$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: Lf3axqNCK0mtm4GaR8+Z0tOb+HapPSGpNO78ZvTzutk= Subject key identifier: 18:96:42:66:AA:62:42:C9:CC:F4:63:3B:9A:62:A4:C5:78:3F:C2:FA Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019D37C0E5BCD654C8D5F0C3E185B26B1859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 08A3 Signing time: Sun 29 Mar 2026 04:01:21 +0000 Manifest this update: Sun 29 Mar 2026 04:01:21 +0000 Manifest next update: Mon 30 Mar 2026 04:01:21 +0000 Files and hashes: 1: NzMNXeLDcLYIFC344oXjWazxrR4.roa (hash: UgKP2v1WGk4SEP8/PEV1HHI9/43agiNTHs+4EhmSNfE=) 2: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: Oz8s64lKuLAZA5BcGVSLCc1i8rdr3aQoaHs/Jg8Gros=) 3: STnOJRTNql21M2Kz5QY42xiaMM4.roa (hash: 5N7rcDLtfU0kN4gxROhTw9CW7XTPLN7mgLp3zMXOn6o=) 4: Wol6fw44OugIpyfwtURH8iAfI-E.roa (hash: gGDOi1vglKxk1aYaUA2in8OVjOdtb3M/Bet9OhLskOo=) 5: _MGbRQDu2ns3ZgtHHgodxQrWr6M.roa (hash: jDV5qNzh/x2GH+Pt80kizBcWmWTRDyTfwoJ6oLaNVg0=) 6: d7BZIUUqBrS52FwlH2ljflWbZ_A.roa (hash: 9mI4zy/olh2ONX+uGlVWvbZVvFWOt7oaz33dGchSk8s=) 7: fbA42s8Kmn6_qiii4C2mgQXSZaY.roa (hash: wv9Hm3pzXU0ti/JP4SWAksa5yQa0BXn03rMeZYg4wgo=) 8: pbj7BlyoAhp9vFcoK7aeUx0ZoFE.roa (hash: Xb5omDyQG1K2G5xJyofbR13JuOlhM5SRdb6qoh7Mgs0=) 9: qIBcgoxGaTpRyT1GVIURNEpjT0U.roa (hash: vzZMI2J8AcgNX06ElvLWaU+DX1AEJ/xGwsQNinRF8Xk=) 10: uHuUzzjJV0HUtV7aunxTY6hSyL0.roa (hash: ywDDk4Da2VFEPAZYkJbPbp7ZppYitudvQc1nou/VXXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:e5:bc:d6:54:c8:d5:f0:c3:e1:85:b2:6b:18:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Mar 29 04:01:21 2026 GMT Not After : Mar 30 04:01:21 2026 GMT Subject: CN=18964266aa6242c9ccf4633b9a62a4c5783fc2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:4f:6f:92:af:4f:e2:83:94:ab:a6:d5:de: 5f:47:14:f1:b9:3e:d1:f7:fa:73:dd:ec:02:10:a6: aa:9d:34:95:cf:65:db:e2:6e:ae:3d:97:84:b1:d7: b1:72:5e:86:d4:d3:f4:0f:6d:ec:f0:c0:ad:c2:8a: f0:a4:a8:db:57:f8:7e:46:27:df:9a:9b:de:5e:3b: 80:a1:ae:9a:4b:88:52:c2:82:b8:75:85:f4:5f:40: b8:37:24:8e:72:49:3b:d4:4c:47:c6:8d:7f:c6:83: 84:29:e9:ed:00:3a:c5:f2:1c:dc:3b:19:22:c3:05: 2a:4f:cf:71:61:1f:00:ce:f5:15:29:f3:1b:9b:c5: e9:19:a8:35:5a:0c:a5:33:63:8f:1e:0a:0f:ef:c2: a0:13:ba:2a:11:0a:bc:00:c5:5d:c1:d9:20:25:53: 18:0a:b3:cb:90:eb:82:49:67:05:d5:68:3d:f2:0d: ed:68:3d:ea:3a:19:87:64:99:c9:15:8a:4d:50:33: 84:92:17:1b:fb:b8:18:3a:c2:7e:57:83:0e:d2:f7: 45:38:22:25:a0:c5:0e:b0:d6:6e:c8:13:1f:a8:bd: 2c:7a:68:d6:c3:98:01:fb:6f:e3:74:26:e3:59:25: fb:2a:90:1c:f4:0d:4d:1e:0e:1e:d7:33:11:82:0b: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:42:66:AA:62:42:C9:CC:F4:63:3B:9A:62:A4:C5:78:3F:C2:FA X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b5:e1:41:9d:c5:6d:0e:fb:85:02:40:eb:e6:92:4a:4e:74: 97:aa:4c:90:29:78:b1:b9:2f:4e:92:a1:0f:3d:17:82:7b:3e: 89:90:84:ad:bf:6b:c7:e8:ab:45:96:19:c3:6d:48:ba:2a:41: f7:44:83:52:b5:ee:39:9d:55:31:79:eb:bc:72:f4:f4:27:66: 78:45:7e:7e:9b:5c:5a:3c:1e:90:d6:00:16:51:9d:c4:dd:55: 43:f1:ce:f7:65:d5:68:8c:70:4f:ba:b2:3c:d9:61:d4:9e:8e: ad:ec:ad:bd:8d:70:eb:7e:fb:34:ce:dc:4b:ad:98:a7:86:8a: f0:b2:8e:da:4f:97:76:9d:33:35:97:f8:0d:c0:48:b0:fd:31: a0:40:ef:4f:80:36:fc:f5:7e:3b:06:07:a7:ee:f0:d2:2d:00: 1e:84:22:b6:21:ef:8d:bc:60:37:1a:d5:74:2a:c9:cf:d2:23: 37:5d:7d:21:3c:ec:3f:38:9c:e1:00:f2:fb:a5:1e:32:aa:9e: 06:45:e9:c9:7f:32:13:99:ce:69:1f:42:05:37:98:70:38:d8: 68:1d:22:2a:cd:48:df:7e:04:37:56:b5:da:a9:49:ee:99:67: f0:3a:2e:80:6c:4c:f9:e5:db:dc:63:79:d2:f0:f3:e0:6f:93: e2:16:50:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wOW81lTI1fDD4YWyaxhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMzI5MDQwMTIxWhcNMjYwMzMwMDQwMTIxWjAzMTEwLwYDVQQD EygxODk2NDI2NmFhNjI0MmM5Y2NmNDYzM2I5YTYyYTRjNTc4M2ZjMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tJPb5KvT+KDlKum1d5fRxTxuT7R 9/pz3ewCEKaqnTSVz2Xb4m6uPZeEsdexcl6G1NP0D23s8MCtworwpKjbV/h+Riff mpveXjuAoa6aS4hSwoK4dYX0X0C4NySOckk71ExHxo1/xoOEKentADrF8hzcOxki wwUqT89xYR8AzvUVKfMbm8XpGag1WgylM2OPHgoP78KgE7oqEQq8AMVdwdkgJVMY CrPLkOuCSWcF1Wg98g3taD3qOhmHZJnJFYpNUDOEkhcb+7gYOsJ+V4MO0vdFOCIl oMUOsNZuyBMfqL0semjWw5gB+2/jdCbjWSX7KpAc9A1NHg4e1zMRggurjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiWQmaqYkLJzPRjO5pipMV4P8L6MB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrXhQZ3F bQ77hQJA6+aSSk50l6pMkCl4sbkvTpKhDz0Xgns+iZCErb9rx+irRZYZw21IuipB 90SDUrXuOZ1VMXnrvHL09CdmeEV+fptcWjwekNYAFlGdxN1VQ/HO92XVaIxwT7qy PNlh1J6OreytvY1w6377NM7cS62Yp4aK8LKO2k+Xdp0zNZf4DcBIsP0xoEDvT4A2 /PV+OwYHp+7w0i0AHoQitiHvjbxgNxrVdCrJz9IjN119ITzsPzic4QDy+6UeMqqe BkXpyX8yE5nOaR9CBTeYcDjYaB0iKs1I334EN1a12qlJ7pln8DougGxM+eXb3GN5 0vDz4G+T4hZQcw== -----END CERTIFICATE-----Generated at Sun Mar 29 12:44:58 2026 by rpki-client