$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: T3t6wU0fmL6P6g25hw4gYrinGIfUa5MUB4VIAMVbhPg= Subject key identifier: 8C:39:B6:D8:00:F2:85:7A:26:C7:3C:14:E8:4F:44:1A:F6:7C:1A:3D Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019CBD0376D9539450DBDE0919B670A174E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 16A0 Signing time: Thu 05 Mar 2026 08:00:46 +0000 Manifest this update: Thu 05 Mar 2026 08:00:46 +0000 Manifest next update: Fri 06 Mar 2026 08:00:46 +0000 Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 7: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 8: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 9: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: ThM6GjPArbS9+cmqNQSQSK6C4RS6kYeCEKRoa6F9Azw=) 10: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 11: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 12: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 13: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=) 14: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 15: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 16: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 17: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 18: YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa (hash: 8Vy5h9LCNlGMuWAukt3eAgST/HOlYo6a2vD/jiISkbs=) 19: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=) 20: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=) 21: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=) 22: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 23: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 24: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 25: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 26: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 27: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 28: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 29: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 30: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=) 31: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 32: vPIPys_ck72jylL-AUvqLHtAd44.roa (hash: EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bd:03:76:d9:53:94:50:db:de:09:19:b6:70:a1:74:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Mar 5 08:00:46 2026 GMT Not After : Mar 6 08:00:46 2026 GMT Subject: CN=8c39b6d800f2857a26c73c14e84f441af67c1a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:21:d7:41:87:17:32:08:b8:9c:0a:fd:21: 18:bb:f1:98:9a:ca:d9:a2:09:1d:2d:1a:63:ae:ad: 45:bc:29:97:1b:6c:d3:27:64:ec:e8:74:93:52:41: bb:0b:6f:b2:0a:d6:03:91:ae:79:e9:94:ec:27:5b: 3a:7c:42:d4:7e:08:7a:e3:92:e2:3e:ba:67:6f:69: 65:8c:65:6d:14:48:9a:1b:a8:4c:fb:2c:a4:87:a6: f4:6a:e4:49:25:57:34:c9:36:9e:c1:d4:22:98:9d: 79:69:53:a4:22:3c:38:0b:ba:2a:e4:6f:3b:99:13: b3:cf:be:5a:68:32:b5:e2:ff:33:2b:9b:1f:71:21: d0:55:1d:b4:50:83:5e:d3:89:bf:8b:48:24:42:82: d8:ed:99:04:80:36:04:1c:d8:ac:5c:20:eb:16:e3: ae:10:f7:d3:d9:1e:83:bd:08:e5:78:be:71:3f:30: 63:fc:da:fa:d9:a8:af:56:f1:d9:df:b0:3f:13:63: 46:11:bd:f3:a4:eb:c5:3f:87:23:b9:63:91:1f:c4: a7:31:fe:bf:cc:84:65:f4:8f:fe:6c:c4:9f:1a:02: 05:e6:34:f2:a6:be:0d:81:76:d3:1c:dc:bc:66:1c: 91:3a:52:4a:40:6f:9c:a4:2e:25:0f:9d:a3:75:8f: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:B6:D8:00:F2:85:7A:26:C7:3C:14:E8:4F:44:1A:F6:7C:1A:3D X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:24:f6:a1:64:3a:3a:da:15:fb:f3:ae:28:de:7f:31:42: 07:6c:28:16:24:f5:d2:cb:1e:ac:56:8b:8e:5e:50:e6:18:cd: 73:48:b0:01:be:c1:75:0c:13:a5:be:ed:bc:50:96:81:29:be: a6:55:c5:69:22:12:3c:63:83:f8:e5:db:9f:01:4b:96:55:10: 65:d6:c3:7e:86:25:25:32:c8:3c:cd:15:77:9f:e9:1b:6b:8f: bc:e7:8f:e0:c8:1e:56:69:a3:aa:2f:f8:9f:83:7e:13:40:2b: f1:51:6d:db:1c:98:44:b7:2e:b0:69:27:a5:47:7c:54:08:b6: d0:4d:09:f8:b4:0b:90:ba:c9:e4:fc:7f:20:eb:1f:66:c8:42: 12:5e:4b:b5:10:88:ad:96:4b:9e:d7:40:d7:84:92:b4:58:23: 76:a9:ca:00:6b:94:97:ca:d6:df:cb:d2:db:cd:34:d7:11:23: e7:91:ff:df:b3:58:56:01:ca:9c:c8:7b:1c:95:3c:d9:32:66: 43:db:ad:78:e2:72:42:50:c5:59:f7:8b:c8:6a:81:1e:79:c8: 7d:bb:b2:a5:fe:bf:7a:83:15:31:1c:06:90:c9:59:fd:4a:dd: 6b:8d:43:e2:16:d4:49:2e:fc:90:06:ea:69:b9:6c:46:81:af: 22:f3:67:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy9A3bZU5RQ294JGbZwoXTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMzA1MDgwMDQ2WhcNMjYwMzA2MDgwMDQ2WjAzMTEwLwYDVQQD Eyg4YzM5YjZkODAwZjI4NTdhMjZjNzNjMTRlODRmNDQxYWY2N2MxYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoIh10GHFzIIuJwK/SEYu/GYmsrZ ogkdLRpjrq1FvCmXG2zTJ2Ts6HSTUkG7C2+yCtYDka556ZTsJ1s6fELUfgh645Li Prpnb2lljGVtFEiaG6hM+yykh6b0auRJJVc0yTaewdQimJ15aVOkIjw4C7oq5G87 mROzz75aaDK14v8zK5sfcSHQVR20UINe04m/i0gkQoLY7ZkEgDYEHNisXCDrFuOu EPfT2R6DvQjleL5xPzBj/Nr62aivVvHZ37A/E2NGEb3zpOvFP4cjuWORH8SnMf6/ zIRl9I/+bMSfGgIF5jTypr4NgXbTHNy8ZhyROlJKQG+cpC4lD52jdY9tPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw5ttgA8oV6Jsc8FOhPRBr2fBo9MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF8k9qFk OjraFfvzrijefzFCB2woFiT10sserFaLjl5Q5hjNc0iwAb7BdQwTpb7tvFCWgSm+ plXFaSISPGOD+OXbnwFLllUQZdbDfoYlJTLIPM0Vd5/pG2uPvOeP4MgeVmmjqi/4 n4N+E0Ar8VFt2xyYRLcusGknpUd8VAi20E0J+LQLkLrJ5Px/IOsfZshCEl5LtRCI rZZLntdA14SStFgjdqnKAGuUl8rW38vS28001xEj55H/37NYVgHKnMh7HJU82TJm Q9uteOJyQlDFWfeLyGqBHnnIfbuypf6/eoMVMRwGkMlZ/Urda41D4hbUSS78kAbq ablsRoGvIvNnpA== -----END CERTIFICATE-----Generated at Thu Mar 5 17:54:17 2026 by rpki-client