$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: LPfvike+IIVxgos0Evpw/O46Pd9H2T0ie+/1ptrsHT8= Subject key identifier: 83:9B:C4:9A:68:C7:37:14:78:CB:E0:68:83:80:17:BA:ED:96:E4:7B Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019CE78049BC8679F6629FDF0F9FA2A70626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 186C Signing time: Fri 13 Mar 2026 14:01:10 +0000 Manifest this update: Fri 13 Mar 2026 14:01:10 +0000 Manifest next update: Sat 14 Mar 2026 14:01:10 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: o2nJ2x2P9egDZMYPaQTFupB+SDPcq8F8euHKqoln8K8=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 9: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 10: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 11: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 12: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e7:80:49:bc:86:79:f6:62:9f:df:0f:9f:a2:a7:06:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Mar 13 14:01:10 2026 GMT Not After : Mar 14 14:01:10 2026 GMT Subject: CN=839bc49a68c7371478cbe068838017baed96e47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:f0:fb:a9:a3:2e:8a:9f:9a:d5:5a:96:d7: e0:56:f0:8b:bc:53:32:ea:80:b6:3b:01:36:e2:ab: 65:43:2f:3d:82:fa:c8:b7:ef:01:7e:b7:6c:85:74: 68:36:02:35:02:c5:af:4e:d3:43:73:76:7f:d0:72: 74:4e:08:ea:64:73:59:14:f3:27:93:39:4a:47:e8: 56:81:31:5c:9a:16:e7:5b:a5:7f:72:b4:55:32:8c: ec:15:25:96:46:5a:cf:a2:f0:a1:cf:89:9c:50:03: 3a:e0:58:ae:2e:16:06:42:35:4f:f0:b8:e2:29:2f: c7:f8:44:84:1b:69:dd:de:95:53:0d:c8:37:10:8e: 6b:8f:a8:a3:b2:a9:00:21:e2:e4:d8:06:06:cb:74: 66:fa:8f:33:74:94:85:81:40:80:48:43:4f:39:56: 5c:1b:14:11:f3:f9:29:dc:2a:f1:b7:4a:5a:39:ba: 23:9e:98:8d:b2:b5:2f:2f:c0:18:b8:16:8e:c6:63: c6:01:bb:bc:e0:16:ce:aa:a6:d1:a9:d8:19:9e:73: 83:f0:aa:02:4b:5c:75:dc:1a:9c:65:f0:9f:2f:67: 77:61:1a:85:c5:a5:bb:5f:2b:92:b2:f7:c8:1c:84: ec:6e:99:63:ba:c0:a6:54:e3:85:75:47:99:0d:58: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9B:C4:9A:68:C7:37:14:78:CB:E0:68:83:80:17:BA:ED:96:E4:7B X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:46:29:87:02:1c:33:b2:3a:a9:1a:8b:f5:96:1b:c3:7f:55: 96:55:97:01:7e:f8:01:f4:e0:56:3e:83:51:ee:ef:56:42:e3: 1d:83:50:b3:97:2e:c2:c4:45:fd:37:e7:28:bd:c5:95:ac:c6: d3:05:be:06:d1:3f:5c:df:fa:3e:a5:0c:19:b0:3e:67:24:11: a8:6b:86:bc:b2:f1:ef:e8:ea:04:d4:ef:b5:0b:5a:f5:7b:40: f4:2c:f5:c9:02:11:2f:51:7b:3d:17:e9:0f:ce:0d:3a:b0:69: 9c:6e:b6:b9:7f:0e:f2:fb:f0:4d:87:0a:72:e5:73:f0:31:ff: 4e:d9:b9:44:b8:b5:59:3d:0b:7d:c8:58:20:dd:29:cb:04:9c: 4e:f1:3c:44:2e:a1:1a:5c:d7:c5:31:e6:a7:44:98:31:8a:85: 0a:54:b5:a9:26:6d:91:f6:76:04:1a:92:7e:c1:57:47:8b:c7: f9:a4:4c:92:55:48:bd:6f:4e:0c:f4:a9:32:1c:b7:31:62:b6: 71:ce:4c:fb:04:f3:cb:39:2f:44:91:81:35:f5:79:5f:b4:0a: 6c:98:e7:b9:c9:97:d7:68:b6:d0:31:ba:df:3b:bd:10:65:0f: 66:5c:6b:36:d8:b8:a1:d5:da:c2:a1:9b:e7:4b:1b:42:e5:69: 7b:0e:d2:da -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZzngEm8hnn2Yp/fD5+ipwYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMzEzMTQwMTEwWhcNMjYwMzE0MTQwMTEwWjAzMTEwLwYDVQQD Eyg4MzliYzQ5YTY4YzczNzE0NzhjYmUwNjg4MzgwMTdiYWVkOTZlNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrw+6mjLoqfmtValtfgVvCLvFMy 6oC2OwE24qtlQy89gvrIt+8BfrdshXRoNgI1AsWvTtNDc3Z/0HJ0TgjqZHNZFPMn kzlKR+hWgTFcmhbnW6V/crRVMozsFSWWRlrPovChz4mcUAM64FiuLhYGQjVP8Lji KS/H+ESEG2nd3pVTDcg3EI5rj6ijsqkAIeLk2AYGy3Rm+o8zdJSFgUCASENPOVZc GxQR8/kp3Crxt0paObojnpiNsrUvL8AYuBaOxmPGAbu84BbOqqbRqdgZnnOD8KoC S1x13BqcZfCfL2d3YRqFxaW7XyuSsvfIHITsbpljusCmVOOFdUeZDVgwUwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIObxJpoxzcUeMvgaIOAF7rtluR7MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEYp hwIcM7I6qRqL9ZYbw39VllWXAX74AfTgVj6DUe7vVkLjHYNQs5cuwsRF/TfnKL3F lazG0wW+BtE/XN/6PqUMGbA+ZyQRqGuGvLLx7+jqBNTvtQta9XtA9Cz1yQIRL1F7 PRfpD84NOrBpnG62uX8O8vvwTYcKcuVz8DH/Ttm5RLi1WT0LfchYIN0pywScTvE8 RC6hGlzXxTHmp0SYMYqFClS1qSZtkfZ2BBqSfsFXR4vH+aRMklVIvW9ODPSpMhy3 MWK2cc5M+wTzyzkvRJGBNfV5X7QKbJjnucmX12i20DG63zu9EGUPZlxrNti4odXa wqGb50sbQuVpew7S2g== -----END CERTIFICATE-----Generated at Fri Mar 13 22:21:26 2026 by rpki-client