$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: EbYEzfZVCv42SzF6Hz2Rn5X080vVo9XOHDYyG2Ur2uk= Subject key identifier: C2:56:50:38:D4:49:D7:5F:70:76:4A:8C:9B:E2:10:62:4F:89:3F:1B Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019E1EA2FEF3812D48EAD2C2533F8A2A1F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1949 Signing time: Wed 13 May 2026 00:00:59 +0000 Manifest this update: Wed 13 May 2026 00:00:59 +0000 Manifest next update: Thu 14 May 2026 00:00:59 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 26kO9P_Wdou5wIIAxf-kyVsvQbI.roa (hash: ++eqX5X4g+zHc9p/OwRXuSCgRUZWXsuqA3Viisyrnv4=) 4: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 5: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 6: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 7: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 9: 9i9oFlp_2-Kmowxe-0qZLMBp8-k.roa (hash: hfEts/enjP2G09inHqZA+JJmlqClmorkPilC/T5qM8M=) 10: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 11: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 12: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 13: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 14: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 15: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 16: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 17: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 18: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 19: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 20: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 21: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 22: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 23: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 24: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 25: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: uLqIk75wg1xzFt4guLDV6IwwVd3GG/WYiXmvbvmBJ7Y=) 30: jKMbEYpcNPxKWCIMI-LubBs0DH0.roa (hash: MYW0L6JQHwowkFpc6oaF9/EWozaJk4IrXDYZ8vBuxfM=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 33: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a2:fe:f3:81:2d:48:ea:d2:c2:53:3f:8a:2a:1f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: May 13 00:00:59 2026 GMT Not After : May 14 00:00:59 2026 GMT Subject: CN=c2565038d449d75f70764a8c9be210624f893f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:54:be:3d:58:2a:70:7b:9f:af:3e:61:cf: dc:4b:24:bf:5e:86:5d:a2:ff:1a:96:4c:30:76:f3: 09:77:30:29:fc:77:3d:7c:25:86:ca:1c:6f:18:4e: df:63:68:7f:ec:ca:76:29:26:ba:00:5e:30:83:67: 8d:ed:ba:df:03:92:93:c5:ce:cf:52:3c:6e:c3:e4: 0f:3f:8b:82:2e:82:7b:cf:fc:33:9d:f0:63:76:27: 40:bc:38:ea:55:5d:a0:f1:f2:6b:92:3d:2e:86:59: 09:ed:c8:bc:c1:58:53:9c:b1:a9:f6:6c:f9:bc:83: 50:0f:7c:d2:0b:a4:64:0c:a2:2e:f5:d4:d7:2f:24: 4b:e5:1c:6c:42:95:47:aa:1c:f0:9d:1c:48:3e:ed: cc:37:61:da:02:4c:3f:91:fe:cf:69:84:85:5c:ab: dc:3f:03:c3:7a:d6:3c:4e:66:61:7b:ff:69:41:48: fd:d4:0d:26:c1:78:87:52:ad:32:88:89:96:6c:0f: 1e:56:25:41:83:26:93:36:19:c0:a9:bd:d5:b1:e0: c6:5f:1d:a6:55:bc:63:b5:35:fe:a7:72:5b:83:82: 51:a1:be:d3:3f:ac:20:78:7e:26:04:2b:ab:e2:67: dd:db:9c:bf:20:fa:c4:93:27:50:2a:a8:07:82:b8: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:56:50:38:D4:49:D7:5F:70:76:4A:8C:9B:E2:10:62:4F:89:3F:1B X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:eb:91:ef:19:ea:b9:d2:f0:12:28:52:12:5e:89:c8:37:0e: ae:c4:be:df:f7:ff:38:bc:12:5b:a7:63:ba:16:43:ef:d5:74: 1b:e5:b0:a8:6c:59:28:ba:10:d5:63:25:6d:77:c8:f5:52:bc: 70:a7:9d:70:4d:09:01:9c:da:97:4b:ca:9c:71:e9:d1:7a:eb: d4:d6:29:87:c6:c5:9b:35:47:f1:81:12:a6:a8:9d:6f:f8:4c: a3:36:cb:1c:4b:b6:f3:3b:13:bb:9e:1f:4c:09:16:36:5e:f3: 25:aa:ea:39:cb:d7:8c:15:b5:43:5b:8d:99:2e:5d:f1:81:98: 83:9f:7f:9b:7b:bd:e0:08:3e:7b:3b:47:6f:9e:3b:73:33:17: 8a:a6:8e:e0:ee:be:48:c7:3d:a7:81:c7:67:37:fc:8d:e3:6a: 4c:03:fd:67:24:2c:51:6a:04:44:aa:ba:60:be:e6:cc:74:72: 5a:55:d0:45:c0:d7:ef:0b:7a:13:a2:cc:87:37:9c:bd:25:ef: e0:18:6b:b2:44:a0:dd:65:5a:61:6a:ee:5f:e4:5d:08:8d:6a: eb:4f:40:49:b8:7e:29:49:c9:38:4c:c5:25:c1:2d:f8:e1:35: 58:03:d3:6c:76:a9:4c:aa:a3:81:4e:fa:3e:b0:78:b0:ef:3f: 2c:56:8d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eov7zgS1I6tLCUz+KKh9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNTEzMDAwMDU5WhcNMjYwNTE0MDAwMDU5WjAzMTEwLwYDVQQD EyhjMjU2NTAzOGQ0NDlkNzVmNzA3NjRhOGM5YmUyMTA2MjRmODkzZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw5Uvj1YKnB7n68+Yc/cSyS/XoZd ov8alkwwdvMJdzAp/Hc9fCWGyhxvGE7fY2h/7Mp2KSa6AF4wg2eN7brfA5KTxc7P Ujxuw+QPP4uCLoJ7z/wznfBjdidAvDjqVV2g8fJrkj0uhlkJ7ci8wVhTnLGp9mz5 vINQD3zSC6RkDKIu9dTXLyRL5RxsQpVHqhzwnRxIPu3MN2HaAkw/kf7PaYSFXKvc PwPDetY8TmZhe/9pQUj91A0mwXiHUq0yiImWbA8eViVBgyaTNhnAqb3VseDGXx2m VbxjtTX+p3Jbg4JRob7TP6wgeH4mBCur4mfd25y/IPrEkydQKqgHgrhK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJWUDjUSddfcHZKjJviEGJPiT8bMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+uR7xnq udLwEihSEl6JyDcOrsS+3/f/OLwSW6djuhZD79V0G+WwqGxZKLoQ1WMlbXfI9VK8 cKedcE0JAZzal0vKnHHp0Xrr1NYph8bFmzVH8YESpqidb/hMozbLHEu28zsTu54f TAkWNl7zJarqOcvXjBW1Q1uNmS5d8YGYg59/m3u94Ag+eztHb547czMXiqaO4O6+ SMc9p4HHZzf8jeNqTAP9ZyQsUWoERKq6YL7mzHRyWlXQRcDX7wt6E6LMhzecvSXv 4BhrskSg3WVaYWruX+RdCI1q609ASbh+KUnJOEzFJcEt+OE1WAPTbHapTKqjgU76 PrB4sO8/LFaN9g== -----END CERTIFICATE-----Generated at Wed May 13 02:32:49 2026 by rpki-client