$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: OfS4b65bGV2wd1Pwed64Ph6omRFqJgTv8AK/tAo1LVk= Subject key identifier: C0:D3:E0:D8:BD:61:49:C9:01:0D:11:BF:2F:13:93:CA:0E:BA:60:F2 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019CE3DAA468CFE1AE2B490D359B950DA676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 14AF Signing time: Thu 12 Mar 2026 21:01:22 +0000 Manifest this update: Thu 12 Mar 2026 21:01:22 +0000 Manifest next update: Fri 13 Mar 2026 21:01:22 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: 4l8u0vjohuFlLyfg4IMVd6nwH4haQMAhmzuwMhY7C6M=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:da:a4:68:cf:e1:ae:2b:49:0d:35:9b:95:0d:a6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Mar 12 21:01:22 2026 GMT Not After : Mar 13 21:01:22 2026 GMT Subject: CN=c0d3e0d8bd6149c9010d11bf2f1393ca0eba60f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:e4:aa:62:3c:92:7d:76:67:3c:20:24:57: 63:2b:e5:ef:a0:0a:ad:fb:49:63:21:f1:9c:68:7a: f2:a5:b4:88:88:e8:9f:45:01:41:e2:08:ca:11:30: 60:04:4e:97:48:cc:5b:a8:55:f0:fc:ad:d6:13:a1: 88:dc:e4:69:db:a0:03:10:d4:27:99:fa:0e:2b:a5: 11:23:46:33:97:30:a5:16:e3:5c:37:7c:53:0f:49: 2e:2c:cd:29:c9:43:6f:c4:d5:b3:75:a3:42:73:d5: 37:ee:d2:7d:91:b7:2f:d2:ba:f6:1e:30:8d:aa:4c: 44:16:16:fd:2b:24:54:fd:68:66:44:fc:68:d9:39: 1c:95:3a:10:a1:fd:ff:83:17:ed:35:9f:1b:1b:f7: c4:85:4a:be:3e:ee:21:91:35:02:f2:26:f0:d8:70: 7d:b7:59:1b:4c:82:1d:e1:17:eb:27:84:7e:7d:4c: cf:9c:c4:b3:6a:8d:db:e7:a5:b2:1a:2f:a5:56:00: e4:12:10:bc:fb:3f:f2:c0:de:36:4c:38:00:03:47: 71:ba:cb:ab:58:e9:24:5a:95:16:0b:ee:09:34:4d: 2f:bd:39:6b:9a:0a:4f:d6:ee:b9:5d:b0:e3:6a:4a: 0e:a0:67:7f:cf:f6:63:76:7f:21:46:35:23:ea:23: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D3:E0:D8:BD:61:49:C9:01:0D:11:BF:2F:13:93:CA:0E:BA:60:F2 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:4d:96:d2:fa:3e:db:b8:ed:64:5f:a6:6f:92:25:2c:35: 8d:b4:bd:06:3d:67:e4:ef:40:6b:f3:33:12:f9:0b:83:48:6b: f3:f4:7f:7a:8e:95:2d:28:0b:b1:0a:5c:b7:2c:fd:79:3f:87: 53:37:4c:6f:67:fe:48:1a:b0:49:3f:3e:fb:57:67:a3:56:b8: 25:28:96:d9:f0:1a:17:d5:b4:3a:48:90:26:a8:fe:8a:b8:e4: f2:61:44:a1:2b:0b:9c:06:c1:3e:6e:2d:61:4b:70:b7:08:54: d0:cd:5f:c7:97:3a:56:47:1f:8d:d0:12:2a:93:f8:91:bf:65: 6b:54:77:c0:66:39:ea:3d:33:2f:c7:8c:d9:4b:ea:db:05:0e: 77:fc:bc:f5:e6:5e:30:77:ae:d0:e4:32:c5:3b:c1:f3:69:97: d4:09:56:02:e5:6c:39:8b:ec:4e:fc:9d:9a:c3:aa:50:b3:a2: 29:3d:f5:25:87:52:c1:ff:86:1c:13:70:e0:72:cf:2d:e6:30: e6:08:9d:6a:91:ab:75:70:a3:71:5b:0c:cf:04:c7:7d:52:da: a7:87:f8:40:cf:7d:fa:b8:c8:36:1b:1f:f1:68:a2:96:be:20: 87:d9:82:1f:09:4d:9f:b9:69:5b:10:ae:a6:53:37:1c:63:87: f7:d9:b1:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzj2qRoz+GuK0kNNZuVDaZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMzEyMjEwMTIyWhcNMjYwMzEzMjEwMTIyWjAzMTEwLwYDVQQD EyhjMGQzZTBkOGJkNjE0OWM5MDEwZDExYmYyZjEzOTNjYTBlYmE2MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrkqmI8kn12ZzwgJFdjK+XvoAqt +0ljIfGcaHrypbSIiOifRQFB4gjKETBgBE6XSMxbqFXw/K3WE6GI3ORp26ADENQn mfoOK6URI0YzlzClFuNcN3xTD0kuLM0pyUNvxNWzdaNCc9U37tJ9kbcv0rr2HjCN qkxEFhb9KyRU/WhmRPxo2TkclToQof3/gxftNZ8bG/fEhUq+Pu4hkTUC8ibw2HB9 t1kbTIId4RfrJ4R+fUzPnMSzao3b56WyGi+lVgDkEhC8+z/ywN42TDgAA0dxusur WOkkWpUWC+4JNE0vvTlrmgpP1u65XbDjakoOoGd/z/Zjdn8hRjUj6iP2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDT4Ni9YUnJAQ0Rvy8Tk8oOumDyMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeZNltL6 Ptu47WRfpm+SJSw1jbS9Bj1n5O9Aa/MzEvkLg0hr8/R/eo6VLSgLsQpctyz9eT+H UzdMb2f+SBqwST8++1dno1a4JSiW2fAaF9W0OkiQJqj+irjk8mFEoSsLnAbBPm4t YUtwtwhU0M1fx5c6VkcfjdASKpP4kb9la1R3wGY56j0zL8eM2Uvq2wUOd/y89eZe MHeu0OQyxTvB82mX1AlWAuVsOYvsTvydmsOqULOiKT31JYdSwf+GHBNw4HLPLeYw 5gidapGrdXCjcVsMzwTHfVLap4f4QM99+rjINhsf8Wiilr4gh9mCHwlNn7lpWxCu plM3HGOH99mxZA== -----END CERTIFICATE-----Generated at Fri Mar 13 04:15:26 2026 by rpki-client