$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: tyoTLHsB6hR+wmqHoAbioOMUETFI/dG/KSFhxOphOic= Subject key identifier: B5:0C:3E:5D:C5:F9:50:B3:BF:FF:59:E6:FE:98:F7:D2:29:EC:C0:F3 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019E1D90792BE67DC6EB5ACEE737FAFF64E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 193E Signing time: Tue 12 May 2026 19:01:07 +0000 Manifest this update: Tue 12 May 2026 19:01:07 +0000 Manifest next update: Wed 13 May 2026 19:01:07 +0000 Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=) 2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=) 3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: abTQNqlyjrnb07szZeeMFwW+MWkv0wUP5afj6M+bPsA=) 5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=) 6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=) 7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=) 8: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=) 9: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=) 10: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=) 11: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=) 12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=) 13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=) 14: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=) 15: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=) 16: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=) 17: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:79:2b:e6:7d:c6:eb:5a:ce:e7:37:fa:ff:64:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: May 12 19:01:07 2026 GMT Not After : May 13 19:01:07 2026 GMT Subject: CN=b50c3e5dc5f950b3bfff59e6fe98f7d229ecc0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:d1:0d:60:6f:07:58:a3:d4:58:47:ea:e1: 37:23:fd:cb:d9:39:12:fb:83:41:ce:1a:be:ac:07: 01:c6:a8:7e:3d:93:30:30:8c:9f:aa:ea:1f:de:35: db:f2:57:f0:03:a5:72:d6:70:a2:c4:0b:d2:ec:58: 19:d4:af:16:63:30:b4:15:cb:60:33:94:bc:ce:07: c5:c5:68:e0:40:42:03:8f:81:a0:82:9f:a2:22:67: 76:c5:1d:9c:7c:0d:00:6d:34:c3:21:28:5f:36:00: 39:30:82:e9:44:75:c4:a2:98:98:b1:63:b7:2a:01: 33:6d:34:43:1d:43:f8:91:9a:a4:10:4e:76:41:c2: 18:8b:aa:2d:ee:14:10:84:74:35:29:8f:b5:8d:17: b5:e6:da:b7:37:de:63:26:42:09:3f:d4:ec:ae:57: 80:e7:d4:cb:ac:bf:07:51:42:75:00:50:56:29:98: 36:16:db:39:2a:1b:50:65:ff:1e:80:38:d1:cc:35: d0:16:e2:37:00:f5:af:4d:90:96:6b:c7:c1:fd:ac: 37:d1:80:2a:0c:c5:3d:a4:64:46:57:02:31:e9:58: 70:9d:8a:bb:1d:d0:2f:54:97:0c:d1:08:00:e1:66: 0f:5e:79:00:99:bd:90:f9:e2:3d:04:81:9b:f4:a8: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0C:3E:5D:C5:F9:50:B3:BF:FF:59:E6:FE:98:F7:D2:29:EC:C0:F3 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:92:24:87:76:1a:74:9f:1b:2d:17:be:fe:f8:f5:3f:c0:bc: 3e:cf:36:45:21:d1:36:bc:44:f3:9f:53:4f:a5:97:28:12:e5: 6c:7b:5b:75:b4:ca:bc:23:b3:33:76:79:50:a7:9c:7e:f8:20: a5:13:d4:13:4f:5e:e6:bf:97:29:37:0a:b0:c4:f6:8f:89:9d: 94:5e:ea:42:82:2c:d7:c6:a2:a9:86:40:f2:bf:75:6b:24:65: 5a:78:9c:a1:c8:9e:ff:59:a7:df:57:bb:00:ab:4b:a9:be:c2: 59:1b:14:8d:38:e6:57:09:51:c0:76:81:7b:1b:51:1c:50:54: 3b:64:bb:6b:d5:37:e5:2f:5b:86:31:9c:12:af:6a:d8:48:b3: 07:13:96:a6:c1:91:79:9a:0a:28:3e:09:09:d5:db:53:c9:17: 6d:e3:c6:30:d2:ca:86:69:bf:59:7f:3f:25:48:ab:62:7b:c4: dd:26:9b:08:e0:dc:20:d2:1b:ed:37:8d:4d:ed:ae:3c:8b:af: e0:6b:fe:44:82:bd:4b:e6:3d:84:80:d9:07:b7:44:20:ab:81: 23:5d:c4:56:0d:59:05:40:d1:d1:ff:c8:cd:c5:85:d0:52:ee: 57:a1:98:92:a8:77:b1:07:0d:14:81:ce:33:db:46:b1:6f:d9: 70:61:53:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkHkr5n3G61rO5zf6/2TkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwNTEyMTkwMTA3WhcNMjYwNTEzMTkwMTA3WjAzMTEwLwYDVQQD EyhiNTBjM2U1ZGM1Zjk1MGIzYmZmZjU5ZTZmZTk4ZjdkMjI5ZWNjMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzfRDWBvB1ij1FhH6uE3I/3L2TkS +4NBzhq+rAcBxqh+PZMwMIyfquof3jXb8lfwA6Vy1nCixAvS7FgZ1K8WYzC0Fctg M5S8zgfFxWjgQEIDj4Gggp+iImd2xR2cfA0AbTTDIShfNgA5MILpRHXEopiYsWO3 KgEzbTRDHUP4kZqkEE52QcIYi6ot7hQQhHQ1KY+1jRe15tq3N95jJkIJP9TsrleA 59TLrL8HUUJ1AFBWKZg2Fts5KhtQZf8egDjRzDXQFuI3APWvTZCWa8fB/aw30YAq DMU9pGRGVwIx6VhwnYq7HdAvVJcM0QgA4WYPXnkAmb2Q+eI9BIGb9KjV/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUMPl3F+VCzv/9Z5v6Y99Ip7MDzMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZIkh3Ya dJ8bLRe+/vj1P8C8Ps82RSHRNrxE859TT6WXKBLlbHtbdbTKvCOzM3Z5UKecfvgg pRPUE09e5r+XKTcKsMT2j4mdlF7qQoIs18aiqYZA8r91ayRlWnicocie/1mn31e7 AKtLqb7CWRsUjTjmVwlRwHaBextRHFBUO2S7a9U35S9bhjGcEq9q2EizBxOWpsGR eZoKKD4JCdXbU8kXbePGMNLKhmm/WX8/JUirYnvE3SabCODcINIb7TeNTe2uPIuv 4Gv+RIK9S+Y9hIDZB7dEIKuBI13EVg1ZBUDR0f/IzcWF0FLuV6GYkqh3sQcNFIHO M9tGsW/ZcGFTGA== -----END CERTIFICATE-----Generated at Wed May 13 00:57:34 2026 by rpki-client