$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json) Hash identifier: fJLzR4hlDR7mN2qLQOv/pJCQmrkdVCWXnQ4ZaL0iDD8= Subject key identifier: 42:2F:A7:DF:2F:B6:50:F4:3D:17:9A:AE:41:AB:E7:51:3C:F3:16:1A Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019CE20B349A24CB6E04660D2C39A93F386E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft Manifest number: 1157 Signing time: Thu 12 Mar 2026 12:35:10 +0000 Manifest this update: Thu 12 Mar 2026 12:35:10 +0000 Manifest next update: Fri 13 Mar 2026 12:35:10 +0000 Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=) 2: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=) 3: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=) 4: CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa (hash: wDvPNmhM7GcOMSdAsmrbJDDVqrwM6YWhHFV4n7fPWuI=) 5: DHLKNILgfx16JsrlSXMeY6f762E.roa (hash: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU=) 6: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=) 7: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (hash: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=) 8: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=) 9: LvDcdbQFTKKtCL0HWtHi8ZHMICw.roa (hash: pr9dzyzuzRXVF7OipbNJiEIFE2wIqGOEkXf2LlwVcSo=) 10: M_kXnc2VW4WObsQRGmM4dOkxvAo.roa (hash: hrx4tS1F9C1+NylfSdZou47j0Ea58tIJch7D5WphPNA=) 11: Pg6WcfGC8AkvBSVyCvKxqgdMGlM.roa (hash: 2K2U6cGOTmQqLf6zsnhVRf79y+nh5CGpqyhhe8CMkU8=) 12: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (hash: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU=) 13: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=) 14: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=) 15: i7lgm15yljxNJJIdxV0PN0NruUk.roa (hash: 2LRwTaHFptBADB4hm7Yrbr+djCqVu9Gi1I6wte0t5nk=) 16: pADycQ-9xhjD7DWrrFk7pCQ_Ijo.roa (hash: K1+0R7I0/kdM14j+kEitEaAtqppeRpYjvV274U8LEQY=) 17: qaDueQVxzcTEXG6b9fDcRRLZpCE.roa (hash: DDLmMzTc8RBMo8zk0yDihQy7T9kbJSiNpv5biRUVuCU=) 18: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: 8t2RrLRcN7KouA86tMo4E6eZoKnEQL1LsxO03w3ghbc=) 19: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=) 20: vINuwcNnkpikTczh3QJJDkDshUQ.roa (hash: d4JFil4KdE9sIgtRNdUYG5jzcpib/Fzi6yqvSmhW+t8=) 21: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=) 22: xjh8d3YdZh4vpQueR9SItUPZD4Y.roa (hash: MrzcYUv0dMN5mv5Khff5m7xjUUe7vIM3FRg1rUhiWT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 12:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:0b:34:9a:24:cb:6e:04:66:0d:2c:39:a9:3f:38:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Mar 12 12:35:10 2026 GMT Not After : Mar 13 12:35:10 2026 GMT Subject: CN=422fa7df2fb650f43d179aae41abe7513cf3161a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:ab:e2:b5:27:b2:83:f8:d7:e6:28:f6:c5: e7:9a:49:41:10:96:96:e1:f7:7a:96:d6:1a:e9:ae: 7d:22:0e:da:61:89:2f:5b:f6:4f:35:78:45:6c:c2: e5:82:38:20:1b:c6:6b:e8:45:0e:45:e3:d6:79:52: 3a:65:14:93:3d:6c:7d:d4:c0:50:70:69:ff:78:f2: cf:7e:2c:bb:f0:f0:ed:d4:8b:c0:72:2f:0f:80:0b: 74:4a:83:a0:8b:f9:f4:05:4c:72:60:f4:cd:e3:1e: 09:be:90:ca:69:34:15:bd:79:31:8d:25:3a:9f:d2: 72:50:eb:ed:e2:57:a5:fd:c4:08:be:30:76:52:e0: f9:f3:28:f3:28:5a:c2:c5:3b:0c:67:c9:58:6d:1d: e0:2f:26:85:de:f8:ad:65:cd:69:89:36:46:c3:28: 68:ce:30:25:4b:cc:df:3b:4e:0b:ed:12:b2:b4:1e: 88:a9:e3:78:a5:90:66:09:01:6b:36:b8:65:0f:c6: 1c:cb:30:cb:51:98:b7:8e:6d:90:ec:29:f7:a3:b0: 84:bd:81:43:67:65:9a:ac:77:ec:bb:90:e1:06:ae: 68:30:6e:d1:3c:27:bd:ab:36:b5:29:72:be:25:f0: fe:28:4e:85:c4:ed:85:d9:e4:47:e6:d1:e0:d3:1d: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:A7:DF:2F:B6:50:F4:3D:17:9A:AE:41:AB:E7:51:3C:F3:16:1A X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:57:c0:e6:d8:5d:45:3c:15:16:d4:fa:cc:7b:9a:41:6f:90: 86:44:4c:ba:9b:a9:91:79:e9:36:80:b5:98:20:1d:e2:a8:ab: 79:6a:04:59:2c:c8:4d:6e:c0:f7:f4:95:d9:3b:4f:94:c4:3e: 10:ca:40:41:31:4f:8c:c4:8e:c3:a4:d0:ef:e5:b6:33:8c:bf: b7:23:63:7c:45:3f:b8:0f:55:b8:66:47:c5:c7:48:28:70:d2: fe:e4:8e:6d:06:23:8c:ab:06:f3:fb:75:78:27:63:7f:59:de: a0:19:bd:7a:0a:4d:4a:2a:f6:59:af:cd:ca:38:8c:d6:59:a7: 6b:7c:06:8b:1a:aa:59:53:a2:be:73:1c:a0:3c:37:67:3b:13: ef:f9:d1:3b:90:c1:bc:aa:2e:97:f3:ba:c5:f2:59:8e:60:60: ac:78:4f:1c:3c:d4:90:81:14:ec:be:18:f0:d6:9d:0c:25:fb: 35:6a:d4:67:0c:75:71:b4:e3:f1:4b:5a:8a:ca:f3:e5:5c:57: be:86:d7:63:cd:da:9a:29:15:ae:de:a5:a6:af:b5:f1:54:2f: 75:5e:23:81:60:d8:bb:0f:9d:6e:80:e2:da:ec:3a:34:4f:73: 93:7d:80:58:04:a6:7a:1d:fb:3b:89:3b:ca:40:06:50:d1:15: 3b:91:a8:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZziCzSaJMtuBGYNLDmpPzhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMzEyMTIzNTEwWhcNMjYwMzEzMTIzNTEwWjAzMTEwLwYDVQQD Eyg0MjJmYTdkZjJmYjY1MGY0M2QxNzlhYWU0MWFiZTc1MTNjZjMxNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfKr4rUnsoP41+Yo9sXnmklBEJaW 4fd6ltYa6a59Ig7aYYkvW/ZPNXhFbMLlgjggG8Zr6EUORePWeVI6ZRSTPWx91MBQ cGn/ePLPfiy78PDt1IvAci8PgAt0SoOgi/n0BUxyYPTN4x4JvpDKaTQVvXkxjSU6 n9JyUOvt4lel/cQIvjB2UuD58yjzKFrCxTsMZ8lYbR3gLyaF3vitZc1piTZGwyho zjAlS8zfO04L7RKytB6IqeN4pZBmCQFrNrhlD8YcyzDLUZi3jm2Q7Cn3o7CEvYFD Z2WarHfsu5DhBq5oMG7RPCe9qza1KXK+JfD+KE6FxO2F2eRH5tHg0x1atQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIvp98vtlD0PRearkGr51E88xYaMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFfA5thd RTwVFtT6zHuaQW+QhkRMupupkXnpNoC1mCAd4qireWoEWSzITW7A9/SV2TtPlMQ+ EMpAQTFPjMSOw6TQ7+W2M4y/tyNjfEU/uA9VuGZHxcdIKHDS/uSObQYjjKsG8/t1 eCdjf1neoBm9egpNSir2Wa/NyjiM1lmna3wGixqqWVOivnMcoDw3ZzsT7/nRO5DB vKoul/O6xfJZjmBgrHhPHDzUkIEU7L4Y8NadDCX7NWrUZwx1cbTj8Utaisrz5VxX vobXY83amikVrt6lpq+18VQvdV4jgWDYuw+dboDi2uw6NE9zk32AWASmeh37O4k7 ykAGUNEVO5Goog== -----END CERTIFICATE-----Generated at Thu Mar 12 22:45:38 2026 by rpki-client