$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: CsGJvY0d9mAGsYFlD7340BCsK61iQmGGb0YMJXzX+sE= Subject key identifier: 23:1C:5B:A7:B7:09:31:1E:AF:15:BF:B5:30:1A:3F:95:0B:89:34:3E Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019D382DDFAC25FC49D9202E05652624B10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 1546 Signing time: Sun 29 Mar 2026 06:00:23 +0000 Manifest this update: Sun 29 Mar 2026 06:00:23 +0000 Manifest next update: Mon 30 Mar 2026 06:00:23 +0000 Files and hashes: 1: 5CFr6fQyB2vpvdZm5suXapULGkY.roa (hash: MySlISQzcu6EbAQPuhDL4fkVQJfzPvO74yXxzSeC0dc=) 2: 6vOB_0kXFWOVeiswTba6ofOe3mU.roa (hash: G//GVAi7wgZlWL5aVcz26sd32lr8++Cd1gJc7XKITXk=) 3: Cqg-JLEFS3E3SQW_nbJXY_G0YvQ.roa (hash: DReEkN/hfTnnC9nhnsHSBiwG7Yl2oVS+UgMhg+IV99A=) 4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: beJ9l0bcf25delQiotbs3QxcTrylv9pup7sxSXYnPso=) 5: K5rhtCQez3UrTdf0FosqAmDCYa0.roa (hash: IQvbhZSaJLy8W0x8oiGtpYn5Yz5K/bEM7HiYoMzUocg=) 6: WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa (hash: OIwtFNjzelXJFPdqGmasyx/BT4Vju2a4sVYVymTpVmo=) 7: afsk4joDpHnoJv62lZtjXF1VD34.roa (hash: 1O4prDUnlN0kF0HrU0LRJ6fiYKcIRVrdQ3x8VBal8ls=) 8: eBHffMc_OQgLVRhR9CGd779MAbw.roa (hash: qhXCq6p6fkTw8jwxWPhjXqKYMhPmkunhkqWsFwzUDmY=) 9: hiOQSBdS2DRbOgKFoMoP7iKhKPs.roa (hash: j5f0I5DLadnNwscMqYSYZ5CP+jl5XYXJweeFVga4Wow=) 10: s4UUnGEQ4xGZfW9HORKgAKeDeDk.roa (hash: bWxNQV0PxOmoVlnQdQ8nP2osJqNNGhv2/QIKGIWI/58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:2d:df:ac:25:fc:49:d9:20:2e:05:65:26:24:b1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Mar 29 06:00:23 2026 GMT Not After : Mar 30 06:00:23 2026 GMT Subject: CN=231c5ba7b709311eaf15bfb5301a3f950b89343e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:e2:25:f1:e0:fb:4e:67:cf:c0:c1:19:1e: 96:c7:9b:8a:78:78:bc:d0:a3:c7:49:ce:d5:df:40: 5f:c7:20:4d:3e:60:a7:b1:4b:27:ee:84:bb:36:f3: 4f:c6:f0:89:75:87:f1:7b:b8:54:30:dc:83:bb:23: cb:88:bc:d9:52:9e:85:d0:a4:94:be:e2:e1:cc:e1: 56:b7:79:65:17:b5:07:44:4b:b1:b4:64:86:bd:0c: 90:df:69:61:90:59:55:ba:6c:bf:92:a9:45:87:e5: 49:96:de:c6:34:0b:5c:f4:c9:92:7f:ce:4c:26:ee: 2b:b6:08:3f:76:70:f0:bf:1f:ea:8d:09:21:04:73: 5e:05:96:a7:a7:49:93:31:c8:e2:3e:08:19:f0:97: 39:5c:85:42:ed:17:b0:2b:ad:ac:f8:09:90:01:ba: e7:fb:29:09:7f:59:a2:0c:90:fc:4b:f3:86:88:f3: 95:a7:f2:ac:80:c2:2f:34:f1:cb:28:15:52:09:21: 7f:eb:69:a2:14:82:f2:0e:cf:b0:ce:07:32:cf:e0: 3d:af:64:cf:f2:dc:5a:f5:27:cd:55:e1:0b:b5:1a: 8c:38:70:47:8b:4c:a8:35:e7:09:cc:14:bf:42:49: 8b:8d:ab:4c:df:04:0a:2f:aa:8e:40:37:6a:b5:06: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:5B:A7:B7:09:31:1E:AF:15:BF:B5:30:1A:3F:95:0B:89:34:3E X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d5:4a:a3:be:7d:2e:62:93:4e:33:8c:c6:9a:32:95:de:e1: d0:cf:a3:f4:90:72:8e:44:08:ba:55:04:f3:85:3b:48:44:1e: 3e:bd:a8:96:58:60:7b:3c:58:f1:86:f3:3d:c7:09:1d:40:99: 4e:cc:0e:20:55:78:6a:9d:d7:cb:c7:46:3a:61:cd:dc:2c:d4: 5d:ca:a2:25:32:c6:b1:52:a0:8c:30:7c:4e:84:60:94:d0:5d: 29:2a:87:6b:f6:ec:19:71:16:93:c9:e6:50:b9:06:c7:b8:ee: 8b:3a:d0:da:ae:ee:a8:b7:75:5d:e1:56:09:a0:e3:08:ad:77: 04:a7:6d:4e:e6:f6:c1:8e:f1:60:d0:01:c9:72:8d:bf:bb:7e: 49:e7:a4:df:50:ed:fe:6d:77:4f:eb:9e:e0:dc:8e:da:ae:ac: ce:f8:93:c2:e4:34:db:17:63:44:b8:93:cf:89:42:16:71:fc: 8d:4e:6d:79:88:47:d1:b6:40:8b:81:c3:62:e0:18:13:60:0f: 06:67:09:fb:4b:f0:e5:23:b5:9f:ff:88:8c:48:05:ef:34:c4: 24:94:eb:87:5a:41:2b:e2:55:9f:b7:91:ea:1e:ad:51:fa:42: 40:a7:1b:a8:63:bd:32:d1:52:4f:e5:44:4c:1d:45:50:e2:e4: 3f:f4:e6:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04Ld+sJfxJ2SAuBWUmJLEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMzI5MDYwMDIzWhcNMjYwMzMwMDYwMDIzWjAzMTEwLwYDVQQD EygyMzFjNWJhN2I3MDkzMTFlYWYxNWJmYjUzMDFhM2Y5NTBiODkzNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrjiJfHg+05nz8DBGR6Wx5uKeHi8 0KPHSc7V30BfxyBNPmCnsUsn7oS7NvNPxvCJdYfxe7hUMNyDuyPLiLzZUp6F0KSU vuLhzOFWt3llF7UHREuxtGSGvQyQ32lhkFlVumy/kqlFh+VJlt7GNAtc9MmSf85M Ju4rtgg/dnDwvx/qjQkhBHNeBZanp0mTMcjiPggZ8Jc5XIVC7RewK62s+AmQAbrn +ykJf1miDJD8S/OGiPOVp/KsgMIvNPHLKBVSCSF/62miFILyDs+wzgcyz+A9r2TP 8txa9SfNVeELtRqMOHBHi0yoNecJzBS/QkmLjatM3wQKL6qOQDdqtQZVCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMcW6e3CTEerxW/tTAaP5ULiTQ+MB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNVKo759 LmKTTjOMxpoyld7h0M+j9JByjkQIulUE84U7SEQePr2ollhgezxY8YbzPccJHUCZ TswOIFV4ap3Xy8dGOmHN3CzUXcqiJTLGsVKgjDB8ToRglNBdKSqHa/bsGXEWk8nm ULkGx7juizrQ2q7uqLd1XeFWCaDjCK13BKdtTub2wY7xYNAByXKNv7t+Seek31Dt /m13T+ue4NyO2q6szviTwuQ02xdjRLiTz4lCFnH8jU5teYhH0bZAi4HDYuAYE2AP BmcJ+0vw5SO1n/+IjEgF7zTEJJTrh1pBK+JVn7eR6h6tUfpCQKcbqGO9MtFST+VE TB1FUOLkP/TmVA== -----END CERTIFICATE-----Generated at Sun Mar 29 11:28:05 2026 by rpki-client