$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: zh1dGpj+EO8t7hlb//eulyyF9mQbCDY0dYPihfbj+/I= Subject key identifier: 3A:7C:26:3C:95:76:1F:D4:66:12:6C:9D:9E:C7:25:59:FC:20:36:FF Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019CFA62324B8A9487F1D4DBD152C177C461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 144D Signing time: Tue 17 Mar 2026 06:01:05 +0000 Manifest this update: Tue 17 Mar 2026 06:01:05 +0000 Manifest next update: Wed 18 Mar 2026 06:01:05 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=) 4: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: 5j8EE0vtZ0sXKoGvH/UEK7H9zTIqdJh1w8DH2ZWOfho=) 7: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Mar 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:fa:62:32:4b:8a:94:87:f1:d4:db:d1:52:c1:77:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Mar 17 06:01:05 2026 GMT Not After : Mar 18 06:01:05 2026 GMT Subject: CN=3a7c263c95761fd466126c9d9ec72559fc2036ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:16:91:78:5f:86:c8:2a:73:f5:13:75:4f: d0:d1:49:16:e3:82:66:e3:a2:34:cb:b7:f5:91:71: 51:3b:f9:9c:fd:f8:5c:c9:6f:54:1d:06:2f:ae:d9: 3f:d3:86:26:16:a3:be:2d:de:d5:bb:3c:45:17:e6: b5:5a:ac:bc:62:ed:a2:8c:91:f2:9c:c2:35:28:ad: 75:e9:75:96:c6:71:90:fa:c2:13:19:b7:b4:81:88: 8e:15:76:6b:a8:78:8e:a3:05:72:89:f7:e5:60:75: e4:f2:41:48:ef:23:1f:f2:12:09:e3:c1:36:2d:d2: 8d:81:7d:d8:08:7e:85:51:c9:68:92:ef:86:25:d4: 3d:86:72:fc:8c:0a:5b:22:48:a2:e1:fa:ea:7b:0a: 58:2a:a1:1e:4a:87:7b:f7:81:6d:1c:38:6d:56:f9: 93:d0:e5:63:ef:ad:22:fa:2a:99:c8:3f:d4:ad:19: d1:e1:8f:90:a9:f6:e7:8c:4e:fb:f7:9c:bf:d7:83: f9:db:b5:a4:87:65:85:16:55:2b:46:fe:d0:fa:19: 3f:69:16:c9:3b:56:eb:6c:30:5f:04:d3:6a:9b:3d: 16:3b:3b:c7:68:bf:ac:2d:81:a5:19:c4:42:94:5f: 54:62:6b:15:d5:80:39:86:c2:39:e2:9e:d3:37:c3: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:26:3C:95:76:1F:D4:66:12:6C:9D:9E:C7:25:59:FC:20:36:FF X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:14:83:1f:bb:19:3f:8b:23:be:eb:8a:05:d0:6e:af:d8:72: 35:b3:80:dd:05:bd:6e:2d:24:15:eb:4d:a4:5e:5b:05:67:01: 1a:cf:93:5a:ca:de:bf:ea:22:b1:93:f4:ad:2c:30:5c:fe:23: 5f:62:9e:95:bd:ca:3e:6d:ed:23:f3:9f:2a:85:61:88:dc:08: 58:b1:67:59:75:7f:18:2d:d4:74:79:ba:98:a3:6f:82:f1:42: 85:5e:0d:4f:9e:79:fa:25:15:3c:8c:a2:34:ae:3a:1f:b7:03: 07:3a:9a:b4:12:a6:f7:66:dd:90:cd:eb:bd:5b:2d:b3:16:5f: 50:e0:f5:03:ec:f0:39:f3:8c:3c:d4:10:84:b9:18:b6:79:3c: ad:14:60:11:31:5b:13:a9:ee:6a:95:43:fb:54:bd:eb:9d:7c: 6c:cb:ac:de:09:9f:f1:24:75:8d:d5:04:ed:30:2b:12:d1:26: 79:0b:09:f7:10:1f:9c:26:05:0c:69:c7:ac:e3:20:34:2d:e1: 82:d9:01:96:25:9c:e4:c6:39:fa:4f:4b:ce:32:3b:8f:6f:8e: 08:05:f1:32:c1:65:36:49:37:36:b3:10:c0:1e:6a:c4:df:b6: 22:45:43:3c:a2:b4:cc:e2:59:f7:2d:d4:f7:89:f6:37:23:7e: 11:53:b1:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz6YjJLipSH8dTb0VLBd8RhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwMzE3MDYwMTA1WhcNMjYwMzE4MDYwMTA1WjAzMTEwLwYDVQQD EygzYTdjMjYzYzk1NzYxZmQ0NjYxMjZjOWQ5ZWM3MjU1OWZjMjAzNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvsWkXhfhsgqc/UTdU/Q0UkW44Jm 46I0y7f1kXFRO/mc/fhcyW9UHQYvrtk/04YmFqO+Ld7VuzxFF+a1Wqy8Yu2ijJHy nMI1KK116XWWxnGQ+sITGbe0gYiOFXZrqHiOowVyifflYHXk8kFI7yMf8hIJ48E2 LdKNgX3YCH6FUcloku+GJdQ9hnL8jApbIkii4frqewpYKqEeSod794FtHDhtVvmT 0OVj760i+iqZyD/UrRnR4Y+QqfbnjE7795y/14P527Wkh2WFFlUrRv7Q+hk/aRbJ O1brbDBfBNNqmz0WOzvHaL+sLYGlGcRClF9UYmsV1YA5hsI54p7TN8O00wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp8JjyVdh/UZhJsnZ7HJVn8IDb/MB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxSDH7sZ P4sjvuuKBdBur9hyNbOA3QW9bi0kFetNpF5bBWcBGs+TWsrev+oisZP0rSwwXP4j X2Kelb3KPm3tI/OfKoVhiNwIWLFnWXV/GC3UdHm6mKNvgvFChV4NT555+iUVPIyi NK46H7cDBzqatBKm92bdkM3rvVstsxZfUOD1A+zwOfOMPNQQhLkYtnk8rRRgETFb E6nuapVD+1S96518bMus3gmf8SR1jdUE7TArEtEmeQsJ9xAfnCYFDGnHrOMgNC3h gtkBliWc5MY5+k9LzjI7j2+OCAXxMsFlNkk3NrMQwB5qxN+2IkVDPKK0zOJZ9y3U 94n2NyN+EVOxbA== -----END CERTIFICATE-----Generated at Tue Mar 17 15:19:41 2026 by rpki-client