$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: ctNBQmTnQaW/mHlASe0mcKXLJakMnziCAjILvQF2qTI= Subject key identifier: F3:D6:9A:EB:34:0B:2C:26:FD:19:81:D0:B5:95:AE:91:CE:44:2A:6A Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019CE2FDFFA8CA101513621EFC3964563C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1934 Signing time: Thu 12 Mar 2026 17:00:22 +0000 Manifest this update: Thu 12 Mar 2026 17:00:22 +0000 Manifest next update: Fri 13 Mar 2026 17:00:22 +0000 Files and hashes: 1: FC06aK4k9Vhficw41G6Hdl0Xt58.roa (hash: ZG52zMOxumtbmZghOID0KYulTKdKMGJDweSarBJ8RO8=) 2: IachUPTX_993yJEpQF0wVvXQlj0.roa (hash: +E7fJxAVDf8rQHDt1qq8WPbiZjHDDTDf+pccnAqllfE=) 3: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 4: MloCUaQjIaff5rD0I_V7IQUgMHA.roa (hash: z4QEYPJ8c5S4F1m2QTf25snrDWXe9stPlhx7/VyKtfE=) 5: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 6: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 7: bJpd8Oj5rzvFy2hgHwNUQ_tzjy4.roa (hash: izLdFM9N1wbZbR37d7jbsfqm2J2WRyeSpB6evgH/KdE=) 8: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: IoybdljtcjPWf9ARnlaxxgyQY7DNMp6ZwIpW5RQhE7s=) 9: c0uvTOI67xh0FKWxSwRg-nYNzwQ.roa (hash: plCIyBBA7fJ/ab66sTs1uwcmLK+UCs7jG1hMDH2MrbE=) 10: en-Q7yeb2Z7kIhNbVjOcGbm5MIc.roa (hash: rXbw78vAg5cjNMmUQ0XTeSV5YcEgAXrrBnTa2Pbv9+k=) 11: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 12: fcPE3FmFIPJkdgDFk_HjDTDu9qI.roa (hash: 14Y+PCdLeByLL/GRyxZdTiF21mS17E4r4fWTjIJJ+gs=) 13: lVpZAUc7qjcetTd3RGNA9GASrfY.roa (hash: MsG+zzzKR9slrtwvP+3tiSHAXUDOrqk0viarDp9CSdo=) 14: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 15: p2oWhL0ITPRnafZcjd3zO8ccO0U.roa (hash: jjWCy77+PgnPD2qd0XJjHuWxDzybLnknwlx084il4SE=) 16: pSxnjIW1LZcD5sf9hc-QWRMlCXs.roa (hash: 7NT+wNW4fQoKhVSO5fHIZEZW19pRVLnmVJ2E4i3ZHTo=) 17: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 18: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 19: xch1OTrgwhompJ-XKic-UzKZ2zQ.roa (hash: mlOvwHkD0mxwoqmcv+JuS61IKgE7oNpZSE3msWqExWA=) 20: y2YOxq73wxqpsD0YZ8pOXdLitLk.roa (hash: c4b5W1/zwM1DY57UKacEsED6Yc4dNYwQiO/KOLoutlI=) 21: yOLP8JGsQMCFzWngfeM-F2G3Csc.roa (hash: qUYYxQQnFX6MaYW1jl8K4rrQJvoPXd0mpK3gIXiWjkc=) 22: yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa (hash: V/g6j3QRRQ10jRrTt5T1G9dqYBUtdzYwy5fiLM0sH2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:fd:ff:a8:ca:10:15:13:62:1e:fc:39:64:56:3c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Mar 12 17:00:22 2026 GMT Not After : Mar 13 17:00:22 2026 GMT Subject: CN=f3d69aeb340b2c26fd1981d0b595ae91ce442a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:fc:e8:0c:77:4e:8b:bc:e6:98:01:81:79: 94:55:76:59:85:a2:7a:89:8c:75:0d:57:32:0d:08: 42:28:f2:ed:fc:65:39:26:67:1f:07:42:c8:7a:0c: 5e:e8:49:75:c8:fc:70:a5:af:7c:9a:b6:ee:9d:fd: b0:0c:1a:80:c8:36:d4:70:73:37:ff:e3:f5:7e:af: 96:7f:c4:30:e7:5c:3f:7c:3b:79:7f:50:32:c7:bd: 84:9a:73:8e:26:58:fa:0d:46:ce:f2:83:b3:d9:81: 11:ec:06:0c:ad:77:e8:34:a5:d6:1a:23:41:15:bc: 36:7f:22:35:07:25:0b:e5:e6:a2:2e:2c:8a:54:f2: 8d:a7:08:29:05:c7:fd:66:4c:28:15:71:88:d2:b9: 96:5b:56:67:cf:1a:de:41:c7:03:70:70:1e:aa:77: fe:90:3a:78:a1:12:fd:c6:ec:e0:e2:3b:a0:85:11: b6:8f:41:c9:52:ff:a1:33:a0:1e:79:38:e2:6f:13: 00:63:c7:2e:85:cc:32:2d:42:b9:6d:7a:dc:f6:9d: 10:69:16:09:9b:12:fe:57:9b:ed:21:18:99:62:5b: d9:52:47:db:fa:b7:82:e9:a5:c7:b6:58:f0:5a:dd: 05:a3:77:a1:b4:48:b5:52:f7:af:e1:f4:6b:64:e4: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D6:9A:EB:34:0B:2C:26:FD:19:81:D0:B5:95:AE:91:CE:44:2A:6A X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8c:4c:e8:cc:a4:86:79:3e:4b:0d:31:21:f6:d2:e1:a8:63: 71:86:6c:60:21:ac:f8:b3:f4:08:ec:52:9f:1a:a8:52:41:85: 3c:83:ad:36:3e:51:2e:2d:db:e3:9a:66:02:4f:3f:0b:16:16: f3:71:0b:fd:c7:f9:62:3f:17:d1:66:40:11:18:f0:1a:51:6c: b5:9e:e6:df:5e:08:ce:30:12:ce:1d:d9:e6:59:b8:2c:04:fb: a4:df:55:74:1e:5a:08:e5:1b:6c:45:39:5f:61:1d:53:f8:e3: 4a:36:ce:90:1f:50:ae:62:2d:69:75:7a:d1:07:f5:ef:84:4e: 83:70:e4:8c:fa:61:46:4a:c0:04:de:d6:1d:b2:22:4e:b4:ac: b4:a5:f5:a1:41:7c:f3:5f:f9:6a:38:5c:4b:17:6e:36:27:c9: d3:4b:70:b8:d2:4f:45:01:30:c0:5d:70:eb:78:47:44:e7:61: fc:46:e0:cc:90:4c:4d:d6:a5:57:03:7c:7b:aa:ef:05:42:69: fc:36:a5:11:9c:8f:c6:fc:4c:3d:ee:b2:f5:59:fe:d6:ff:b6: ba:40:66:34:7d:b9:e1:32:93:42:2a:7a:5f:86:f0:2c:88:19: 66:45:8f:3f:d1:ef:c7:19:41:2e:a0:ba:63:c6:4d:4d:9d:ec: 15:44:06:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzi/f+oyhAVE2Ie/DlkVjwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMzEyMTcwMDIyWhcNMjYwMzEzMTcwMDIyWjAzMTEwLwYDVQQD EyhmM2Q2OWFlYjM0MGIyYzI2ZmQxOTgxZDBiNTk1YWU5MWNlNDQyYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vr86Ax3Tou85pgBgXmUVXZZhaJ6 iYx1DVcyDQhCKPLt/GU5JmcfB0LIegxe6El1yPxwpa98mrbunf2wDBqAyDbUcHM3 /+P1fq+Wf8Qw51w/fDt5f1Ayx72EmnOOJlj6DUbO8oOz2YER7AYMrXfoNKXWGiNB Fbw2fyI1ByUL5eaiLiyKVPKNpwgpBcf9ZkwoFXGI0rmWW1ZnzxreQccDcHAeqnf+ kDp4oRL9xuzg4jughRG2j0HJUv+hM6AeeTjibxMAY8cuhcwyLUK5bXrc9p0QaRYJ mxL+V5vtIRiZYlvZUkfb+reC6aXHtljwWt0Fo3ehtEi1Uvev4fRrZOQLrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPWmus0Cywm/RmB0LWVrpHORCpqMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoxM6Myk hnk+Sw0xIfbS4ahjcYZsYCGs+LP0COxSnxqoUkGFPIOtNj5RLi3b45pmAk8/CxYW 83EL/cf5Yj8X0WZAERjwGlFstZ7m314IzjASzh3Z5lm4LAT7pN9VdB5aCOUbbEU5 X2EdU/jjSjbOkB9QrmItaXV60Qf174ROg3DkjPphRkrABN7WHbIiTrSstKX1oUF8 81/5ajhcSxduNifJ00twuNJPRQEwwF1w63hHROdh/EbgzJBMTdalVwN8e6rvBUJp /DalEZyPxvxMPe6y9Vn+1v+2ukBmNH254TKTQip6X4bwLIgZZkWPP9HvxxlBLqC6 Y8ZNTZ3sFUQGXA== -----END CERTIFICATE-----Generated at Fri Mar 13 00:14:41 2026 by rpki-client