$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 65v6hl2iuEfP4XLA0TSDiwxbACtd06kd6OPYvIdHoac= Subject key identifier: FA:B3:3A:26:DC:16:ED:9A:E6:76:2D:16:5D:61:8C:AC:4D:C0:CE:3A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019E1DC7AA7FEBA879422A3869BDDE1E343A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 19A4 Signing time: Tue 12 May 2026 20:01:24 +0000 Manifest this update: Tue 12 May 2026 20:01:24 +0000 Manifest next update: Wed 13 May 2026 20:01:24 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: qrNooyF1ancnsodA9ySgWGmhcr3fD+5IDH/yVK26C20=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:aa:7f:eb:a8:79:42:2a:38:69:bd:de:1e:34:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: May 12 20:01:24 2026 GMT Not After : May 13 20:01:24 2026 GMT Subject: CN=fab33a26dc16ed9ae6762d165d618cac4dc0ce3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:e3:7e:7a:ed:35:8c:bf:ab:7d:2f:e1:d5: 0f:6e:76:89:12:f9:1b:9e:11:70:4d:3d:75:b1:c5: 7a:9e:25:54:12:90:90:bf:9d:d2:2d:ea:3f:04:68: ea:a2:84:d2:2c:06:a5:a8:82:20:aa:8b:49:02:4d: 80:b9:52:15:41:b9:f2:61:07:d2:9e:b1:25:5d:03: 93:72:d1:32:bd:6c:0e:82:9e:06:92:12:83:81:ff: b4:a3:9e:26:f0:94:80:72:79:fc:b9:ce:94:19:27: 4e:88:b9:22:95:bf:20:a8:a0:21:9b:31:92:df:17: 89:49:05:cc:9b:15:02:93:56:b1:6c:fb:a8:8e:5e: cf:cd:10:46:1b:4c:03:c8:95:6b:7b:e9:20:15:a8: f0:4f:e2:47:ae:cd:82:de:2f:ec:a6:d9:74:03:e5: 4b:7b:41:92:9f:9d:52:cf:b6:a3:c4:a0:49:c8:2d: 3b:02:03:d6:8c:19:b3:81:50:9b:9a:c5:5c:ee:70: 6e:4b:08:f7:cc:19:62:ff:63:06:94:e0:5d:a3:34: 83:b1:26:38:9e:ec:7e:06:0d:90:79:49:57:7b:7d: 43:b7:5e:d6:ee:02:6c:e1:a9:88:0e:b5:77:8b:97: c5:61:e8:cb:96:1f:9e:95:26:1c:a9:3d:b0:33:23: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:3A:26:DC:16:ED:9A:E6:76:2D:16:5D:61:8C:AC:4D:C0:CE:3A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:bb:cf:be:2d:0e:ef:d7:73:ef:a6:8c:93:c6:7c:b5:28:5f: b2:b7:48:66:42:81:89:0f:04:f9:9c:c9:46:1c:02:6a:9c:1f: 61:8c:41:24:13:51:0e:af:e3:2f:eb:34:4c:9a:79:44:03:7a: 80:1f:b3:c5:3d:ae:7e:16:99:90:46:ae:54:3e:74:3c:4f:73: b1:9f:3a:12:22:ab:73:58:0a:4a:64:de:1c:27:31:23:d4:b0: 7e:5d:18:2b:79:74:bc:f1:d8:e9:62:16:33:8a:61:44:03:2c: f1:a2:8d:0c:3a:25:3e:ac:25:d9:65:ec:10:77:6e:aa:9f:20: a2:c3:2f:bf:aa:bd:23:38:bb:d6:ac:41:d5:14:0c:f8:48:ea: ac:12:4f:31:b5:b3:0d:e5:b6:53:69:50:6c:98:9a:cd:10:70: 3c:52:ef:9f:8d:c5:36:65:30:ac:54:2c:e8:ad:2a:28:7c:9b: 25:de:bc:31:a4:e9:62:82:79:c9:c3:e2:58:8c:d7:45:bd:91: 3e:aa:3b:36:66:72:9c:ed:30:eb:14:4f:0b:22:63:03:15:fc: 0d:09:26:bc:cb:49:24:2e:29:00:ce:71:d3:c5:0f:34:6f:d4: b2:38:da:b5:8e:0d:d5:01:64:26:48:91:1a:c7:df:fe:3b:bf: 93:9a:6a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx6p/66h5Qio4ab3eHjQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNTEyMjAwMTI0WhcNMjYwNTEzMjAwMTI0WjAzMTEwLwYDVQQD EyhmYWIzM2EyNmRjMTZlZDlhZTY3NjJkMTY1ZDYxOGNhYzRkYzBjZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuljjfnrtNYy/q30v4dUPbnaJEvkb nhFwTT11scV6niVUEpCQv53SLeo/BGjqooTSLAalqIIgqotJAk2AuVIVQbnyYQfS nrElXQOTctEyvWwOgp4GkhKDgf+0o54m8JSAcnn8uc6UGSdOiLkilb8gqKAhmzGS 3xeJSQXMmxUCk1axbPuojl7PzRBGG0wDyJVre+kgFajwT+JHrs2C3i/sptl0A+VL e0GSn51Sz7ajxKBJyC07AgPWjBmzgVCbmsVc7nBuSwj3zBli/2MGlOBdozSDsSY4 nux+Bg2QeUlXe31Dt17W7gJs4amIDrV3i5fFYejLlh+elSYcqT2wMyNLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqzOibcFu2a5nYtFl1hjKxNwM46MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLvPvi0O 79dz76aMk8Z8tShfsrdIZkKBiQ8E+ZzJRhwCapwfYYxBJBNRDq/jL+s0TJp5RAN6 gB+zxT2ufhaZkEauVD50PE9zsZ86EiKrc1gKSmTeHCcxI9Swfl0YK3l0vPHY6WIW M4phRAMs8aKNDDolPqwl2WXsEHduqp8gosMvv6q9Izi71qxB1RQM+EjqrBJPMbWz DeW2U2lQbJiazRBwPFLvn43FNmUwrFQs6K0qKHybJd68MaTpYoJ5ycPiWIzXRb2R Pqo7NmZynO0w6xRPCyJjAxX8DQkmvMtJJC4pAM5x08UPNG/UsjjatY4N1QFkJkiR Gsff/ju/k5pqvQ== -----END CERTIFICATE-----Generated at Wed May 13 03:44:10 2026 by rpki-client