$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: 0KeyGRkUOWBLjWuZweG3TRZsihvBEsXkF0Kcup7uRf0= Subject key identifier: 7E:DD:FA:54:FA:9C:B0:21:35:AA:47:D3:8E:98:3C:D2:29:59:6D:D8 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019CE36C1D09C33C8BF1590A28176BC50FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1895 Signing time: Thu 12 Mar 2026 19:00:39 +0000 Manifest this update: Thu 12 Mar 2026 19:00:39 +0000 Manifest next update: Fri 13 Mar 2026 19:00:39 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: RF3WuQSNHZcQ35f1hpFqzOlr8Sk1ikme1H+l0Vph00M=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 5: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 6: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 7: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 8: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 9: bXta14-WukP-sD3mvhrFJ-diblM.roa (hash: mvaQ8RJneVflOpMmhLqVGEU4MjH5zJ3p7ErO9d6FawE=) 10: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 11: vtlW7KcHy2quDtxiMcXh5ACZAJE.roa (hash: jwkMxNX7GEGE3hAf5FaeLuIWqkCqM1RbyuM2bownKWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:6c:1d:09:c3:3c:8b:f1:59:0a:28:17:6b:c5:0f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Mar 12 19:00:39 2026 GMT Not After : Mar 13 19:00:39 2026 GMT Subject: CN=7eddfa54fa9cb02135aa47d38e983cd229596dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:5c:b8:c8:a8:0a:d3:88:e7:57:d7:a7:64: 30:a0:85:e2:9b:40:87:63:cf:8e:7d:6a:d5:56:46: eb:f4:1e:e3:9c:5c:88:ad:0b:ca:9b:6d:a1:ae:53: ea:da:e1:c5:12:7c:86:91:8c:02:db:13:9c:cd:c8: d3:40:4d:98:3d:6e:c2:f2:5a:43:7b:80:f2:ad:98: f3:c4:fc:22:ee:23:86:a8:ff:59:e2:3f:f4:54:0e: aa:b9:4b:1f:e7:f2:22:38:94:bb:f0:81:16:57:12: 5d:e8:0c:b8:c1:80:ad:be:64:0c:3e:35:2d:b4:f0: 4d:f3:e7:fb:d3:13:c5:8d:a6:c6:fa:3b:74:39:fe: b5:8c:c6:14:0c:e9:be:2f:a9:1a:ee:38:10:ab:b3: 21:92:f6:1d:32:d4:e8:68:90:59:70:4d:5d:df:31: 6a:c9:c3:05:ec:41:1d:be:b3:ed:93:cf:9d:93:93: b8:bf:28:18:c4:22:ff:0b:bd:06:fd:43:9b:31:31: 40:94:af:3b:0a:53:68:e7:34:fe:0e:a3:c1:69:62: 8b:fc:b8:5b:42:e1:ea:85:1d:72:19:e6:e2:53:cf: 87:53:b5:fd:ab:42:ac:b1:a1:9f:01:44:7a:31:58: fc:cc:6a:55:ca:9e:7e:37:90:bf:52:d8:c3:e8:fe: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:FA:54:FA:9C:B0:21:35:AA:47:D3:8E:98:3C:D2:29:59:6D:D8 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:95:11:34:52:55:99:44:37:f2:63:2a:9d:eb:dc:f4:30:94: ef:d0:8a:48:ca:8c:6a:49:60:d5:4b:18:e7:c2:bf:e5:a6:7d: 90:1b:d7:ec:d8:83:d5:2c:b6:23:ed:23:61:86:38:3b:84:6f: 0f:29:73:2a:bf:ad:ba:c1:66:cb:5d:d8:cd:9e:5a:20:07:0f: 1c:c2:22:7a:fe:fb:35:a0:c6:1d:56:ac:c2:89:65:9c:90:bf: 66:36:16:d5:1e:88:41:bb:60:24:ce:60:b7:ad:c5:e3:67:86: 92:04:57:ac:5a:df:45:5c:d0:c8:2f:1d:c3:af:bb:51:a0:29: 65:a1:b4:bb:c8:1f:6c:ac:0d:52:0e:76:cd:e5:cf:b4:76:08: b6:f4:40:9f:14:7b:3c:06:1a:56:20:f8:6e:49:01:e4:8a:8c: 11:fb:8b:2a:7f:a9:4d:ea:e6:20:0b:cf:89:67:fd:ab:cc:1a: f9:f8:6f:51:54:ba:41:46:72:ee:4c:cb:01:8a:a9:95:75:67: bf:74:40:c7:de:41:52:00:7e:7d:4d:1d:a0:cb:25:aa:16:9e: ef:d5:3f:c0:aa:43:86:a7:5e:c0:63:03:a4:fc:a9:a5:35:68: 4b:22:34:c2:ac:80:ac:37:ec:f2:e0:98:1a:76:55:52:2d:95: aa:c1:44:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzjbB0JwzyL8VkKKBdrxQ/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMzEyMTkwMDM5WhcNMjYwMzEzMTkwMDM5WjAzMTEwLwYDVQQD Eyg3ZWRkZmE1NGZhOWNiMDIxMzVhYTQ3ZDM4ZTk4M2NkMjI5NTk2ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wVcuMioCtOI51fXp2QwoIXim0CH Y8+OfWrVVkbr9B7jnFyIrQvKm22hrlPq2uHFEnyGkYwC2xOczcjTQE2YPW7C8lpD e4DyrZjzxPwi7iOGqP9Z4j/0VA6quUsf5/IiOJS78IEWVxJd6Ay4wYCtvmQMPjUt tPBN8+f70xPFjabG+jt0Of61jMYUDOm+L6ka7jgQq7MhkvYdMtToaJBZcE1d3zFq ycMF7EEdvrPtk8+dk5O4vygYxCL/C70G/UObMTFAlK87ClNo5zT+DqPBaWKL/Lhb QuHqhR1yGebiU8+HU7X9q0KssaGfAUR6MVj8zGpVyp5+N5C/UtjD6P7WDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7d+lT6nLAhNapH046YPNIpWW3YMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpURNFJV mUQ38mMqnevc9DCU79CKSMqMaklg1UsY58K/5aZ9kBvX7NiD1Sy2I+0jYYY4O4Rv DylzKr+tusFmy13YzZ5aIAcPHMIiev77NaDGHVaswollnJC/ZjYW1R6IQbtgJM5g t63F42eGkgRXrFrfRVzQyC8dw6+7UaApZaG0u8gfbKwNUg52zeXPtHYItvRAnxR7 PAYaViD4bkkB5IqMEfuLKn+pTermIAvPiWf9q8wa+fhvUVS6QUZy7kzLAYqplXVn v3RAx95BUgB+fU0doMslqhae79U/wKpDhqdewGMDpPyppTVoSyI0wqyArDfs8uCY GnZVUi2VqsFE4w== -----END CERTIFICATE-----Generated at Fri Mar 13 01:30:36 2026 by rpki-client