$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: 4NFfBomvyOMP3LNZDNoX5+3AR046vZy2GlDyJbAFwmE= Subject key identifier: CB:20:DF:63:77:40:A7:65:B4:C6:04:3E:95:FD:B8:F8:0A:C0:A0:26 Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019D38D3BF9A4A02F0DBDB70F65953835F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 046A Signing time: Sun 29 Mar 2026 09:01:34 +0000 Manifest this update: Sun 29 Mar 2026 09:01:34 +0000 Manifest next update: Mon 30 Mar 2026 09:01:34 +0000 Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=) 2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=) 3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=) 4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: srFHXjw9x9xBTrwOSRlFp94Yob7x9jJaosOdXDkcKB4=) 5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=) 6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=) 7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=) 8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) 9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=) 10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=) 11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=) 12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d3:bf:9a:4a:02:f0:db:db:70:f6:59:53:83:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Mar 29 09:01:34 2026 GMT Not After : Mar 30 09:01:34 2026 GMT Subject: CN=cb20df637740a765b4c6043e95fdb8f80ac0a026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:52:ec:98:1e:c1:81:7a:1c:0d:e4:09:4b: 08:f0:ec:bb:43:d8:fa:ea:6a:bc:8e:63:e8:66:37: fe:e3:96:b3:81:36:7a:f2:a2:08:8e:c2:fa:60:e4: c1:00:e4:e6:81:ee:5f:6d:ce:96:30:2a:92:c3:5e: b6:32:c1:f8:ec:86:9d:29:e4:f4:94:03:9e:98:a4: 17:0d:e0:96:89:5c:13:0b:ca:3f:69:e0:23:35:6a: cb:08:a6:3f:2e:d4:81:f7:bb:5b:6a:1d:cf:78:16: 3e:70:95:ab:eb:9c:b3:06:8e:cd:69:23:fc:ee:36: ca:0a:01:0e:af:9a:e0:87:e5:32:e0:b7:0e:71:3f: d6:65:25:79:49:f7:e5:d1:32:2c:06:04:dd:65:5b: 58:1e:eb:18:1c:22:f8:48:20:d4:e1:b4:8c:57:c8: a8:1c:3d:94:a4:2c:70:ae:5c:ad:a1:59:ab:2b:21: ab:fa:13:b0:6a:36:8e:a9:e3:05:f4:fa:dd:f3:2d: 90:0c:bb:87:1e:8e:92:2b:21:3c:31:c0:b0:91:e6: 6d:7e:ab:15:42:11:85:6d:3f:7c:08:f4:4f:cb:4d: 67:45:af:6a:a2:3e:6d:18:13:80:a6:5a:12:1b:1a: 67:fe:68:7c:66:19:f6:9e:49:79:b2:18:94:d1:f9: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:20:DF:63:77:40:A7:65:B4:C6:04:3E:95:FD:B8:F8:0A:C0:A0:26 X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1f:7c:52:dd:c2:e8:28:aa:13:d5:dc:07:df:77:d1:4a:02: 82:c4:79:c3:ac:3d:49:40:5e:77:4a:af:07:7c:c3:9d:76:c4: 60:de:69:40:03:14:0f:4d:96:c6:90:db:22:8d:07:d0:d5:73: 05:05:bc:78:88:e3:9f:83:31:3d:a2:44:34:06:6b:46:24:22: 69:05:34:80:3b:80:23:4f:be:30:03:f0:d8:2d:e9:d6:49:d2: 12:5e:c9:83:77:a1:a8:33:e9:c8:e8:77:22:4e:01:3d:8f:ba: 28:5d:1d:68:ec:bb:e3:b0:ac:7e:6b:4f:ae:54:f5:df:75:c9: 57:44:8b:7f:fb:d2:77:3e:79:98:8b:d6:15:52:2e:c6:b3:0f: 47:3d:01:4f:44:67:cd:d5:63:8e:c5:3d:62:d9:c3:14:a3:db: 81:1b:33:2e:80:50:ed:a3:71:7d:75:7c:e0:a5:2f:2e:f4:65: 81:c1:58:7f:aa:33:4a:57:d3:a6:3b:af:77:05:26:12:25:d2: a4:61:e3:52:84:06:5b:12:01:58:87:b7:58:5e:71:16:ef:8e: d9:e5:e4:05:fc:7f:19:fb:1c:19:f0:6e:ce:1d:5e:56:74:63: c7:85:c4:62:78:c1:09:85:23:54:b2:8f:08:ab:09:ac:a2:7a: a3:d3:90:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0407+aSgLw29tw9llTg1+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwMzI5MDkwMTM0WhcNMjYwMzMwMDkwMTM0WjAzMTEwLwYDVQQD EyhjYjIwZGY2Mzc3NDBhNzY1YjRjNjA0M2U5NWZkYjhmODBhYzBhMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqhS7JgewYF6HA3kCUsI8Oy7Q9j6 6mq8jmPoZjf+45azgTZ68qIIjsL6YOTBAOTmge5fbc6WMCqSw162MsH47IadKeT0 lAOemKQXDeCWiVwTC8o/aeAjNWrLCKY/LtSB97tbah3PeBY+cJWr65yzBo7NaSP8 7jbKCgEOr5rgh+Uy4LcOcT/WZSV5Sffl0TIsBgTdZVtYHusYHCL4SCDU4bSMV8io HD2UpCxwrlytoVmrKyGr+hOwajaOqeMF9Prd8y2QDLuHHo6SKyE8McCwkeZtfqsV QhGFbT98CPRPy01nRa9qoj5tGBOAploSGxpn/mh8Zhn2nkl5shiU0fkpKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsg32N3QKdltMYEPpX9uPgKwKAmMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx98Ut3C 6CiqE9XcB9930UoCgsR5w6w9SUBed0qvB3zDnXbEYN5pQAMUD02WxpDbIo0H0NVz BQW8eIjjn4MxPaJENAZrRiQiaQU0gDuAI0++MAPw2C3p1knSEl7Jg3ehqDPpyOh3 Ik4BPY+6KF0daOy747CsfmtPrlT133XJV0SLf/vSdz55mIvWFVIuxrMPRz0BT0Rn zdVjjsU9YtnDFKPbgRszLoBQ7aNxfXV84KUvLvRlgcFYf6ozSlfTpjuvdwUmEiXS pGHjUoQGWxIBWIe3WF5xFu+O2eXkBfx/GfscGfBuzh1eVnRjx4XEYnjBCYUjVLKP CKsJrKJ6o9OQNQ== -----END CERTIFICATE-----Generated at Sun Mar 29 14:06:45 2026 by rpki-client