$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: Mybm1ZWq/HIrs1uDTCUvnrag8J7rVSSj4qPq5R5EARk= Subject key identifier: 1E:BF:B9:D6:9F:76:EA:D1:5D:E6:D5:D7:9A:42:86:8E:21:80:99:0D Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019CE447873054EAC1299E2641A5A89266E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 18B5 Signing time: Thu 12 Mar 2026 23:00:18 +0000 Manifest this update: Thu 12 Mar 2026 23:00:18 +0000 Manifest next update: Fri 13 Mar 2026 23:00:18 +0000 Files and hashes: 1: 29Rv_UEl6-ilxixgPbwouEBeR9I.roa (hash: NqpV6epyV/V/BxqmnDQYUJhls660HR8Q3Pqa7VupQfg=) 2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: R7MuY9cN/CpNw2OOisdl9SDM5E3jz7lY0pp0KlLO2P4=) 3: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (hash: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU=) 4: Ahsz-tNL3LF_YjxGflfsbWY2EXY.roa (hash: IDB823/zK/udBkADZfcrEWPlrqEtUTwrSKR6Szbuvag=) 5: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=) 6: BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa (hash: V/G6nvIlcZvYbQSr2QvCL0JgCDmAS2PVZl2IojBI82Y=) 7: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=) 8: JrXLq8dLFnu6GeVno_RRWYa64r4.roa (hash: aZ5Me39yyOoLOgsUEQmTWYq2HY2d0HAc5EBlhh5nYEo=) 9: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=) 10: Ucca3RaZdjMWnn67R04BLea-ttU.roa (hash: CzJfRjlyJl7P43rMU8tIstGzfSxyVareresLUP4UMaU=) 11: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=) 12: aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa (hash: nmzakxTfwrDVurY8/As0jECtOIx0LqRTcRnAOJxRKNk=) 13: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (hash: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw=) 14: fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa (hash: auv9a0uJJR7wurJYNrtnpCQbXoxt1QEVkQ8kZNtsP2o=) 15: hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa (hash: QSWqVZZknAznYtnkjAMR6wQOMbu0S23SFjRWErscdcQ=) 16: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:47:87:30:54:ea:c1:29:9e:26:41:a5:a8:92:66:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Mar 12 23:00:18 2026 GMT Not After : Mar 13 23:00:18 2026 GMT Subject: CN=1ebfb9d69f76ead15de6d5d79a42868e2180990d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:af:eb:57:bb:45:d7:01:1d:cb:d4:49:99:7f: f4:ec:a4:41:7c:19:c0:4e:31:2b:18:cd:ab:1c:30: 9f:51:76:52:22:b7:4e:24:51:b8:33:65:65:7e:16: 64:f2:a1:3f:79:62:77:6a:b7:40:d6:1d:4a:29:b0: 55:d5:a8:ed:c2:05:39:4b:5b:f8:53:e1:41:4e:9f: 3f:b7:8c:78:d8:4f:e6:dc:20:bf:66:ae:25:0b:8d: 27:31:02:4c:9d:b2:b3:26:a0:3e:7a:d5:bf:08:c9: ea:39:2e:af:13:61:7c:74:ee:d8:ec:39:dc:e4:9b: 94:27:83:e6:3d:ea:0a:b3:c9:70:36:a9:0c:e2:4a: c3:d1:fb:04:45:a6:6e:1f:de:dc:d8:a2:ce:16:24: 5d:5b:08:73:4c:17:8f:af:3a:12:02:ac:11:e4:67: 82:e1:5d:ae:fb:50:c4:40:b0:6b:80:82:d7:f9:d0: cf:3a:38:06:6e:a4:2e:18:4c:7b:5d:37:4b:d6:d6: ae:a5:d5:60:b9:a7:fa:4b:c4:9f:78:66:43:0b:8f: 78:89:dc:e1:76:55:a5:80:e0:3b:f9:79:ce:fa:da: d9:d8:fa:19:c8:87:8e:3f:bc:16:76:e3:50:61:9c: 07:b9:a8:8b:9e:db:59:e7:8f:81:38:66:20:32:d6: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BF:B9:D6:9F:76:EA:D1:5D:E6:D5:D7:9A:42:86:8E:21:80:99:0D X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:a4:07:ca:9f:c6:6f:38:90:cb:22:92:33:59:14:93:82: 73:a8:1c:e5:f5:5d:a3:92:5e:0d:a7:b4:8e:7a:79:7b:f5:22: ab:8d:11:d4:d7:c7:cd:87:6d:79:b7:c6:62:3f:86:c8:5f:db: 6f:88:3e:73:4a:45:34:8c:cd:f0:61:1b:6d:84:cf:7c:24:81: 12:0e:b2:22:e6:34:a7:f2:3e:54:07:a8:3c:dd:24:fd:fa:d0: 27:ab:b6:f3:f9:f3:9e:ba:7e:d5:d4:49:7e:df:b4:66:3e:c5: 9c:15:ea:4b:5f:f3:69:da:2f:05:6c:ce:d9:d8:7e:1c:dc:ea: 74:4b:23:3c:c8:c2:53:1e:92:ce:da:84:50:0e:e3:77:1d:89: e5:32:87:b7:21:79:0d:28:fc:42:16:f0:9f:f9:c3:4f:2d:e9: 52:49:6b:5d:dc:8e:99:59:4b:37:3d:9c:02:7b:00:75:81:a1: fd:7c:8b:a5:29:cc:b4:0d:d6:60:e0:6d:bb:69:3d:d6:c4:24: 2d:ec:81:92:88:31:0b:b5:08:41:e8:01:9b:89:12:11:69:f1: 7d:26:72:55:60:63:ab:10:ae:26:0c:39:1a:61:ae:fd:bd:49: 58:21:91:f8:e1:97:05:c7:d0:08:ac:21:ef:39:fe:a0:09:9a: 0b:06:31:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkR4cwVOrBKZ4mQaWokmbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMzEyMjMwMDE4WhcNMjYwMzEzMjMwMDE4WjAzMTEwLwYDVQQD EygxZWJmYjlkNjlmNzZlYWQxNWRlNmQ1ZDc5YTQyODY4ZTIxODA5OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66/rV7tF1wEdy9RJmX/07KRBfBnA TjErGM2rHDCfUXZSIrdOJFG4M2VlfhZk8qE/eWJ3ardA1h1KKbBV1ajtwgU5S1v4 U+FBTp8/t4x42E/m3CC/Zq4lC40nMQJMnbKzJqA+etW/CMnqOS6vE2F8dO7Y7Dnc 5JuUJ4PmPeoKs8lwNqkM4krD0fsERaZuH97c2KLOFiRdWwhzTBePrzoSAqwR5GeC 4V2u+1DEQLBrgILX+dDPOjgGbqQuGEx7XTdL1taupdVguaf6S8SfeGZDC494idzh dlWlgOA7+XnO+trZ2PoZyIeOP7wWduNQYZwHuaiLnttZ54+BOGYgMtYxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6/udafdurRXebV15pCho4hgJkNMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRWkB8qf xm84kMsikjNZFJOCc6gc5fVdo5JeDae0jnp5e/Uiq40R1NfHzYdtebfGYj+GyF/b b4g+c0pFNIzN8GEbbYTPfCSBEg6yIuY0p/I+VAeoPN0k/frQJ6u28/nznrp+1dRJ ft+0Zj7FnBXqS1/zadovBWzO2dh+HNzqdEsjPMjCUx6SztqEUA7jdx2J5TKHtyF5 DSj8Qhbwn/nDTy3pUklrXdyOmVlLNz2cAnsAdYGh/XyLpSnMtA3WYOBtu2k91sQk LeyBkogxC7UIQegBm4kSEWnxfSZyVWBjqxCuJgw5GmGu/b1JWCGR+OGXBcfQCKwh 7zn+oAmaCwYx5g== -----END CERTIFICATE-----Generated at Fri Mar 13 09:26:50 2026 by rpki-client