$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: IRexLEMZvbIQM6u5+I3PGkaG2WwzfRjp/gm+UgcjNa8= Subject key identifier: B5:F7:EC:81:97:35:02:C8:B6:28:2E:B0:D7:9C:AD:7B:54:04:4C:46 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019D32634AE4FFB7E8C1C09F39C6BBA339CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1890 Signing time: Sat 28 Mar 2026 03:01:01 +0000 Manifest this update: Sat 28 Mar 2026 03:01:01 +0000 Manifest next update: Sun 29 Mar 2026 03:01:01 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: voiE4zFfXBs/J/7QfFJeT8ZttU9OA4xh+uMReOuLX2s=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:63:4a:e4:ff:b7:e8:c1:c0:9f:39:c6:bb:a3:39:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Mar 28 03:01:01 2026 GMT Not After : Mar 29 03:01:01 2026 GMT Subject: CN=b5f7ec81973502c8b6282eb0d79cad7b54044c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:d6:f6:3e:ad:f4:b5:46:1c:28:37:82:1f: 12:c2:6e:3a:23:3e:63:63:e4:74:7e:30:69:80:c5: 9c:9e:86:81:4f:bd:05:c9:5f:b4:fc:67:0e:3d:db: 2d:9b:ee:fa:53:8d:71:d5:7c:68:ab:69:d3:6c:aa: a5:67:c5:49:79:22:a9:c1:18:35:04:8b:1e:56:d7: 49:88:5a:a9:7d:b0:8a:b6:a1:c8:15:c8:dd:33:2f: f8:f6:ee:0c:dc:31:43:19:47:ec:18:3f:27:48:dd: 49:21:67:22:39:02:2f:80:8c:f2:c0:af:2c:c5:bd: 13:7e:a5:d5:ad:79:2a:c3:b4:18:2c:00:17:1b:63: 52:d9:7a:c3:11:d0:76:2d:86:d4:92:ee:7a:f5:7e: 7a:b1:36:1d:11:38:f0:53:c7:60:c6:98:dc:94:62: 65:28:1e:a0:d9:f7:c7:96:64:d6:13:62:3b:5c:c8: 19:17:04:c1:db:32:97:10:de:86:a7:5f:5e:48:a4: ca:d6:e2:cb:77:38:ea:28:f6:aa:de:49:2e:2e:57: 37:c6:59:70:98:21:dc:b0:d8:c8:f8:76:e4:0a:c8: 94:5e:2b:f0:08:63:c4:ec:80:be:c3:5d:b8:f4:81: 92:17:b8:26:44:60:d1:81:21:06:f9:fe:29:4f:20: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F7:EC:81:97:35:02:C8:B6:28:2E:B0:D7:9C:AD:7B:54:04:4C:46 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fb:6b:13:71:fa:c0:58:bf:ad:32:c1:7c:f3:37:c6:45:f9: 6c:0c:3b:de:41:d8:38:48:8a:15:ff:60:b6:fb:39:99:07:52: 1a:54:2c:a0:c9:46:34:64:41:d6:0f:f9:c4:8a:9f:65:e8:18: 93:c6:ad:19:3e:23:7a:4c:c2:49:e3:fb:54:87:40:1e:ee:e7: eb:80:f2:f4:3b:6b:f9:0d:38:44:48:b7:6c:e3:77:4b:13:ca: c5:af:5e:4d:df:3a:55:93:b4:d2:69:3e:c4:87:b5:af:47:39: ac:00:07:e2:55:a7:ad:f8:25:61:94:d7:4c:7e:77:9b:04:5f: b9:95:52:c3:e8:8c:0b:72:4d:b7:e4:5c:b2:76:56:e4:a1:0c: 80:7a:62:f5:ff:e6:0f:c4:e2:c2:01:a1:36:52:bf:58:44:c7: 41:8a:1d:5a:66:75:4b:68:62:4c:3e:5b:f2:c5:c0:d8:b9:66: 6f:64:d7:79:29:72:18:bf:11:89:99:e4:a0:cc:00:24:d7:88: 81:cb:bf:c5:6e:b7:21:43:6a:c6:7f:db:d6:79:ac:c7:be:ee: 33:f1:ff:45:03:d1:92:9b:73:07:2f:ba:0e:67:00:f3:e4:f7: 99:be:b3:9c:ea:d8:3e:48:62:4e:f0:55:c0:22:a1:7e:f1:75: 95:68:85:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0yY0rk/7fowcCfOca7oznKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMzI4MDMwMTAxWhcNMjYwMzI5MDMwMTAxWjAzMTEwLwYDVQQD EyhiNWY3ZWM4MTk3MzUwMmM4YjYyODJlYjBkNzljYWQ3YjU0MDQ0YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3W9j6t9LVGHCg3gh8Swm46Iz5j Y+R0fjBpgMWcnoaBT70FyV+0/GcOPdstm+76U41x1Xxoq2nTbKqlZ8VJeSKpwRg1 BIseVtdJiFqpfbCKtqHIFcjdMy/49u4M3DFDGUfsGD8nSN1JIWciOQIvgIzywK8s xb0TfqXVrXkqw7QYLAAXG2NS2XrDEdB2LYbUku569X56sTYdETjwU8dgxpjclGJl KB6g2ffHlmTWE2I7XMgZFwTB2zKXEN6Gp19eSKTK1uLLdzjqKPaq3kkuLlc3xllw mCHcsNjI+HbkCsiUXivwCGPE7IC+w1249IGSF7gmRGDRgSEG+f4pTyDBkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX37IGXNQLItigusNecrXtUBExGMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvtrE3H6 wFi/rTLBfPM3xkX5bAw73kHYOEiKFf9gtvs5mQdSGlQsoMlGNGRB1g/5xIqfZegY k8atGT4jekzCSeP7VIdAHu7n64Dy9Dtr+Q04REi3bON3SxPKxa9eTd86VZO00mk+ xIe1r0c5rAAH4lWnrfglYZTXTH53mwRfuZVSw+iMC3JNt+RcsnZW5KEMgHpi9f/m D8TiwgGhNlK/WETHQYodWmZ1S2hiTD5b8sXA2Llmb2TXeSlyGL8RiZnkoMwAJNeI gcu/xW63IUNqxn/b1nmsx77uM/H/RQPRkptzBy+6DmcA8+T3mb6znOrYPkhiTvBV wCKhfvF1lWiFJQ== -----END CERTIFICATE-----Generated at Sat Mar 28 04:49:51 2026 by rpki-client