$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: lc2O7Lqd0gM6YZPRXL5i4AQG74oJcL+FichdEQn0dH8= Subject key identifier: CE:98:56:97:86:8C:7D:1D:E9:6D:60:59:73:B7:D9:29:30:95:E8:62 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019CEAEE9B42096A711A30278E0E72B5617A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 11D8 Signing time: Sat 14 Mar 2026 06:00:31 +0000 Manifest this update: Sat 14 Mar 2026 06:00:31 +0000 Manifest next update: Sun 15 Mar 2026 06:00:31 +0000 Files and hashes: 1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=) 2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: mY0wSfWnMplZwU7WydSsqbkCiAsGSOdLoQ1EL0rLEhk=) 3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=) 4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=) 5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=) 6: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=) 7: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=) 8: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=) 9: qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa (hash: OD8AG1ILYuTSDHzZIy152Q30x3zv2+IbmXk5SHJVDkU=) 10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=) 11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=) 12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ea:ee:9b:42:09:6a:71:1a:30:27:8e:0e:72:b5:61:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Mar 14 06:00:31 2026 GMT Not After : Mar 15 06:00:31 2026 GMT Subject: CN=ce985697868c7d1de96d605973b7d9293095e862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:2f:81:86:e1:cd:a3:39:c3:77:86:7c:dd: 1e:8d:82:d0:27:f2:19:e8:5f:11:e7:7a:1c:82:a1: 51:bf:9e:fe:92:a8:e4:a9:48:db:b7:c7:65:a8:8a: 65:34:53:fb:2a:85:28:b7:84:66:3e:11:af:c3:7d: de:21:22:34:70:2e:54:f1:9c:0a:3c:e3:e9:88:2b: ed:70:8f:1b:c4:93:4f:43:21:d6:06:e1:8e:6b:41: 8e:99:54:ca:13:bd:d1:ae:fa:91:d6:21:d4:fe:1a: b8:09:18:15:20:03:59:a5:ed:68:5f:29:6b:db:9a: f8:9b:5f:dc:dd:64:b3:a2:35:a9:30:64:1c:c4:a2: 1f:ca:52:71:d8:fb:5d:9e:10:0f:bb:8d:87:a9:35: 16:5b:e6:25:99:fc:07:6e:70:67:1b:23:58:cc:ad: 06:b8:86:39:6f:9a:18:de:76:86:7e:1f:ae:96:1e: 74:51:5b:e9:ee:73:fc:83:79:23:e3:8b:b4:cc:0c: 45:f9:d6:f5:82:91:11:83:88:81:d2:0e:b0:eb:45: c9:6b:fb:d9:57:6f:5a:b5:b3:c4:1e:8a:86:31:b9: 2f:4a:d8:a5:5f:ec:a4:08:ac:0f:36:b6:73:40:b0: 90:ee:a1:72:43:22:24:16:64:71:3a:28:ce:ee:82: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:98:56:97:86:8C:7D:1D:E9:6D:60:59:73:B7:D9:29:30:95:E8:62 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:20:16:5f:0f:d4:86:f4:32:49:70:e9:ce:3c:65:05:9a: 97:99:32:21:c8:ce:27:c7:79:da:3f:67:14:f9:96:42:2c:67: 9f:0a:2a:a7:29:79:99:3f:80:ef:d0:7e:c6:32:76:0f:2f:9f: 40:43:d0:ec:aa:dc:f7:d6:2d:7b:54:17:14:24:2a:81:4f:09: 3b:16:ad:f1:bb:84:8f:09:76:62:1b:59:2f:b5:4d:90:4d:45: d8:e9:e5:85:0f:8e:55:6e:78:1a:81:7f:89:8a:ab:3f:67:23: 06:b0:fa:3a:f9:d0:62:7f:4f:ec:12:e4:d2:99:ed:28:57:12: d1:ac:cd:ff:99:7b:1e:9d:75:6d:2b:a3:63:84:a0:95:f2:34: 16:f7:38:23:36:8c:51:bf:cd:33:fe:d5:b4:43:03:45:67:03: 3c:2d:12:0a:29:a5:ba:63:94:65:95:d8:da:6a:eb:90:a2:8a: a5:71:e9:a2:f9:9f:5e:55:49:c8:ae:4d:44:3c:0b:ea:23:7f: e3:d5:a3:c3:f7:05:cd:6d:e4:c4:3f:f2:5e:ab:85:1d:74:ea: 74:c9:bc:b6:55:57:4a:10:94:9a:e3:8e:58:25:96:bf:7b:aa: 52:f0:46:b1:8e:12:88:ef:87:ad:dd:23:7d:9d:2c:41:4c:80: df:be:d2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzq7ptCCWpxGjAnjg5ytWF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMzE0MDYwMDMxWhcNMjYwMzE1MDYwMDMxWjAzMTEwLwYDVQQD EyhjZTk4NTY5Nzg2OGM3ZDFkZTk2ZDYwNTk3M2I3ZDkyOTMwOTVlODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4vgYbhzaM5w3eGfN0ejYLQJ/IZ 6F8R53ocgqFRv57+kqjkqUjbt8dlqIplNFP7KoUot4RmPhGvw33eISI0cC5U8ZwK POPpiCvtcI8bxJNPQyHWBuGOa0GOmVTKE73RrvqR1iHU/hq4CRgVIANZpe1oXylr 25r4m1/c3WSzojWpMGQcxKIfylJx2PtdnhAPu42HqTUWW+YlmfwHbnBnGyNYzK0G uIY5b5oY3naGfh+ulh50UVvp7nP8g3kj44u0zAxF+db1gpERg4iB0g6w60XJa/vZ V29atbPEHoqGMbkvStilX+ykCKwPNrZzQLCQ7qFyQyIkFmRxOijO7oIQqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6YVpeGjH0d6W1gWXO32SkwlehiMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj0gFl8P 1Ib0Mklw6c48ZQWal5kyIcjOJ8d52j9nFPmWQixnnwoqpyl5mT+A79B+xjJ2Dy+f QEPQ7Krc99Yte1QXFCQqgU8JOxat8buEjwl2YhtZL7VNkE1F2OnlhQ+OVW54GoF/ iYqrP2cjBrD6OvnQYn9P7BLk0pntKFcS0azN/5l7Hp11bSujY4SglfI0Fvc4IzaM Ub/NM/7VtEMDRWcDPC0SCimlumOUZZXY2mrrkKKKpXHpovmfXlVJyK5NRDwL6iN/ 49Wjw/cFzW3kxD/yXquFHXTqdMm8tlVXShCUmuOOWCWWv3uqUvBGsY4SiO+Hrd0j fZ0sQUyA377SXQ== -----END CERTIFICATE-----Generated at Sat Mar 14 15:04:34 2026 by rpki-client