$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: TCyTbM3T71cIGgKooFdrHImIqCRZQq0CUQVEC+eqe2g= Subject key identifier: F7:D6:82:A4:9A:D0:A4:F4:EF:BC:6D:79:F3:0A:1C:BD:DE:D1:40:C2 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019E2091BD88EF0EC4546BF7A386EB6FBF0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1938 Signing time: Wed 13 May 2026 09:01:22 +0000 Manifest this update: Wed 13 May 2026 09:01:22 +0000 Manifest next update: Thu 14 May 2026 09:01:22 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 6: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 7: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 8: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (hash: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 4TniEEaiMbxO+mfT7PdDxNO4dctR9s2Q/dC2iwsjgto=) 10: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:91:bd:88:ef:0e:c4:54:6b:f7:a3:86:eb:6f:bf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: May 13 09:01:22 2026 GMT Not After : May 14 09:01:22 2026 GMT Subject: CN=f7d682a49ad0a4f4efbc6d79f30a1cbdded140c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:d3:ae:88:24:4c:19:1a:7a:4a:b2:08:8a: 3f:6f:0a:18:eb:bb:e0:e4:c5:d4:47:56:14:e0:e8: 3f:a2:4b:39:7b:99:f4:15:52:6f:27:c3:01:19:5e: 00:d8:ce:58:b3:e6:56:6b:8e:96:2f:d9:bb:c2:66: 99:07:7b:30:be:35:d2:d9:8f:3a:74:32:53:ec:aa: af:50:8e:ef:00:0c:b7:fa:8b:f3:8a:bd:82:36:a8: 76:9a:15:a8:80:35:7d:a0:4f:e8:a9:9a:4c:ed:5e: 34:20:9b:c3:85:03:9d:39:79:cc:55:02:0a:ce:06: 6c:3d:63:89:42:6a:83:01:0c:b6:b8:97:ae:95:e9: 5a:60:dd:fa:18:34:16:d2:02:e7:d9:94:ac:83:95: 71:90:f2:6e:bb:c7:6e:ce:3b:cc:36:38:05:f7:17: a6:35:da:6c:f3:ac:11:ac:03:f2:a3:df:05:6e:14: 15:49:5c:59:f8:01:3b:33:96:13:75:c0:b5:6a:12: 53:1a:19:ae:a1:8c:a1:ae:ea:1c:21:cc:1d:57:83: 89:0e:3d:df:42:b9:f2:11:0c:b7:0e:7d:82:15:7a: 46:36:7c:bc:de:7f:16:12:ca:b2:63:e5:19:b0:db: 47:fb:80:d4:f0:7b:cd:b0:f4:81:3e:15:13:a0:c1: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D6:82:A4:9A:D0:A4:F4:EF:BC:6D:79:F3:0A:1C:BD:DE:D1:40:C2 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:75:bc:c5:f9:bd:b1:8a:98:34:a2:42:9b:9c:80:af:d9:b9: 2c:d7:57:94:2b:97:37:29:f3:14:aa:50:0f:a3:24:c6:a2:d3: 53:fd:b2:c1:ff:c3:94:b0:7b:dd:74:c0:4f:3d:a9:42:45:f6: cc:eb:92:cb:6a:a4:c7:98:f2:e9:95:b4:01:2c:6a:db:d6:1e: 6b:27:f0:0a:ba:6f:c9:70:0e:2a:fc:1e:ab:58:0e:46:1f:49: e0:12:49:49:b0:38:c9:46:54:3b:84:43:fd:52:dc:a1:33:d7: ca:91:5e:34:f9:45:3b:d4:86:a2:7b:37:67:8d:a9:9b:b4:f3: 7c:dd:dc:10:02:a8:97:a4:e8:b4:9f:7e:5f:fb:01:7d:4e:e8: a2:f6:70:51:bc:39:dc:66:4c:a9:d1:9f:b6:d5:da:92:d8:3e: c0:e7:30:b0:28:79:9a:9c:4e:f5:7e:01:e7:ac:8a:92:27:b9: 1d:28:e0:0b:13:b5:75:5e:58:b4:02:df:ac:e6:a7:a1:6a:c0: 87:59:05:fd:c2:1b:cf:9a:8b:a9:11:c5:c5:53:03:44:7a:e0: f0:cd:6f:9c:62:9a:13:c8:49:65:de:bd:ca:92:d1:e4:95:09: 71:eb:6b:b4:fd:fc:ce:42:9f:a1:64:db:f3:a2:d7:e9:54:c6: 84:31:d3:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4gkb2I7w7EVGv3o4brb78LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwNTEzMDkwMTIyWhcNMjYwNTE0MDkwMTIyWjAzMTEwLwYDVQQD EyhmN2Q2ODJhNDlhZDBhNGY0ZWZiYzZkNzlmMzBhMWNiZGRlZDE0MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArknTrogkTBkaekqyCIo/bwoY67vg 5MXUR1YU4Og/oks5e5n0FVJvJ8MBGV4A2M5Ys+ZWa46WL9m7wmaZB3swvjXS2Y86 dDJT7KqvUI7vAAy3+ovzir2CNqh2mhWogDV9oE/oqZpM7V40IJvDhQOdOXnMVQIK zgZsPWOJQmqDAQy2uJeulelaYN36GDQW0gLn2ZSsg5VxkPJuu8duzjvMNjgF9xem Ndps86wRrAPyo98FbhQVSVxZ+AE7M5YTdcC1ahJTGhmuoYyhruocIcwdV4OJDj3f QrnyEQy3Dn2CFXpGNny83n8WEsqyY+UZsNtH+4DU8HvNsPSBPhUToMFNYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfWgqSa0KT077xtefMKHL3e0UDCMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnW8xfm9 sYqYNKJCm5yAr9m5LNdXlCuXNynzFKpQD6MkxqLTU/2ywf/DlLB73XTATz2pQkX2 zOuSy2qkx5jy6ZW0ASxq29YeayfwCrpvyXAOKvweq1gORh9J4BJJSbA4yUZUO4RD /VLcoTPXypFeNPlFO9SGons3Z42pm7TzfN3cEAKol6TotJ9+X/sBfU7oovZwUbw5 3GZMqdGfttXaktg+wOcwsCh5mpxO9X4B56yKkie5HSjgCxO1dV5YtALfrOanoWrA h1kF/cIbz5qLqRHFxVMDRHrg8M1vnGKaE8hJZd69ypLR5JUJcetrtP38zkKfoWTb 86LX6VTGhDHT1w== -----END CERTIFICATE-----Generated at Wed May 13 12:31:15 2026 by rpki-client