$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: dbstHwLdePz/s4AVTIsOtRVBfEcMKmiDWkgr5UXofPw= Subject key identifier: 69:37:F7:B7:3A:CF:2F:64:85:42:55:E4:BD:34:3C:8B:A1:BA:D6:6E Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019E1DC714345AD3CC7B9F6D2DAF4B23BEB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1470 Signing time: Tue 12 May 2026 20:00:46 +0000 Manifest this update: Tue 12 May 2026 20:00:46 +0000 Manifest next update: Wed 13 May 2026 20:00:46 +0000 Files and hashes: 1: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 2: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 3: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 4: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 5: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 6: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=) 7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: vc2k6fx3O6CQkyiUlyVBbiha9BbHw+Z/VYcWfTywaYM=) 8: fr4aZ8Uu5cjkIPAMz1mEEDth2OQ.roa (hash: u3xz1gSovZyLVFKoLfba+16hM7XAa3x4UM4AaM7LTjw=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:14:34:5a:d3:cc:7b:9f:6d:2d:af:4b:23:be:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: May 12 20:00:46 2026 GMT Not After : May 13 20:00:46 2026 GMT Subject: CN=6937f7b73acf2f64854255e4bd343c8ba1bad66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:0f:fe:0e:23:63:5a:02:77:a6:ce:e9:47: af:bc:bf:bd:03:67:83:c6:9e:13:da:30:1a:c1:89: ca:e4:c5:03:a2:d5:93:4b:c4:0a:68:f5:9a:1a:64: e9:57:45:f8:17:88:50:52:32:b7:7c:bd:ac:e0:8e: 0f:83:23:21:05:0f:c1:7b:03:b8:a8:7a:0f:e6:d1: 83:ec:4a:47:a4:32:d1:a7:cd:e8:75:2f:32:61:82: 2f:b8:4c:7f:86:6c:c9:32:f9:b2:ec:c0:6d:f5:d1: 9f:18:26:80:58:c9:49:03:85:1d:1f:84:00:61:29: 74:e2:d2:9a:3d:77:01:ee:d8:c4:1b:b8:cb:91:e5: 49:41:65:2b:a1:09:7c:14:64:d6:58:69:1d:4b:30: 5d:35:a2:44:ab:5c:3d:88:96:4b:1f:c0:58:c2:ac: c4:16:7b:d8:2b:61:1f:1d:a3:6b:2a:2b:c0:a1:88: 95:c4:64:75:17:df:28:57:3f:a7:be:f7:d7:86:5d: 10:62:94:9e:1d:37:6f:1f:29:7e:80:cc:1d:06:63: 5d:8b:38:cc:ac:8e:03:b4:5a:b6:ea:b6:29:b5:e7: 0f:52:e5:e4:de:a4:0d:f7:70:31:a3:24:1c:f0:cd: 13:9a:e0:78:6b:9d:05:c1:42:16:4d:d5:26:b8:f1: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:F7:B7:3A:CF:2F:64:85:42:55:E4:BD:34:3C:8B:A1:BA:D6:6E X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:79:ad:27:a1:03:39:87:e3:16:ff:c1:fb:16:34:b3:60:63: f9:2d:a9:fb:4d:5b:cc:75:82:24:5f:e9:b1:82:e8:17:22:18: 55:17:f7:36:b7:3c:96:ec:65:55:5b:9d:52:14:7e:1e:fc:0d: 67:60:bd:0d:7e:07:a0:dd:e3:8e:7d:b1:a0:27:ac:80:32:7a: 69:37:57:b1:8c:e8:bf:15:4c:c9:08:97:9e:1c:52:c8:b2:29: 5a:24:d7:cd:42:23:b6:aa:5a:a0:26:b5:39:98:a6:64:4a:78: 17:4f:d5:6d:c1:a2:79:6c:f4:70:57:fd:59:02:08:2b:02:cb: 43:e0:ef:70:0e:ff:20:01:4f:5f:c3:12:52:c8:9f:94:2c:57: fd:17:5d:f0:a1:47:23:03:cb:f6:ff:6e:fc:db:d1:76:ce:56: 28:0f:d7:cd:67:a7:b7:98:5f:2a:a9:f3:ab:18:fa:53:d3:3e: e4:67:d4:f3:02:b6:6a:51:8f:71:db:21:47:95:9a:b6:7c:53: c3:20:78:d0:a3:91:78:40:6f:85:ae:7d:7f:88:5b:b4:15:6d: c9:a6:ab:f1:ae:3b:cf:05:eb:7d:90:96:57:9f:1d:ee:eb:01: 23:73:55:8f:c0:10:4d:14:7e:fc:cb:29:46:d3:22:29:23:50: 4e:d8:88:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dxxQ0WtPMe59tLa9LI76yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNTEyMjAwMDQ2WhcNMjYwNTEzMjAwMDQ2WjAzMTEwLwYDVQQD Eyg2OTM3ZjdiNzNhY2YyZjY0ODU0MjU1ZTRiZDM0M2M4YmExYmFkNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzogP/g4jY1oCd6bO6UevvL+9A2eD xp4T2jAawYnK5MUDotWTS8QKaPWaGmTpV0X4F4hQUjK3fL2s4I4PgyMhBQ/BewO4 qHoP5tGD7EpHpDLRp83odS8yYYIvuEx/hmzJMvmy7MBt9dGfGCaAWMlJA4UdH4QA YSl04tKaPXcB7tjEG7jLkeVJQWUroQl8FGTWWGkdSzBdNaJEq1w9iJZLH8BYwqzE FnvYK2EfHaNrKivAoYiVxGR1F98oVz+nvvfXhl0QYpSeHTdvHyl+gMwdBmNdizjM rI4DtFq26rYptecPUuXk3qQN93AxoyQc8M0TmuB4a50FwUIWTdUmuPHPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk397c6zy9khUJV5L00PIuhutZuMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXmtJ6ED OYfjFv/B+xY0s2Bj+S2p+01bzHWCJF/psYLoFyIYVRf3Nrc8luxlVVudUhR+HvwN Z2C9DX4HoN3jjn2xoCesgDJ6aTdXsYzovxVMyQiXnhxSyLIpWiTXzUIjtqpaoCa1 OZimZEp4F0/VbcGieWz0cFf9WQIIKwLLQ+DvcA7/IAFPX8MSUsiflCxX/Rdd8KFH IwPL9v9u/NvRds5WKA/XzWent5hfKqnzqxj6U9M+5GfU8wK2alGPcdshR5WatnxT wyB40KOReEBvha59f4hbtBVtyaar8a47zwXrfZCWV58d7usBI3NVj8AQTRR+/Msp RtMiKSNQTtiIOg== -----END CERTIFICATE-----Generated at Wed May 13 05:41:39 2026 by rpki-client