$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: tOSRcg24f4vDKO/wo0XJ2/99y3QEMQu57HLLrC+EekI= Subject key identifier: 1F:D0:E3:A1:E7:68:C1:5C:98:CB:63:9A:7C:F1:B3:50:99:07:1C:F2 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019D3940CA41B6129C546A4B62FBAE1738C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0A0B Signing time: Sun 29 Mar 2026 11:00:40 +0000 Manifest this update: Sun 29 Mar 2026 11:00:40 +0000 Manifest next update: Mon 30 Mar 2026 11:00:40 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: FfHPyWPhRVu2dobxAnlkLulxg2/y0hqE28Ylig+kxME=) 8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:40:ca:41:b6:12:9c:54:6a:4b:62:fb:ae:17:38:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Mar 29 11:00:40 2026 GMT Not After : Mar 30 11:00:40 2026 GMT Subject: CN=1fd0e3a1e768c15c98cb639a7cf1b35099071cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:95:12:b0:8f:4a:d6:2c:8c:c8:00:db:a3: d2:56:f4:77:44:42:5b:21:eb:9c:2d:e8:d4:a1:3f: 8d:47:d6:04:68:d1:f5:f1:8c:3b:e6:f3:3d:f4:75: 0a:54:ae:0a:ee:2e:84:51:f1:6d:ac:41:8a:d0:37: bf:ff:50:0d:a0:d5:34:c0:ce:fd:88:9b:f4:bd:19: 4e:2f:fc:27:54:a3:39:ce:da:34:9f:cb:12:a8:77: ce:4d:65:e9:c9:a9:f5:6f:7a:70:7d:00:97:83:8d: 33:76:33:ef:42:5f:83:43:fc:e5:fc:d5:34:3d:53: aa:ed:89:0e:e3:08:00:d7:43:20:93:19:b3:2f:0e: 4e:59:bf:b8:c6:68:7a:a9:60:11:65:7f:55:f6:7a: ef:1c:71:06:2e:92:45:a4:9a:95:a0:67:bd:83:88: a7:d0:f7:db:c4:85:da:da:ff:4d:c2:55:09:b8:4d: 83:83:06:49:1d:a1:0f:77:bb:28:00:4d:ce:91:e8: 94:e0:ec:50:fd:86:c8:58:87:4d:19:ba:58:60:2e: 3c:8d:f8:32:63:45:c0:fd:4c:c6:13:78:16:d2:01: 1d:1c:61:df:3a:59:44:6e:e3:66:81:0a:8c:6a:cf: d9:24:c8:c2:9f:7b:a6:de:b9:f7:d6:66:67:f1:05: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:E3:A1:E7:68:C1:5C:98:CB:63:9A:7C:F1:B3:50:99:07:1C:F2 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:71:ab:08:f8:e9:0c:06:da:ae:d9:40:60:7b:ae:36:1b:62: 23:a2:23:2d:9e:f1:ac:1b:09:8b:6e:55:af:13:4c:58:be:3f: 96:44:e8:a6:b5:61:2b:c5:e6:b1:3b:db:52:c9:c8:99:41:81: 1d:e5:32:1f:0c:5f:29:93:b6:64:49:70:07:af:2b:a7:a7:d6: 5d:3c:5f:14:45:b7:20:b8:67:bb:a1:e8:cf:d3:73:23:ea:01: 61:5f:56:ad:26:4e:08:85:b2:ef:cb:10:39:d3:0e:77:11:54: 0a:33:61:49:52:e8:c4:bd:43:7b:35:dc:68:b9:ec:4b:d5:af: a7:82:9a:34:c0:76:76:c8:66:08:f9:0d:90:5e:5e:73:a7:9a: 43:2b:c7:ed:06:64:0a:50:98:97:9d:4b:12:0f:a4:ee:c1:db: 1c:c8:da:b0:93:3f:fe:9a:b7:16:61:1f:de:77:16:cb:dd:2b: 4b:6c:f1:1a:0f:88:46:36:91:c3:37:d8:80:c3:2f:48:b9:46: 3d:23:20:f2:5c:47:cf:50:d7:d5:97:34:27:f5:2f:81:7d:df: 83:fb:05:46:15:48:22:9c:13:35:19:dc:3c:a1:f0:b1:ec:8c: ff:9e:b0:18:c6:37:38:18:f1:d6:8a:aa:2d:3a:88:0c:71:72: fb:1c:80:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05QMpBthKcVGpLYvuuFzjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMzI5MTEwMDQwWhcNMjYwMzMwMTEwMDQwWjAzMTEwLwYDVQQD EygxZmQwZTNhMWU3NjhjMTVjOThjYjYzOWE3Y2YxYjM1MDk5MDcxY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWSVErCPStYsjMgA26PSVvR3REJb IeucLejUoT+NR9YEaNH18Yw75vM99HUKVK4K7i6EUfFtrEGK0De//1ANoNU0wM79 iJv0vRlOL/wnVKM5zto0n8sSqHfOTWXpyan1b3pwfQCXg40zdjPvQl+DQ/zl/NU0 PVOq7YkO4wgA10MgkxmzLw5OWb+4xmh6qWARZX9V9nrvHHEGLpJFpJqVoGe9g4in 0PfbxIXa2v9NwlUJuE2DgwZJHaEPd7soAE3OkeiU4OxQ/YbIWIdNGbpYYC48jfgy Y0XA/UzGE3gW0gEdHGHfOllEbuNmgQqMas/ZJMjCn3um3rn31mZn8QWl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/Q46HnaMFcmMtjmnzxs1CZBxzyMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHGrCPjp DAbartlAYHuuNhtiI6IjLZ7xrBsJi25VrxNMWL4/lkToprVhK8XmsTvbUsnImUGB HeUyHwxfKZO2ZElwB68rp6fWXTxfFEW3ILhnu6Hoz9NzI+oBYV9WrSZOCIWy78sQ OdMOdxFUCjNhSVLoxL1DezXcaLnsS9Wvp4KaNMB2dshmCPkNkF5ec6eaQyvH7QZk ClCYl51LEg+k7sHbHMjasJM//pq3FmEf3ncWy90rS2zxGg+IRjaRwzfYgMMvSLlG PSMg8lxHz1DX1Zc0J/UvgX3fg/sFRhVIIpwTNRncPKHwseyM/56wGMY3OBjx1oqq LTqIDHFy+xyAtA== -----END CERTIFICATE-----Generated at Sun Mar 29 13:42:22 2026 by rpki-client