$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: l/A2LyR0x3QawzVqZ6I7bCRcQob0u+s4obnTrlBHQ3E= Subject key identifier: D7:20:86:AA:AD:1C:9A:49:99:A0:CD:4F:15:1F:12:23:C1:4D:D4:BA Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019D1F4A720594601F14457E0211EA241F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 18A8 Signing time: Tue 24 Mar 2026 10:01:05 +0000 Manifest this update: Tue 24 Mar 2026 10:01:05 +0000 Manifest next update: Wed 25 Mar 2026 10:01:05 +0000 Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=) 2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: hA3swab5BMPgIfLTv4fbPJOBQL4APF0U5bUc8l1InGA=) 3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=) 4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=) 5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=) 6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=) 7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=) 8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=) 9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=) 10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=) 11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=) 12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:1f:4a:72:05:94:60:1f:14:45:7e:02:11:ea:24:1f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Mar 24 10:01:05 2026 GMT Not After : Mar 25 10:01:05 2026 GMT Subject: CN=d72086aaad1c9a4999a0cd4f151f1223c14dd4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:a5:84:ab:7c:18:72:5f:7f:30:50:4a:c1: 52:b2:b9:6d:12:69:a1:13:60:a7:7d:8f:d0:27:65: c6:25:4e:94:36:bc:81:1c:bf:a8:f4:b4:e0:6f:3a: a1:8b:d8:dd:28:f5:fc:41:38:b0:bc:92:9f:30:a2: 0f:06:62:1b:b2:a0:22:08:cc:9f:68:22:c9:b2:6d: a2:b4:1b:84:6e:e8:e1:31:99:27:d3:99:cf:48:a0: 80:b2:73:84:d5:ba:32:38:13:ac:99:6a:7d:20:64: 8c:b4:91:ef:8c:86:8a:53:2a:46:c4:34:d3:7f:01: 27:75:c7:9d:cb:96:dc:d8:7d:4c:0d:17:fd:b1:43: b4:c2:b4:95:a9:78:fe:28:f0:a8:4a:80:da:e7:42: 03:fb:7c:04:1f:ed:50:3a:99:04:cc:af:4e:77:d8: 5e:b5:86:f1:05:f4:36:a2:1f:bb:f0:8d:e3:c9:c6: 53:98:d7:ab:61:8e:50:ab:b4:73:b3:0a:5b:37:94: e2:e6:b9:ce:92:bc:da:aa:4b:8d:24:cf:5c:b3:72: ff:b7:00:02:2d:95:cb:b3:60:4a:a4:16:7a:57:74: 6f:ed:b6:56:ea:56:79:2c:1e:85:07:91:2d:57:af: e0:a1:84:4d:fa:85:0b:d7:c5:84:b2:90:2d:18:95: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:86:AA:AD:1C:9A:49:99:A0:CD:4F:15:1F:12:23:C1:4D:D4:BA X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:45:37:5b:6f:72:75:c1:8f:6a:5c:6f:d5:e2:bc:1d:a5:12: fd:ac:d8:0d:8a:46:7c:ab:93:06:55:3f:4c:c3:2d:64:de:af: 5a:fd:d3:e2:1e:ee:f0:bd:6b:f7:54:30:80:b4:8b:21:22:d7: 60:44:4d:8f:b8:0b:b6:46:4d:c5:7e:29:d9:47:85:74:4c:4b: 75:61:4f:d2:6d:20:2f:3d:ba:e8:51:a6:e1:e5:37:5e:f2:67: 58:42:28:9b:1c:e0:3b:c9:6d:a0:67:1c:8b:b1:f2:8e:fc:1b: 57:fd:a3:aa:fa:4e:b3:9c:d3:f4:80:63:a1:ff:a6:ce:cf:de: 74:46:8d:70:39:df:55:0d:fe:8c:b5:73:30:a2:25:a6:db:2a: 8e:ab:c6:73:b5:32:ad:fc:64:d7:ce:85:a0:97:b1:85:5a:03: b8:3d:a5:cb:a0:69:d7:40:e7:a9:ac:9e:50:b3:e9:bc:30:c8: 26:6e:8c:a3:51:4a:ff:9c:c1:11:2b:7b:ee:99:ed:5d:ed:a1: e4:f6:5e:bf:7f:c8:ce:c0:5a:77:6f:ca:ed:4c:4d:e7:6f:ae: 74:85:8c:18:ba:48:ce:ce:38:67:b8:fe:86:d5:24:ae:38:84: 22:92:d4:27:64:fc:2d:6e:f4:b7:e5:6a:cf:b3:3d:48:b3:cb: ab:56:42:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0fSnIFlGAfFEV+AhHqJB8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMzI0MTAwMTA1WhcNMjYwMzI1MTAwMTA1WjAzMTEwLwYDVQQD EyhkNzIwODZhYWFkMWM5YTQ5OTlhMGNkNGYxNTFmMTIyM2MxNGRkNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ylhKt8GHJffzBQSsFSsrltEmmh E2CnfY/QJ2XGJU6UNryBHL+o9LTgbzqhi9jdKPX8QTiwvJKfMKIPBmIbsqAiCMyf aCLJsm2itBuEbujhMZkn05nPSKCAsnOE1boyOBOsmWp9IGSMtJHvjIaKUypGxDTT fwEndcedy5bc2H1MDRf9sUO0wrSVqXj+KPCoSoDa50ID+3wEH+1QOpkEzK9Od9he tYbxBfQ2oh+78I3jycZTmNerYY5Qq7RzswpbN5Ti5rnOkrzaqkuNJM9cs3L/twAC LZXLs2BKpBZ6V3Rv7bZW6lZ5LB6FB5EtV6/goYRN+oUL18WEspAtGJW/dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcghqqtHJpJmaDNTxUfEiPBTdS6MB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0U3W29y dcGPalxv1eK8HaUS/azYDYpGfKuTBlU/TMMtZN6vWv3T4h7u8L1r91QwgLSLISLX YERNj7gLtkZNxX4p2UeFdExLdWFP0m0gLz266FGm4eU3XvJnWEIomxzgO8ltoGcc i7HyjvwbV/2jqvpOs5zT9IBjof+mzs/edEaNcDnfVQ3+jLVzMKIlptsqjqvGc7Uy rfxk186FoJexhVoDuD2ly6Bp10DnqayeULPpvDDIJm6Mo1FK/5zBESt77pntXe2h 5PZev3/IzsBad2/K7UxN52+udIWMGLpIzs44Z7j+htUkrjiEIpLUJ2T8LW70t+Vq z7M9SLPLq1ZCyw== -----END CERTIFICATE-----Generated at Tue Mar 24 15:50:43 2026 by rpki-client