$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: ZEZ+j4vVTKtJxUgg6c/848iVsoCUbu4bBZqStieeUzE= Subject key identifier: 67:55:8D:7D:59:3A:23:9B:D6:FE:75:88:64:BD:E6:46:5A:7C:21:62 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019D2B173C70808BB17481052284C9771C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 18AE Signing time: Thu 26 Mar 2026 17:00:36 +0000 Manifest this update: Thu 26 Mar 2026 17:00:36 +0000 Manifest next update: Fri 27 Mar 2026 17:00:36 +0000 Files and hashes: 1: EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa (hash: huHb9cQ28qENRbxt4Jo9X2c4RoM7avLuE+mizVHLkVc=) 2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 8: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 9: cLJsj5GbZFPDLqBTAGoEw4keZjc.roa (hash: ONjTw1gt4vqkoZ/+zv3GVV+vpr1bahhrBgTFsZguWy0=) 10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: X67pTREjnhKJGr/Vp3UYAuDIDJyDHyHjsy0hhQpSJdo=) 11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:17:3c:70:80:8b:b1:74:81:05:22:84:c9:77:1c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Mar 26 17:00:36 2026 GMT Not After : Mar 27 17:00:36 2026 GMT Subject: CN=67558d7d593a239bd6fe758864bde6465a7c2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:a5:1e:57:d6:1f:f0:6e:97:30:ee:9c:b1: 08:de:6d:2b:d8:41:4a:37:11:5e:b5:52:6c:68:45: c3:68:22:35:3b:f2:c7:59:4d:2f:e0:45:00:bc:3b: 4b:cf:ec:f6:e5:33:42:e7:d2:f7:85:53:37:2b:8e: 2f:cf:3e:69:0f:b5:27:0b:61:22:bc:a5:64:33:1e: 41:ef:09:d9:2a:80:9c:bf:96:77:99:ed:73:cc:44: 58:ff:3d:75:34:b4:aa:c9:48:b9:2f:4d:86:9f:e7: 1f:49:58:e0:cc:09:d6:21:7f:b7:46:f1:7f:a8:85: 93:dc:a7:3d:cb:39:5d:3a:c3:85:b4:02:04:c3:95: 6b:c5:b8:33:30:10:02:f7:c5:8d:54:71:df:5f:f0: 93:da:36:b4:89:5b:f1:fb:3e:75:2a:b0:ae:50:43: e2:eb:02:c9:76:47:6f:01:1a:a2:97:2e:42:67:c3: 17:6e:17:c9:c9:ff:51:01:6d:09:11:16:e5:cc:ef: fe:12:68:1f:8e:f4:5b:cf:73:3b:ea:82:85:a8:51: 7b:45:f0:7c:e7:46:c5:73:bd:b2:77:25:86:21:f9: 50:0f:69:89:c1:d5:42:8c:c5:74:df:13:ff:ee:64: 0f:62:66:31:6c:90:cb:7c:4e:44:80:3b:be:4a:05: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:55:8D:7D:59:3A:23:9B:D6:FE:75:88:64:BD:E6:46:5A:7C:21:62 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b1:1a:ee:fe:27:d3:d4:b9:2d:1e:53:f0:83:88:52:50:6d: 24:ac:14:0f:43:a8:5a:59:17:3a:77:c6:b5:41:0d:22:2e:45: e7:72:4e:96:12:d0:93:62:3b:91:b3:8a:04:2a:88:4c:22:c2: 76:74:72:12:a2:3c:03:d2:0d:0e:41:07:f2:94:13:f9:96:97: 75:c3:42:70:fa:3e:3d:4e:4f:ba:d5:04:4a:71:77:9c:53:18: 12:29:c3:52:05:5d:77:c0:f0:87:5e:e8:f7:d4:b7:a4:f7:19: 4f:28:3a:6b:29:7a:ad:de:eb:0b:10:9f:52:55:ba:6e:8b:d8: a4:16:ef:78:f6:3a:01:87:bb:d2:fb:2f:ab:8d:24:fb:16:b8: 7d:93:95:8c:d0:dd:3b:15:5b:e4:e8:52:7e:84:3e:52:de:71: cd:5f:91:33:43:1b:3f:bf:03:8c:b0:75:10:89:9f:93:a2:53: 6a:26:e0:dd:64:71:3a:9d:23:5d:74:71:19:e3:7b:ee:ed:60: 84:4a:92:7b:ef:ae:76:cd:2b:0c:c5:88:f1:59:1d:76:da:9e: 48:63:03:e5:31:c7:0f:50:b8:45:ee:46:6b:3b:de:5f:b9:e2: d5:51:c6:68:74:0e:3c:54:78:4b:fb:7b:62:f3:06:f2:44:77: f7:0d:f1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rFzxwgIuxdIEFIoTJdxwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMzI2MTcwMDM2WhcNMjYwMzI3MTcwMDM2WjAzMTEwLwYDVQQD Eyg2NzU1OGQ3ZDU5M2EyMzliZDZmZTc1ODg2NGJkZTY0NjVhN2MyMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+lHlfWH/BulzDunLEI3m0r2EFK NxFetVJsaEXDaCI1O/LHWU0v4EUAvDtLz+z25TNC59L3hVM3K44vzz5pD7UnC2Ei vKVkMx5B7wnZKoCcv5Z3me1zzERY/z11NLSqyUi5L02Gn+cfSVjgzAnWIX+3RvF/ qIWT3Kc9yzldOsOFtAIEw5VrxbgzMBAC98WNVHHfX/CT2ja0iVvx+z51KrCuUEPi 6wLJdkdvARqily5CZ8MXbhfJyf9RAW0JERblzO/+EmgfjvRbz3M76oKFqFF7RfB8 50bFc72ydyWGIflQD2mJwdVCjMV03xP/7mQPYmYxbJDLfE5EgDu+SgUDXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdVjX1ZOiOb1v51iGS95kZafCFiMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrEa7v4n 09S5LR5T8IOIUlBtJKwUD0OoWlkXOnfGtUENIi5F53JOlhLQk2I7kbOKBCqITCLC dnRyEqI8A9INDkEH8pQT+ZaXdcNCcPo+PU5PutUESnF3nFMYEinDUgVdd8Dwh17o 99S3pPcZTyg6ayl6rd7rCxCfUlW6bovYpBbvePY6AYe70vsvq40k+xa4fZOVjNDd OxVb5OhSfoQ+Ut5xzV+RM0MbP78DjLB1EImfk6JTaibg3WRxOp0jXXRxGeN77u1g hEqSe++uds0rDMWI8VkddtqeSGMD5THHD1C4Re5GazveX7ni1VHGaHQOPFR4S/t7 YvMG8kR39w3xHw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:02 2026 by rpki-client