$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: BD30HzNdRaOu3gxP4MyC6dGrIoDd0AxtM9uWJSHSJ44= Subject key identifier: 10:3D:DE:F9:7D:33:1C:DA:21:FB:E6:F8:2D:E0:9D:A3:2C:10:92:DF Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019E1DFE46C1B9005D3059E3B6D9EB6D8372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 05DD Signing time: Tue 12 May 2026 21:01:03 +0000 Manifest this update: Tue 12 May 2026 21:01:03 +0000 Manifest next update: Wed 13 May 2026 21:01:03 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: J5rGE+ypP/geEainKrVREhIoAsnT8DZkQS9+FBUXaqo=) 7: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 8: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 9: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 10: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 11: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 12: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 13: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:46:c1:b9:00:5d:30:59:e3:b6:d9:eb:6d:83:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: May 12 21:01:03 2026 GMT Not After : May 13 21:01:03 2026 GMT Subject: CN=103ddef97d331cda21fbe6f82de09da32c1092df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:c8:c1:04:3b:76:b4:e0:72:65:bd:3c:2e: 4d:aa:79:52:ca:bd:16:b4:b0:aa:89:75:4b:c4:c3: b6:a5:07:93:10:65:51:93:f8:fe:f2:94:98:e8:fb: 21:e9:eb:dc:e2:15:cd:4a:2b:ff:ec:1f:16:f5:a8: b3:87:c4:9c:87:ee:5f:4f:17:3e:71:26:30:67:5f: 11:b2:60:83:1a:3a:7c:83:bd:75:35:53:68:ad:a3: c2:75:5d:d5:ac:a5:27:7b:72:57:f1:04:51:31:45: b1:81:19:4e:05:34:07:84:9c:32:c2:12:eb:b8:a9: 1e:70:0f:f1:08:dd:82:1a:74:58:6e:ad:e4:e8:28: f8:2d:c0:54:72:41:52:e7:4a:b0:1d:b6:20:df:78: c8:ed:58:35:61:c1:eb:4a:59:34:3a:30:45:2d:79: 97:3f:26:38:a0:d7:c4:44:a8:28:f5:a2:c3:c7:4f: eb:ba:e0:04:1b:1e:bb:ba:36:76:ce:30:2e:3b:c0: c1:4a:d6:cf:67:6f:72:fe:0b:6d:31:66:8f:69:ee: df:3a:40:c9:fd:bf:19:0e:5b:83:af:78:60:8f:9d: 59:81:b0:2d:9f:8c:06:f7:be:14:42:e5:f5:7c:d9: 5e:ac:62:d8:0f:33:e6:4c:fa:66:b0:6b:ab:41:3a: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:DE:F9:7D:33:1C:DA:21:FB:E6:F8:2D:E0:9D:A3:2C:10:92:DF X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d7:3d:d2:76:3f:3b:7c:e6:0e:46:94:39:79:b0:3c:8f:a3: 61:77:14:14:82:75:32:bc:57:96:c3:f4:a6:80:d8:9a:83:77: ca:21:58:c5:1a:b1:fa:26:b9:06:8f:b8:53:c2:ab:bc:4a:17: 00:74:2c:ee:6c:78:fc:bf:1c:47:6b:b7:9a:04:98:1e:6c:54: 98:d1:38:c4:ad:20:3b:ed:9a:e5:77:f5:9b:98:3b:38:ed:dd: 3a:ea:08:2a:bf:4b:fa:55:1a:d9:e5:d1:3b:28:f1:7c:5c:ac: 1d:f6:9b:0a:56:f3:c6:a7:69:5a:f3:d8:7d:1b:d9:e1:86:7f: 52:ef:72:f0:14:4d:19:e6:0a:39:ab:3e:3a:b1:87:f0:88:24: bd:ba:83:6c:2c:31:9e:e0:a9:63:d9:d5:31:49:e0:27:42:8d: 57:7a:27:67:1e:08:3c:5c:bb:44:93:ce:61:bd:f7:df:56:fa: 41:91:20:03:23:f1:8d:58:12:2a:6f:38:e5:1d:0c:ce:d7:1f: 45:d2:da:ba:f8:4f:12:9b:a6:d0:b2:93:a7:40:71:4b:a8:77: fa:b7:71:dd:44:a3:63:a5:5f:0d:b4:fc:03:f9:2e:bd:ad:75: 38:70:af:d3:93:cb:aa:31:96:e6:43:b3:cc:4f:b8:aa:e7:04: 94:d2:4c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/kbBuQBdMFnjttnrbYNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwNTEyMjEwMTAzWhcNMjYwNTEzMjEwMTAzWjAzMTEwLwYDVQQD EygxMDNkZGVmOTdkMzMxY2RhMjFmYmU2ZjgyZGUwOWRhMzJjMTA5MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04jIwQQ7drTgcmW9PC5NqnlSyr0W tLCqiXVLxMO2pQeTEGVRk/j+8pSY6Psh6evc4hXNSiv/7B8W9aizh8Sch+5fTxc+ cSYwZ18RsmCDGjp8g711NVNoraPCdV3VrKUne3JX8QRRMUWxgRlOBTQHhJwywhLr uKkecA/xCN2CGnRYbq3k6Cj4LcBUckFS50qwHbYg33jI7Vg1YcHrSlk0OjBFLXmX PyY4oNfERKgo9aLDx0/ruuAEGx67ujZ2zjAuO8DBStbPZ29y/gttMWaPae7fOkDJ /b8ZDluDr3hgj51ZgbAtn4wG974UQuX1fNlerGLYDzPmTPpmsGurQTpVEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA93vl9MxzaIfvm+C3gnaMsEJLfMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltc90nY/ O3zmDkaUOXmwPI+jYXcUFIJ1MrxXlsP0poDYmoN3yiFYxRqx+ia5Bo+4U8KrvEoX AHQs7mx4/L8cR2u3mgSYHmxUmNE4xK0gO+2a5Xf1m5g7OO3dOuoIKr9L+lUa2eXR OyjxfFysHfabClbzxqdpWvPYfRvZ4YZ/Uu9y8BRNGeYKOas+OrGH8IgkvbqDbCwx nuCpY9nVMUngJ0KNV3onZx4IPFy7RJPOYb3331b6QZEgAyPxjVgSKm845R0Mztcf RdLauvhPEpum0LKTp0BxS6h3+rdx3USjY6VfDbT8A/kuva11OHCv05PLqjGW5kOz zE+4qucElNJMnQ== -----END CERTIFICATE-----Generated at Wed May 13 04:17:59 2026 by rpki-client