$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: XlKBRedzDuKgy6k65v6MeaIGsMlNfm5urc201q/U8Zc= Subject key identifier: E8:26:9F:FE:F2:2E:F2:A6:A9:59:80:B2:4C:71:19:76:98:8A:19:40 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019D10E9E5CB19E649EB5B061E9F3F4398A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 189A Signing time: Sat 21 Mar 2026 15:00:56 +0000 Manifest this update: Sat 21 Mar 2026 15:00:56 +0000 Manifest next update: Sun 22 Mar 2026 15:00:56 +0000 Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=) 2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=) 3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=) 4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=) 5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=) 6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=) 7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=) 8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=) 9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=) 10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=) 11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=) 12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=) 13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: dUK2ZAmTsGka90Eiyd1UPhKE/4swRmJuQHf6IhNECHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:10:e9:e5:cb:19:e6:49:eb:5b:06:1e:9f:3f:43:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Mar 21 15:00:56 2026 GMT Not After : Mar 22 15:00:56 2026 GMT Subject: CN=e8269ffef22ef2a6a95980b24c711976988a1940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:b7:00:b0:9b:e0:db:62:13:71:98:07:28: d7:b6:46:40:bb:ea:c9:60:e8:2b:d4:a1:9e:0c:53: 73:24:b0:0b:b7:ff:31:2e:86:e1:c7:b6:62:16:21: dd:ca:c0:f4:a9:df:25:fa:9a:a2:36:36:71:0f:e5: 2a:be:3b:03:d9:e1:06:25:a7:fe:66:0e:95:c9:80: 92:92:be:29:9c:97:d5:a3:0c:e7:4f:50:26:8c:49: 8d:4b:dc:4f:ea:f4:93:49:50:f3:d3:ee:31:56:9d: ab:e9:ed:a6:5c:c6:b6:bd:38:c7:b6:21:64:c1:cc: cf:54:d8:75:f5:de:61:7a:45:70:16:bd:3b:17:58: b8:e1:27:74:69:be:50:59:9a:97:f3:aa:ba:ef:6f: 72:e5:87:cf:77:88:1a:d8:ac:23:f3:12:5d:25:84: 74:bc:73:e0:9e:07:8d:72:c2:46:09:65:f3:3e:36: 18:d4:ab:25:73:5f:32:81:79:46:78:a5:fc:27:ac: 71:3f:b0:c7:f0:b9:62:e0:1d:ab:a7:18:04:04:8e: eb:9a:3c:86:03:cc:ad:52:fe:bf:2c:cd:ea:43:55: 3e:0f:aa:53:b4:d7:d4:75:0c:02:a3:88:19:51:98: 07:d8:b1:8d:8d:71:7c:86:2b:d1:a7:8a:dd:4a:ee: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:26:9F:FE:F2:2E:F2:A6:A9:59:80:B2:4C:71:19:76:98:8A:19:40 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a5:84:57:f6:c8:05:56:a0:bf:b0:12:e5:12:01:07:60:be: 61:43:17:c7:98:0a:77:af:09:d1:36:0e:56:1c:dd:0b:2a:d1: b9:18:28:72:eb:8b:ae:73:ab:88:46:53:65:d0:0b:ab:5e:ca: 59:0e:9a:11:ae:b7:8d:5b:62:7d:c5:35:16:6f:74:ba:27:0b: 6c:99:b2:81:93:25:65:e0:5e:bb:85:51:a2:ab:be:d7:4f:18: 3c:8c:46:5e:c5:b4:d6:d7:ee:35:ea:16:c8:27:06:98:e1:84: c9:5d:ed:f3:79:30:fb:be:16:8a:7c:96:71:94:8e:0e:f4:e6: b7:24:7c:16:ea:36:7c:82:e9:14:db:85:4f:ef:cb:18:76:dc: e6:b3:b8:db:16:bd:5c:34:9b:e4:18:32:75:b4:ba:09:05:bc: 95:4e:f0:29:0a:1d:e9:9d:c1:35:80:44:7f:85:86:63:27:da: 4b:92:7a:8c:8a:7a:21:44:58:09:db:15:41:6c:17:9f:e8:8f: 85:6b:98:26:59:ea:6c:43:3c:04:99:d6:a3:9d:76:7e:cf:ec: 8f:23:33:22:89:b3:5e:34:82:45:a4:27:eb:7c:b2:85:c5:d5: 20:41:bb:8d:19:ad:62:43:ef:ba:26:40:00:71:28:74:e7:9e: 1f:98:df:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0Q6eXLGeZJ61sGHp8/Q5inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMzIxMTUwMDU2WhcNMjYwMzIyMTUwMDU2WjAzMTEwLwYDVQQD EyhlODI2OWZmZWYyMmVmMmE2YTk1OTgwYjI0YzcxMTk3Njk4OGExOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++3ALCb4NtiE3GYByjXtkZAu+rJ YOgr1KGeDFNzJLALt/8xLobhx7ZiFiHdysD0qd8l+pqiNjZxD+UqvjsD2eEGJaf+ Zg6VyYCSkr4pnJfVowznT1AmjEmNS9xP6vSTSVDz0+4xVp2r6e2mXMa2vTjHtiFk wczPVNh19d5hekVwFr07F1i44Sd0ab5QWZqX86q6729y5YfPd4ga2Kwj8xJdJYR0 vHPgngeNcsJGCWXzPjYY1Kslc18ygXlGeKX8J6xxP7DH8Lli4B2rpxgEBI7rmjyG A8ytUv6/LM3qQ1U+D6pTtNfUdQwCo4gZUZgH2LGNjXF8hivRp4rdSu4bYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgmn/7yLvKmqVmAskxxGXaYihlAMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKWEV/bI BVagv7AS5RIBB2C+YUMXx5gKd68J0TYOVhzdCyrRuRgocuuLrnOriEZTZdALq17K WQ6aEa63jVtifcU1Fm90uicLbJmygZMlZeBeu4VRoqu+108YPIxGXsW01tfuNeoW yCcGmOGEyV3t83kw+74WinyWcZSODvTmtyR8Fuo2fILpFNuFT+/LGHbc5rO42xa9 XDSb5BgydbS6CQW8lU7wKQod6Z3BNYBEf4WGYyfaS5J6jIp6IURYCdsVQWwXn+iP hWuYJlnqbEM8BJnWo512fs/sjyMzIomzXjSCRaQn63yyhcXVIEG7jRmtYkPvuiZA AHEodOeeH5jfkw== -----END CERTIFICATE-----Generated at Sat Mar 21 20:02:47 2026 by rpki-client