$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: cla1oIf1XALCecDAQ/EOv7OnkLVAdUNEQJV5OgEIkD4= Subject key identifier: 43:66:13:D2:97:7D:CF:2E:1E:CC:C4:E0:82:29:47:C0:8C:62:79:57 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019CC862D6838FC296296618464C9FB45695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 080A Signing time: Sat 07 Mar 2026 13:00:46 +0000 Manifest this update: Sat 07 Mar 2026 13:00:46 +0000 Manifest next update: Sun 08 Mar 2026 13:00:46 +0000 Files and hashes: 1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=) 2: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=) 3: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=) 4: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=) 5: J3qhVDm59tgGij8FSKNvb_obrQQ.roa (hash: Xmn0IdQ3k4dgxv6WEWS+sFmXZWMyOMaCwrNw7xwruBM=) 6: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: nU91HKGSZ8EQ1zKJeUbx+uFju/vuOvpG1WmnQI8Ms9o=) 7: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=) 8: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=) 9: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=) 10: gATtXJLtqL0pyDE7aBGAHapu64E.roa (hash: ybBtdONa/UXYBRo/ca8SLa1FBdD6Jo+wJU9zhUxtzIQ=) 11: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=) 12: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=) 13: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=) 14: t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa (hash: hc8v6I3bcH7DbpxSPGSHrr3KaGypH/0OP4q4IQAtF2g=) 15: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=) 16: tnrCXGUad010wmnlJx0Fw_W63uY.roa (hash: /NKMJR4M4K9iD9GZDZ0cMVnbFJFtcGysMXr192B5gDw=) 17: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 10:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c8:62:d6:83:8f:c2:96:29:66:18:46:4c:9f:b4:56:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Mar 7 13:00:46 2026 GMT Not After : Mar 8 13:00:46 2026 GMT Subject: CN=436613d2977dcf2e1eccc4e0822947c08c627957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:1e:a1:17:44:43:b0:cd:5b:96:f5:f7:cb: 42:29:16:df:62:a3:4b:84:d3:e6:9f:99:84:19:c7: 4c:67:4d:76:3d:b6:83:71:3f:dd:77:23:3f:55:d0: 46:8c:4b:9d:3f:77:91:38:e4:ce:a9:72:43:9d:b5: 04:b2:84:52:94:38:fa:ef:ef:3e:10:b5:55:c1:51: 42:94:b9:93:29:1a:46:dd:bc:98:33:ea:71:00:4d: a1:75:d1:ab:11:1d:94:21:b4:56:b6:40:db:67:cf: 66:f6:61:37:30:6d:6c:88:96:48:3f:b9:d5:64:b0: 6a:ff:ad:69:4f:f7:bb:e6:5b:cf:f1:bc:4e:94:e7: 88:15:50:5f:1e:74:0c:e5:2d:5e:9b:99:5a:c3:16: 4a:d7:1b:f1:8f:32:25:d0:b3:1e:58:c7:b6:eb:1a: 7a:ed:d5:a9:39:56:f9:b7:e8:00:30:ce:d2:6e:95: 37:47:95:d3:50:d0:85:ee:f8:38:aa:23:e9:b3:b7: 96:4b:d9:3c:99:3b:9c:48:87:df:6b:42:fc:b9:ff: d5:d8:ce:c0:fe:7b:8c:2d:50:4d:09:18:fb:71:25: f5:21:34:c0:f8:97:27:1b:81:01:ae:aa:76:6e:fc: e2:6e:1a:6c:de:eb:03:3b:0f:90:4f:e9:9f:89:5a: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:13:D2:97:7D:CF:2E:1E:CC:C4:E0:82:29:47:C0:8C:62:79:57 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8f:9c:dd:6f:75:49:dc:f1:86:c9:16:50:d2:30:10:53:16: 7b:a5:42:05:ea:db:a5:ab:c0:56:49:b8:c4:cf:06:ab:7f:90: 4f:ad:cb:f3:e1:85:e6:7f:a3:64:24:18:e9:52:6f:dd:bb:79: 6a:d1:24:a0:12:03:56:ff:4c:c7:82:24:2f:46:d7:ed:6c:09: ab:cb:f8:88:8c:5a:26:44:8d:95:3a:8d:1b:85:61:e6:28:ca: 3b:86:d4:bf:8e:9f:68:fd:5a:60:5e:0a:92:94:43:18:45:2a: cd:82:6b:ac:cd:3a:24:56:e9:0c:ad:c2:72:a8:47:24:cb:b2: 0d:40:8f:eb:d6:a7:72:99:92:64:fc:be:c4:3e:41:f9:7c:f8: 3d:65:c0:8d:fd:0b:be:e8:51:3c:f4:e1:20:29:a7:16:2c:61: b5:01:d3:ed:89:f5:10:ec:fd:ad:c0:c2:a5:c9:d5:20:4f:61: 38:88:8b:8a:dd:74:d9:6f:42:43:f5:72:3c:f5:1d:f9:a8:fa: d9:08:1d:cd:41:d7:ee:35:20:c2:cf:ab:0e:2a:fe:23:de:eb: 03:c0:b1:66:5e:8b:a1:3f:ea:cf:89:d8:ef:24:f0:b2:83:c1: 75:e0:70:04:a0:1c:d4:ec:e4:25:d6:d3:7a:ef:fd:74:e7:85: d2:c3:d2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzIYtaDj8KWKWYYRkyftFaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMzA3MTMwMDQ2WhcNMjYwMzA4MTMwMDQ2WjAzMTEwLwYDVQQD Eyg0MzY2MTNkMjk3N2RjZjJlMWVjY2M0ZTA4MjI5NDdjMDhjNjI3OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucweoRdEQ7DNW5b198tCKRbfYqNL hNPmn5mEGcdMZ012PbaDcT/ddyM/VdBGjEudP3eROOTOqXJDnbUEsoRSlDj67+8+ ELVVwVFClLmTKRpG3byYM+pxAE2hddGrER2UIbRWtkDbZ89m9mE3MG1siJZIP7nV ZLBq/61pT/e75lvP8bxOlOeIFVBfHnQM5S1em5lawxZK1xvxjzIl0LMeWMe26xp6 7dWpOVb5t+gAMM7SbpU3R5XTUNCF7vg4qiPps7eWS9k8mTucSIffa0L8uf/V2M7A /nuMLVBNCRj7cSX1ITTA+JcnG4EBrqp2bvzibhps3usDOw+QT+mfiVrecwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENmE9KXfc8uHszE4IIpR8CMYnlXMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4+c3W91 SdzxhskWUNIwEFMWe6VCBerbpavAVkm4xM8Gq3+QT63L8+GF5n+jZCQY6VJv3bt5 atEkoBIDVv9Mx4IkL0bX7WwJq8v4iIxaJkSNlTqNG4Vh5ijKO4bUv46faP1aYF4K kpRDGEUqzYJrrM06JFbpDK3CcqhHJMuyDUCP69ancpmSZPy+xD5B+Xz4PWXAjf0L vuhRPPThICmnFixhtQHT7Yn1EOz9rcDCpcnVIE9hOIiLit102W9CQ/VyPPUd+aj6 2QgdzUHX7jUgws+rDir+I97rA8CxZl6LoT/qz4nY7yTwsoPBdeBwBKAc1OzkJdbT eu/9dOeF0sPSaQ== -----END CERTIFICATE-----Generated at Sat Mar 7 19:02:03 2026 by rpki-client