$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: +1Akjx1iK+OFAbGj3sPstwD0QidbKwUzzAWSbY4oPHw= Subject key identifier: 79:2C:EA:2E:20:2B:1E:46:05:9D:57:A4:11:A7:10:2A:4A:30:87:83 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019D243A84DD3215B857FC09949F5EDC1FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1487 Signing time: Wed 25 Mar 2026 09:01:48 +0000 Manifest this update: Wed 25 Mar 2026 09:01:48 +0000 Manifest next update: Thu 26 Mar 2026 09:01:48 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: DFd6acU3o/26sKpGJ8bXCnzs4zPvAvQ0eIGCfNe4ia4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:24:3a:84:dd:32:15:b8:57:fc:09:94:9f:5e:dc:1f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Mar 25 09:01:48 2026 GMT Not After : Mar 26 09:01:48 2026 GMT Subject: CN=792cea2e202b1e46059d57a411a7102a4a308783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:fd:19:4b:3e:ea:16:9b:e2:a3:a8:f8:aa: 87:0a:b5:15:07:51:4e:ca:d2:2d:00:e9:6e:d6:e7: e4:ae:c0:5d:f0:9f:c0:0c:59:1f:be:cb:3c:12:2d: d3:38:78:63:44:ab:a3:48:29:57:7b:fe:0f:c1:2d: 3b:be:2b:95:e3:98:ad:88:ea:8b:ed:62:36:a0:ae: c1:0d:94:8c:59:51:03:c1:76:af:e5:4a:86:b4:fd: 30:9b:64:9a:52:27:bc:ec:3f:e0:35:38:3f:63:e5: 9c:02:cf:f8:3d:1d:74:a7:51:b0:e5:c7:46:12:63: 9c:b7:75:99:73:36:09:43:67:9a:b7:6d:58:86:88: 48:d2:27:dc:e2:fd:4d:34:bf:20:d6:68:fe:af:ae: 0d:b7:ac:1b:1c:fc:db:37:05:ad:e9:12:c1:7e:13: 20:6b:65:8f:73:5d:c4:8a:59:9c:a3:9b:fe:a8:8c: 13:39:46:21:2f:29:f3:a6:30:8e:da:f6:e2:18:57: 85:f3:53:d5:87:6e:bb:7f:e7:08:f3:60:33:d3:e6: 55:e6:1e:03:67:ab:3d:64:1c:c8:03:c4:ef:29:2d: 48:02:40:2d:5c:9c:ab:81:62:c0:73:b5:ca:be:17: 68:db:df:12:fd:45:9d:9b:a8:bd:d1:3a:cc:94:3e: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2C:EA:2E:20:2B:1E:46:05:9D:57:A4:11:A7:10:2A:4A:30:87:83 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:65:f0:aa:43:f5:d4:7c:b0:38:1d:9f:92:3e:7b:45:94:2f: d0:1a:d0:21:10:4f:cb:dd:a6:ad:ca:87:8a:9d:3d:df:6b:dc: 38:ca:df:01:ec:5e:94:df:7c:8e:48:89:a4:54:0b:65:87:cf: 45:01:b7:91:e9:c7:82:64:1b:47:65:fb:c6:3e:7e:62:7b:82: 13:85:50:a3:d0:c9:71:62:f1:22:4e:7e:76:68:1b:76:55:1d: 64:21:32:d8:a2:b5:ff:2f:b4:22:56:05:c4:47:2b:bb:3c:b3: ff:4e:84:3b:f3:94:86:41:8e:f6:61:d0:63:c2:22:b4:5c:c3: f8:1d:aa:95:21:5e:60:7a:59:02:64:48:89:16:c4:7c:d0:61: 93:ba:ca:a0:ca:4f:87:9e:ed:34:30:58:e2:ac:a3:cd:07:de: db:d7:0b:21:47:58:b5:f1:ab:99:1d:5d:08:42:94:49:fd:92: fa:dd:d8:1c:3b:27:33:c6:3b:35:27:d4:4c:d6:75:96:60:2c: 36:5f:74:72:34:1d:dd:bd:e5:d8:e3:42:a9:a5:47:98:8d:83: b8:52:bc:7e:4a:07:16:81:44:0f:ed:74:44:a3:73:5c:3c:07: 47:83:a8:6a:db:0d:d8:a8:3f:c6:1a:2f:7c:3d:bb:73:aa:ef: 3f:0e:a8:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0kOoTdMhW4V/wJlJ9e3B+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMzI1MDkwMTQ4WhcNMjYwMzI2MDkwMTQ4WjAzMTEwLwYDVQQD Eyg3OTJjZWEyZTIwMmIxZTQ2MDU5ZDU3YTQxMWE3MTAyYTRhMzA4NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uv9GUs+6hab4qOo+KqHCrUVB1FO ytItAOlu1ufkrsBd8J/ADFkfvss8Ei3TOHhjRKujSClXe/4PwS07viuV45itiOqL 7WI2oK7BDZSMWVEDwXav5UqGtP0wm2SaUie87D/gNTg/Y+WcAs/4PR10p1Gw5cdG EmOct3WZczYJQ2eat21YhohI0ifc4v1NNL8g1mj+r64Nt6wbHPzbNwWt6RLBfhMg a2WPc13Eilmco5v+qIwTOUYhLynzpjCO2vbiGFeF81PVh267f+cI82Az0+ZV5h4D Z6s9ZBzIA8TvKS1IAkAtXJyrgWLAc7XKvhdo298S/UWdm6i90TrMlD4C0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHks6i4gKx5GBZ1XpBGnECpKMIeDMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomXwqkP1 1HywOB2fkj57RZQv0BrQIRBPy92mrcqHip0932vcOMrfAexelN98jkiJpFQLZYfP RQG3kenHgmQbR2X7xj5+YnuCE4VQo9DJcWLxIk5+dmgbdlUdZCEy2KK1/y+0IlYF xEcruzyz/06EO/OUhkGO9mHQY8IitFzD+B2qlSFeYHpZAmRIiRbEfNBhk7rKoMpP h57tNDBY4qyjzQfe29cLIUdYtfGrmR1dCEKUSf2S+t3YHDsnM8Y7NSfUTNZ1lmAs Nl90cjQd3b3l2ONCqaVHmI2DuFK8fkoHFoFED+10RKNzXDwHR4OoatsN2Kg/xhov fD27c6rvPw6o1w== -----END CERTIFICATE-----Generated at Wed Mar 25 13:17:30 2026 by rpki-client