$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json) Hash identifier: x/j0jIXQn/qFO4Y1EVdkzbU/77Y6mCmGBuGcq3tsBLg= Subject key identifier: 87:6B:87:6A:93:6F:8B:B9:36:C3:7B:54:65:45:A8:60:46:04:EE:E4 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019CECA60FE340A2B73B4569843EB3DE2ED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft Manifest number: 1876 Signing time: Sat 14 Mar 2026 14:00:31 +0000 Manifest this update: Sat 14 Mar 2026 14:00:31 +0000 Manifest next update: Sun 15 Mar 2026 14:00:31 +0000 Files and hashes: 1: 8ixOCAhwWNDnq3ns0gAUwlgzmyk.roa (hash: wl/9bJRX8lYlM4jLjwEI20VfsWde6X8LQeHsRbukNDc=) 2: ODrvOm-dJuUN_AAYKVaZFOpeRWo.roa (hash: BwrM7AQ3z89UNZnD9zdl+nzTro1rSz8r7mTAINtQABE=) 3: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (hash: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=) 4: ULfP7S3K6Ksk8C6TR4RZSqXerPo.roa (hash: jDQhgjn7JFfsrl3H/uni3GxDG1EWoZv53nMWeBGAfcA=) 5: UXO72pN93K891EJ5EOS-KSuDTh4.roa (hash: J4YBwoF1qT8QowRHgcLZczx88TgjbKfIhyS5Yc1Q/h4=) 6: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: dzgwy2PDRTWQHPpodtXQzCGOsiYgKpQ2j3u+szO/T0Y=) 7: fyQVOXy16Gt7_ifnytbj200NH-Y.roa (hash: UyCkvhjGfT8atrl4wqMna6uOndaEBkveUoY6zrFvO4c=) 8: g2fN7tCyrysxEndgN_riAmLTYSU.roa (hash: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4=) 9: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=) 10: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (hash: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE=) 11: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=) 12: uPKrVXBdVJ52jFwUr1Sws2imUiQ.roa (hash: +P9LOhkgcvGB9Y0oqUbZdTK9wmnZzjn9rC57/GCZX0Q=) 13: yoxe9lLbCa2h6gtQRAHAduOM9X0.roa (hash: s8LyW32eS7lJnnnTP0eK55NVtnvGmgvQdGOQCvIfya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ec:a6:0f:e3:40:a2:b7:3b:45:69:84:3e:b3:de:2e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Mar 14 14:00:31 2026 GMT Not After : Mar 15 14:00:31 2026 GMT Subject: CN=876b876a936f8bb936c37b546545a8604604eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:21:e1:10:32:d8:84:b0:c7:ef:ba:55:2f: 88:e2:77:6d:a5:96:75:54:eb:9e:4e:0b:17:24:47: 27:43:6d:44:4c:8b:8f:fb:49:3e:3f:5a:d6:fd:14: 2f:3f:4a:98:82:69:c9:52:a0:40:b6:c7:26:6b:41: 0c:2e:c8:bc:7c:ae:d6:38:77:f8:18:9c:13:35:eb: e2:a3:a7:57:32:4e:ea:88:ce:e2:39:eb:d5:56:63: 79:e2:f4:e7:39:1e:d9:db:6b:d4:9f:6c:aa:8f:86: eb:1d:8e:ba:76:b5:2f:5b:b7:85:5b:eb:e5:34:ac: 58:e3:97:cc:9f:79:ab:6e:a3:31:48:85:ef:be:9a: 18:de:01:2f:78:e5:fd:be:5d:aa:92:7e:8b:5a:24: 34:05:3e:c7:12:39:59:f0:28:0c:6f:63:98:7d:ff: 60:bb:9f:69:54:c9:70:1f:c0:78:3d:8f:31:1c:bc: 16:c9:0d:a1:eb:2c:e2:58:0f:38:a8:da:4c:be:1d: c9:fc:03:d3:09:36:6f:29:30:35:1f:5a:17:d9:6a: e6:f5:81:55:93:b8:e3:44:38:00:53:c9:95:63:f5: ee:6b:f6:08:d0:3c:cf:31:77:f5:25:c2:8b:1b:83: da:76:09:28:0d:5c:ef:4c:4e:23:92:51:26:51:34: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:87:6A:93:6F:8B:B9:36:C3:7B:54:65:45:A8:60:46:04:EE:E4 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1f:68:af:ce:17:b2:e1:06:8d:50:35:92:4a:0d:0e:ac:68: c4:05:1d:c2:1a:56:12:23:35:84:a4:3f:ad:84:5a:6f:f9:9d: ee:79:bc:da:05:5a:09:2d:37:e2:69:fb:46:dc:e9:08:0e:14: 1a:d3:55:93:2d:d8:84:ca:80:83:61:a8:cf:7e:d9:98:aa:88: 28:57:83:cf:1d:67:cb:d7:f9:ae:87:a8:f6:09:d2:e0:63:ce: ec:29:a3:b8:b1:f2:62:6c:d4:ae:e0:47:43:6d:35:e3:3b:d5: c5:7c:4f:c7:c1:6f:19:bd:b3:82:13:d6:77:46:63:f2:00:1d: 9c:f1:53:c4:dc:1e:f4:a6:09:24:d5:17:8c:ae:cd:64:54:50: cb:f3:90:87:18:a7:5a:09:88:ea:db:7a:39:a0:13:bb:46:57: bf:ae:79:d2:8b:4a:3a:85:e1:27:04:16:b2:d6:57:ec:3d:ce: b1:3f:95:12:f8:8a:e0:79:62:62:a6:3b:ee:a5:3a:25:6e:42: 74:9e:50:3c:0b:03:e1:d5:ba:0c:b0:86:39:b8:0f:3f:31:8a: d8:72:e5:d8:61:65:4a:44:fc:13:d6:31:cf:3c:45:20:1d:73: a0:90:fa:a7:2c:73:b1:2b:05:f2:0a:fe:53:b8:a8:39:1e:84: db:65:f2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzspg/jQKK3O0VphD6z3i7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMzE0MTQwMDMxWhcNMjYwMzE1MTQwMDMxWjAzMTEwLwYDVQQD Eyg4NzZiODc2YTkzNmY4YmI5MzZjMzdiNTQ2NTQ1YTg2MDQ2MDRlZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAh4RAy2ISwx++6VS+I4ndtpZZ1 VOueTgsXJEcnQ21ETIuP+0k+P1rW/RQvP0qYgmnJUqBAtscma0EMLsi8fK7WOHf4 GJwTNevio6dXMk7qiM7iOevVVmN54vTnOR7Z22vUn2yqj4brHY66drUvW7eFW+vl NKxY45fMn3mrbqMxSIXvvpoY3gEveOX9vl2qkn6LWiQ0BT7HEjlZ8CgMb2OYff9g u59pVMlwH8B4PY8xHLwWyQ2h6yziWA84qNpMvh3J/APTCTZvKTA1H1oX2Wrm9YFV k7jjRDgAU8mVY/Xua/YI0DzPMXf1JcKLG4PadgkoDVzvTE4jklEmUTTzQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdrh2qTb4u5NsN7VGVFqGBGBO7kMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR9or84X suEGjVA1kkoNDqxoxAUdwhpWEiM1hKQ/rYRab/md7nm82gVaCS034mn7RtzpCA4U GtNVky3YhMqAg2Goz37ZmKqIKFeDzx1ny9f5roeo9gnS4GPO7CmjuLHyYmzUruBH Q2014zvVxXxPx8FvGb2zghPWd0Zj8gAdnPFTxNwe9KYJJNUXjK7NZFRQy/OQhxin WgmI6tt6OaATu0ZXv6550otKOoXhJwQWstZX7D3OsT+VEviK4HliYqY77qU6JW5C dJ5QPAsD4dW6DLCGObgPPzGK2HLl2GFlSkT8E9YxzzxFIB1zoJD6pyxzsSsF8gr+ U7ioOR6E22XyDA== -----END CERTIFICATE-----Generated at Sat Mar 14 16:41:12 2026 by rpki-client