$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: LnqF4+OMBlKhF5x3Gi3Yb1qJihCdpu2B83e/OcNy7No= Subject key identifier: 58:F6:5D:4D:54:95:75:C7:F6:0B:08:F9:BA:2D:22:49:0E:2F:35:B0 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019CE824D4EA5A0338B924C9F915B7E6E2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 189C Signing time: Fri 13 Mar 2026 17:00:53 +0000 Manifest this update: Fri 13 Mar 2026 17:00:53 +0000 Manifest next update: Sat 14 Mar 2026 17:00:53 +0000 Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=) 2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=) 3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: gGbioD+MQcxrLnmGkaQEeOmAuxAURQr0gYN6yaX9WlQ=) 5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=) 6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=) 7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=) 8: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=) 9: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=) 10: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=) 11: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (hash: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0=) 12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=) 13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=) 14: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=) 15: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=) 16: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e8:24:d4:ea:5a:03:38:b9:24:c9:f9:15:b7:e6:e2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Mar 13 17:00:53 2026 GMT Not After : Mar 14 17:00:53 2026 GMT Subject: CN=58f65d4d549575c7f60b08f9ba2d22490e2f35b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:13:c1:71:f2:62:a1:9f:34:e6:1f:ed:3a: 83:b4:6c:a4:a4:f6:2e:7c:35:97:a8:c6:db:0c:a0: d2:d1:21:3c:d4:4c:23:2b:44:6b:65:a5:9b:38:eb: 34:f4:fc:3d:6c:36:d1:57:3a:fa:f7:9f:4a:e1:c6: 31:03:20:43:8b:6d:7d:8c:1c:5f:d2:d3:52:48:10: aa:db:f9:13:a6:6e:f7:42:74:27:fc:d2:0b:aa:d4: d3:fe:8c:ba:10:20:85:b5:28:ec:52:9d:2d:bb:27: e5:cb:28:bf:0f:ce:6f:35:55:0c:61:3a:04:a8:27: ec:bd:15:f0:d8:9d:ac:b0:5d:4a:fb:7d:c5:3d:40: b5:92:ea:d3:d2:10:42:e5:55:c3:db:c1:4e:9a:35: ac:3e:ec:c8:10:6a:de:14:d6:fc:4a:a8:4d:52:d9: 8b:8e:49:b0:c1:92:3a:9c:d2:5f:a4:07:61:15:24: e6:3c:c3:0c:41:1c:f8:6a:a5:73:99:3b:b0:3c:57: 21:10:13:a6:07:c9:47:5a:4e:83:ca:ba:e9:a7:38: c5:dd:fb:97:c7:bd:32:43:5f:cb:21:c9:85:e5:fe: 91:4c:ca:f0:e2:86:f0:a7:2f:84:75:12:03:09:85: 9f:20:ba:ea:2b:e8:6c:80:8e:b5:53:74:91:bf:d8: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:5D:4D:54:95:75:C7:F6:0B:08:F9:BA:2D:22:49:0E:2F:35:B0 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:25:72:02:31:43:5b:fd:54:1c:25:ec:38:79:e4:be:b3:6b: 90:b3:3b:4a:87:de:8b:9b:3c:2f:15:a9:8d:5d:0f:81:71:50: 33:25:44:02:b6:63:8c:ca:8e:12:b3:7d:fb:f9:0d:74:2f:81: 53:b0:6d:ba:80:96:00:8b:8a:87:33:33:02:f7:35:9f:6e:bd: 0a:c9:a4:58:54:0c:07:db:b6:bd:cc:5d:b9:cf:b6:5c:fc:06: a8:33:5b:24:ef:52:bf:2e:da:b1:d0:63:0c:bc:5a:79:14:f9: bc:7a:57:17:a9:7c:c0:38:04:de:c3:5c:92:f4:5e:5f:c1:2f: da:1d:48:ff:99:f0:50:75:f3:c2:96:55:ac:f0:90:58:1c:02: 39:1a:e1:af:7f:3c:8c:35:29:ff:85:e1:dd:86:ba:94:93:42: ba:68:c8:92:6a:56:18:04:96:4b:8b:b2:a1:0b:ea:90:ef:93: 6d:ae:21:e8:d4:a8:a6:e6:09:e8:1a:5a:c8:ff:e1:36:49:51: 53:14:6d:0d:8f:cb:ac:03:4b:8b:40:22:ff:c2:5c:66:41:d4: e7:43:73:0b:88:65:1f:b4:04:cb:f2:8e:10:5c:1c:10:2a:72: bd:e7:8b:a1:4c:b7:2a:6b:70:2f:db:a6:ef:a9:b8:ec:fe:8c: 42:6d:1c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzoJNTqWgM4uSTJ+RW35uLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMzEzMTcwMDUzWhcNMjYwMzE0MTcwMDUzWjAzMTEwLwYDVQQD Eyg1OGY2NWQ0ZDU0OTU3NWM3ZjYwYjA4ZjliYTJkMjI0OTBlMmYzNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb4TwXHyYqGfNOYf7TqDtGykpPYu fDWXqMbbDKDS0SE81EwjK0RrZaWbOOs09Pw9bDbRVzr6959K4cYxAyBDi219jBxf 0tNSSBCq2/kTpm73QnQn/NILqtTT/oy6ECCFtSjsUp0tuyflyyi/D85vNVUMYToE qCfsvRXw2J2ssF1K+33FPUC1kurT0hBC5VXD28FOmjWsPuzIEGreFNb8SqhNUtmL jkmwwZI6nNJfpAdhFSTmPMMMQRz4aqVzmTuwPFchEBOmB8lHWk6DyrrppzjF3fuX x70yQ1/LIcmF5f6RTMrw4obwpy+EdRIDCYWfILrqK+hsgI61U3SRv9i1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj2XU1UlXXH9gsI+botIkkOLzWwMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiVyAjFD W/1UHCXsOHnkvrNrkLM7Sofei5s8LxWpjV0PgXFQMyVEArZjjMqOErN9+/kNdC+B U7BtuoCWAIuKhzMzAvc1n269CsmkWFQMB9u2vcxduc+2XPwGqDNbJO9Svy7asdBj DLxaeRT5vHpXF6l8wDgE3sNckvReX8Ev2h1I/5nwUHXzwpZVrPCQWBwCORrhr388 jDUp/4Xh3Ya6lJNCumjIkmpWGASWS4uyoQvqkO+Tba4h6NSopuYJ6BpayP/hNklR UxRtDY/LrANLi0Ai/8JcZkHU50NzC4hlH7QEy/KOEFwcECpyveeLoUy3KmtwL9um 76m47P6MQm0cbA== -----END CERTIFICATE-----Generated at Sat Mar 14 01:03:18 2026 by rpki-client