$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 2764tkkl7g+3mS5+Zt6TkJbvrKa7uwENBubhCJix59A= Subject key identifier: 6E:F7:A3:5C:C1:10:DD:15:A8:3D:74:04:9D:01:FA:C5:3A:72:12:7F Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019CB738A8B764A7FDA48625FEDFC2E7F651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0EC3 Signing time: Wed 04 Mar 2026 05:01:09 +0000 Manifest this update: Wed 04 Mar 2026 05:01:09 +0000 Manifest next update: Thu 05 Mar 2026 05:01:09 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: SZZw7FYk9NbVdG/gmlrY9mHjogAiBoCy/iWSAYQzZlA=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=) 12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 13: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=) 20: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=) 21: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 22: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 23: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) 25: uIV80scH6u5gHYdNO6XCbXg6J0o.roa (hash: SeBYh3gOgab2j7dPxQk9qB9Evvzqzf/WoiGkwr4d8Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b7:38:a8:b7:64:a7:fd:a4:86:25:fe:df:c2:e7:f6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Mar 4 05:01:09 2026 GMT Not After : Mar 5 05:01:09 2026 GMT Subject: CN=6ef7a35cc110dd15a83d74049d01fac53a72127f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:2f:33:94:8e:51:ee:38:df:be:f8:46:6a: b6:20:24:5f:65:4d:03:68:51:a7:1a:57:28:88:9d: 57:68:da:b7:7b:1c:08:63:e6:ca:e8:b3:9f:c7:c1: a6:d8:bb:1d:95:dd:99:3d:b7:eb:0d:22:d3:62:60: 8b:e2:36:1e:50:3c:44:30:44:f4:3d:55:63:fd:49: d5:17:a3:a0:bb:e5:16:18:69:3c:a0:9a:de:91:f7: 24:48:5e:d6:21:fd:b2:6e:12:12:88:87:3f:c6:18: 60:97:c0:b2:2e:12:5b:6b:7b:0c:c9:ba:fd:f5:06: 75:ad:16:6e:a8:a4:c5:d9:19:8a:7a:07:de:7b:b3: 24:ee:0f:d5:f0:58:ed:22:c1:05:1d:93:90:60:4d: 8d:c1:df:cc:fa:b8:35:4f:de:c6:e2:4e:3c:ab:df: 8e:2b:8a:f9:22:67:1f:1b:cd:31:db:a2:f9:0c:d9: ec:5c:42:13:99:1b:ab:8c:1c:50:c4:14:39:fd:22: 45:ed:a5:b5:e4:f8:78:b9:90:2b:51:d7:d4:c1:bc: 07:ab:c5:b6:82:a8:ec:f0:76:5d:03:79:a4:68:94: f1:85:f4:ef:05:55:c1:29:14:df:a4:f5:f6:81:29: bf:a0:cb:ff:58:9a:f2:e1:f3:5e:7c:22:6f:05:58: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:A3:5C:C1:10:DD:15:A8:3D:74:04:9D:01:FA:C5:3A:72:12:7F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:eb:b9:fb:62:4f:2c:23:e0:9f:1c:7a:fb:7d:f7:5f:5d:11: 55:4c:f8:33:cb:c3:ae:96:bd:44:fe:b2:1d:22:87:73:e1:2b: 5a:ab:c0:0c:0a:90:88:60:de:ae:a8:68:9a:d0:4a:7f:b9:cf: 94:1f:b1:17:3b:99:90:03:2e:56:17:78:9c:56:e8:e5:68:b4: 00:56:7a:a8:94:71:b0:09:1a:ea:d4:72:95:82:4e:ea:56:b0: be:3e:25:a1:4d:d0:cb:17:0e:fe:95:66:8c:bd:12:de:17:2a: 92:02:56:34:39:29:d4:2f:f6:08:2b:6c:2b:7e:9b:17:65:ca: 36:55:a9:21:f3:90:2b:45:8c:5f:7b:f7:e0:d9:90:ae:4a:80: a3:eb:73:68:18:67:41:08:b2:06:3a:f5:bf:29:1c:16:c1:94: ad:c2:04:4b:a6:55:29:1e:17:02:50:b7:cd:2f:e0:2d:24:f7: 6d:71:9e:c6:d0:c8:51:6d:6d:45:14:34:6f:f8:6d:2f:14:3b: 3b:fc:5e:72:eb:fc:d9:ef:9d:94:c2:a4:6c:e4:62:01:a1:81: f7:ee:cd:52:4f:05:ef:ec:8a:63:cf:4c:a7:e8:57:74:52:59: 1a:02:9b:bf:8d:42:73:00:26:ab:58:ff:58:72:0f:9d:94:2e: 0d:2d:d6:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy3OKi3ZKf9pIYl/t/C5/ZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMzA0MDUwMTA5WhcNMjYwMzA1MDUwMTA5WjAzMTEwLwYDVQQD Eyg2ZWY3YTM1Y2MxMTBkZDE1YTgzZDc0MDQ5ZDAxZmFjNTNhNzIxMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH0vM5SOUe443774Rmq2ICRfZU0D aFGnGlcoiJ1XaNq3exwIY+bK6LOfx8Gm2Lsdld2ZPbfrDSLTYmCL4jYeUDxEMET0 PVVj/UnVF6Ogu+UWGGk8oJrekfckSF7WIf2ybhISiIc/xhhgl8CyLhJba3sMybr9 9QZ1rRZuqKTF2RmKegfee7Mk7g/V8FjtIsEFHZOQYE2Nwd/M+rg1T97G4k48q9+O K4r5ImcfG80x26L5DNnsXEITmRurjBxQxBQ5/SJF7aW15Ph4uZArUdfUwbwHq8W2 gqjs8HZdA3mkaJTxhfTvBVXBKRTfpPX2gSm/oMv/WJry4fNefCJvBVgstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG73o1zBEN0VqD10BJ0B+sU6chJ/MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeu5+2JP LCPgnxx6+333X10RVUz4M8vDrpa9RP6yHSKHc+ErWqvADAqQiGDerqhomtBKf7nP lB+xFzuZkAMuVhd4nFbo5Wi0AFZ6qJRxsAka6tRylYJO6lawvj4loU3QyxcO/pVm jL0S3hcqkgJWNDkp1C/2CCtsK36bF2XKNlWpIfOQK0WMX3v34NmQrkqAo+tzaBhn QQiyBjr1vykcFsGUrcIES6ZVKR4XAlC3zS/gLST3bXGextDIUW1tRRQ0b/htLxQ7 O/xecuv82e+dlMKkbORiAaGB9+7NUk8F7+yKY89Mp+hXdFJZGgKbv41CcwAmq1j/ WHIPnZQuDS3W5g== -----END CERTIFICATE-----Generated at Wed Mar 4 13:43:07 2026 by rpki-client