$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: M5Ies3kBnAip7HHuNtS6PBpinczXiNvxkU2o1cIZe30= Subject key identifier: F4:92:91:7E:4F:FE:FA:1B:D8:19:65:EF:CA:26:18:25:DA:6C:E2:5B Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019CC52B58F278F011AD217DFC36AB6E9CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 179A Signing time: Fri 06 Mar 2026 22:01:18 +0000 Manifest this update: Fri 06 Mar 2026 22:01:18 +0000 Manifest next update: Sat 07 Mar 2026 22:01:18 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: esFsyFexOFeQOi7p+2e851q3n5YCXEzHL+MQBhjSSYY=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c5:2b:58:f2:78:f0:11:ad:21:7d:fc:36:ab:6e:9c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Mar 6 22:01:18 2026 GMT Not After : Mar 7 22:01:18 2026 GMT Subject: CN=f492917e4ffefa1bd81965efca261825da6ce25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:8e:64:13:4a:1c:cd:53:27:01:d5:fa:4c: f2:e9:45:fa:1c:1f:24:4e:8e:8c:75:74:c9:c4:6b: 16:0e:b5:b2:4b:b7:ee:b5:27:df:ed:f7:7d:64:eb: 80:ac:6c:8a:5c:72:03:7e:98:dc:58:7a:9e:fb:f8: c2:a2:e2:a8:6f:13:58:c1:03:c3:33:b6:74:07:4a: b0:a8:5f:aa:ec:5a:f3:79:3b:c5:b8:fa:b4:4e:96: 3b:d4:3a:3e:af:48:ae:21:d4:4c:08:7e:6f:a7:08: 95:c3:11:69:12:9f:7f:c6:8f:30:ee:a0:bc:c5:74: 96:9a:d4:61:30:b7:e3:3f:00:ad:6f:0b:5f:b1:a8: 68:eb:cf:f5:09:01:30:97:0a:6d:6c:06:e4:8f:e2: 26:e7:eb:b7:d2:f2:9b:a0:8e:ad:01:9d:dc:fa:88: 4b:1e:a8:f1:14:b4:39:9e:41:f8:d0:5f:1d:63:fd: 9b:3e:f5:e6:54:32:d6:05:57:22:70:68:1d:db:8a: 6d:51:84:dd:73:5f:98:7f:45:c7:2b:c6:6f:28:ee: f7:99:f5:58:e8:a7:46:29:93:9d:66:80:79:ef:13: 49:bf:54:de:d9:3a:b5:1b:a3:86:cf:15:cb:8a:b7: 1b:b6:f9:52:69:87:5a:21:e0:00:ca:35:7d:ca:29: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:91:7E:4F:FE:FA:1B:D8:19:65:EF:CA:26:18:25:DA:6C:E2:5B X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:09:31:eb:4e:1b:02:2c:7b:8c:78:f7:44:4c:d6:bc:6c:d6: 47:26:6c:58:92:16:7b:ac:75:d1:67:77:f4:b0:2a:48:eb:55: 39:d5:12:f7:3f:cd:2c:3c:07:bd:c9:ea:bb:23:4e:66:19:31: 7a:97:83:eb:be:fd:94:d4:4e:c9:6a:96:c6:e8:f9:ea:9f:49: e0:7e:71:f3:7f:e6:11:23:a1:99:54:4e:37:e5:3b:bd:2e:51: 73:d4:77:4b:fa:64:7e:ff:5d:f7:8a:1a:b2:a0:c9:78:27:3b: e2:ac:27:7a:3d:76:f4:95:81:de:17:0e:4d:dd:b3:7b:d4:1c: 7d:43:5b:b3:a7:90:d7:f0:2e:b4:e6:e3:94:bf:82:b5:17:3a: 41:e7:ea:2c:78:03:0b:60:50:0a:c7:5c:ed:ef:e5:0a:c4:0f: be:17:4a:10:6d:c3:a7:53:18:ed:aa:87:9b:a3:72:53:ff:23: 9c:67:d6:19:f4:29:00:65:f3:23:7a:27:e2:f1:d4:a7:94:ae: 7e:50:35:b3:09:2d:25:3d:1d:4a:75:1a:13:3f:ac:77:f7:d4: 8d:e6:6a:42:a2:de:18:32:96:b5:78:57:9e:76:be:ac:a9:81: ec:e5:9c:42:ad:06:e9:a3:4b:ef:93:09:d3:21:3a:26:32:f8: 3e:ca:cd:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzFK1jyePARrSF9/DarbpzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMzA2MjIwMTE4WhcNMjYwMzA3MjIwMTE4WjAzMTEwLwYDVQQD EyhmNDkyOTE3ZTRmZmVmYTFiZDgxOTY1ZWZjYTI2MTgyNWRhNmNlMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXWOZBNKHM1TJwHV+kzy6UX6HB8k To6MdXTJxGsWDrWyS7futSff7fd9ZOuArGyKXHIDfpjcWHqe+/jCouKobxNYwQPD M7Z0B0qwqF+q7FrzeTvFuPq0TpY71Do+r0iuIdRMCH5vpwiVwxFpEp9/xo8w7qC8 xXSWmtRhMLfjPwCtbwtfsaho68/1CQEwlwptbAbkj+Im5+u30vKboI6tAZ3c+ohL HqjxFLQ5nkH40F8dY/2bPvXmVDLWBVcicGgd24ptUYTdc1+Yf0XHK8ZvKO73mfVY 6KdGKZOdZoB57xNJv1Te2Tq1G6OGzxXLircbtvlSaYdaIeAAyjV9yimvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSSkX5P/vob2Bll78omGCXabOJbMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgkx604b Aix7jHj3REzWvGzWRyZsWJIWe6x10Wd39LAqSOtVOdUS9z/NLDwHvcnquyNOZhkx epeD6779lNROyWqWxuj56p9J4H5x83/mESOhmVRON+U7vS5Rc9R3S/pkfv9d94oa sqDJeCc74qwnej129JWB3hcOTd2ze9QcfUNbs6eQ1/AutObjlL+CtRc6QefqLHgD C2BQCsdc7e/lCsQPvhdKEG3Dp1MY7aqHm6NyU/8jnGfWGfQpAGXzI3on4vHUp5Su flA1swktJT0dSnUaEz+sd/fUjeZqQqLeGDKWtXhXnna+rKmB7OWcQq0G6aNL75MJ 0yE6JjL4PsrNww== -----END CERTIFICATE-----Generated at Sat Mar 7 05:09:13 2026 by rpki-client