$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: DjADPDKJlUU1vU8WACu5MhF5VV2LFBCSTaa9CENUswo= Subject key identifier: 6F:BB:A6:DA:E3:97:E9:85:BE:85:5A:71:56:4A:76:11:D4:3C:BB:02 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019D39E5584F8D25C375AF587E058E89A3DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0D44 Signing time: Sun 29 Mar 2026 14:00:24 +0000 Manifest this update: Sun 29 Mar 2026 14:00:24 +0000 Manifest next update: Mon 30 Mar 2026 14:00:24 +0000 Files and hashes: 1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=) 2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=) 3: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=) 4: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=) 5: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=) 6: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=) 7: QzMyegFOkVY4VnXHpYFz61drfjg.roa (hash: mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=) 8: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=) 9: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=) 10: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=) 11: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=) 12: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=) 13: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=) 14: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: M3FtDjz481fWXSBXrrHGmEQ1dlNEGD+1dObm1SA52fw=) 15: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:e5:58:4f:8d:25:c3:75:af:58:7e:05:8e:89:a3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Mar 29 14:00:24 2026 GMT Not After : Mar 30 14:00:24 2026 GMT Subject: CN=6fbba6dae397e985be855a71564a7611d43cbb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:bb:29:67:d2:64:89:30:23:42:4f:76:52: b1:5a:86:6f:54:20:bd:4d:d1:6e:9d:67:63:9c:b4: ab:23:60:b6:d5:3d:58:f8:57:4c:dc:2c:5d:b0:7a: 74:41:91:e5:47:c2:dd:a9:55:d8:2e:ce:61:7f:c1: 05:e3:34:c7:a7:9e:fb:87:65:73:24:00:cb:24:32: 55:22:a4:bc:2e:81:dc:ea:ba:03:f6:40:bb:d4:8d: 2e:79:43:3c:c4:34:9f:b9:b4:8a:81:08:fa:ee:51: 70:eb:de:8d:a6:de:3a:b0:0b:c5:19:4b:39:79:65: b2:a6:b4:51:7d:43:fa:fd:69:1b:2f:72:4a:17:7e: b2:f2:c8:48:18:59:3a:8b:f1:c5:2f:e5:82:14:ab: 9c:33:f8:68:0d:c2:d5:ff:39:cb:98:7a:6d:df:ba: f5:c3:aa:65:70:9d:37:c1:2b:b8:59:4b:6c:43:ac: fc:15:dd:5f:25:ae:e1:b6:43:1c:5d:1b:ce:35:64: 9c:b1:a0:77:fd:5d:79:3b:8d:eb:6f:7c:c3:df:0d: ee:8e:bf:8c:9e:92:5c:c2:e9:36:29:10:65:e8:38: 8d:1d:da:cd:4a:64:2c:46:52:ba:68:52:10:83:83: ae:58:29:cb:6b:35:04:1a:70:7f:10:41:5b:89:5f: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BB:A6:DA:E3:97:E9:85:BE:85:5A:71:56:4A:76:11:D4:3C:BB:02 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:a3:81:0f:c3:d9:a4:04:05:7b:6e:e6:82:aa:72:c0:98: 4b:48:98:32:48:fc:40:0e:c2:aa:4b:5a:24:67:64:33:9c:60: 3c:e9:ad:b8:ef:be:9c:22:3b:92:62:b6:63:01:54:d4:b5:b9: ee:a3:bf:d9:05:9d:87:70:3a:04:85:2e:6a:fc:0d:74:05:8c: b8:de:1e:c4:f6:9c:b6:4c:9c:e2:32:35:15:b0:20:66:c2:95: a5:75:97:a5:90:8f:21:70:90:f9:87:2a:78:b7:c6:86:3f:d1: d0:6f:10:cb:f4:a4:64:74:3d:07:78:63:8a:98:47:2e:54:7e: 16:a1:f7:80:9e:12:4e:ae:b7:a8:64:a2:68:ae:03:9f:55:ec: b5:95:9c:9b:2f:94:e9:72:98:7a:4a:ba:dc:c3:6e:05:24:9a: a0:05:97:94:4d:da:6d:88:26:32:7e:67:80:ec:d1:5a:d4:47: 60:3b:72:d5:97:d2:68:81:eb:65:35:3b:89:67:62:a1:c9:5a: 56:06:b0:76:71:d1:0f:b2:f8:1d:c1:04:df:d7:f2:c5:d6:db: 94:82:16:aa:d0:6f:17:7c:3b:82:10:e1:02:02:30:5d:87:a4: f6:f6:7a:3d:c9:0c:64:f0:4c:da:d6:64:8f:98:fd:3d:df:d5: dd:53:3d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ055VhPjSXDda9YfgWOiaPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMzI5MTQwMDI0WhcNMjYwMzMwMTQwMDI0WjAzMTEwLwYDVQQD Eyg2ZmJiYTZkYWUzOTdlOTg1YmU4NTVhNzE1NjRhNzYxMWQ0M2NiYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlum7KWfSZIkwI0JPdlKxWoZvVCC9 TdFunWdjnLSrI2C21T1Y+FdM3CxdsHp0QZHlR8LdqVXYLs5hf8EF4zTHp577h2Vz JADLJDJVIqS8LoHc6roD9kC71I0ueUM8xDSfubSKgQj67lFw696Npt46sAvFGUs5 eWWyprRRfUP6/WkbL3JKF36y8shIGFk6i/HFL+WCFKucM/hoDcLV/znLmHpt37r1 w6plcJ03wSu4WUtsQ6z8Fd1fJa7htkMcXRvONWScsaB3/V15O43rb3zD3w3ujr+M npJcwuk2KRBl6DiNHdrNSmQsRlK6aFIQg4OuWCnLazUEGnB/EEFbiV98bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+7ptrjl+mFvoVacVZKdhHUPLsCMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciujgQ/D 2aQEBXtu5oKqcsCYS0iYMkj8QA7CqktaJGdkM5xgPOmtuO++nCI7kmK2YwFU1LW5 7qO/2QWdh3A6BIUuavwNdAWMuN4exPactkyc4jI1FbAgZsKVpXWXpZCPIXCQ+Ycq eLfGhj/R0G8Qy/SkZHQ9B3hjiphHLlR+FqH3gJ4STq63qGSiaK4Dn1XstZWcmy+U 6XKYekq63MNuBSSaoAWXlE3abYgmMn5ngOzRWtRHYDty1ZfSaIHrZTU7iWdiocla VgawdnHRD7L4HcEE39fyxdbblIIWqtBvF3w7ghDhAgIwXYek9vZ6PckMZPBM2tZk j5j9Pd/V3VM9Rg== -----END CERTIFICATE-----Generated at Sun Mar 29 21:27:32 2026 by rpki-client