$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: HKFXMY6TnLJZYO6SCy6KV4tbcV6nQsqTLmtyKdpCQuQ= Subject key identifier: 88:D3:42:F6:97:14:52:B4:DC:80:45:F8:8F:A3:C2:DE:2F:94:F1:54 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019E1E6C6FC4444109AD1099784312444805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 1202 Signing time: Tue 12 May 2026 23:01:23 +0000 Manifest this update: Tue 12 May 2026 23:01:23 +0000 Manifest next update: Wed 13 May 2026 23:01:23 +0000 Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=) 2: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: TEn8zkBnnopJ0i9NeLCZOOEXhTrlaCra5R0IfzV8Pgc=) 3: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=) 4: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=) 5: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=) 6: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=) 7: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=) 8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=) 9: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=) 10: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=) 11: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=) 12: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=) 13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=) 14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=) 15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=) 16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=) 17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=) 18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=) 19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=) 20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=) 21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=) 22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=) 23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=) 24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=) 25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=) 26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:6f:c4:44:41:09:ad:10:99:78:43:12:44:48:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: May 12 23:01:23 2026 GMT Not After : May 13 23:01:23 2026 GMT Subject: CN=88d342f6971452b4dc8045f88fa3c2de2f94f154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:04:8a:bc:36:99:56:2f:90:97:60:c7:04: 9f:2c:81:10:29:7e:e9:ae:e2:f1:fe:86:0f:7b:90: 1f:b6:80:1f:97:a3:0d:43:fc:61:29:3e:7a:01:b6: b6:fc:61:2c:a2:64:39:13:9c:d3:e8:09:37:a7:71: 8b:b5:6a:ce:cf:7f:92:45:b3:86:a3:9e:27:d7:53: 83:d0:14:98:7f:e7:f9:35:dc:58:2b:5b:d5:b2:c1: 8d:b5:e4:4f:b3:20:73:5e:da:d0:0b:53:80:76:98: bc:4d:89:f8:bd:06:df:22:32:83:74:96:c3:27:57: ff:57:f2:ed:d7:c9:6c:c5:6f:78:c8:4f:e9:65:46: b6:32:b6:eb:5a:bd:05:4a:12:36:0b:8e:80:c1:5d: ae:2d:fb:e5:ec:80:b5:54:70:15:4e:81:d9:ce:2e: d3:76:da:58:82:f4:cf:22:0c:84:01:f5:5a:35:39: bc:d7:16:87:69:9f:67:65:12:fb:a2:39:3a:b1:0d: 64:94:34:0c:1f:5a:d1:dd:ff:59:59:bf:6b:1f:bf: 3b:0a:cc:48:c5:d4:a5:ac:9e:4d:60:56:a7:df:d7: 60:9f:39:8d:67:71:32:e0:a6:5e:f4:dc:a5:05:e1: 52:67:fd:c2:0a:1a:08:8f:5b:f6:30:5f:74:e9:c3: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D3:42:F6:97:14:52:B4:DC:80:45:F8:8F:A3:C2:DE:2F:94:F1:54 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:35:10:60:80:f6:b1:51:9f:e2:a6:d7:e6:b8:2c:b2:d9:e5: 06:14:17:a2:ea:81:8b:c1:5c:96:df:3e:b9:53:d4:2c:b1:60: 9a:9d:65:62:9b:ea:81:07:e0:70:6f:4a:61:cc:70:98:8e:b8: 55:aa:ca:c6:17:9d:5d:71:5c:c9:1f:be:86:3d:92:c1:1c:79: aa:b9:07:42:5d:da:e9:85:e5:8c:d2:0c:89:46:fa:89:5d:cb: c5:b5:3e:46:4a:f4:38:0b:db:e7:6d:92:b3:4a:59:80:56:fc: 8c:32:05:b5:a9:f6:84:b6:f8:4d:ae:9e:1a:b9:f7:7e:6e:11: 64:75:d8:17:2f:83:c5:49:64:df:51:4f:f3:2d:aa:67:22:cc: 9a:21:b0:27:17:35:b2:87:04:e4:3f:85:a7:63:61:9e:34:d3: 4c:37:b0:74:24:9b:d4:d5:c3:52:12:a8:19:70:68:56:81:87: 00:65:d8:a2:29:d2:16:dd:02:a0:1a:07:18:4f:f8:3a:fd:95: f4:96:0e:9d:eb:9a:35:d5:ff:49:31:8a:1d:67:f4:29:af:b1: f9:50:69:93:d6:69:b4:1b:62:e9:d1:9b:b2:ce:d4:98:df:9b: 40:1c:f3:49:38:b5:85:a3:c6:a5:7c:0e:61:60:25:ae:f6:5c: 9d:85:d3:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebG/EREEJrRCZeEMSREgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwNTEyMjMwMTIzWhcNMjYwNTEzMjMwMTIzWjAzMTEwLwYDVQQD Eyg4OGQzNDJmNjk3MTQ1MmI0ZGM4MDQ1Zjg4ZmEzYzJkZTJmOTRmMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1YEirw2mVYvkJdgxwSfLIEQKX7p ruLx/oYPe5AftoAfl6MNQ/xhKT56Aba2/GEsomQ5E5zT6Ak3p3GLtWrOz3+SRbOG o54n11OD0BSYf+f5NdxYK1vVssGNteRPsyBzXtrQC1OAdpi8TYn4vQbfIjKDdJbD J1f/V/Lt18lsxW94yE/pZUa2MrbrWr0FShI2C46AwV2uLfvl7IC1VHAVToHZzi7T dtpYgvTPIgyEAfVaNTm81xaHaZ9nZRL7ojk6sQ1klDQMH1rR3f9ZWb9rH787CsxI xdSlrJ5NYFan39dgnzmNZ3Ey4KZe9NylBeFSZ/3CChoIj1v2MF906cOX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjTQvaXFFK03IBF+I+jwt4vlPFUMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjUQYID2 sVGf4qbX5rgsstnlBhQXouqBi8Fclt8+uVPULLFgmp1lYpvqgQfgcG9KYcxwmI64 VarKxhedXXFcyR++hj2SwRx5qrkHQl3a6YXljNIMiUb6iV3LxbU+Rkr0OAvb522S s0pZgFb8jDIFtan2hLb4Ta6eGrn3fm4RZHXYFy+DxUlk31FP8y2qZyLMmiGwJxc1 socE5D+Fp2NhnjTTTDewdCSb1NXDUhKoGXBoVoGHAGXYoinSFt0CoBoHGE/4Ov2V 9JYOneuaNdX/STGKHWf0Ka+x+VBpk9ZptBti6dGbss7UmN+bQBzzSTi1haPGpXwO YWAlrvZcnYXTTQ== -----END CERTIFICATE-----Generated at Wed May 13 09:24:35 2026 by rpki-client