$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: Zi0v+xDWYph0LLPr+y7P0FvDb7UGvOMs75n+Njsbb5Q= Subject key identifier: 1D:AE:33:D9:CC:83:7A:13:18:11:BE:E5:56:36:E2:91:88:66:99:5D Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019CC03B6D68C9B068E6DFB6B4384D7EE2DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 15F8 Signing time: Thu 05 Mar 2026 23:00:45 +0000 Manifest this update: Thu 05 Mar 2026 23:00:45 +0000 Manifest next update: Fri 06 Mar 2026 23:00:45 +0000 Files and hashes: 1: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 4: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 5: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 6: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 7: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 8: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 9: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: +FS8gOxpcKgTgplLrtZp5506f9Y4CBYwPY4g0fFLZmI=) 11: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 12: hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa (hash: yFRAlutdbfqI9DX9panTjVrB5bc9srd6cM00XqjPdl4=) 13: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 14: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 15: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 16: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 17: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c0:3b:6d:68:c9:b0:68:e6:df:b6:b4:38:4d:7e:e2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Mar 5 23:00:45 2026 GMT Not After : Mar 6 23:00:45 2026 GMT Subject: CN=1dae33d9cc837a131811bee55636e2918866995d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:b8:cf:dd:db:19:c4:21:6b:1e:58:34:3b: 69:00:7a:17:57:e0:b6:be:09:2f:9f:4e:52:32:fa: d0:b1:c0:6d:a4:ba:74:d4:b3:c0:a9:e0:8b:02:1e: 6e:d7:c8:25:18:96:f7:81:d1:56:2c:5f:bf:61:a5: 57:45:67:7e:fe:f9:65:19:d1:37:f8:19:5c:e5:47: 68:f1:23:d5:bf:52:b7:90:ea:29:85:19:32:f9:0a: 86:8c:ab:0f:cb:d3:2f:ef:67:f7:6d:6d:74:92:d4: 90:3a:28:e2:ac:1f:83:b5:21:d4:52:79:7f:10:87: 01:47:5f:9c:c3:34:57:f9:29:52:da:11:21:97:d2: c8:f2:a0:32:4a:92:6c:ac:0f:8e:29:3c:a9:1f:d7: 5a:2e:55:85:d8:be:61:b0:8b:80:b6:5b:0a:54:9c: c3:23:e0:b5:1c:f4:c6:19:3b:1e:12:e3:18:0f:2b: ad:93:f6:2f:81:1f:9e:ae:e1:f0:63:4e:ed:9a:1e: c9:c5:73:75:cb:a3:5e:0f:23:c9:c1:0b:e3:44:50: f3:e5:89:b8:df:48:8b:32:95:7e:11:92:ae:df:95: b0:cb:34:ac:83:02:05:2d:df:32:c5:cd:88:b5:34: a3:be:0b:71:fe:99:eb:bd:ab:f7:e2:83:89:e6:83: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:33:D9:CC:83:7A:13:18:11:BE:E5:56:36:E2:91:88:66:99:5D X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b0:d9:02:2e:26:97:4d:1f:3f:1e:50:c5:85:56:dc:bb:91: e4:c0:7f:a4:40:78:70:02:1f:19:06:b7:1f:eb:72:eb:9c:aa: 6b:74:74:32:e9:10:1c:a2:6e:a6:16:f3:c7:ff:66:70:0c:f0: 35:b4:3e:29:9f:b6:5c:c8:ba:c5:4b:36:b1:60:c6:2f:50:98: 28:c4:90:83:fe:8d:75:a3:4c:ed:d4:e1:61:43:8d:d1:e7:4a: a2:93:2a:8c:c9:13:87:8e:b9:cb:92:ba:de:0c:d4:58:13:f8: 57:33:0c:29:e2:e0:96:92:89:63:a5:8c:b5:d4:1a:cc:37:9a: f3:d0:75:88:5b:c1:f6:2e:fc:3c:a1:76:f9:44:68:d5:11:0b: cb:b7:ca:48:6b:2c:6c:6d:52:ae:94:b3:39:42:82:66:6c:be: f3:e3:1e:be:ad:5e:9e:39:a6:a8:1c:ca:e6:39:cb:d7:8c:7c: a1:64:f7:f8:0f:50:03:18:9b:33:cf:5b:c4:29:98:58:ac:bf: 4b:f8:b4:97:60:59:a6:24:80:a9:c6:65:15:30:74:86:21:5f: 10:26:02:49:55:d2:ef:30:f4:39:35:8c:eb:9a:05:d2:21:a1: 88:ca:97:33:87:16:88:05:3d:4d:3d:31:24:21:c7:fd:93:4e: 12:ab:63:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzAO21oybBo5t+2tDhNfuLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMzA1MjMwMDQ1WhcNMjYwMzA2MjMwMDQ1WjAzMTEwLwYDVQQD EygxZGFlMzNkOWNjODM3YTEzMTgxMWJlZTU1NjM2ZTI5MTg4NjY5OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZm4z93bGcQhax5YNDtpAHoXV+C2 vgkvn05SMvrQscBtpLp01LPAqeCLAh5u18glGJb3gdFWLF+/YaVXRWd+/vllGdE3 +Blc5Udo8SPVv1K3kOophRky+QqGjKsPy9Mv72f3bW10ktSQOijirB+DtSHUUnl/ EIcBR1+cwzRX+SlS2hEhl9LI8qAySpJsrA+OKTypH9daLlWF2L5hsIuAtlsKVJzD I+C1HPTGGTseEuMYDyutk/YvgR+eruHwY07tmh7JxXN1y6NeDyPJwQvjRFDz5Ym4 30iLMpV+EZKu35WwyzSsgwIFLd8yxc2ItTSjvgtx/pnrvav34oOJ5oOmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2uM9nMg3oTGBG+5VY24pGIZpldMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrDZAi4m l00fPx5QxYVW3LuR5MB/pEB4cAIfGQa3H+ty65yqa3R0MukQHKJuphbzx/9mcAzw NbQ+KZ+2XMi6xUs2sWDGL1CYKMSQg/6NdaNM7dThYUON0edKopMqjMkTh465y5K6 3gzUWBP4VzMMKeLglpKJY6WMtdQazDea89B1iFvB9i78PKF2+URo1RELy7fKSGss bG1SrpSzOUKCZmy+8+Mevq1enjmmqBzK5jnL14x8oWT3+A9QAxibM89bxCmYWKy/ S/i0l2BZpiSAqcZlFTB0hiFfECYCSVXS7zD0OTWM65oF0iGhiMqXM4cWiAU9TT0x JCHH/ZNOEqtjXw== -----END CERTIFICATE-----Generated at Fri Mar 6 03:46:31 2026 by rpki-client