$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: VXbX+aw+s5c9lBl7ZcpqgRa9BnXPTl9Lis4TrYEatao= Subject key identifier: CE:DE:E2:17:29:D3:23:C2:E2:1D:21:BD:FD:2D:E7:8F:68:BA:0C:A6 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019CC93E4B90EAA0E0636A9441E107DDC6F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1966 Signing time: Sat 07 Mar 2026 17:00:28 +0000 Manifest this update: Sat 07 Mar 2026 17:00:28 +0000 Manifest next update: Sun 08 Mar 2026 17:00:28 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: QyqoiLVTyRqjsBnnOfbcr+6qyATSns65pmAaUznK0aw=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=) 11: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 12: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 13: fEta2vA_p4CjY1pDg-RimYq34mY.roa (hash: b9obHJSS4Jb/9AwsjyBqdVleI2tLbis3YKXXfB+zeLk=) 14: fuRxNjIE-qr9KmN8J_hE59ecEq4.roa (hash: 3CHRC0a/akTbPAJFu8OuUkQRKmDMyUzzK4GIXg8sWws=) 15: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 16: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c9:3e:4b:90:ea:a0:e0:63:6a:94:41:e1:07:dd:c6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Mar 7 17:00:28 2026 GMT Not After : Mar 8 17:00:28 2026 GMT Subject: CN=cedee21729d323c2e21d21bdfd2de78f68ba0ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:0e:90:4c:6b:02:04:dd:36:e3:07:0f:e3: 0f:d4:b1:34:d0:e6:ba:42:04:c4:4d:79:44:45:50: d1:c0:80:b8:5a:e2:51:d1:7b:eb:98:79:07:65:95: 94:5d:41:c5:d2:fa:64:cc:70:e3:96:d1:78:f5:93: 4a:64:7e:92:01:6a:0c:f8:e1:01:21:96:d2:92:13: a9:8e:d6:70:18:f8:82:79:79:e8:9e:04:65:86:b6: 71:12:8c:9e:5a:8f:0b:16:33:9d:b1:87:08:f4:ab: 2b:6f:2b:75:0e:c2:9c:9d:01:f1:8b:08:e2:c7:c8: 9b:05:ae:87:72:30:f3:07:74:89:f9:8c:05:19:92: 0d:44:2f:dc:00:0f:e9:9d:2d:5d:60:70:2e:6c:66: 92:08:37:03:67:ae:c4:3b:fb:92:91:dc:fd:36:0d: 24:ea:38:ec:c8:37:b7:83:bb:ce:0d:d8:1c:08:d9: 90:0b:bd:cc:82:4a:b1:82:3b:88:91:48:f8:cd:a3: 10:20:50:f4:0a:cf:67:59:c9:4a:86:5c:f9:84:50: 7a:66:3d:ff:74:5e:82:c4:8f:23:bd:ed:1f:68:21: 7c:71:8b:ae:9d:aa:c2:66:d9:e0:7f:dd:a1:25:86: 34:13:ec:12:72:5b:fb:cb:c4:8f:90:8c:d5:86:9c: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DE:E2:17:29:D3:23:C2:E2:1D:21:BD:FD:2D:E7:8F:68:BA:0C:A6 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f6:cd:7a:5c:98:d1:23:a4:eb:9b:51:a1:10:b9:19:29:c7: fe:46:fc:a7:09:10:df:b8:e1:60:62:03:f3:fa:b5:74:69:a4: 63:67:d5:42:5f:d3:73:7f:0a:b2:1e:3b:9f:5e:03:3f:8c:86: 0b:7e:f8:4e:2a:5b:ba:db:88:ae:2c:80:a4:32:c4:f0:95:b1: ff:d8:a3:9b:db:c0:fd:86:b2:fa:cc:8c:97:bf:a9:21:57:28: 03:43:da:fe:0f:c4:94:fd:f7:5f:e7:be:ee:84:a5:53:a5:f7: 41:1b:3e:cc:51:43:1d:bd:52:ff:2a:2c:aa:d7:91:13:cd:56: d7:a3:6b:58:fe:9c:9a:ba:32:1c:c7:21:3c:60:14:09:8c:f6: e0:dd:ea:2b:f1:69:8d:dc:48:08:d6:57:66:ac:fe:2f:47:be: e0:2c:6a:c0:7e:76:c1:45:3d:f1:e0:b9:28:33:9d:7c:e3:33: 38:f0:dc:41:0c:b5:e0:dc:40:cf:e5:b4:4b:9a:6b:99:3c:3b: b3:f4:c3:b4:c9:d6:1b:df:27:c0:bf:eb:54:77:19:ff:97:f7: c0:9e:e2:26:29:49:a5:2f:d2:88:ac:e7:ab:33:f6:7e:eb:3d: c8:ee:5f:3a:39:1e:d9:a3:bf:9d:11:e2:b5:38:c1:b2:d2:c2: 74:3c:68:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzJPkuQ6qDgY2qUQeEH3cb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMzA3MTcwMDI4WhcNMjYwMzA4MTcwMDI4WjAzMTEwLwYDVQQD EyhjZWRlZTIxNzI5ZDMyM2MyZTIxZDIxYmRmZDJkZTc4ZjY4YmEwY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq0OkExrAgTdNuMHD+MP1LE00Oa6 QgTETXlERVDRwIC4WuJR0XvrmHkHZZWUXUHF0vpkzHDjltF49ZNKZH6SAWoM+OEB IZbSkhOpjtZwGPiCeXnongRlhrZxEoyeWo8LFjOdsYcI9Ksrbyt1DsKcnQHxiwji x8ibBa6HcjDzB3SJ+YwFGZINRC/cAA/pnS1dYHAubGaSCDcDZ67EO/uSkdz9Ng0k 6jjsyDe3g7vODdgcCNmQC73MgkqxgjuIkUj4zaMQIFD0Cs9nWclKhlz5hFB6Zj3/ dF6CxI8jve0faCF8cYuunarCZtngf92hJYY0E+wSclv7y8SPkIzVhpyhAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7e4hcp0yPC4h0hvf0t549ougymMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfbNelyY 0SOk65tRoRC5GSnH/kb8pwkQ37jhYGID8/q1dGmkY2fVQl/Tc38Ksh47n14DP4yG C374TipbutuIriyApDLE8JWx/9ijm9vA/Yay+syMl7+pIVcoA0Pa/g/ElP33X+e+ 7oSlU6X3QRs+zFFDHb1S/yosqteRE81W16NrWP6cmroyHMchPGAUCYz24N3qK/Fp jdxICNZXZqz+L0e+4CxqwH52wUU98eC5KDOdfOMzOPDcQQy14NxAz+W0S5prmTw7 s/TDtMnWG98nwL/rVHcZ/5f3wJ7iJilJpS/SiKznqzP2fus9yO5fOjke2aO/nRHi tTjBstLCdDxoGw== -----END CERTIFICATE-----Generated at Sun Mar 8 00:26:46 2026 by rpki-client