$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: 0x5jGfCrcVdU1G0KdB1nXkZlbhKS0WquVJiYZjMn72I= Subject key identifier: 40:99:1B:50:F9:14:39:82:84:1F:39:C7:10:C6:FF:26:D1:1B:64:04 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019E1CEBD1DF165CEA58FA8F786180CFD8BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 1102 Signing time: Tue 12 May 2026 16:01:17 +0000 Manifest this update: Tue 12 May 2026 16:01:17 +0000 Manifest next update: Wed 13 May 2026 16:01:17 +0000 Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=) 2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=) 3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=) 4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=) 5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: Y9I49YjdacmTTQrGW9bHi1BRAyF4fgX0y5t2gecRJUs=) 6: VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa (hash: oJkOn3Ta/qcPYaOJNNPCoBCLyVWoWrgC98ecap5l1lY=) 7: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=) 8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=) 9: jwno-855Ovj1-3M5zUJzR6aIImg.roa (hash: v10OVfxKZFL1KckYWItkzie2JuQkYgbQ7uuTgDSLZ4I=) 10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:d1:df:16:5c:ea:58:fa:8f:78:61:80:cf:d8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: May 12 16:01:17 2026 GMT Not After : May 13 16:01:17 2026 GMT Subject: CN=40991b50f9143982841f39c710c6ff26d11b6404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:3c:ad:09:91:56:95:3e:90:e6:40:c1:e7: b8:d2:60:e8:98:00:8e:45:09:9e:db:27:21:36:a1: 7f:d4:4f:f7:6a:20:9e:62:6e:67:d2:61:79:dc:87: 24:0b:f1:fa:97:59:3b:fd:26:98:02:c0:12:a6:56: a0:29:e7:1f:b1:2e:54:07:98:e4:e6:8b:11:2b:6a: 05:d6:ea:43:cd:69:20:ba:0e:11:0d:05:76:ae:5a: 7e:18:43:68:d4:3b:6e:85:ac:e0:54:53:01:2e:64: 53:03:5d:c2:61:3b:7f:fb:96:fa:db:f7:43:d5:c9: 82:b9:ab:e2:eb:cf:92:00:7e:fc:9b:b7:21:e6:ec: 4c:61:7e:ae:31:8b:0a:b7:2a:55:38:94:84:7e:9d: c5:e0:09:ba:ef:59:bc:12:e4:23:4a:35:7a:bb:4b: 09:8e:b1:a5:86:e9:c2:15:f5:fb:eb:13:26:22:b1: 4e:6b:37:ac:67:04:64:d2:c4:ad:49:3c:c1:2a:d0: 9d:75:e4:94:c2:a8:88:b5:57:6b:ae:3f:da:88:4f: 7f:b9:1d:66:32:20:2e:30:2b:82:81:4c:10:ab:cc: 68:ac:f9:2d:69:98:4c:60:84:94:9c:72:e3:34:05: dd:19:1a:f5:fa:a1:77:d8:1c:57:59:79:1b:bb:72: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:99:1B:50:F9:14:39:82:84:1F:39:C7:10:C6:FF:26:D1:1B:64:04 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:a6:f4:62:0b:c0:b0:94:6a:a2:a7:9b:03:a6:e1:e4:19: fb:fc:76:a3:f0:4b:ca:2e:74:24:f8:cb:2c:b4:61:a1:5a:0c: 19:b4:42:85:58:f8:30:2e:dd:75:43:4c:9f:e4:52:a9:73:2e: 0c:d7:5c:a9:fe:12:57:d5:7c:94:b0:bd:b6:af:7f:4a:82:95: e0:17:c4:5b:53:7f:f3:11:ae:75:0c:69:a7:7e:92:3d:16:c5: d4:f9:61:05:f5:28:19:28:29:2e:09:de:f4:13:78:92:07:24: 96:87:3e:95:8c:2d:94:0b:88:1f:ae:e1:8b:f4:e9:8b:c1:9a: 8f:78:aa:e5:d8:47:43:23:53:42:49:43:f0:6d:69:2a:97:f1: 02:8f:01:39:f4:43:1c:e1:9a:fa:3e:30:e5:12:56:49:20:b2: d3:d4:c6:7a:86:8c:30:eb:4a:f0:5f:9e:f1:52:ef:6c:eb:3e: f8:2a:55:ac:a7:6b:ec:f5:71:c8:56:94:8a:2d:f6:52:0d:e5: e0:2e:41:e7:78:2d:4e:a5:f7:d7:58:68:47:9f:6b:6d:8b:cf: 17:35:ec:9e:85:69:42:17:97:0d:a3:c2:41:d8:82:8c:ad:81: 91:50:c7:55:f9:f8:0c:b1:50:85:ed:20:4f:d8:ef:b5:2f:95: de:75:d3:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c69HfFlzqWPqPeGGAz9i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwNTEyMTYwMTE3WhcNMjYwNTEzMTYwMTE3WjAzMTEwLwYDVQQD Eyg0MDk5MWI1MGY5MTQzOTgyODQxZjM5YzcxMGM2ZmYyNmQxMWI2NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwI8rQmRVpU+kOZAwee40mDomACO RQme2ychNqF/1E/3aiCeYm5n0mF53IckC/H6l1k7/SaYAsASplagKecfsS5UB5jk 5osRK2oF1upDzWkgug4RDQV2rlp+GENo1DtuhazgVFMBLmRTA13CYTt/+5b62/dD 1cmCuavi68+SAH78m7ch5uxMYX6uMYsKtypVOJSEfp3F4Am671m8EuQjSjV6u0sJ jrGlhunCFfX76xMmIrFOazesZwRk0sStSTzBKtCddeSUwqiItVdrrj/aiE9/uR1m MiAuMCuCgUwQq8xorPktaZhMYISUnHLjNAXdGRr1+qF32BxXWXkbu3LfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECZG1D5FDmChB85xxDG/ybRG2QEMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvGm9GIL wLCUaqKnmwOm4eQZ+/x2o/BLyi50JPjLLLRhoVoMGbRChVj4MC7ddUNMn+RSqXMu DNdcqf4SV9V8lLC9tq9/SoKV4BfEW1N/8xGudQxpp36SPRbF1PlhBfUoGSgpLgne 9BN4kgckloc+lYwtlAuIH67hi/Tpi8Gaj3iq5dhHQyNTQklD8G1pKpfxAo8BOfRD HOGa+j4w5RJWSSCy09TGeoaMMOtK8F+e8VLvbOs++CpVrKdr7PVxyFaUii32Ug3l 4C5B53gtTqX311hoR59rbYvPFzXsnoVpQheXDaPCQdiCjK2BkVDHVfn4DLFQhe0g T9jvtS+V3nXT1Q== -----END CERTIFICATE-----Generated at Tue May 12 22:12:34 2026 by rpki-client