cd:f6:06:73:d1:66:e8:df:c5:c8:72:00:88:02: cb:b6:08:0f:a8:19:5b:8a:17:f1:48:25:1b:23:18:dd:17:ff: 98:ce:b4:2f:8b:04:62:62:56:62:a3:d3:b0:5c:23:f3:15:84: d2:b9:5a:bd:2a:29:78:53:ff:a0:67:cc:3a:f5:c1:fb:16:52: 74:53:a3:b6:f6:c7:60:da:f9:72:3d:62:45:5f:8e:f2:26:ca: 1e:0d:b3:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xUJmrJRCLIBzEz4hY0G2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwMzI3MjIwMDU4WhcNMjYwMzI4MjIwMDU4WjAzMTEwLwYDVQQD EygzOTRhNTM1Y2MzNjg2NTNlYmQ0ZjAxNDI1MGMxYWVmZjUyOTNhYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd4KZz3R6oiXTEZ9F796O3Fk+ait q72RXmsp+yWkRuFC5heVF+Ti8CRKKVGinDpVOs82IBvu+PrGI/y7dZvTg+p6KU6z DEiI0+TWOdyf7T2B4XyY/tBrfBIkxe16H7x/X7d+a1slO0RuWqcQG78hiwZzqChL sCplYuuzsk0X1hZA+ptzZGh+hNIsFxLZZ1bi0vJh6ZPDStSoA3xc/RJvMGpziur8 9qgC/VXrqU1PNT5UYZm4BEzY4YA1kDg7uHnCth1Wej6nTyR+o+21wmnUpXqxr/16 9svM5+LfDCn6YqLrhR79fLeQivlr5RqB0KZQgKGIwFUILjKLJ4t9Dpw2owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlKU1zDaGU+vU8BQlDBrv9Sk6vdMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNF0I/G6 /57A8f7q0iG9jD6ydnWaxDbE4jpX5Mqx95qpUWpVVqb8KQ1XnoNrvfX4IAAd4uW5 71dlWfGV6lfsMQs6e36BU8cV+VTcEQ1HUPOqv5fEBnZpGmsDzu4DV3bwSrdjynup K7hKjyl32+E6oR0AGZXexQkmXVSZWOczXWnYpt3/Xmm82glPUb3pJxBBQb1aU/qe gV7XIq5PhB9zzNXx7X2jKc32BnPRZujfxchyAIgCy7YID6gZW4oX8UglGyMY3Rf/ mM60L4sEYmJWYqPTsFwj8xWE0rlavSopeFP/oGfMOvXB+xZSdFOjtvbHYNr5cj1i RV+O8ibKHg2z3A== -----END CERTIFICATE-----Generated at Sat Mar 28 05:38:50 2026 by rpki-client