$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft File: E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft (raw, json) Hash identifier: FJ+aOYPP6dQ8BekW6qKYlVmP4xhd9szfag6VANiA7bA= Subject key identifier: E7:B7:D9:A4:21:27:E6:CE:39:85:92:3C:94:1E:45:36:79:1A:5F:EB Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae Certificate serial: 019CE1478C4CAFCF3642B57DCEBD8D691F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft Manifest number: 21 Signing time: Thu 12 Mar 2026 09:01:28 +0000 Manifest this update: Thu 12 Mar 2026 09:01:28 +0000 Manifest next update: Fri 13 Mar 2026 09:01:28 +0000 Files and hashes: 1: 765B4oqIAjE4ys3sceOasyp6Frs.asa (hash: tXcZPa1qNAq++okd9KsxnN5MN76G3AcXdMJlT7DKBIs=) 2: DuR8R9YJWEDaCvnw-8235RrAPAI.roa (hash: nwr1wP+HSbTaiN0zlgVNEhTYrOWHjDVW/mSXRxlqdg0=) 3: E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl (hash: K4itchGqDken8KZCOGc/OeFc4K9q+cmdVolzMW+y9SY=) 4: FPpnFunETKpDRc6mnEVSAcibjHY.roa (hash: mKu0fgjWLeHVWVpV0q239Ownr/fiYcW2/JVFXNc2qJ0=) 5: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (hash: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=) 6: hZr8-GHSaT1LVC0d0SUnsdKNWgk.roa (hash: wG/J0iawhu+Kl1JUrzlumoLnQM5wpIB/0XILiot9T/0=) 7: o1gfxD9uB6dijfjwREKMVnXFymQ.asa (hash: vbDHhE0GLzvSumxqvz1chGV9yQc+GPUXmwB/dlI8WzU=) 8: sP9A4cnylfqxWlDpkBAm0CIqBFU.roa (hash: pWmUgGcf93vr+1FE5Mpw2z4+mxojC+Zrtg39SIpckEs=) 9: v0ktEALprjuYyYztKF7oiuux4Yc.roa (hash: uoK2ToELcvQ/V62kgkj3wD/DyJ0aXYt2dIxjN0uwM8E=) 10: vZ76MzTutA9h8TjLG2CmYL50980.asa (hash: tORdkyvpxtXpQRLaJtpkfrPDjc0NvG7YKt8jh4XCvXo=) 11: yY8I4l0MBr9vnTlmQUYn6NoYBgM.roa (hash: o+wuVfWOWZsZTQMjwMDsqTstb94f+lmkvMjkI7KxcD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:47:8c:4c:af:cf:36:42:b5:7d:ce:bd:8d:69:1f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae Validity Not Before: Mar 12 09:01:28 2026 GMT Not After : Mar 13 09:01:28 2026 GMT Subject: CN=e7b7d9a42127e6ce3985923c941e4536791a5feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:29:85:f1:fe:a9:7a:0b:7d:f2:ee:36:69: aa:4d:12:e2:43:e2:22:fc:cb:e6:de:8b:0d:8d:f9: 1c:71:ea:ca:cb:95:0b:02:1f:97:31:3d:49:17:97: 68:82:2d:c5:a2:60:92:ad:37:df:ac:3d:4a:83:44: ad:3f:2e:6b:0b:9e:b5:15:c7:49:5e:be:d7:b9:5c: 32:23:34:1b:a7:c1:c7:0d:d1:86:4f:ca:22:d3:32: 65:bb:9d:22:1c:d8:37:a4:c7:63:b2:9b:bf:07:ed: fa:3d:b5:52:6b:29:d2:26:23:44:8a:7a:22:7b:4b: 7a:ce:19:54:65:08:e5:fc:b3:ea:ea:7a:df:ce:1e: a7:29:ca:3b:a7:2e:28:b9:78:54:7a:89:b9:c2:84: 7d:aa:68:a8:45:23:28:fb:3f:2c:ca:08:3d:c9:4a: ba:18:e0:3f:b4:6f:32:10:48:70:51:5d:eb:0c:30: 69:f3:19:04:52:1e:96:1d:16:d1:96:bc:13:c1:0c: 05:94:c9:37:3c:24:fd:91:b8:fe:bf:6a:68:3b:18: 25:6a:3b:07:69:33:0e:2d:8b:99:8b:73:91:a4:8a: b0:28:7c:c9:5a:9e:5c:fa:01:fe:af:b4:98:e4:c6: 5e:1c:12:e2:d6:cd:f4:78:50:1d:71:cd:b0:50:71: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:D9:A4:21:27:E6:CE:39:85:92:3C:94:1E:45:36:79:1A:5F:EB X509v3 Authority Key Identifier: keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:7e:8b:32:37:42:36:f5:bb:f6:be:cf:29:7a:41:d6:b0: fd:54:3c:fe:e9:df:60:ee:89:94:2b:8f:98:7b:f4:78:bc:65: 03:c8:fb:b3:c7:64:4f:9d:73:97:d2:e6:f1:bf:09:8d:e9:1a: 7e:4a:b1:d9:45:25:93:f4:73:25:c8:d8:43:35:03:1a:26:00: 34:24:90:d0:34:4d:c1:6d:6d:70:6e:0d:c0:c7:50:9d:b2:be: a7:3a:71:2e:de:59:77:9d:37:e7:d6:15:42:dc:68:67:d2:4a: ad:0c:bd:2e:32:40:99:24:cd:9a:9b:3e:0f:a3:3f:03:d8:b7: d9:84:79:f4:35:9a:0d:df:37:6f:25:6e:c7:c0:65:f4:1e:39: 16:1d:5c:2d:12:1a:38:1d:02:2b:43:b7:2a:c9:07:f7:39:d2: a4:d6:64:0e:72:1a:d9:23:f3:fa:1b:7c:a5:8a:9c:f4:db:ca: 4e:fd:ac:da:27:f9:3f:39:15:3d:43:5f:78:26:61:20:f3:94: 9e:21:ab:53:f9:6d:80:ca:6c:27:14:63:6e:3e:f5:e0:d4:c3: cf:e7:0a:cc:31:77:e3:1f:b5:bf:d3:e1:8a:01:24:a5:31:86: 61:99:9a:7e:4f:ca:27:8e:4f:6f:1e:4f:47:c1:83:a8:a2:85: 54:cd:43:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhR4xMr882QrV9zr2NaR9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj YTYyYWUwHhcNMjYwMzEyMDkwMTI4WhcNMjYwMzEzMDkwMTI4WjAzMTEwLwYDVQQD EyhlN2I3ZDlhNDIxMjdlNmNlMzk4NTkyM2M5NDFlNDUzNjc5MWE1ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IphfH+qXoLffLuNmmqTRLiQ+Ii /Mvm3osNjfkccerKy5ULAh+XMT1JF5dogi3FomCSrTffrD1Kg0StPy5rC561FcdJ Xr7XuVwyIzQbp8HHDdGGT8oi0zJlu50iHNg3pMdjspu/B+36PbVSaynSJiNEinoi e0t6zhlUZQjl/LPq6nrfzh6nKco7py4ouXhUeom5woR9qmioRSMo+z8sygg9yUq6 GOA/tG8yEEhwUV3rDDBp8xkEUh6WHRbRlrwTwQwFlMk3PCT9kbj+v2poOxglajsH aTMOLYuZi3ORpIqwKHzJWp5c+gH+r7SY5MZeHBLi1s30eFAdcc2wUHFumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe32aQhJ+bOOYWSPJQeRTZ5Gl/rMB8GA1UdIwQY MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt YzBkMjA3YzAyZDI3LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3 LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8t+izI3 Qjb1u/a+zyl6Qdaw/VQ8/unfYO6JlCuPmHv0eLxlA8j7s8dkT51zl9Lm8b8Jjeka fkqx2UUlk/RzJcjYQzUDGiYANCSQ0DRNwW1tcG4NwMdQnbK+pzpxLt5Zd50359YV QtxoZ9JKrQy9LjJAmSTNmps+D6M/A9i32YR59DWaDd83byVux8Bl9B45Fh1cLRIa OB0CK0O3KskH9znSpNZkDnIa2SPz+ht8pYqc9NvKTv2s2if5PzkVPUNfeCZhIPOU niGrU/ltgMpsJxRjbj714NTDz+cKzDF34x+1v9PhigEkpTGGYZmafk/KJ45Pbx5P R8GDqKKFVM1DVw== -----END CERTIFICATE-----Generated at Thu Mar 12 18:14:48 2026 by rpki-client