$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: WDATazo5xGBypweO+/wp/8YmsUr05w4kKCLf44L1jQs= Subject key identifier: E3:37:B0:2D:90:0C:D0:D0:6C:7B:B7:D5:56:D3:91:A3:FA:DD:DC:DA Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019E205A3FA25C1E871C22ADFD2D029D84EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1958 Signing time: Wed 13 May 2026 08:00:45 +0000 Manifest this update: Wed 13 May 2026 08:00:45 +0000 Manifest next update: Thu 14 May 2026 08:00:45 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: QPsUZcW3Oc2EDBb9snibxnjGLHCDVaT6rMAeN2CmaJQ=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:5a:3f:a2:5c:1e:87:1c:22:ad:fd:2d:02:9d:84:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: May 13 08:00:45 2026 GMT Not After : May 14 08:00:45 2026 GMT Subject: CN=e337b02d900cd0d06c7bb7d556d391a3fadddcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:68:dc:c7:6b:f9:ea:22:78:74:fb:1f:f5:e8: 95:1d:91:8b:d3:5a:6c:87:2f:74:76:7d:e5:89:ab: 4a:8e:97:d4:44:3e:90:95:f5:91:fc:f9:e8:9b:57: 87:40:b6:0b:91:fc:55:0a:af:81:05:af:50:2e:e5: 4e:92:2f:45:c8:b3:00:d3:4e:f2:ab:24:1d:7b:8d: 48:7a:e7:47:d5:22:60:bd:cd:4f:fa:a2:0e:d2:f3: dd:cd:59:97:f7:4b:d0:38:96:03:83:46:e5:80:45: 40:76:36:30:1a:54:76:d0:d5:85:c5:df:ef:f9:ad: 44:c3:39:05:96:0d:10:15:8f:8a:34:0b:3b:5d:3f: bb:69:85:59:75:05:a8:33:7b:8c:eb:9a:af:95:31: 3e:24:33:96:ec:62:8f:25:c2:d5:da:43:af:ca:04: 16:f2:13:a9:4f:50:ce:b7:c4:9d:62:6d:80:8c:3c: 59:9d:0c:1c:ad:6f:83:61:a8:ca:d0:da:dd:e2:8b: ea:27:83:c5:69:20:d6:4d:21:d6:30:e4:35:af:f4: ca:67:81:c9:7d:91:69:af:31:b1:66:32:cd:f5:27: 36:c3:b1:26:52:22:0f:af:e9:f9:fd:7e:ea:ce:38: 65:04:29:57:45:ff:0c:65:b8:62:e6:be:b6:e7:4a: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:37:B0:2D:90:0C:D0:D0:6C:7B:B7:D5:56:D3:91:A3:FA:DD:DC:DA X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:aa:27:23:3d:dd:73:5b:1e:d6:cd:4b:ab:4f:df:a9:00: c3:3a:f9:94:1e:ec:0c:1d:ed:1a:18:e3:60:c0:2a:45:f9:05: f4:d1:fe:61:e2:ff:c5:fb:a9:f9:0a:c9:33:9f:a9:17:bd:56: 9c:12:d3:9f:8b:b4:25:e5:84:da:ba:68:1f:ea:79:23:94:ca: ae:56:1f:b0:8a:cc:a5:82:d9:1f:f8:65:27:56:ca:5a:ee:ac: 6c:b6:99:2f:96:b9:ff:e7:a4:74:9d:27:43:b3:a2:c7:ee:3e: 8b:d0:f1:f6:f4:1e:fa:4f:62:37:95:e7:70:47:a6:b5:fb:dc: 80:11:17:5d:9d:a4:b0:3d:07:ee:4e:ba:f9:b4:34:4d:a5:87: 3b:19:f8:27:44:72:29:05:45:dd:b9:53:d3:6a:d7:99:e8:bf: aa:81:d4:04:23:28:6a:85:a3:82:61:59:7e:f7:cb:2f:ca:98: af:8d:3a:60:52:6f:73:05:aa:bc:83:90:2a:9a:80:18:af:64: 97:9e:07:8e:4f:ad:12:56:d4:15:46:22:75:f7:e9:21:48:46: 3a:e4:13:95:24:3d:a5:49:0f:b6:40:6d:5b:37:b6:3e:a4:58: c6:d4:af:90:b5:67:56:77:2a:95:16:82:d8:ed:69:5e:8f:60: 1f:53:96:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4gWj+iXB6HHCKt/S0CnYTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwNTEzMDgwMDQ1WhcNMjYwNTE0MDgwMDQ1WjAzMTEwLwYDVQQD EyhlMzM3YjAyZDkwMGNkMGQwNmM3YmI3ZDU1NmQzOTFhM2ZhZGRkY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGjcx2v56iJ4dPsf9eiVHZGL01ps hy90dn3liatKjpfURD6QlfWR/Pnom1eHQLYLkfxVCq+BBa9QLuVOki9FyLMA007y qyQde41IeudH1SJgvc1P+qIO0vPdzVmX90vQOJYDg0blgEVAdjYwGlR20NWFxd/v +a1EwzkFlg0QFY+KNAs7XT+7aYVZdQWoM3uM65qvlTE+JDOW7GKPJcLV2kOvygQW 8hOpT1DOt8SdYm2AjDxZnQwcrW+DYajK0Nrd4ovqJ4PFaSDWTSHWMOQ1r/TKZ4HJ fZFprzGxZjLN9Sc2w7EmUiIPr+n5/X7qzjhlBClXRf8MZbhi5r6250qh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM3sC2QDNDQbHu31VbTkaP63dzaMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnOqJyM9 3XNbHtbNS6tP36kAwzr5lB7sDB3tGhjjYMAqRfkF9NH+YeL/xfup+QrJM5+pF71W nBLTn4u0JeWE2rpoH+p5I5TKrlYfsIrMpYLZH/hlJ1bKWu6sbLaZL5a5/+ekdJ0n Q7Oix+4+i9Dx9vQe+k9iN5XncEemtfvcgBEXXZ2ksD0H7k66+bQ0TaWHOxn4J0Ry KQVF3blT02rXmei/qoHUBCMoaoWjgmFZfvfLL8qYr406YFJvcwWqvIOQKpqAGK9k l54Hjk+tElbUFUYidffpIUhGOuQTlSQ9pUkPtkBtWze2PqRYxtSvkLVnVncqlRaC 2O1pXo9gH1OW2g== -----END CERTIFICATE-----Generated at Wed May 13 14:29:39 2026 by rpki-client