$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: k6Nd4CrGkZW5zcUDvee892/87NxPX9PMvZXpo2a0JGo= Subject key identifier: C3:5A:66:B6:B8:4C:23:76:0D:F3:7B:D4:BF:B9:0A:5E:AC:40:8E:27 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019E1D59AFBAEBEA2778D6B3FED34CE50A2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 1926 Signing time: Tue 12 May 2026 18:01:17 +0000 Manifest this update: Tue 12 May 2026 18:01:17 +0000 Manifest next update: Wed 13 May 2026 18:01:17 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: mGmwYkQ1mp1dgJcy//pcMAk/N9JTR+ExrgvVfq0Ie/I=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 15: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:af:ba:eb:ea:27:78:d6:b3:fe:d3:4c:e5:0a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: May 12 18:01:17 2026 GMT Not After : May 13 18:01:17 2026 GMT Subject: CN=c35a66b6b84c23760df37bd4bfb90a5eac408e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:5a:df:40:e7:5c:bf:77:95:0f:3b:60:ce: 0b:78:5f:f3:06:6b:45:64:3f:96:ef:87:da:33:4c: 7a:1a:b4:30:48:11:75:4b:42:33:44:8d:ca:c9:28: f4:4d:a9:cf:8e:99:8c:e7:77:a7:c8:4d:b9:7d:33: 82:91:1e:4e:42:46:c7:98:b4:97:a4:af:dc:55:53: 30:ef:6d:cc:bf:ec:8d:b6:85:b6:b2:cd:88:c8:0f: 75:cb:53:43:d4:55:d9:a0:32:a3:03:c3:8e:39:09: e1:1b:1d:6a:a4:e1:87:f1:76:34:38:8b:b2:62:23: 81:38:cf:9b:08:c8:9a:8b:b3:5a:ab:ee:c3:c6:12: 90:cf:83:b3:95:3f:51:78:f2:6c:0c:85:ad:83:08: 00:93:21:57:71:69:ae:53:5e:00:d6:9a:d3:75:a2: c6:5a:33:3b:e1:d6:f0:12:51:f6:8d:dd:fc:60:7d: c3:88:07:b9:81:03:00:fa:cd:33:9b:c8:43:20:4a: ca:71:7e:9f:76:5d:72:bf:97:36:8a:5e:4d:80:60: 4c:1a:56:7e:3c:06:a6:87:45:7a:5f:53:1a:ab:9a: fe:c3:90:5a:2c:46:dc:4d:26:6e:32:cd:d4:fa:9d: 90:09:1b:3b:e0:93:95:42:2b:f2:b6:3c:9a:c2:36: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5A:66:B6:B8:4C:23:76:0D:F3:7B:D4:BF:B9:0A:5E:AC:40:8E:27 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d6:39:fe:3e:61:b1:f9:76:40:96:12:a3:34:43:c7:29:79: 7d:f0:d7:65:06:00:be:85:1b:ce:fb:51:ab:8e:52:a4:c7:93: ea:7c:28:42:7e:f0:c7:0a:81:32:0e:8b:87:9e:28:e6:5d:67: 47:3d:c7:69:70:ad:4c:4a:30:c3:9e:cf:93:ac:a0:c8:03:6e: 99:b8:a2:21:51:fc:ee:f8:a0:b1:78:ce:03:af:d3:0f:6c:d0: e6:e0:f6:48:90:85:f4:0e:db:33:b3:97:0d:ba:b7:19:b7:f0: a7:00:80:4d:84:bf:fa:d9:c5:c7:f4:a2:a6:e4:f7:bc:c1:22: c1:67:a9:fd:1b:42:6a:25:59:73:f3:93:6a:0f:6b:38:4e:13: 29:c6:81:69:ed:2e:4a:6f:24:3b:87:db:75:db:22:a1:84:64: e4:78:87:3a:d3:21:53:81:45:22:bd:d6:cd:e1:a4:ad:8d:aa: 1b:ea:8e:b3:23:07:52:09:cf:b7:bd:15:2a:9e:d2:ed:7a:3a: 8d:bd:5a:7b:b0:5f:60:07:ce:92:44:29:70:92:8a:88:78:62: e5:82:09:60:98:e3:c5:67:95:56:47:50:ed:c7:4a:a9:ea:79: c5:cd:8b:a6:ad:37:4c:1e:a7:a8:67:61:35:19:c8:d1:08:2a: 13:52:83:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWa+66+oneNaz/tNM5QovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwNTEyMTgwMTE3WhcNMjYwNTEzMTgwMTE3WjAzMTEwLwYDVQQD EyhjMzVhNjZiNmI4NGMyMzc2MGRmMzdiZDRiZmI5MGE1ZWFjNDA4ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8la30DnXL93lQ87YM4LeF/zBmtF ZD+W74faM0x6GrQwSBF1S0IzRI3KySj0TanPjpmM53enyE25fTOCkR5OQkbHmLSX pK/cVVMw723Mv+yNtoW2ss2IyA91y1ND1FXZoDKjA8OOOQnhGx1qpOGH8XY0OIuy YiOBOM+bCMiai7Naq+7DxhKQz4OzlT9RePJsDIWtgwgAkyFXcWmuU14A1prTdaLG WjM74dbwElH2jd38YH3DiAe5gQMA+s0zm8hDIErKcX6fdl1yv5c2il5NgGBMGlZ+ PAamh0V6X1Maq5r+w5BaLEbcTSZuMs3U+p2QCRs74JOVQivytjyawjZfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNaZra4TCN2DfN71L+5Cl6sQI4nMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdY5/j5h sfl2QJYSozRDxyl5ffDXZQYAvoUbzvtRq45SpMeT6nwoQn7wxwqBMg6Lh54o5l1n Rz3HaXCtTEoww57Pk6ygyANumbiiIVH87vigsXjOA6/TD2zQ5uD2SJCF9A7bM7OX Dbq3GbfwpwCATYS/+tnFx/SipuT3vMEiwWep/RtCaiVZc/OTag9rOE4TKcaBae0u Sm8kO4fbddsioYRk5HiHOtMhU4FFIr3WzeGkrY2qG+qOsyMHUgnPt70VKp7S7Xo6 jb1ae7BfYAfOkkQpcJKKiHhi5YIJYJjjxWeVVkdQ7cdKqep5xc2Lpq03TB6nqGdh NRnI0QgqE1KDyA== -----END CERTIFICATE-----Generated at Wed May 13 00:11:54 2026 by rpki-client