$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: gCrPw8cqaeaBRiQZdJpvesJsj/TCfPONcBBH2JFMrDw= Subject key identifier: 95:EE:91:FD:E6:F0:77:C8:D8:7A:9F:9E:8B:2C:B4:B8:AC:E6:DB:BC Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019D390A1D6946B75652A0E96E9C252D6B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1898 Signing time: Sun 29 Mar 2026 10:00:57 +0000 Manifest this update: Sun 29 Mar 2026 10:00:57 +0000 Manifest next update: Mon 30 Mar 2026 10:00:57 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: lEmIqrsweh49q//KG0iGVfEeTM+EGUwR9mSmyMBF6yY=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:0a:1d:69:46:b7:56:52:a0:e9:6e:9c:25:2d:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Mar 29 10:00:57 2026 GMT Not After : Mar 30 10:00:57 2026 GMT Subject: CN=95ee91fde6f077c8d87a9f9e8b2cb4b8ace6dbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:3f:6e:f4:61:35:2f:76:0b:23:00:02:6a: 36:79:bc:e5:6d:bf:df:34:f1:13:d5:be:25:fa:71: cb:e6:7a:ee:be:ab:c3:2c:c1:fc:6d:30:37:aa:4f: d8:b1:f2:bd:a3:74:31:29:5f:94:c9:84:a3:52:27: c2:e0:4e:68:b1:8f:7d:21:9e:8b:6e:41:f6:59:03: 4c:dd:fc:a7:0d:10:6a:27:c2:15:22:d7:59:56:ec: c1:fc:f5:4b:aa:24:28:33:ed:0d:88:d0:77:0d:e4: 4d:79:89:ea:01:5f:8f:70:20:55:26:19:64:97:ca: 2b:37:eb:f5:2d:b0:8f:b4:28:e2:dc:08:11:c9:e9: fc:40:e5:b9:28:a2:ef:a4:77:0d:d3:88:f8:aa:f0: 08:1a:ce:51:a4:f1:aa:29:c9:93:d8:80:0f:97:57: 70:15:7f:56:48:ae:5e:6a:ec:9b:07:37:1d:94:31: fd:04:c6:4f:94:db:0d:0b:56:30:62:9f:43:bf:b1: 99:83:fb:9c:9f:e9:4a:54:e7:f6:cc:56:81:87:9a: 38:eb:c7:1f:b9:f1:71:7d:19:d0:34:de:13:20:0a: 69:42:7c:c8:99:71:8e:37:bf:96:ae:34:a8:60:87: c4:6a:50:33:06:12:5f:91:94:36:86:78:4a:77:a1: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EE:91:FD:E6:F0:77:C8:D8:7A:9F:9E:8B:2C:B4:B8:AC:E6:DB:BC X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cd:11:c9:80:c9:1d:73:fb:37:f0:03:e3:ce:3e:92:98:b3: 49:91:d2:06:1c:e5:03:be:77:12:cc:e8:04:94:3d:69:2c:39: a7:21:5b:ea:e8:7b:54:63:08:85:30:81:f4:f0:54:4d:c9:1d: b4:cc:36:2c:a8:be:2f:07:ea:6f:f3:6b:4f:6c:76:75:68:23: 97:a5:36:12:f3:a3:bb:ed:91:6b:aa:e9:d0:d0:9d:2b:58:f3: e8:4f:46:d0:00:c9:49:67:fa:5f:39:c4:0f:34:51:0a:49:f0: d6:c7:74:c1:d5:bc:87:5b:f5:2d:39:3b:ef:d5:0c:04:a4:ed: 37:de:84:9b:c0:c8:e3:a2:9c:9a:2d:c9:ef:63:5c:3a:c7:6a: 8b:2c:77:3d:4e:a3:fa:c8:3a:2f:56:6e:38:9c:bc:3f:9b:24: 81:54:0d:38:0d:ae:8a:4a:bc:fa:aa:00:2b:a9:82:cd:92:f4: b3:41:19:1a:1a:45:50:7b:f4:9b:09:59:f4:33:51:9f:23:31: 1e:cd:b0:71:c8:06:01:40:05:4f:36:78:c6:1c:90:c1:f3:88: 3e:e9:2b:59:91:94:63:83:d1:e1:86:48:21:b8:1a:31:8e:bd: 2a:53:91:d9:56:04:39:f1:73:5d:fd:07:d6:20:a0:5a:a7:29: 31:42:cf:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05Ch1pRrdWUqDpbpwlLWsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMzI5MTAwMDU3WhcNMjYwMzMwMTAwMDU3WjAzMTEwLwYDVQQD Eyg5NWVlOTFmZGU2ZjA3N2M4ZDg3YTlmOWU4YjJjYjRiOGFjZTZkYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApak/bvRhNS92CyMAAmo2ebzlbb/f NPET1b4l+nHL5nruvqvDLMH8bTA3qk/YsfK9o3QxKV+UyYSjUifC4E5osY99IZ6L bkH2WQNM3fynDRBqJ8IVItdZVuzB/PVLqiQoM+0NiNB3DeRNeYnqAV+PcCBVJhlk l8orN+v1LbCPtCji3AgRyen8QOW5KKLvpHcN04j4qvAIGs5RpPGqKcmT2IAPl1dw FX9WSK5eauybBzcdlDH9BMZPlNsNC1YwYp9Dv7GZg/ucn+lKVOf2zFaBh5o468cf ufFxfRnQNN4TIAppQnzImXGON7+WrjSoYIfEalAzBhJfkZQ2hnhKd6EemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXukf3m8HfI2HqfnosstLis5tu8MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc0RyYDJ HXP7N/AD484+kpizSZHSBhzlA753EszoBJQ9aSw5pyFb6uh7VGMIhTCB9PBUTckd tMw2LKi+Lwfqb/NrT2x2dWgjl6U2EvOju+2Ra6rp0NCdK1jz6E9G0ADJSWf6XznE DzRRCknw1sd0wdW8h1v1LTk779UMBKTtN96Em8DI46Kcmi3J72NcOsdqiyx3PU6j +sg6L1ZuOJy8P5skgVQNOA2uikq8+qoAK6mCzZL0s0EZGhpFUHv0mwlZ9DNRnyMx Hs2wccgGAUAFTzZ4xhyQwfOIPukrWZGUY4PR4YZIIbgaMY69KlOR2VYEOfFzXf0H 1iCgWqcpMULPyg== -----END CERTIFICATE-----Generated at Sun Mar 29 14:56:10 2026 by rpki-client