$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: VAuhiWuCKxIFWGLzI46NFkTq746zRO8hqEpzaBcvjFY= Subject key identifier: 42:DE:A3:9E:14:C8:04:65:1E:70:8E:CC:17:3E:75:A3:33:F5:AF:33 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019D38D3254B8F7E46AA40F60904FA7BA453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 189A Signing time: Sun 29 Mar 2026 09:00:54 +0000 Manifest this update: Sun 29 Mar 2026 09:00:54 +0000 Manifest next update: Mon 30 Mar 2026 09:00:54 +0000 Files and hashes: 1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=) 2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: cdQAv16hVZnXhTMWpd8ITBn+20PD1fv96n9VSXPk4+w=) 3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=) 4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=) 5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=) 6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=) 7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=) 8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=) 9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=) 10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=) 11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=) 12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=) 13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=) 14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=) 15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=) 16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d3:25:4b:8f:7e:46:aa:40:f6:09:04:fa:7b:a4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Mar 29 09:00:54 2026 GMT Not After : Mar 30 09:00:54 2026 GMT Subject: CN=42dea39e14c804651e708ecc173e75a333f5af33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:36:e0:ab:85:e5:ec:26:e4:1b:49:54:25: cc:1d:bc:62:95:82:25:07:84:27:d3:0f:ab:52:73: 64:0a:84:0b:53:b7:8f:5f:5c:d1:1b:a2:f2:02:30: 80:e6:e6:01:82:a7:f6:9f:b0:60:da:6f:78:ba:c6: b3:dd:b4:cb:59:38:08:a5:4a:ef:fa:19:f0:dd:b1: 6d:13:bc:be:7b:bf:e5:47:2d:59:97:66:70:2e:a3: 6e:cd:79:f4:d9:e1:e8:f9:52:6a:75:e6:af:56:a2: 7b:41:a9:a1:22:8b:1f:e8:ac:5b:f6:42:0a:fd:2c: 79:db:fe:8f:eb:fd:65:91:b7:fa:a0:56:ef:d3:0e: ad:05:5b:b3:57:0d:60:e4:0a:59:9d:d4:a9:99:6f: e4:bf:91:5e:0a:ae:b1:f8:1d:dd:5e:6d:c8:7b:a4: 5f:fa:b7:c6:1b:69:f4:ff:ba:79:bf:01:d6:0c:45: 46:ce:09:f9:2d:04:f3:8c:3e:d2:13:c2:ff:3c:af: 0e:f4:bb:d9:43:45:86:be:11:d9:07:d2:92:91:bd: 42:fc:c5:80:41:a9:14:02:a1:6d:64:00:0c:0d:6d: 50:e2:f1:87:62:e4:10:c3:98:66:a2:ce:1a:da:d8: dd:92:bb:60:fa:3c:44:ce:e4:78:9a:0a:bb:ec:9b: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:A3:9E:14:C8:04:65:1E:70:8E:CC:17:3E:75:A3:33:F5:AF:33 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:22:84:ad:b4:34:98:47:2c:72:f5:0b:72:47:29:b4:31:50: d9:09:a0:46:f8:d7:94:25:99:08:06:85:32:e1:8d:c1:1c:95: cc:81:d0:75:d5:4f:f9:e7:a1:10:e7:c2:6c:d3:5a:3d:19:ef: 44:a7:26:f3:89:fe:c7:d4:6e:9b:98:b9:87:83:cf:e3:c7:fb: 29:bb:11:4a:a2:8d:17:d6:65:b8:a5:8f:df:9d:31:ca:06:49: 4b:30:23:4c:c3:bc:ec:a4:5f:19:d4:82:77:06:d1:a1:24:1e: 07:72:6d:12:33:b4:4d:b7:ca:88:58:e4:78:6c:db:dc:4a:fe: fd:96:6e:1b:96:35:87:bd:74:da:3a:23:c5:5f:78:4e:cf:43: 26:a8:74:e2:bb:bb:7a:78:92:3b:ae:b0:36:59:0d:de:98:e1: 29:58:8c:4b:81:a6:0d:9b:e3:59:e1:20:1c:78:1a:ff:6e:68: 7c:55:11:46:5c:07:b2:8e:6e:fe:30:52:43:de:64:f6:8e:c8: 93:30:a9:e0:a6:95:2f:b9:a1:c7:f5:db:e5:6f:6b:d2:87:17: 4d:91:3b:4e:99:43:7c:0a:15:9a:d1:45:2f:d7:fd:dc:54:6f: 5b:44:4c:54:78:0b:fc:ce:28:4f:15:70:df:18:fc:36:43:0c: 51:10:2a:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ040yVLj35GqkD2CQT6e6RTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMzI5MDkwMDU0WhcNMjYwMzMwMDkwMDU0WjAzMTEwLwYDVQQD Eyg0MmRlYTM5ZTE0YzgwNDY1MWU3MDhlY2MxNzNlNzVhMzMzZjVhZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRY24KuF5ewm5BtJVCXMHbxilYIl B4Qn0w+rUnNkCoQLU7ePX1zRG6LyAjCA5uYBgqf2n7Bg2m94usaz3bTLWTgIpUrv +hnw3bFtE7y+e7/lRy1Zl2ZwLqNuzXn02eHo+VJqdeavVqJ7QamhIosf6Kxb9kIK /Sx52/6P6/1lkbf6oFbv0w6tBVuzVw1g5ApZndSpmW/kv5FeCq6x+B3dXm3Ie6Rf +rfGG2n0/7p5vwHWDEVGzgn5LQTzjD7SE8L/PK8O9LvZQ0WGvhHZB9KSkb1C/MWA QakUAqFtZAAMDW1Q4vGHYuQQw5hmos4a2tjdkrtg+jxEzuR4mgq77Jtg1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELeo54UyARlHnCOzBc+daMz9a8zMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCKErbQ0 mEcscvULckcptDFQ2QmgRvjXlCWZCAaFMuGNwRyVzIHQddVP+eehEOfCbNNaPRnv RKcm84n+x9Rum5i5h4PP48f7KbsRSqKNF9ZluKWP350xygZJSzAjTMO87KRfGdSC dwbRoSQeB3JtEjO0TbfKiFjkeGzb3Er+/ZZuG5Y1h7102jojxV94Ts9DJqh04ru7 eniSO66wNlkN3pjhKViMS4GmDZvjWeEgHHga/25ofFURRlwHso5u/jBSQ95k9o7I kzCp4KaVL7mhx/Xb5W9r0ocXTZE7TplDfAoVmtFFL9f93FRvW0RMVHgL/M4oTxVw 3xj8NkMMURAq9w== -----END CERTIFICATE-----Generated at Sun Mar 29 19:22:04 2026 by rpki-client