$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: NUF2E/bwL2JaTLdyGhucdGk1ReLgxhZ0lHuAleq5Rm0= Subject key identifier: 0F:97:5A:03:78:C9:1B:2F:2D:15:70:60:99:BD:20:53:B1:F8:77:C2 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019CEE5E1A5702B7C4E0174125098CEEBA3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 187E Signing time: Sat 14 Mar 2026 22:01:10 +0000 Manifest this update: Sat 14 Mar 2026 22:01:10 +0000 Manifest next update: Sun 15 Mar 2026 22:01:10 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=) 3: ChgBgVFuABIzwh66-TkKdZEX1iA.roa (hash: SVqR9Q8a5Hcp/asmqFGw5DEUG2TomIZWg2fteQrE3uY=) 4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: 3PbXIiycNNyny+n4CBSFL6vSPxJdfLFVe2tRCNgHcjE=) 5: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 6: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 7: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=) 8: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (hash: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM=) 9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 12: ls2jvaZs7k_InUrbbNoPbvZ36vk.roa (hash: fIXofnEy1iYP/NYn3TCqqqwLir6u1PH+g1WJfBcU9ns=) 13: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (hash: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY=) 14: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 15: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ee:5e:1a:57:02:b7:c4:e0:17:41:25:09:8c:ee:ba:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Mar 14 22:01:10 2026 GMT Not After : Mar 15 22:01:10 2026 GMT Subject: CN=0f975a0378c91b2f2d15706099bd2053b1f877c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:f1:a0:b0:09:cb:e4:21:31:01:86:e9:3e: b6:3d:fe:39:9e:96:c3:c9:ff:7b:c4:f9:dd:91:43: a9:0d:51:a1:38:5a:ed:68:07:25:0e:33:b6:19:11: d5:9e:b2:5e:d1:c8:6f:61:3b:89:86:80:4e:11:2d: f5:c6:5a:e8:c2:d3:dd:43:d2:f1:b3:12:f1:11:0d: a9:28:c5:e0:82:dc:99:8d:e8:78:45:d6:d4:45:ab: 44:46:f9:3a:25:4a:52:2d:85:f2:fa:5e:7f:28:19: 54:c2:d7:63:04:39:f2:50:64:4d:4e:c1:01:7a:5d: 0a:3f:d2:e9:fc:77:ee:77:45:b0:d4:90:a5:f5:bb: 7e:fe:60:22:a6:a9:c0:d9:e6:7f:d1:ed:2d:46:de: d4:4c:2a:fa:38:05:bf:ef:a0:78:6a:1f:16:bb:9d: 0c:3e:0c:42:3f:42:b1:58:c9:7e:d6:a6:43:03:bb: 7a:98:83:16:90:6b:5f:04:40:5a:24:d3:a6:84:76: 23:02:78:2f:9d:2a:72:c6:30:fc:20:0c:da:b6:b3: 70:19:24:02:a6:29:8d:fb:48:3c:36:10:85:96:5c: 5a:67:ce:73:1a:2a:02:ba:28:02:f0:42:74:f7:3d: 23:8e:79:2e:20:b9:d3:f4:c3:c6:a0:aa:c1:0f:1a: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:5A:03:78:C9:1B:2F:2D:15:70:60:99:BD:20:53:B1:F8:77:C2 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:85:ae:51:29:bd:7d:c2:7e:8b:1b:c4:74:ca:58:0d:15: c3:6d:22:3d:37:a2:d1:13:d3:72:43:95:ff:79:b2:61:7e:96: 62:c4:12:4b:c6:6e:84:df:7f:4d:05:66:7a:d7:9b:f6:88:c2: d5:97:73:79:49:e7:c4:e0:8c:af:3a:3f:f7:b5:a9:00:68:dd: 0f:f9:4e:37:f3:30:41:1f:ee:18:d6:fb:2c:ac:14:ed:87:5f: 5b:98:bb:96:50:c8:b2:f9:79:95:65:56:61:45:a5:3c:66:bd: 9f:81:9b:34:a1:16:19:15:fa:56:36:91:8d:e3:84:2c:70:77: 99:41:20:ff:4f:db:e3:75:c4:a9:ed:f3:61:bd:c0:01:ca:35: 22:31:3e:d7:4b:16:cd:4a:ed:d9:dc:3a:df:70:bb:3a:ee:67: 7d:a5:e4:f5:d9:d6:03:e1:5d:66:69:e4:38:e2:1b:80:70:db: 89:a5:c8:2c:7e:00:86:da:12:b2:b3:fa:f1:44:ca:02:7a:b5: df:6f:fd:19:e1:f6:b5:d3:a4:6d:3b:b8:c7:27:05:10:99:07: 8d:7b:79:36:d8:b2:0a:46:6d:8e:5d:cf:0e:7c:56:4b:20:fa: be:9d:be:30:2d:94:76:08:0f:bf:69:0d:30:07:76:43:08:e0: a8:73:74:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzuXhpXArfE4BdBJQmM7ro/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMzE0MjIwMTEwWhcNMjYwMzE1MjIwMTEwWjAzMTEwLwYDVQQD EygwZjk3NWEwMzc4YzkxYjJmMmQxNTcwNjA5OWJkMjA1M2IxZjg3N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pbxoLAJy+QhMQGG6T62Pf45npbD yf97xPndkUOpDVGhOFrtaAclDjO2GRHVnrJe0chvYTuJhoBOES31xlrowtPdQ9Lx sxLxEQ2pKMXggtyZjeh4RdbURatERvk6JUpSLYXy+l5/KBlUwtdjBDnyUGRNTsEB el0KP9Lp/Hfud0Ww1JCl9bt+/mAipqnA2eZ/0e0tRt7UTCr6OAW/76B4ah8Wu50M PgxCP0KxWMl+1qZDA7t6mIMWkGtfBEBaJNOmhHYjAngvnSpyxjD8IAzatrNwGSQC pimN+0g8NhCFllxaZ85zGioCuigC8EJ09z0jjnkuILnT9MPGoKrBDxom2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+XWgN4yRsvLRVwYJm9IFOx+HfCMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFKFrlEp vX3CfosbxHTKWA0Vw20iPTei0RPTckOV/3myYX6WYsQSS8ZuhN9/TQVmeteb9ojC 1ZdzeUnnxOCMrzo/97WpAGjdD/lON/MwQR/uGNb7LKwU7YdfW5i7llDIsvl5lWVW YUWlPGa9n4GbNKEWGRX6VjaRjeOELHB3mUEg/0/b43XEqe3zYb3AAco1IjE+10sW zUrt2dw633C7Ou5nfaXk9dnWA+FdZmnkOOIbgHDbiaXILH4AhtoSsrP68UTKAnq1 32/9GeH2tdOkbTu4xycFEJkHjXt5NtiyCkZtjl3PDnxWSyD6vp2+MC2UdggPv2kN MAd2QwjgqHN0cA== -----END CERTIFICATE-----Generated at Sun Mar 15 08:27:18 2026 by rpki-client