$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: fBtLWnMDQ4nR872r+/XOv6QptqbWLsQPMNJ6/d/X1co= Subject key identifier: 82:8B:53:0B:1C:AA:6A:54:B1:C2:96:A2:82:BF:2E:B2:F2:34:1B:00 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019CF496A454C480844F6A8C799DAE454BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1872 Signing time: Mon 16 Mar 2026 03:00:39 +0000 Manifest this update: Mon 16 Mar 2026 03:00:39 +0000 Manifest next update: Tue 17 Mar 2026 03:00:39 +0000 Files and hashes: 1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 7: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 8: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 9: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 10: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: JKHuaRw0YBCNXLFFJcwweASE39kORM/oYk6Skx4I9Qk=) 11: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 12: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (hash: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4=) 13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=) 15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:f4:96:a4:54:c4:80:84:4f:6a:8c:79:9d:ae:45:4b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Mar 16 03:00:39 2026 GMT Not After : Mar 17 03:00:39 2026 GMT Subject: CN=828b530b1caa6a54b1c296a282bf2eb2f2341b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:15:a4:2d:30:8f:d9:bb:fd:7c:be:f4:e3: 39:b0:81:5b:5c:0d:a1:6b:30:24:73:8a:9b:44:66: 58:13:c5:c5:56:be:ea:1a:fa:81:48:a7:08:37:5b: b3:91:b5:61:3d:98:83:52:dd:04:1e:cd:28:9d:f7: 00:57:65:4e:38:f7:d9:31:0b:ee:b4:cb:0b:0a:d4: 3f:e4:af:13:24:64:5f:13:0f:fe:7f:f1:57:15:46: ca:77:73:9b:46:fd:c4:58:b3:44:45:ed:cd:d8:c5: 72:46:6d:a7:53:86:4a:36:b6:bd:c0:41:3d:ac:eb: a3:a8:c6:11:1a:67:82:dd:f6:70:89:21:96:74:7a: 35:48:a7:df:62:a1:96:5e:b6:33:41:69:3e:0e:e3: c4:6a:7d:0f:9e:f3:39:30:b5:84:bd:d5:06:8d:fd: 36:83:62:ae:5d:39:ec:ca:c6:dc:8d:b8:7b:f7:9e: 6a:43:1d:96:5a:36:9f:3d:f5:d7:38:47:30:c5:07: 06:2d:4a:49:7b:c3:0a:b7:fe:38:6c:45:5c:b6:d8: e1:02:e3:50:4d:7f:e9:e0:2f:80:d9:fa:fe:52:79: 0a:f1:a2:26:3a:a2:2f:06:85:95:e4:56:91:5b:f8: ae:ac:a1:cd:32:50:ec:20:f0:87:3f:35:00:e3:1d: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8B:53:0B:1C:AA:6A:54:B1:C2:96:A2:82:BF:2E:B2:F2:34:1B:00 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b9:c1:7d:4e:89:ff:f5:95:10:14:04:29:0b:06:26:2a:12: 10:95:73:8e:dc:0b:9a:7c:4e:3c:f4:7c:13:f5:ef:e0:2a:e6: eb:f2:11:fa:9e:64:eb:e2:10:35:f2:a9:d0:70:a7:e7:f9:32: c4:13:0a:b3:9a:53:39:0c:19:15:e3:f8:e7:e5:4f:83:18:47: 95:8e:26:c8:e2:6d:9b:a8:2a:f6:e6:bf:15:58:21:ec:29:21: 4e:67:1c:2d:f6:f3:b3:13:0c:d7:38:72:ce:60:62:3e:d6:17: 34:6a:6c:af:d8:be:78:e9:08:3a:d9:07:03:e3:9e:40:2e:33: 1d:dc:61:1c:c6:e5:e4:b7:97:f2:99:27:e4:9a:07:0a:dc:b2: bd:41:83:70:57:78:7e:c1:7f:cc:e3:21:7c:dc:56:10:b1:38: 5b:98:07:bd:ac:58:ea:b2:ef:5f:5a:aa:66:76:e8:2c:79:fa: d5:77:17:c9:3b:ad:4b:cb:2c:4a:19:a4:81:01:85:cd:f1:2b: 09:63:58:90:90:ac:c0:22:6e:f2:be:a7:43:93:f6:e4:da:b7: c8:d9:a2:0e:e0:64:49:ed:b2:6c:2a:67:bd:11:93:1a:7b:99: f8:84:cb:7f:4d:de:21:c0:4f:e2:54:1b:50:11:9a:71:d8:33: 59:00:85:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz0lqRUxICET2qMeZ2uRUv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMzE2MDMwMDM5WhcNMjYwMzE3MDMwMDM5WjAzMTEwLwYDVQQD Eyg4MjhiNTMwYjFjYWE2YTU0YjFjMjk2YTI4MmJmMmViMmYyMzQxYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpQVpC0wj9m7/Xy+9OM5sIFbXA2h azAkc4qbRGZYE8XFVr7qGvqBSKcIN1uzkbVhPZiDUt0EHs0onfcAV2VOOPfZMQvu tMsLCtQ/5K8TJGRfEw/+f/FXFUbKd3ObRv3EWLNERe3N2MVyRm2nU4ZKNra9wEE9 rOujqMYRGmeC3fZwiSGWdHo1SKffYqGWXrYzQWk+DuPEan0PnvM5MLWEvdUGjf02 g2KuXTnsysbcjbh7955qQx2WWjafPfXXOEcwxQcGLUpJe8MKt/44bEVcttjhAuNQ TX/p4C+A2fr+UnkK8aImOqIvBoWV5FaRW/iurKHNMlDsIPCHPzUA4x3H7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKLUwscqmpUscKWooK/LrLyNBsAMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbnBfU6J //WVEBQEKQsGJioSEJVzjtwLmnxOPPR8E/Xv4Crm6/IR+p5k6+IQNfKp0HCn5/ky xBMKs5pTOQwZFeP45+VPgxhHlY4myOJtm6gq9ua/FVgh7CkhTmccLfbzsxMM1zhy zmBiPtYXNGpsr9i+eOkIOtkHA+OeQC4zHdxhHMbl5LeX8pkn5JoHCtyyvUGDcFd4 fsF/zOMhfNxWELE4W5gHvaxY6rLvX1qqZnboLHn61XcXyTutS8ssShmkgQGFzfEr CWNYkJCswCJu8r6nQ5P25Nq3yNmiDuBkSe2ybCpnvRGTGnuZ+ITLf03eIcBP4lQb UBGacdgzWQCF4A== -----END CERTIFICATE-----Generated at Mon Mar 16 09:33:15 2026 by rpki-client