$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: +ucBlNjXH9EZRbnrOqFjHxlcAecD2+Nq01aaJYpwm4o= Subject key identifier: D5:9C:8E:E3:81:3B:9C:46:92:B8:11:E1:3D:A6:06:17:F7:3F:43:45 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019CCB63B9B099D20FEF301CD1B2F831F17A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0BB0 Signing time: Sun 08 Mar 2026 03:00:36 +0000 Manifest this update: Sun 08 Mar 2026 03:00:36 +0000 Manifest next update: Mon 09 Mar 2026 03:00:36 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=) 15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: NU2KxPrqbipNApdxbzYbhXgMaNQ4BxoS67JA1B2xVi8=) 16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:cb:63:b9:b0:99:d2:0f:ef:30:1c:d1:b2:f8:31:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Mar 8 03:00:36 2026 GMT Not After : Mar 9 03:00:36 2026 GMT Subject: CN=d59c8ee3813b9c4692b811e13da60617f73f4345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:85:8f:11:dc:21:51:fb:7a:81:4c:f7:87: c1:f3:70:ad:eb:31:ef:2f:8d:cc:b2:0d:5b:fc:aa: c9:2e:c5:5b:cb:fc:6c:97:39:89:07:28:2c:e3:9c: f0:b7:45:bf:ca:10:da:bb:53:eb:b3:be:b6:ac:24: fb:eb:65:61:db:3c:38:93:e2:cf:36:cd:69:09:58: dc:14:7b:6d:20:4b:51:d5:34:0c:2b:1b:78:26:60: 75:a8:13:ab:bc:cd:06:29:ce:b0:55:5d:7e:9b:82: 76:34:2f:61:c7:76:bb:37:92:9d:55:b9:21:41:c7: 32:18:fc:90:d8:e0:77:18:34:c3:38:c4:df:95:79: 24:13:e4:dc:29:05:11:7f:cb:e2:b1:12:50:fa:6d: ad:a1:4c:67:88:32:33:71:99:4e:5f:12:80:5f:f1: b6:dc:d0:38:13:1c:b6:83:16:1a:ed:c9:91:97:bc: 0f:54:de:28:35:0b:bd:9b:01:8f:40:a5:d7:00:89: b3:6d:04:12:ff:6b:d1:b8:c7:78:ef:b7:8e:56:a0: 5b:80:d9:78:83:b2:97:54:2b:13:f4:ae:e4:34:0a: e9:8e:dc:1b:58:dc:b8:42:5e:0a:c0:f7:f7:60:ac: 9a:07:19:a6:b1:7f:2f:25:3e:9c:5e:50:b2:0d:c2: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9C:8E:E3:81:3B:9C:46:92:B8:11:E1:3D:A6:06:17:F7:3F:43:45 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0a:52:f6:de:55:c8:bb:8f:ea:9c:66:b2:a4:a8:24:81:64: e1:6b:2e:c3:a5:5f:b8:45:c9:44:1b:e7:46:d4:48:c8:9f:97: 78:f2:44:cf:cc:7c:92:94:e0:e5:fc:d2:28:da:50:ad:34:66: b4:8f:05:0b:ee:7f:26:9c:66:fe:90:e4:3d:e9:f1:0e:e1:2b: 64:f3:b1:93:80:68:55:84:1c:b4:26:c5:42:03:0c:80:8d:df: 40:52:fb:af:40:b8:3e:b8:d6:2b:38:5d:97:30:0e:38:93:1a: 74:07:2c:c7:59:a8:33:85:f5:a9:81:67:2e:85:e9:f0:38:d4: ec:02:17:49:65:83:dc:24:40:13:f6:54:21:61:b3:81:da:75: 19:6f:33:51:f3:4c:a9:bf:9b:3a:8b:88:de:ca:10:52:c8:da: c5:fe:6e:2b:4e:2d:6e:6d:ef:ce:c0:e7:54:fa:13:c1:85:86: a9:eb:c5:81:1a:9d:44:6e:06:e7:78:88:3a:5e:78:70:93:97: a2:68:14:59:b7:d3:34:6e:a9:9c:f0:c4:26:c2:6d:59:83:59: b2:47:9f:bc:cc:5d:5c:e4:fd:03:fb:29:0f:57:c7:cf:1a:c3: a7:6a:b3:60:6b:66:58:94:9c:35:70:1d:b7:d8:5b:eb:02:e1: 37:92:ec:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzLY7mwmdIP7zAc0bL4MfF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMzA4MDMwMDM2WhcNMjYwMzA5MDMwMDM2WjAzMTEwLwYDVQQD EyhkNTljOGVlMzgxM2I5YzQ2OTJiODExZTEzZGE2MDYxN2Y3M2Y0MzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSqFjxHcIVH7eoFM94fB83Ct6zHv L43Msg1b/KrJLsVby/xslzmJBygs45zwt0W/yhDau1Prs762rCT762Vh2zw4k+LP Ns1pCVjcFHttIEtR1TQMKxt4JmB1qBOrvM0GKc6wVV1+m4J2NC9hx3a7N5KdVbkh QccyGPyQ2OB3GDTDOMTflXkkE+TcKQURf8visRJQ+m2toUxniDIzcZlOXxKAX/G2 3NA4Exy2gxYa7cmRl7wPVN4oNQu9mwGPQKXXAImzbQQS/2vRuMd477eOVqBbgNl4 g7KXVCsT9K7kNArpjtwbWNy4Ql4KwPf3YKyaBxmmsX8vJT6cXlCyDcJ00wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWcjuOBO5xGkrgR4T2mBhf3P0NFMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwpS9t5V yLuP6pxmsqSoJIFk4Wsuw6VfuEXJRBvnRtRIyJ+XePJEz8x8kpTg5fzSKNpQrTRm tI8FC+5/Jpxm/pDkPenxDuErZPOxk4BoVYQctCbFQgMMgI3fQFL7r0C4PrjWKzhd lzAOOJMadAcsx1moM4X1qYFnLoXp8DjU7AIXSWWD3CRAE/ZUIWGzgdp1GW8zUfNM qb+bOouI3soQUsjaxf5uK04tbm3vzsDnVPoTwYWGqevFgRqdRG4G53iIOl54cJOX omgUWbfTNG6pnPDEJsJtWYNZskefvMxdXOT9A/spD1fHzxrDp2qzYGtmWJScNXAd t9hb6wLhN5LsNg== -----END CERTIFICATE-----Generated at Sun Mar 8 08:38:36 2026 by rpki-client