$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: WrdOkEjsuNT0xafLatRwfRHEyTd/Yq1rGoAdOzVDxlk= Subject key identifier: 08:DC:56:08:A7:3A:B2:87:A3:75:87:C1:78:8F:3F:2A:76:45:41:94 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019CE290CE0AE0EE7FD58B26E8D0DC03D1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 188A Signing time: Thu 12 Mar 2026 15:01:06 +0000 Manifest this update: Thu 12 Mar 2026 15:01:06 +0000 Manifest next update: Fri 13 Mar 2026 15:01:06 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 6n_hkZcF-cF30EEk5-jd2IN_wO8.roa (hash: DcZmoLZGm/trptAiaEUhPRAyxAeOKtODy6lVi50yIeA=) 3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: 0Fc7TyZ17ExKlLEIyObsMvDDQJPramjduIBhWWkmCZ4=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:90:ce:0a:e0:ee:7f:d5:8b:26:e8:d0:dc:03:d1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Mar 12 15:01:06 2026 GMT Not After : Mar 13 15:01:06 2026 GMT Subject: CN=08dc5608a73ab287a37587c1788f3f2a76454194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:e6:56:8d:61:5d:5c:b1:d7:3b:51:32:17: fe:f7:e0:d2:f2:1e:47:b6:43:36:c3:20:db:f4:82: 33:25:08:0f:37:c6:f2:e9:3a:ee:7f:4a:12:16:c3: 7e:cd:38:90:3c:46:63:f0:bb:ee:67:f4:f3:71:fa: 36:1d:a3:0f:70:81:33:fb:1c:d7:33:03:34:e5:10: 9e:ab:11:8f:a6:a2:83:e2:0a:4a:2d:0b:62:84:3b: 39:bf:c9:87:ca:d8:83:03:53:43:e7:17:f5:6a:49: a8:01:0a:c0:4e:1e:03:ac:a6:07:86:ce:0a:c7:8a: d4:1e:7c:e2:12:ed:12:e4:85:7a:30:a4:51:64:db: 2e:89:86:6e:f4:02:a9:f6:6b:1e:2b:11:fa:f5:7f: ab:56:9f:63:2e:94:7b:0a:6d:7b:5e:29:b7:a4:76: fe:50:4a:2c:7e:00:a9:77:20:52:9f:3d:6f:8a:f1: df:1e:2d:59:a8:4c:78:ec:45:32:70:13:5e:f4:ba: 64:df:cd:a1:af:4d:10:3c:9d:f7:68:38:89:eb:b1: 7f:cf:7f:69:99:e0:5c:52:88:50:5c:83:61:38:3b: 19:c6:36:5d:31:d7:79:c3:88:b0:86:ad:62:83:ca: da:00:79:da:6b:ef:a0:b0:a6:a7:9a:5e:7a:38:8b: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DC:56:08:A7:3A:B2:87:A3:75:87:C1:78:8F:3F:2A:76:45:41:94 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:72:61:8c:6e:64:c5:f4:ab:51:85:33:c1:36:29:aa:76: 8c:e3:84:f7:53:a0:19:f0:bc:08:75:1b:9f:16:1c:3f:39:4e: de:c5:e2:b4:30:00:9b:3e:1b:d8:f7:61:08:d1:03:bd:26:d4: 2e:10:11:67:82:6b:1a:23:e4:51:dc:85:e0:42:32:2e:77:74: 17:34:4b:71:91:ce:64:ad:2f:6d:96:d3:32:05:0e:d0:02:76: d4:ef:cf:2d:70:55:bd:7d:99:39:c1:f6:b4:ea:f8:e0:d1:12: c1:6b:fb:63:66:03:bb:92:d5:48:a4:09:fb:29:cc:3c:d8:26: 83:c3:6c:cd:99:a1:2d:ef:1f:40:0d:e1:cc:6a:5a:90:a1:87: ed:c6:75:e6:0c:9f:e8:c2:8e:d2:cf:4f:19:9c:7e:ae:88:c0: dd:aa:79:f6:21:9b:db:a8:78:06:03:25:c1:d9:49:2a:73:39: 7b:65:d9:c2:a7:15:5b:11:ac:88:05:9c:dc:d0:d9:ee:8a:ec: 72:95:35:e4:70:c6:f6:09:1a:d4:10:d1:b9:98:7b:78:fd:a8: 3b:be:6b:32:ec:a6:88:89:94:ee:88:c5:3e:35:4c:a2:79:13: 2d:33:e4:bb:6f:41:98:ce:26:53:87:d6:7c:85:ed:ea:01:6e: 0b:70:94:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzikM4K4O5/1Ysm6NDcA9HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMzEyMTUwMTA2WhcNMjYwMzEzMTUwMTA2WjAzMTEwLwYDVQQD EygwOGRjNTYwOGE3M2FiMjg3YTM3NTg3YzE3ODhmM2YyYTc2NDU0MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlLmVo1hXVyx1ztRMhf+9+DS8h5H tkM2wyDb9IIzJQgPN8by6Truf0oSFsN+zTiQPEZj8LvuZ/Tzcfo2HaMPcIEz+xzX MwM05RCeqxGPpqKD4gpKLQtihDs5v8mHytiDA1ND5xf1akmoAQrATh4DrKYHhs4K x4rUHnziEu0S5IV6MKRRZNsuiYZu9AKp9mseKxH69X+rVp9jLpR7Cm17Xim3pHb+ UEosfgCpdyBSnz1vivHfHi1ZqEx47EUycBNe9Lpk382hr00QPJ33aDiJ67F/z39p meBcUohQXINhODsZxjZdMdd5w4iwhq1ig8raAHnaa++gsKanml56OItgrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjcVginOrKHo3WHwXiPPyp2RUGUMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl1yYYxu ZMX0q1GFM8E2Kap2jOOE91OgGfC8CHUbnxYcPzlO3sXitDAAmz4b2PdhCNEDvSbU LhARZ4JrGiPkUdyF4EIyLnd0FzRLcZHOZK0vbZbTMgUO0AJ21O/PLXBVvX2ZOcH2 tOr44NESwWv7Y2YDu5LVSKQJ+ynMPNgmg8NszZmhLe8fQA3hzGpakKGH7cZ15gyf 6MKO0s9PGZx+rojA3ap59iGb26h4BgMlwdlJKnM5e2XZwqcVWxGsiAWc3NDZ7ors cpU15HDG9gka1BDRuZh7eP2oO75rMuymiImU7ojFPjVMonkTLTPku29BmM4mU4fW fIXt6gFuC3CUXg== -----END CERTIFICATE-----Generated at Thu Mar 12 22:56:20 2026 by rpki-client