$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: XImYubKFO+IulJwdjIPWT3Dd9h0y6W9rEkKGvJP0PoU= Subject key identifier: CF:CB:3D:89:07:C6:8A:99:AC:42:E0:BF:68:B3:56:A4:42:D2:24:D6 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019D3A1D12084638E3211084AC75A7BD1B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 08F5 Signing time: Sun 29 Mar 2026 15:01:16 +0000 Manifest this update: Sun 29 Mar 2026 15:01:16 +0000 Manifest next update: Mon 30 Mar 2026 15:01:16 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=) 8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: yvNtg6EsRb0qpfxUM938DHUZPTzQGewCnjDuMDYwcq4=) 10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 12: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:1d:12:08:46:38:e3:21:10:84:ac:75:a7:bd:1b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Mar 29 15:01:16 2026 GMT Not After : Mar 30 15:01:16 2026 GMT Subject: CN=cfcb3d8907c68a99ac42e0bf68b356a442d224d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:b0:93:de:d4:ca:33:26:7e:b0:8d:42:1e: 13:93:62:25:3d:c1:b9:fd:bb:04:a4:c3:a0:9a:1d: a9:23:41:56:0b:04:7b:63:81:40:9c:76:fc:ca:45: 5c:3d:07:0b:a9:b2:27:b5:9b:f0:72:4e:30:68:61: 78:2e:83:69:af:f0:ac:65:65:44:c9:ae:90:ba:b5: 54:b1:17:c3:94:cc:2d:1d:99:4b:12:32:98:85:07: bd:f8:ac:88:7e:13:c0:5b:34:f8:53:e3:91:a0:c2: d9:d2:20:09:3a:b9:1a:1c:95:38:ff:e5:98:9b:7b: cb:31:6b:f0:3d:a9:69:c9:8c:82:f7:4d:71:b4:74: 31:1b:8c:50:20:11:ee:78:ac:a2:cf:54:46:c8:07: bb:11:d1:2e:e2:fd:64:ec:6b:91:71:3e:12:88:46: 5d:4b:5a:6d:cb:57:cc:8c:94:8a:e7:85:5f:3e:26: 67:a4:3f:89:8c:45:70:fc:80:c8:79:87:b0:bc:1f: 42:25:ee:1b:ac:82:12:f1:c4:e3:6b:04:73:92:23: 48:0f:cc:7c:32:0d:79:46:fb:fd:e2:58:1f:2f:a4: 7d:03:06:b4:ab:53:2f:d4:0c:c0:d4:27:6b:30:06: da:8b:0f:b8:2d:44:4e:3e:c3:d0:70:90:d9:2d:9d: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CB:3D:89:07:C6:8A:99:AC:42:E0:BF:68:B3:56:A4:42:D2:24:D6 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:21:25:4f:c6:b2:15:d5:65:21:2c:43:65:2a:be:a5:c6: 48:8d:62:b9:b8:a1:bf:4e:f0:71:71:1b:f0:ae:7a:da:3c:13: d1:73:c1:d5:07:8a:bb:31:04:75:5e:45:d4:df:85:d5:b4:c9: 71:b2:95:b5:f0:fb:28:83:e3:65:04:3e:94:55:a4:92:31:b4: e4:b1:63:a6:7a:43:3d:a3:85:64:26:d2:2f:5d:26:5d:d1:4e: b7:29:1a:bc:fe:ea:c7:0a:b2:37:04:83:14:41:2a:1f:64:80: 5d:c0:69:97:64:9c:33:2b:40:7a:ee:df:4a:5e:36:7a:b8:67: d8:f2:86:1d:c9:e0:1d:b8:36:81:4a:0d:d3:1e:7e:ba:b3:fe: b1:54:d3:a4:a7:e7:8e:b5:39:fd:9a:18:a9:bd:7f:51:44:e2: ae:3e:6f:83:6e:d1:6f:fe:8e:e1:2d:a5:d8:4f:f1:1f:56:ff: 4e:42:95:a1:ad:f5:db:0b:38:8b:7b:2e:90:e8:37:93:1b:87: 11:51:3a:bc:01:d9:fa:d8:b6:57:69:78:c2:93:1b:37:d7:a7: 95:e0:7a:58:b0:3b:79:ff:3e:cd:8d:07:af:8a:73:7a:d7:02: 5d:81:54:00:ff:41:c3:a7:0a:34:f0:74:2e:3e:18:37:32:b7: d3:a6:ff:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06HRIIRjjjIRCErHWnvRtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMzI5MTUwMTE2WhcNMjYwMzMwMTUwMTE2WjAzMTEwLwYDVQQD EyhjZmNiM2Q4OTA3YzY4YTk5YWM0MmUwYmY2OGIzNTZhNDQyZDIyNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xuwk97UyjMmfrCNQh4Tk2IlPcG5 /bsEpMOgmh2pI0FWCwR7Y4FAnHb8ykVcPQcLqbIntZvwck4waGF4LoNpr/CsZWVE ya6QurVUsRfDlMwtHZlLEjKYhQe9+KyIfhPAWzT4U+ORoMLZ0iAJOrkaHJU4/+WY m3vLMWvwPalpyYyC901xtHQxG4xQIBHueKyiz1RGyAe7EdEu4v1k7GuRcT4SiEZd S1pty1fMjJSK54VfPiZnpD+JjEVw/IDIeYewvB9CJe4brIIS8cTjawRzkiNID8x8 Mg15Rvv94lgfL6R9Awa0q1Mv1AzA1CdrMAbaiw+4LUROPsPQcJDZLZ11twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/LPYkHxoqZrELgv2izVqRC0iTWMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmchJU/G shXVZSEsQ2UqvqXGSI1iubihv07wcXEb8K562jwT0XPB1QeKuzEEdV5F1N+F1bTJ cbKVtfD7KIPjZQQ+lFWkkjG05LFjpnpDPaOFZCbSL10mXdFOtykavP7qxwqyNwSD FEEqH2SAXcBpl2ScMytAeu7fSl42erhn2PKGHcngHbg2gUoN0x5+urP+sVTTpKfn jrU5/ZoYqb1/UUTirj5vg27Rb/6O4S2l2E/xH1b/TkKVoa312ws4i3sukOg3kxuH EVE6vAHZ+ti2V2l4wpMbN9enleB6WLA7ef8+zY0Hr4pzetcCXYFUAP9Bw6cKNPB0 Lj4YNzK306b/EQ== -----END CERTIFICATE-----Generated at Sun Mar 29 22:29:40 2026 by rpki-client