$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: iyYNgS3gUx9v84X7aFb+Gvh7Jrbaq336G1XMxEqsZH4= Subject key identifier: DD:5E:04:9E:A3:85:9C:A3:4B:C9:31:F8:93:CB:F2:4A:BD:1E:05:0E Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019D39AF3EDE9B48B5A99CB10E0D3325B15F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 18DB Signing time: Sun 29 Mar 2026 13:01:19 +0000 Manifest this update: Sun 29 Mar 2026 13:01:19 +0000 Manifest next update: Mon 30 Mar 2026 13:01:19 +0000 Files and hashes: 1: 0xQr7SsuNbVkdglbPEuYeR908M4.roa (hash: OwNc5ie37GMpKkc5b6+YlsSSG7y7AT9vwxdWFk6XL+M=) 2: C2WOVwVQYwVr2nuLF8nZxh0HNso.roa (hash: dY3J82jDEAIC/rY1dL+3vS1oH5Nh7406smEXm0DFhew=) 3: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (hash: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4=) 4: PHo-_-c9dv_lcxCKA3owAiPB9_8.roa (hash: y6kd5vbSF0PMFFGGRnVqyERClzVeKGyZBN4ku3rQmPo=) 5: PpTOr4rXJzyV-q6NiqHNVjbAYZU.roa (hash: jQEomOlSvY4s8mgJ4+q3cKFP031XgY4ZDEypZ2ab0XY=) 6: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (hash: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4=) 7: RdrkAht6yrbBbejxzIbrV5zVYpY.roa (hash: wQGlcUelcwGBq/KPznOjfBf3x9PZjoXBbyQ8KYPVMIk=) 8: WhADIH61bkJ2leuk_zArifd_fK0.roa (hash: BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=) 9: Ygn_c8zbC36xqFlDHNWeV-WM8pU.roa (hash: CXih/mSxLCAOHxPVZ72EgZHKzViKS2T68SjIziUjdEM=) 10: k71425zZrgvZnNmix7lRrfFGz8M.roa (hash: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI=) 11: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: L5e+BHw6NiusppoQHRg/uNmH7zpXF6+C0uGs0f0Ty0k=) 12: wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa (hash: 3hm1vbiygm//Ol0678bMckEoB1V0vwd58eFRGEubz9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:af:3e:de:9b:48:b5:a9:9c:b1:0e:0d:33:25:b1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Mar 29 13:01:19 2026 GMT Not After : Mar 30 13:01:19 2026 GMT Subject: CN=dd5e049ea3859ca34bc931f893cbf24abd1e050e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:6d:6d:9e:50:5a:6a:79:0e:39:f4:cc:3f: ea:f5:ba:ef:ba:ab:37:69:ad:74:b5:7e:c5:c0:c3: e3:9b:84:40:a0:80:4c:ad:3f:b8:bd:20:32:a4:f2: 20:1c:4f:aa:33:9f:3a:77:33:57:53:92:44:ae:f5: fa:00:db:39:b1:71:23:5d:61:e9:d5:32:16:d7:5b: 34:70:25:61:de:0d:6d:56:dc:c1:17:79:be:25:e8: 95:af:66:9a:0f:20:48:e1:6b:9d:a5:4a:7e:22:ba: 64:82:a3:0b:d3:e7:e3:51:fa:73:9f:0e:be:1c:da: ec:b0:92:68:32:99:19:af:9d:cf:fb:db:6b:fc:e6: 8c:42:47:66:c3:15:9d:95:f0:36:bf:31:92:07:33: 58:79:29:52:b8:ac:bd:fd:14:52:52:87:6d:4c:fe: aa:74:d6:4f:56:3c:89:b4:00:98:fc:99:c7:60:5f: 9a:b0:1d:36:48:1f:21:e9:74:b0:d4:c1:fe:c3:73: 4d:37:c1:ff:ec:77:e5:33:e3:68:45:da:03:d2:5b: 2d:9f:5e:03:45:87:c3:91:d8:52:ca:08:55:c8:a4: d0:fb:e2:9d:f8:a6:9b:2b:43:c3:6d:9a:05:e0:00: f7:56:f3:ee:f2:18:94:d2:cf:d6:0e:55:7b:67:99: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:04:9E:A3:85:9C:A3:4B:C9:31:F8:93:CB:F2:4A:BD:1E:05:0E X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:00:fc:d8:10:1f:f8:6d:b9:e5:94:7a:0d:a8:51:90:bf:de: 76:39:c7:70:49:f3:c6:5c:cc:ff:91:98:a5:1d:6d:8a:71:f8: 01:5f:be:38:49:77:f2:de:57:98:59:3e:54:2b:61:61:d7:16: df:77:68:86:d6:87:f6:d3:73:c7:3c:69:ae:32:57:1f:f5:03: 2f:36:2d:03:75:e8:2d:c4:40:d3:14:a7:7b:ad:84:0e:b4:b4: ab:bb:b9:b9:bb:42:74:0f:32:3d:95:7c:a7:ca:3d:72:b7:b3: 85:49:a2:77:b7:ef:4b:b1:05:9d:74:41:57:32:3e:98:5d:8d: 16:ad:51:23:58:fd:15:50:56:97:2c:1c:e9:86:a6:4f:dc:d7: 05:f6:33:b4:09:16:5f:52:21:aa:a9:7f:8b:be:63:3d:b7:22: 84:01:e8:de:ce:9d:b1:c1:42:16:54:c8:3e:ab:56:bb:3a:53: 94:06:24:f0:c9:22:76:a7:b4:18:04:b0:ed:10:66:0c:53:99: 53:72:40:eb:75:f2:53:36:70:29:f5:9c:c9:d2:81:b9:bc:05: 6a:5c:e9:d8:fd:53:4a:68:81:1b:e8:64:59:4a:c1:9d:e6:db: 8b:24:b5:e2:87:9e:9a:97:c1:9b:68:ca:7a:df:f0:b8:69:61: 4a:49:5a:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05rz7em0i1qZyxDg0zJbFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwMzI5MTMwMTE5WhcNMjYwMzMwMTMwMTE5WjAzMTEwLwYDVQQD EyhkZDVlMDQ5ZWEzODU5Y2EzNGJjOTMxZjg5M2NiZjI0YWJkMWUwNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ZtbZ5QWmp5Djn0zD/q9brvuqs3 aa10tX7FwMPjm4RAoIBMrT+4vSAypPIgHE+qM586dzNXU5JErvX6ANs5sXEjXWHp 1TIW11s0cCVh3g1tVtzBF3m+JeiVr2aaDyBI4WudpUp+IrpkgqML0+fjUfpznw6+ HNrssJJoMpkZr53P+9tr/OaMQkdmwxWdlfA2vzGSBzNYeSlSuKy9/RRSUodtTP6q dNZPVjyJtACY/JnHYF+asB02SB8h6XSw1MH+w3NNN8H/7HflM+NoRdoD0lstn14D RYfDkdhSyghVyKTQ++Kd+KabK0PDbZoF4AD3VvPu8hiU0s/WDlV7Z5lViQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1eBJ6jhZyjS8kx+JPL8kq9HgUOMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgD82BAf +G255ZR6DahRkL/edjnHcEnzxlzM/5GYpR1tinH4AV++OEl38t5XmFk+VCthYdcW 33dohtaH9tNzxzxprjJXH/UDLzYtA3XoLcRA0xSne62EDrS0q7u5ubtCdA8yPZV8 p8o9crezhUmid7fvS7EFnXRBVzI+mF2NFq1RI1j9FVBWlywc6YamT9zXBfYztAkW X1Ihqql/i75jPbcihAHo3s6dscFCFlTIPqtWuzpTlAYk8Mkidqe0GASw7RBmDFOZ U3JA63XyUzZwKfWcydKBubwFalzp2P1TSmiBG+hkWUrBnebbiyS14oeempfBm2jK et/wuGlhSkla0A== -----END CERTIFICATE-----Generated at Sun Mar 29 20:06:17 2026 by rpki-client