$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft File: b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json) Hash identifier: 8kZHAVbKbUWyQFixe/EdSERxmYxM5Dk69wwqJMvyxNo= Subject key identifier: AB:2F:53:0F:3A:B0:58:89:BD:D7:37:DC:DB:BC:02:16:6C:BB:80:93 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019D37531FDEE94AECA61D4772C1669C7303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft Manifest number: 0FA9 Signing time: Sun 29 Mar 2026 02:01:27 +0000 Manifest this update: Sun 29 Mar 2026 02:01:27 +0000 Manifest next update: Mon 30 Mar 2026 02:01:27 +0000 Files and hashes: 1: 02C_yN_pBtrRHfaPFMBLJa0WHZ8.roa (hash: 7dhoMo1eR7pFH0VVu4/1Umj2Sqmm2uRRTNfBAcPSvnQ=) 2: 1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa (hash: fO8iBbvBaMNoHq3COqjue3TAdfcc3LHY54KEjAJ2QqA=) 3: 4gWTFBdbX28RmU-vZWa7w0Na-oY.roa (hash: qVoPT+hSYJGFIxsu7hxtF38NHWCrB7G+eA7b60ig6oM=) 4: B6LIx5SFj-LpvkMusTX6eylqB8Q.roa (hash: 8sXEje/NFZbddnD1ozsYpbMXZouncZaHmKPwgX4Mau8=) 5: C2l9FVRYOzzBJurzWsT0JOwEoX4.roa (hash: 7Sk+vqLvJx0/QulXIfk1zjfce9b9KULZIVzx1MsBroo=) 6: GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa (hash: 5BgcRj7E+Zjch4bi8qsfXSHZRBSk5RcNGFESWPAD6ZM=) 7: HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa (hash: aXoYi4sL26UfttU2AQRoMTdqaFswBst+yXFXy3bMFQI=) 8: Kd5BCnuh7Vfh_ncYW41MRfZTY_g.roa (hash: 550VYYwHjp6DkAL2ALMNefBJad9ffNBJSB4pG2l/Jxc=) 9: Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa (hash: AmlE5tYLPssjw9U4Xmt2RH2S2h07B8JY5rM+qQje4aM=) 10: WpG-HECBoKzNEGH7SZCr2uB_62w.roa (hash: QHsaGRcXtfYHvO3WG+U0BRusuvkiVd+XVkbhpqWYJNE=) 11: YgnciPpG25vPLjs4alvklTckQa0.roa (hash: LMsW71cXkQjTBXqyfbQ1BVncfxCsq9ms60/4uLgDxuQ=) 12: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: 0k9RmsrAdpQxrLx9W5sCoK2bKTtGjQsSmf9nTENQtRg=) 13: gW7JxFR7uiW4ZpkuSJauf4QocGo.roa (hash: cXbpQwceKEQaMo+TbQWEr8PhkuENmJydovPMYT6tg40=) 14: hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa (hash: 049g9W8sXpkKaEFMxqweslPE125wn44hfoXmY1GLrGM=) 15: hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa (hash: NgSV6JkTSImeWP6gCSVbJkpIH9ZghYaqVNR51xDKH60=) 16: z7k8kovlPmv-zBHmb4FIXdtjtc4.roa (hash: 34UjHgoDLPq5cVz9xOQp030/8J4AwYYZjM3LuMub1Pg=) 17: zFi2gp3SKU3c0S_naj_PpCRo6aU.roa (hash: /L5t/XoZ8kDLzebR3QIc1BMtvCbpTdiF6nGgxkPEo1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:53:1f:de:e9:4a:ec:a6:1d:47:72:c1:66:9c:73:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Mar 29 02:01:27 2026 GMT Not After : Mar 30 02:01:27 2026 GMT Subject: CN=ab2f530f3ab05889bdd737dcdbbc02166cbb8093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:65:af:51:ce:b6:17:80:5e:59:44:a9:71: 33:53:1f:17:fb:6a:2d:d0:4b:e5:02:e6:0f:c8:9b: a2:1c:06:90:60:e5:91:28:ac:c5:2e:13:a9:e1:85: 8c:7c:4c:df:40:28:58:d8:0f:ba:9c:5b:01:1c:9d: cb:57:72:cb:98:c7:85:e0:1f:51:21:18:af:e6:1f: d3:81:7e:35:72:61:86:ee:28:8b:35:fa:0d:d6:92: 75:a5:17:c1:5c:2c:01:38:6a:b3:71:c9:cb:cd:db: 37:9b:bb:fb:48:5b:30:42:98:56:56:b1:19:b1:1d: d1:71:6b:18:0d:c0:39:34:f3:c3:b4:c4:2a:20:b9: 60:e7:1b:e7:8e:a5:be:1d:5b:66:a8:15:78:05:e3: 23:2e:f2:f0:62:fa:8a:85:fa:f9:43:73:ef:25:97: 8d:bb:e7:b4:d5:a1:e7:0a:41:b6:60:65:90:9f:3e: af:b5:bf:e6:0d:b0:5d:6a:84:ab:67:4c:59:6b:bc: 3f:30:b1:25:1c:d3:56:b4:55:51:ea:94:9b:1c:f8: 63:5d:b2:11:5b:f5:5d:de:f7:4a:6e:bf:26:c0:a1: 5c:4f:7b:cf:52:e4:75:49:75:bf:b3:f7:70:4d:bb: 60:9d:2f:3a:6d:7b:0c:26:04:e7:5c:49:7a:60:eb: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2F:53:0F:3A:B0:58:89:BD:D7:37:DC:DB:BC:02:16:6C:BB:80:93 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c5:31:dc:a2:f0:dc:f9:05:01:89:a2:73:74:cb:d2:ae:8d: 0b:00:46:81:d4:f0:63:bb:ba:cd:1e:d7:72:32:4e:ec:1d:3f: 51:d4:84:44:5d:2b:20:fb:a3:d7:a7:22:1c:49:ac:e5:83:d9: 42:b0:50:fe:09:c1:38:11:a7:c9:25:b8:20:00:ae:19:65:9b: f0:d8:4f:65:bc:02:ab:94:02:81:84:52:19:1b:bb:b9:e9:72: 87:89:d9:df:46:97:55:d9:29:bb:4e:f9:e5:6c:d5:82:98:a0: a3:63:fe:2b:90:0c:52:dd:6a:7c:b0:bd:be:29:c9:33:d3:c8: 24:2c:47:3a:b3:5b:1b:de:8a:4a:dc:fc:06:47:6a:5c:ab:31: 5d:c4:f8:5d:3e:00:71:02:c0:bf:19:8b:11:5e:e7:7f:5c:38: c7:9d:94:f7:91:ba:59:9f:64:d6:2e:e5:a5:16:d6:59:5a:b4: 3a:50:6d:81:24:f6:7e:58:12:f9:42:96:f9:c7:d7:42:77:bf: c7:60:a1:6f:04:c7:28:b7:ad:a7:87:20:88:7f:d6:10:46:9a: 7c:32:f2:3d:a3:db:6d:13:8f:14:bc:c5:80:6b:89:f7:19:d4: c4:75:5f:a2:6d:75:3e:3a:d5:a4:24:52:9a:cf:2f:6b:85:45: 5e:6b:77:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03Ux/e6Ursph1HcsFmnHMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMzI5MDIwMTI3WhcNMjYwMzMwMDIwMTI3WjAzMTEwLwYDVQQD EyhhYjJmNTMwZjNhYjA1ODg5YmRkNzM3ZGNkYmJjMDIxNjZjYmI4MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLRlr1HOtheAXllEqXEzUx8X+2ot 0EvlAuYPyJuiHAaQYOWRKKzFLhOp4YWMfEzfQChY2A+6nFsBHJ3LV3LLmMeF4B9R IRiv5h/TgX41cmGG7iiLNfoN1pJ1pRfBXCwBOGqzccnLzds3m7v7SFswQphWVrEZ sR3RcWsYDcA5NPPDtMQqILlg5xvnjqW+HVtmqBV4BeMjLvLwYvqKhfr5Q3PvJZeN u+e01aHnCkG2YGWQnz6vtb/mDbBdaoSrZ0xZa7w/MLElHNNWtFVR6pSbHPhjXbIR W/Vd3vdKbr8mwKFcT3vPUuR1SXW/s/dwTbtgnS86bXsMJgTnXEl6YOvUrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsvUw86sFiJvdc33Nu8AhZsu4CTMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasUx3KLw 3PkFAYmic3TL0q6NCwBGgdTwY7u6zR7XcjJO7B0/UdSERF0rIPuj16ciHEms5YPZ QrBQ/gnBOBGnySW4IACuGWWb8NhPZbwCq5QCgYRSGRu7uelyh4nZ30aXVdkpu075 5WzVgpigo2P+K5AMUt1qfLC9vinJM9PIJCxHOrNbG96KStz8BkdqXKsxXcT4XT4A cQLAvxmLEV7nf1w4x52U95G6WZ9k1i7lpRbWWVq0OlBtgST2flgS+UKW+cfXQne/ x2ChbwTHKLetp4cgiH/WEEaafDLyPaPbbROPFLzFgGuJ9xnUxHVfom11PjrVpCRS ms8va4VFXmt3vg== -----END CERTIFICATE-----Generated at Sun Mar 29 11:13:32 2026 by rpki-client