$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: Wb9Fr6A39rqeqS7bkekW7+iBtxIbekY6B0kSASSVWP0= Subject key identifier: E3:9D:04:01:D1:84:6B:51:95:48:D2:D2:D9:AF:7E:E1:68:16:11:93 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019CDBE99F9A05A296B45A6DE9D0547F567A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 16B0 Signing time: Wed 11 Mar 2026 08:00:46 +0000 Manifest this update: Wed 11 Mar 2026 08:00:46 +0000 Manifest next update: Thu 12 Mar 2026 08:00:46 +0000 Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 7: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 8: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 9: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: KGTlvsYyvwPUcY3RnH0WCmdymmsGqiOJVhy0gCnYhuI=) 10: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 11: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 12: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 13: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=) 14: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 15: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 16: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 17: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 18: YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa (hash: 8Vy5h9LCNlGMuWAukt3eAgST/HOlYo6a2vD/jiISkbs=) 19: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=) 20: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=) 21: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=) 22: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 23: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 24: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 25: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 26: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 27: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 28: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 29: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 30: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=) 31: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 32: vPIPys_ck72jylL-AUvqLHtAd44.roa (hash: EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:db:e9:9f:9a:05:a2:96:b4:5a:6d:e9:d0:54:7f:56:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Mar 11 08:00:46 2026 GMT Not After : Mar 12 08:00:46 2026 GMT Subject: CN=e39d0401d1846b519548d2d2d9af7ee168161193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:d4:d8:de:bc:74:41:43:39:c3:80:a7:74: 66:83:be:a0:06:3d:29:d5:8e:37:63:db:14:90:b0: 88:dc:1c:cb:39:9a:5d:49:dc:2e:75:c5:3f:ca:21: a5:6c:98:08:a5:78:0c:56:ab:13:f2:5c:d4:1f:0a: 03:b8:b0:7d:77:67:be:24:38:43:8e:4c:32:61:62: 4c:3d:8b:ef:eb:2d:bb:7c:41:1e:8a:ec:1d:89:fa: 18:ca:2e:07:3c:e1:cc:ac:23:2d:d0:f1:6f:99:c2: a6:cd:61:e5:29:ea:6b:5c:35:52:29:37:5e:0c:fa: d9:4b:5e:8d:c7:0c:75:f1:3b:5f:76:5f:a3:fb:3a: b4:cf:91:fb:35:25:ea:ab:6b:ee:b0:29:92:f4:02: 90:8e:61:53:90:f6:e9:0f:49:01:e4:43:52:d2:d9: bd:0d:f0:9e:d1:74:0a:17:3e:87:d2:10:a1:ef:1d: 25:fe:fa:93:e1:fa:9f:71:eb:f8:4c:1c:27:92:af: 4f:69:f0:e4:e0:8e:ce:05:2e:ea:99:6f:d8:ab:53: d8:d3:60:1a:59:6b:10:fd:9f:d5:40:02:aa:e6:cb: 3a:c3:67:ae:d8:ed:f1:1f:59:8f:4a:22:83:ac:a5: 04:e3:d3:e5:87:93:cc:23:3d:e8:60:2f:4a:7a:c9: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:04:01:D1:84:6B:51:95:48:D2:D2:D9:AF:7E:E1:68:16:11:93 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3b:74:0c:cf:a5:dc:66:90:1a:c9:8b:15:59:7c:a0:7d:bb: c6:38:28:96:b4:22:17:56:79:d7:fb:e6:e4:e4:27:10:67:9d: d0:e7:43:0d:1f:48:ea:5d:3c:94:f2:41:16:44:36:cd:24:d1: 50:99:38:2f:f6:24:d9:d3:2a:93:a0:90:63:6d:83:89:ff:03: 0f:fe:fa:a6:28:01:4f:f3:76:e1:05:0b:e7:6c:d9:5c:27:9f: 24:05:e5:e0:f7:82:9c:63:d6:7a:72:96:ae:fc:da:07:dd:80: 19:f0:3c:8d:3d:dd:00:a4:a4:08:d1:c0:ca:2f:4a:a0:9a:25: b3:01:fc:8e:6c:d6:d3:15:8e:e0:af:be:2d:5b:d5:66:82:f4: f8:58:4d:ec:85:f5:b1:c6:06:bf:68:f3:e6:fb:46:bc:a6:b7: 8e:12:41:c3:64:a6:70:ac:a6:29:0c:08:b1:64:87:54:57:9e: 8f:38:ef:4d:2e:47:9d:00:32:1d:d5:04:85:b3:a9:ba:2f:78: 71:11:42:8e:eb:a5:d2:a9:c0:39:ee:fa:3a:42:0d:48:cf:3f: ce:d1:73:2e:d3:fc:52:a6:ed:60:a4:a0:e6:24:65:8c:cc:ae: 8d:49:4c:7f:c7:ff:eb:b9:d7:55:5b:a0:6a:aa:e1:fa:aa:d1: ce:20:cf:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzb6Z+aBaKWtFpt6dBUf1Z6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMzExMDgwMDQ2WhcNMjYwMzEyMDgwMDQ2WjAzMTEwLwYDVQQD EyhlMzlkMDQwMWQxODQ2YjUxOTU0OGQyZDJkOWFmN2VlMTY4MTYxMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+PU2N68dEFDOcOAp3Rmg76gBj0p 1Y43Y9sUkLCI3BzLOZpdSdwudcU/yiGlbJgIpXgMVqsT8lzUHwoDuLB9d2e+JDhD jkwyYWJMPYvv6y27fEEeiuwdifoYyi4HPOHMrCMt0PFvmcKmzWHlKeprXDVSKTde DPrZS16Nxwx18Ttfdl+j+zq0z5H7NSXqq2vusCmS9AKQjmFTkPbpD0kB5ENS0tm9 DfCe0XQKFz6H0hCh7x0l/vqT4fqfcev4TBwnkq9PafDk4I7OBS7qmW/Yq1PY02Aa WWsQ/Z/VQAKq5ss6w2eu2O3xH1mPSiKDrKUE49Plh5PMIz3oYC9KeslgPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOdBAHRhGtRlUjS0tmvfuFoFhGTMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADt0DM+l 3GaQGsmLFVl8oH27xjgolrQiF1Z51/vm5OQnEGed0OdDDR9I6l08lPJBFkQ2zSTR UJk4L/Yk2dMqk6CQY22Dif8DD/76pigBT/N24QUL52zZXCefJAXl4PeCnGPWenKW rvzaB92AGfA8jT3dAKSkCNHAyi9KoJolswH8jmzW0xWO4K++LVvVZoL0+FhN7IX1 scYGv2jz5vtGvKa3jhJBw2SmcKymKQwIsWSHVFeejzjvTS5HnQAyHdUEhbOpui94 cRFCjuul0qnAOe76OkINSM8/ztFzLtP8UqbtYKSg5iRljMyujUlMf8f/67nXVVug aqrh+qrRziDPsQ== -----END CERTIFICATE-----Generated at Wed Mar 11 15:24:58 2026 by rpki-client