$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json) Hash identifier: hl3BS237/w+FOnVIhKtOwXa9Mg2btYfCo9CIGF4Dk7E= Subject key identifier: D8:80:F8:00:56:D4:2F:97:93:6D:4C:14:FF:79:9D:6F:35:EB:38:59 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019D329A8F671D42CA2695CEEC569E7C803E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft Manifest number: 189B Signing time: Sat 28 Mar 2026 04:01:23 +0000 Manifest this update: Sat 28 Mar 2026 04:01:23 +0000 Manifest next update: Sun 29 Mar 2026 04:01:23 +0000 Files and hashes: 1: ODrvOm-dJuUN_AAYKVaZFOpeRWo.roa (hash: BwrM7AQ3z89UNZnD9zdl+nzTro1rSz8r7mTAINtQABE=) 2: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (hash: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=) 3: ULfP7S3K6Ksk8C6TR4RZSqXerPo.roa (hash: jDQhgjn7JFfsrl3H/uni3GxDG1EWoZv53nMWeBGAfcA=) 4: UXO72pN93K891EJ5EOS-KSuDTh4.roa (hash: J4YBwoF1qT8QowRHgcLZczx88TgjbKfIhyS5Yc1Q/h4=) 5: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: 3tvu7+VcCHot12ymFLm7LtybcLKJ7EDQmv8z9w9/9J8=) 6: fyQVOXy16Gt7_ifnytbj200NH-Y.roa (hash: UyCkvhjGfT8atrl4wqMna6uOndaEBkveUoY6zrFvO4c=) 7: g2fN7tCyrysxEndgN_riAmLTYSU.roa (hash: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4=) 8: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=) 9: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (hash: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE=) 10: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=) 11: uPKrVXBdVJ52jFwUr1Sws2imUiQ.roa (hash: +P9LOhkgcvGB9Y0oqUbZdTK9wmnZzjn9rC57/GCZX0Q=) 12: xXZWM46z1TAUOXQSE6oSpM5BsdQ.roa (hash: nduBgEx3bWW/63xwL0qUko3F9aKO/3P5rrMsQnWCQDU=) 13: yoxe9lLbCa2h6gtQRAHAduOM9X0.roa (hash: s8LyW32eS7lJnnnTP0eK55NVtnvGmgvQdGOQCvIfya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:9a:8f:67:1d:42:ca:26:95:ce:ec:56:9e:7c:80:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Mar 28 04:01:23 2026 GMT Not After : Mar 29 04:01:23 2026 GMT Subject: CN=d880f80056d42f97936d4c14ff799d6f35eb3859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:e4:85:36:cf:e0:af:98:c9:5f:7a:b2:f1: b7:a7:00:b4:96:c9:95:e2:ef:95:dd:9c:0c:f7:7e: 90:be:ee:de:6c:1b:b4:d4:81:0e:27:47:8a:59:18: 2a:a6:c1:35:4a:4d:54:26:80:d5:08:45:cd:42:66: 19:6a:63:eb:c3:7b:96:6f:75:33:95:d4:f9:44:58: ca:db:91:48:95:e7:fb:b2:4d:dd:54:1f:38:30:8e: 25:e1:00:ee:f6:fe:0c:03:d2:15:51:4a:fa:38:14: ff:56:93:08:60:57:e5:4b:27:10:92:62:9c:c6:29: 37:59:d7:85:98:0c:4c:5e:bd:1d:d5:ce:cb:b3:af: 18:d4:5b:c7:5e:e9:83:e2:dc:67:2b:73:f3:21:f4: 4c:78:a0:6a:32:f8:7a:01:ea:53:e3:de:c9:25:c5: 94:f9:2e:e5:bf:c7:ab:20:66:5b:51:0b:06:da:b9: 9c:e2:1d:8a:9f:c4:94:42:79:94:13:bb:f2:e8:dd: e0:e9:f6:fc:5d:48:07:4b:0f:58:76:e8:79:ad:d1: 64:b4:95:7b:47:7c:92:56:82:01:6d:3d:c7:20:72: 6d:08:85:07:5f:ae:99:e0:06:44:77:52:ab:5e:a1: d4:c3:5c:b9:50:cb:04:41:fb:20:be:57:d6:80:14: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:80:F8:00:56:D4:2F:97:93:6D:4C:14:FF:79:9D:6F:35:EB:38:59 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:40:84:e3:39:c1:60:61:4e:4b:ea:3b:77:4f:ef:1b:d2:04: 1c:3b:4c:86:c6:ca:32:b2:a7:53:f9:0e:71:ca:30:6f:30:ac: 2d:ca:5e:b4:45:f7:05:13:4e:9a:32:91:48:0f:29:b2:de:bc: ed:bf:de:76:09:11:3b:03:17:4f:ea:32:81:64:55:d4:07:75: 0c:fc:58:c9:fb:4b:1a:bd:9f:a6:b0:9a:25:8c:fd:c7:27:84: 2d:8e:ac:47:c7:61:9f:59:53:92:28:01:99:8e:f5:72:ae:f6: 6c:64:71:97:c0:ef:d5:2f:ed:e5:d5:00:89:31:2e:b1:5e:9b: 43:11:81:2a:e8:10:7f:8d:ee:63:d9:fe:96:74:2a:88:d4:52: 10:90:7e:ca:e8:3c:a7:9a:87:58:e9:cf:e3:e3:db:14:36:c6: 08:51:18:7d:c2:6d:4b:ae:50:fc:06:9d:96:7e:47:56:62:5d: 7c:bc:ca:42:12:37:97:a9:0b:2c:4e:31:7a:b6:d5:d1:47:67: a6:38:bb:b5:a7:ed:cb:c6:46:25:8b:24:1f:6a:60:c2:f8:8d: 09:28:95:e7:c8:33:14:d9:d0:3f:4d:f7:2d:7c:bc:c5:02:c4: ff:84:93:fc:56:21:5e:dc:8e:68:ed:89:26:0d:37:78:6d:6d: b9:b6:84:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ymo9nHULKJpXO7FaefIA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMzI4MDQwMTIzWhcNMjYwMzI5MDQwMTIzWjAzMTEwLwYDVQQD EyhkODgwZjgwMDU2ZDQyZjk3OTM2ZDRjMTRmZjc5OWQ2ZjM1ZWIzODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq/khTbP4K+YyV96svG3pwC0lsmV 4u+V3ZwM936Qvu7ebBu01IEOJ0eKWRgqpsE1Sk1UJoDVCEXNQmYZamPrw3uWb3Uz ldT5RFjK25FIlef7sk3dVB84MI4l4QDu9v4MA9IVUUr6OBT/VpMIYFflSycQkmKc xik3WdeFmAxMXr0d1c7Ls68Y1FvHXumD4txnK3PzIfRMeKBqMvh6AepT497JJcWU +S7lv8erIGZbUQsG2rmc4h2Kn8SUQnmUE7vy6N3g6fb8XUgHSw9Yduh5rdFktJV7 R3ySVoIBbT3HIHJtCIUHX66Z4AZEd1KrXqHUw1y5UMsEQfsgvlfWgBTr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiA+ABW1C+Xk21MFP95nW816zhZMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0CE4znB YGFOS+o7d0/vG9IEHDtMhsbKMrKnU/kOccowbzCsLcpetEX3BRNOmjKRSA8pst68 7b/edgkROwMXT+oygWRV1Ad1DPxYyftLGr2fprCaJYz9xyeELY6sR8dhn1lTkigB mY71cq72bGRxl8Dv1S/t5dUAiTEusV6bQxGBKugQf43uY9n+lnQqiNRSEJB+yug8 p5qHWOnP4+PbFDbGCFEYfcJtS65Q/Aadln5HVmJdfLzKQhI3l6kLLE4xerbV0Udn pji7tafty8ZGJYskH2pgwviNCSiV58gzFNnQP033LXy8xQLE/4ST/FYhXtyOaO2J Jg03eG1tubaE8g== -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:15 2026 by rpki-client