$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: 9sT/LCbAY8SgzJgKUIL7KvFfwrR6JuFE/Ef013Z/IWE= Subject key identifier: 42:2A:72:CF:5B:B5:64:D8:CD:1E:7C:9C:FF:40:3C:9E:2C:23:1F:B8 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019E1EA30263C5ADECC92C2AFDD333F2C936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 17C5 Signing time: Wed 13 May 2026 00:00:59 +0000 Manifest this update: Wed 13 May 2026 00:00:59 +0000 Manifest next update: Thu 14 May 2026 00:00:59 +0000 Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=) 2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: CA5UC8ON8hfN2nNx0vk3R8Y1gK6Vc/eTiF3xpdxQHzQ=) 7: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 8: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) 14: vvun3eikZcpW6UjAhYfVCVsm-AI.roa (hash: U39ycL4LLB92O8NzJ38ORyHzqu/08gaa/sDm7/jkQGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:02:63:c5:ad:ec:c9:2c:2a:fd:d3:33:f2:c9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: May 13 00:00:59 2026 GMT Not After : May 14 00:00:59 2026 GMT Subject: CN=422a72cf5bb564d8cd1e7c9cff403c9e2c231fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:b4:92:f0:bd:84:22:76:0b:f1:09:ad:97: 95:1e:00:a3:3c:65:e7:32:6a:9f:2a:fd:83:28:82: 78:85:16:13:77:0f:5a:dd:ca:7b:75:b4:4a:90:c7: 43:2f:84:5c:2e:05:c6:93:66:e4:04:72:f1:fb:48: ca:6c:1c:1b:63:54:c7:dd:ea:ce:1e:df:f7:50:fe: 28:91:0e:ab:0a:a0:a3:63:04:ce:3b:38:8b:32:dc: 1b:6d:e6:f4:76:10:2a:e7:47:88:d1:9e:60:99:bd: 93:3d:be:e8:25:13:fd:d0:42:57:e5:a3:26:7e:69: ab:d6:dd:b5:13:6b:35:f0:1a:5a:4a:9d:d7:88:13: b5:95:99:17:8c:03:7a:40:ee:24:c9:35:80:cd:ee: 67:1f:91:d1:47:83:db:29:1f:51:0d:54:f0:e4:6c: 9a:a2:45:fc:12:ff:9f:52:03:05:8e:6f:fd:91:49: a1:eb:64:6f:b9:20:cc:54:ae:23:62:c6:d2:f6:a7: e0:f5:19:4f:dc:05:49:b0:61:8a:cc:95:53:45:66: b0:b9:bc:6b:b3:ac:3b:24:c2:64:3e:da:ae:4c:2b: e8:c0:43:7a:45:3a:06:3d:33:77:f9:bc:f0:34:43: ab:43:76:d7:ef:62:03:5e:c5:9e:68:0c:90:85:92: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:72:CF:5B:B5:64:D8:CD:1E:7C:9C:FF:40:3C:9E:2C:23:1F:B8 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:49:a8:2d:73:fe:6f:bb:ef:50:d1:96:52:7e:5c:44:17: 67:39:09:5b:59:ac:7b:b8:56:3c:d2:95:9f:9b:6b:8f:62:4e: 10:ff:01:d3:aa:12:39:87:9c:59:e3:43:33:2f:88:c5:5d:99: ed:39:38:1d:4f:64:eb:8a:95:b9:e8:09:91:33:d9:cd:be:9d: 50:91:d3:f6:08:87:04:e4:b7:87:1b:7b:2a:20:2a:15:8c:00: a5:0c:15:5f:cc:73:30:fb:d1:29:49:18:84:ea:be:f9:99:2d: 99:d7:21:8c:56:65:80:34:94:e6:7d:fe:4c:ee:81:7e:f1:f2: 0c:30:61:0a:28:66:86:aa:e9:4d:dc:66:99:31:a1:ac:57:bd: 02:12:b4:fa:5b:e0:ee:83:97:19:66:e0:18:c3:8d:fb:f8:2e: 85:b7:3e:9a:a1:39:11:fd:86:0a:60:67:ba:b3:6d:88:1a:9b: 1c:34:bf:2a:40:73:8d:6c:de:66:e7:a0:89:87:c8:1f:29:f6: 00:1b:60:17:9b:d5:ce:02:97:63:8d:7a:68:74:0e:57:46:a4: 7d:e5:fd:30:4b:d2:5c:68:ca:d9:09:88:8d:be:1d:3a:d2:f6: c6:3f:05:b0:f5:b3:f0:00:46:85:7c:ee:70:ba:90:3e:ee:8d: 4a:e7:6f:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eowJjxa3sySwq/dMz8sk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwNTEzMDAwMDU5WhcNMjYwNTE0MDAwMDU5WjAzMTEwLwYDVQQD Eyg0MjJhNzJjZjViYjU2NGQ4Y2QxZTdjOWNmZjQwM2M5ZTJjMjMxZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNe0kvC9hCJ2C/EJrZeVHgCjPGXn MmqfKv2DKIJ4hRYTdw9a3cp7dbRKkMdDL4RcLgXGk2bkBHLx+0jKbBwbY1TH3erO Ht/3UP4okQ6rCqCjYwTOOziLMtwbbeb0dhAq50eI0Z5gmb2TPb7oJRP90EJX5aMm fmmr1t21E2s18BpaSp3XiBO1lZkXjAN6QO4kyTWAze5nH5HRR4PbKR9RDVTw5Gya okX8Ev+fUgMFjm/9kUmh62RvuSDMVK4jYsbS9qfg9RlP3AVJsGGKzJVTRWawubxr s6w7JMJkPtquTCvowEN6RToGPTN3+bzwNEOrQ3bX72IDXsWeaAyQhZI9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIqcs9btWTYzR58nP9APJ4sIx+4MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYZJqC1z /m+771DRllJ+XEQXZzkJW1mse7hWPNKVn5trj2JOEP8B06oSOYecWeNDMy+IxV2Z 7Tk4HU9k64qVuegJkTPZzb6dUJHT9giHBOS3hxt7KiAqFYwApQwVX8xzMPvRKUkY hOq++ZktmdchjFZlgDSU5n3+TO6BfvHyDDBhCihmhqrpTdxmmTGhrFe9AhK0+lvg 7oOXGWbgGMON+/guhbc+mqE5Ef2GCmBnurNtiBqbHDS/KkBzjWzeZuegiYfIHyn2 ABtgF5vVzgKXY416aHQOV0akfeX9MEvSXGjK2QmIjb4dOtL2xj8FsPWz8ABGhXzu cLqQPu6NSudvtA== -----END CERTIFICATE-----Generated at Wed May 13 03:19:07 2026 by rpki-client