$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: bFMUbv+fB0ESxSw9xcgZS72y4/qoP/BGgqffW+maNNw= Subject key identifier: CA:52:69:01:21:33:74:65:1E:48:4B:C9:FF:5D:9D:7D:D5:E5:92:5E Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019E1D59475B8942DE4139B5E17E8A4BAE6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 113A Signing time: Tue 12 May 2026 18:00:50 +0000 Manifest this update: Tue 12 May 2026 18:00:50 +0000 Manifest next update: Wed 13 May 2026 18:00:50 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 8GxpqzFkgC5Hy_akXhw29hXcvRQ.roa (hash: Aev5WlLyBeoo/iwLCZCFl1FrbyeMZhKq6RcvTv7DoY0=) 3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 4: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: I5HXYRGafW864Tb2HhIYS0551Bc.roa (hash: VTZUvDs+USpku14l3sfvCJeSXqWckg4mO3VDUzr27hM=) 7: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 8: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 9: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 10: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: Eoc+0ZDywgPpazXW5EWWMvjh8a6l1px7fV3TMdofII4=) 11: d-QxnSqS_V0shL66uqwLAgZFIBo.roa (hash: luvYromzsoLUcbp7ns0bb/QOxsjEI+GNMV9SnMHva8E=) 12: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:47:5b:89:42:de:41:39:b5:e1:7e:8a:4b:ae:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: May 12 18:00:50 2026 GMT Not After : May 13 18:00:50 2026 GMT Subject: CN=ca526901213374651e484bc9ff5d9d7dd5e5925e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:13:36:76:f1:90:b2:fe:b6:5f:b7:26:ce: 84:d2:db:e0:4e:29:fe:90:c1:e5:bd:aa:82:4c:94: 2c:49:a1:ee:1a:2e:b0:9c:4d:98:d7:22:c0:e0:4f: 86:c2:aa:04:92:40:0e:a8:69:af:2f:ea:d1:81:11: 47:5e:8c:42:62:15:c0:ba:c0:c6:47:d1:1c:b4:99: 5e:56:f5:a0:55:d1:0a:e0:5c:7f:84:cf:87:ca:ca: 9b:fc:2d:b9:13:20:ad:de:61:20:ce:2e:3f:98:1a: c3:c8:db:7b:b1:3a:06:08:37:e8:cb:ff:a2:e3:f2: 6c:4c:10:5e:b7:db:9a:42:01:06:e1:36:9e:a1:53: 14:4c:58:c5:de:e4:79:17:dd:00:af:95:ae:35:48: a2:2c:86:58:61:82:32:2d:fa:a2:ea:0e:36:03:83: e7:83:b6:35:29:88:67:5d:79:e1:35:bb:58:55:1e: 73:c5:0b:33:14:ea:d7:6e:1b:3d:ea:c9:67:15:b4: 46:dd:71:3c:61:6c:cd:81:b2:55:57:a1:af:0b:c3: 2b:13:94:39:36:be:29:d7:18:f7:32:a9:0b:6d:b2: a2:5b:fc:2c:e3:bc:91:98:2a:55:2c:15:7b:ce:eb: f4:93:e2:d8:b9:42:7a:74:b5:43:aa:b7:ce:43:9a: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:69:01:21:33:74:65:1E:48:4B:C9:FF:5D:9D:7D:D5:E5:92:5E X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:54:a3:ec:02:de:97:3e:da:af:31:05:11:4c:04:68:21:d4: 99:bc:12:dc:e6:aa:fb:21:6b:53:c8:64:c1:7f:5f:58:65:da: ad:e8:57:81:28:89:03:c4:9e:50:a3:23:29:f9:80:1f:ea:0d: de:bb:b7:02:25:35:94:78:04:27:9a:1c:7a:f3:45:98:8e:41: 6c:53:f1:23:6f:4b:0a:9d:ad:3b:5f:6b:64:67:45:36:f3:12: d3:89:f9:6a:5d:9d:0a:61:24:7e:ab:f6:9d:97:04:db:2d:20: a9:d4:4f:1d:8a:29:02:c4:a2:c4:a3:ad:b2:90:b5:54:50:a3: d5:fc:b9:15:fd:82:ff:1d:d7:74:57:b5:52:0c:96:42:d7:70: 61:cb:1c:7c:4e:3a:89:af:f2:4f:38:cd:78:b9:aa:4e:18:5d: dd:eb:bb:82:6d:15:ba:a2:6b:0a:90:9f:c6:d1:17:33:1c:45: 67:92:59:a0:4e:dc:56:26:b7:e5:6e:56:45:61:65:f9:71:c0: b5:2a:9c:53:65:62:07:03:d6:e5:ac:19:16:b7:31:c7:8c:d7: 96:c8:4a:0a:23:f6:71:09:58:de:ca:98:1a:fa:71:5f:81:a8: 54:a4:1e:2e:e2:ce:b9:4a:b1:2e:d7:1a:47:d8:f4:fb:59:18: 17:65:72:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWUdbiULeQTm14X6KS65tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwNTEyMTgwMDUwWhcNMjYwNTEzMTgwMDUwWjAzMTEwLwYDVQQD EyhjYTUyNjkwMTIxMzM3NDY1MWU0ODRiYzlmZjVkOWQ3ZGQ1ZTU5MjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOYTNnbxkLL+tl+3Js6E0tvgTin+ kMHlvaqCTJQsSaHuGi6wnE2Y1yLA4E+GwqoEkkAOqGmvL+rRgRFHXoxCYhXAusDG R9EctJleVvWgVdEK4Fx/hM+Hysqb/C25EyCt3mEgzi4/mBrDyNt7sToGCDfoy/+i 4/JsTBBet9uaQgEG4TaeoVMUTFjF3uR5F90Ar5WuNUiiLIZYYYIyLfqi6g42A4Pn g7Y1KYhnXXnhNbtYVR5zxQszFOrXbhs96slnFbRG3XE8YWzNgbJVV6GvC8MrE5Q5 Nr4p1xj3MqkLbbKiW/ws47yRmCpVLBV7zuv0k+LYuUJ6dLVDqrfOQ5rRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpSaQEhM3RlHkhLyf9dnX3V5ZJeMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVSj7ALe lz7arzEFEUwEaCHUmbwS3Oaq+yFrU8hkwX9fWGXarehXgSiJA8SeUKMjKfmAH+oN 3ru3AiU1lHgEJ5ocevNFmI5BbFPxI29LCp2tO19rZGdFNvMS04n5al2dCmEkfqv2 nZcE2y0gqdRPHYopAsSixKOtspC1VFCj1fy5Ff2C/x3XdFe1UgyWQtdwYcscfE46 ia/yTzjNeLmqThhd3eu7gm0VuqJrCpCfxtEXMxxFZ5JZoE7cVia35W5WRWFl+XHA tSqcU2ViBwPW5awZFrcxx4zXlshKCiP2cQlY3sqYGvpxX4GoVKQeLuLOuUqxLtca R9j0+1kYF2Vyog== -----END CERTIFICATE-----Generated at Tue May 12 21:22:57 2026 by rpki-client