$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: 38n6d4lHkEcbqn9fjjy24OP3Z+PwbyYZXJ0osJWEfjE= Subject key identifier: AD:1A:3C:06:8C:28:6A:43:23:03:13:F8:5B:B9:13:EB:A3:B3:E5:01 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019CE3DA59B490DC59D97F58FEC6A381603E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 15C9 Signing time: Thu 12 Mar 2026 21:01:03 +0000 Manifest this update: Thu 12 Mar 2026 21:01:03 +0000 Manifest next update: Fri 13 Mar 2026 21:01:03 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: Ko5VwdrlbpwMHrBsL8qQUpNq8XUy5auremg8+Rfu7OI=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:da:59:b4:90:dc:59:d9:7f:58:fe:c6:a3:81:60:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Mar 12 21:01:03 2026 GMT Not After : Mar 13 21:01:03 2026 GMT Subject: CN=ad1a3c068c286a43230313f85bb913eba3b3e501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:8d:00:8a:20:5c:3a:f5:0c:c5:f0:12:f8: 4d:80:a7:c1:8e:d3:51:21:4d:60:93:ac:18:17:61: 32:00:bd:51:0d:cc:95:6d:82:0f:bb:c2:da:e0:ac: 6e:6f:c8:65:8a:38:2c:38:c1:62:4a:cb:5d:4f:74: 59:bc:71:f8:55:b6:e8:51:7d:50:3e:dc:90:04:4f: 80:5b:c1:4e:ea:f5:87:32:3a:0b:7c:95:e1:4a:f6: b1:a9:57:fc:41:86:60:d5:bc:ca:4d:02:7c:2e:57: ff:b3:a2:dc:00:b1:c0:0d:e1:ca:23:0b:22:e8:49: ff:4c:f1:1a:cd:75:01:09:67:39:80:dc:8b:f5:7b: 3c:92:49:8a:9e:37:23:c4:b7:4b:c1:66:26:c5:32: 07:57:a7:2c:70:34:3d:ce:7a:3d:59:83:64:5d:72: a1:19:21:4c:11:b3:38:cd:a8:89:85:5b:1b:92:1b: 01:8a:bd:2e:bb:94:54:85:ad:a5:b1:39:88:c2:0a: 3f:4c:2d:22:9e:f6:50:1e:bc:1b:69:26:ef:3e:ae: 77:d1:9c:fe:65:54:06:70:19:da:79:cf:d9:09:27: 32:cf:b4:24:18:c4:b2:b4:c6:e5:55:fd:07:97:1e: 6d:c1:ff:67:1e:41:68:dc:49:86:55:a0:88:f2:1f: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:3C:06:8C:28:6A:43:23:03:13:F8:5B:B9:13:EB:A3:B3:E5:01 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ca:26:79:6d:65:1c:16:b0:6a:4a:b3:b8:01:2a:e4:56:2b: 44:89:c2:17:60:6b:3d:70:a5:1a:bd:58:2a:70:cd:d6:37:af: 27:cf:64:9e:b5:3b:ae:a4:d1:43:39:18:12:4f:d6:a9:ff:e1: d3:05:cf:69:89:31:49:f0:31:76:9e:6e:9c:f4:a0:58:2f:39: e5:2e:b5:27:11:7b:41:53:31:47:75:db:8a:7b:cf:74:3f:a2: 94:fd:24:7a:52:66:90:de:5f:1b:46:a4:8b:d2:5f:cc:6b:53: 48:44:31:17:92:bd:6b:90:af:c3:df:55:6b:56:04:af:06:6d: 4d:4d:57:33:84:a1:a1:b8:4d:38:5d:e2:d1:3d:53:db:cd:d8: bc:e8:6a:de:db:1c:ed:c7:4c:c6:8b:05:37:77:f1:a4:72:fd: 1d:2e:ba:73:d3:6c:6f:d9:ae:63:7a:5b:ea:1c:62:3b:72:1d: 83:c2:9a:02:24:1e:1a:93:d3:d4:f2:3f:0d:6a:85:93:30:51: 4e:fc:bd:d3:6b:ad:5e:82:c1:3a:71:26:53:96:45:17:7b:0e: 8d:62:35:cc:db:a4:5b:d7:a1:f8:4f:a4:84:29:ee:8b:3d:60: 79:e9:7e:8c:2a:4d:8d:5a:d3:d3:e7:1e:9f:93:c3:bd:7e:dd: 9b:5e:5f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzj2lm0kNxZ2X9Y/sajgWA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMzEyMjEwMTAzWhcNMjYwMzEzMjEwMTAzWjAzMTEwLwYDVQQD EyhhZDFhM2MwNjhjMjg2YTQzMjMwMzEzZjg1YmI5MTNlYmEzYjNlNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocWNAIogXDr1DMXwEvhNgKfBjtNR IU1gk6wYF2EyAL1RDcyVbYIPu8La4Kxub8hlijgsOMFiSstdT3RZvHH4VbboUX1Q PtyQBE+AW8FO6vWHMjoLfJXhSvaxqVf8QYZg1bzKTQJ8Llf/s6LcALHADeHKIwsi 6En/TPEazXUBCWc5gNyL9Xs8kkmKnjcjxLdLwWYmxTIHV6cscDQ9zno9WYNkXXKh GSFMEbM4zaiJhVsbkhsBir0uu5RUha2lsTmIwgo/TC0invZQHrwbaSbvPq530Zz+ ZVQGcBnaec/ZCScyz7QkGMSytMblVf0Hlx5twf9nHkFo3EmGVaCI8h+D0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0aPAaMKGpDIwMT+Fu5E+ujs+UBMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsomeW1l HBawakqzuAEq5FYrRInCF2BrPXClGr1YKnDN1jevJ89knrU7rqTRQzkYEk/Wqf/h 0wXPaYkxSfAxdp5unPSgWC855S61JxF7QVMxR3XbinvPdD+ilP0kelJmkN5fG0ak i9JfzGtTSEQxF5K9a5Cvw99Va1YErwZtTU1XM4ShobhNOF3i0T1T283YvOhq3tsc 7cdMxosFN3fxpHL9HS66c9Nsb9muY3pb6hxiO3Idg8KaAiQeGpPT1PI/DWqFkzBR Tvy902utXoLBOnEmU5ZFF3sOjWI1zNukW9eh+E+khCnuiz1geel+jCpNjVrT0+ce n5PDvX7dm15f6A== -----END CERTIFICATE-----Generated at Thu Mar 12 22:56:23 2026 by rpki-client