$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: HaFB9/CLiop+3GT3krGfxeOEjNJzjgOKRYDv+hkR+fg= Subject key identifier: A9:D6:83:44:67:DB:A0:89:66:DC:9C:72:B0:E5:30:02:08:28:8C:77 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019D05F8967710FA29E060A85982129A6BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0EBA Signing time: Thu 19 Mar 2026 12:01:10 +0000 Manifest this update: Thu 19 Mar 2026 12:01:10 +0000 Manifest next update: Fri 20 Mar 2026 12:01:10 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: eK2srdEFO25kE7oVg/8nqLUdy9ftgsjvnMRoClMkynI=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 08:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:05:f8:96:77:10:fa:29:e0:60:a8:59:82:12:9a:6b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Mar 19 12:01:10 2026 GMT Not After : Mar 20 12:01:10 2026 GMT Subject: CN=a9d6834467dba08966dc9c72b0e5300208288c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:47:29:7d:a8:b5:44:3b:c9:45:2d:b0:66: 56:ee:31:1c:a2:e6:21:3c:e5:14:96:7e:1a:f0:47: e6:a9:ba:45:91:d8:42:bf:c5:0f:c3:ed:e7:68:07: e1:0e:26:de:8b:c9:11:ab:95:d9:4a:d8:40:6a:bb: 2a:c7:fb:74:44:7f:9d:82:34:73:dd:45:3e:ed:a4: 65:d7:ca:8a:0a:42:5d:2b:2d:10:8c:67:df:85:5c: c5:69:61:aa:46:bd:ef:4a:0e:4d:17:db:15:23:e5: 84:9f:87:a7:da:9c:9f:48:b4:9d:8c:0a:c9:1e:f9: be:da:8a:d4:fe:d3:d5:54:52:ef:93:a8:84:95:99: 80:a0:80:04:f1:7e:5a:89:06:93:fe:6b:6b:29:9d: c5:a6:30:67:3b:96:d2:c5:8e:7e:df:f9:36:38:de: e5:50:06:87:79:5e:3c:dc:b1:a3:0a:8d:86:4f:b6: dd:83:a6:42:9d:a4:ea:89:73:d3:2d:86:99:48:e1: 8d:20:77:3d:de:59:fc:73:c3:ef:65:c8:47:59:fd: c2:ad:6c:c1:10:eb:c5:4a:51:c3:9c:9d:fe:e6:b2: 84:61:8f:bc:20:04:a6:c0:8b:b4:85:2d:2a:30:08: d0:4b:bc:20:bf:d6:0b:13:65:ae:5f:70:13:4c:6b: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:83:44:67:DB:A0:89:66:DC:9C:72:B0:E5:30:02:08:28:8C:77 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:97:c2:1e:79:f9:02:22:2b:0a:3b:a1:8b:ee:fe:c7:82:be: de:77:dc:8e:88:24:53:5a:3c:f0:8d:b4:73:19:a0:75:3c:0f: c7:7e:cd:79:10:97:2a:95:2f:76:bc:62:26:25:2c:81:a5:1b: 0a:2e:67:80:41:be:2c:55:d3:43:1b:b5:12:91:da:7d:66:b5: a7:d0:cb:77:68:99:f0:2a:6e:d3:74:62:24:e5:14:fc:33:99: 68:f0:1c:01:df:bb:77:51:e4:72:2a:d6:d4:18:ef:71:1d:c8: 8c:11:28:27:7c:3b:a3:f7:60:bc:5f:95:3f:30:11:de:7b:e2: 0d:ae:44:78:6f:5d:58:5f:4b:ba:e5:08:a0:a5:71:74:c7:cf: b9:44:72:be:51:ab:c2:ca:50:e7:7c:5a:07:85:73:1c:a7:0f: a5:60:90:74:eb:1f:8b:b6:ae:f8:4e:e2:de:a4:1b:78:c7:9d: 3e:7a:7d:7e:c6:99:a3:a8:22:39:3f:b0:06:ad:4e:57:26:a6: 13:b5:34:3a:60:2e:9d:be:14:a9:d2:53:0c:83:f2:09:d9:50: 78:cd:27:68:25:ee:92:9e:af:6d:36:0c:d7:12:6c:97:89:88: 4d:24:04:4c:0d:4d:64:a0:c2:e7:3c:7f:f1:33:3c:0c:90:7a: 74:6a:fd:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0F+JZ3EPop4GCoWYISmmuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMzE5MTIwMTEwWhcNMjYwMzIwMTIwMTEwWjAzMTEwLwYDVQQD EyhhOWQ2ODM0NDY3ZGJhMDg5NjZkYzljNzJiMGU1MzAwMjA4Mjg4Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJRHKX2otUQ7yUUtsGZW7jEcouYh POUUln4a8EfmqbpFkdhCv8UPw+3naAfhDibei8kRq5XZSthAarsqx/t0RH+dgjRz 3UU+7aRl18qKCkJdKy0QjGffhVzFaWGqRr3vSg5NF9sVI+WEn4en2pyfSLSdjArJ Hvm+2orU/tPVVFLvk6iElZmAoIAE8X5aiQaT/mtrKZ3FpjBnO5bSxY5+3/k2ON7l UAaHeV483LGjCo2GT7bdg6ZCnaTqiXPTLYaZSOGNIHc93ln8c8PvZchHWf3CrWzB EOvFSlHDnJ3+5rKEYY+8IASmwIu0hS0qMAjQS7wgv9YLE2WuX3ATTGuwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnWg0Rn26CJZtyccrDlMAIIKIx3MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZfCHnn5 AiIrCjuhi+7+x4K+3nfcjogkU1o88I20cxmgdTwPx37NeRCXKpUvdrxiJiUsgaUb Ci5ngEG+LFXTQxu1EpHafWa1p9DLd2iZ8Cpu03RiJOUU/DOZaPAcAd+7d1HkcirW 1BjvcR3IjBEoJ3w7o/dgvF+VPzAR3nviDa5EeG9dWF9LuuUIoKVxdMfPuURyvlGr wspQ53xaB4VzHKcPpWCQdOsfi7au+E7i3qQbeMedPnp9fsaZo6giOT+wBq1OVyam E7U0OmAunb4UqdJTDIPyCdlQeM0naCXukp6vbTYM1xJsl4mITSQETA1NZKDC5zx/ 8TM8DJB6dGr9lw== -----END CERTIFICATE-----Generated at Thu Mar 19 14:05:08 2026 by rpki-client