$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: K/cAlQ1ZoeG4KgElfhFr9ucVfIrMrB9UDs8Lxrw0pRw= Subject key identifier: 05:DB:84:6C:62:51:0F:62:0D:CF:3F:13:23:1D:66:F4:E3:6D:9D:DC Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019E1D598311185E37CAF1052E43C8326E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 192D Signing time: Tue 12 May 2026 18:01:05 +0000 Manifest this update: Tue 12 May 2026 18:01:05 +0000 Manifest next update: Wed 13 May 2026 18:01:05 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 6n_hkZcF-cF30EEk5-jd2IN_wO8.roa (hash: DcZmoLZGm/trptAiaEUhPRAyxAeOKtODy6lVi50yIeA=) 3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: XB/no+bNua6tkPHh7+cUBZyyU3gFrSUp+lAWbd6uLRI=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:83:11:18:5e:37:ca:f1:05:2e:43:c8:32:6e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: May 12 18:01:05 2026 GMT Not After : May 13 18:01:05 2026 GMT Subject: CN=05db846c62510f620dcf3f13231d66f4e36d9ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:2e:a4:5f:29:58:3e:51:a7:89:88:a6:ba: c4:88:85:07:dd:0f:78:a6:9a:08:aa:e8:9f:88:30: 00:aa:a7:ad:28:9d:30:7d:63:88:c3:f0:72:10:7b: 9c:c6:e3:b2:85:15:26:2b:3c:dc:7f:f0:5e:11:ba: 4d:e4:d5:25:8f:c5:59:68:fa:ae:39:16:02:34:14: e7:f9:29:33:22:64:1a:a1:8a:84:a9:2a:fd:c1:d2: 5c:b9:dc:74:e5:eb:17:28:20:8f:bd:92:f6:fd:6f: 1f:bb:c4:ee:cc:e8:e8:1d:18:79:2e:ea:5c:0b:bb: 64:23:ab:35:97:2c:2a:e9:49:ef:44:62:3e:7b:a9: eb:e7:5f:15:15:92:b3:51:65:ed:51:d1:27:30:e5: ce:e2:f6:80:0e:4e:5c:ec:2d:1f:f5:ee:96:67:8c: 44:89:9c:e5:12:1a:00:70:80:f9:38:32:46:d1:14: 5e:36:31:62:1e:f6:4e:f1:c3:e5:2a:b7:27:aa:a6: d0:bb:ed:7c:92:6b:de:cd:81:c4:eb:63:a5:29:87: 34:1e:9a:97:33:92:e8:06:ea:9a:51:55:33:9b:88: f9:94:11:d0:f6:c0:d6:90:e1:6c:8a:e2:27:d9:02: 5c:96:14:b3:5f:7c:da:9c:37:c2:9f:bb:31:ec:a9: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:84:6C:62:51:0F:62:0D:CF:3F:13:23:1D:66:F4:E3:6D:9D:DC X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4d:5b:7c:bb:92:d9:2e:57:7b:f0:ef:d6:a5:80:57:d9:ef: ef:a4:1c:85:de:ba:29:78:36:c6:9c:46:24:d5:86:2e:c1:ae: 3c:81:83:10:35:a7:27:fd:f3:5c:24:56:2f:99:dd:25:55:5f: 90:80:da:0f:81:bc:80:2e:c3:33:92:70:e0:ef:0d:8a:f9:9c: 3f:bc:70:c4:f2:33:0b:78:eb:41:fc:a3:d9:96:53:d0:2a:ad: 91:92:39:2d:8f:be:fc:28:da:ab:37:e8:7f:83:1d:a7:fe:d3: eb:7d:8b:f5:ec:c2:1b:71:9c:81:03:97:43:b2:ce:50:7b:83: 16:de:b1:bc:7d:bd:4b:c3:fc:5b:30:f7:7d:5c:c6:f8:ad:8a: 61:e6:58:80:68:8e:a2:41:56:5c:ce:07:2b:ae:50:55:06:34: 9c:0a:af:be:76:94:47:f2:0f:01:aa:ec:bf:85:5c:43:3d:b1: 9a:30:4f:50:9b:9b:8d:65:ca:2d:e8:c2:e7:9e:de:d1:8f:7e: f8:8e:45:07:62:e6:dd:ec:06:e9:0a:9f:34:e8:8a:fc:d7:87: 1a:64:df:d8:2c:54:03:01:f7:ac:d4:da:c4:18:a1:de:bc:fd: 5a:6c:48:34:9d:81:f3:ff:a0:31:d8:74:3c:01:53:25:88:e4: f5:08:c4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWYMRGF43yvEFLkPIMm4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwNTEyMTgwMTA1WhcNMjYwNTEzMTgwMTA1WjAzMTEwLwYDVQQD EygwNWRiODQ2YzYyNTEwZjYyMGRjZjNmMTMyMzFkNjZmNGUzNmQ5ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcYupF8pWD5Rp4mIprrEiIUH3Q94 ppoIquifiDAAqqetKJ0wfWOIw/ByEHucxuOyhRUmKzzcf/BeEbpN5NUlj8VZaPqu ORYCNBTn+SkzImQaoYqEqSr9wdJcudx05esXKCCPvZL2/W8fu8TuzOjoHRh5Lupc C7tkI6s1lywq6UnvRGI+e6nr518VFZKzUWXtUdEnMOXO4vaADk5c7C0f9e6WZ4xE iZzlEhoAcID5ODJG0RReNjFiHvZO8cPlKrcnqqbQu+18kmvezYHE62OlKYc0HpqX M5LoBuqaUVUzm4j5lBHQ9sDWkOFsiuIn2QJclhSzX3zanDfCn7sx7KlnPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXbhGxiUQ9iDc8/EyMdZvTjbZ3cMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU1bfLuS 2S5Xe/Dv1qWAV9nv76Qchd66KXg2xpxGJNWGLsGuPIGDEDWnJ/3zXCRWL5ndJVVf kIDaD4G8gC7DM5Jw4O8NivmcP7xwxPIzC3jrQfyj2ZZT0CqtkZI5LY++/Cjaqzfo f4Mdp/7T632L9ezCG3GcgQOXQ7LOUHuDFt6xvH29S8P8WzD3fVzG+K2KYeZYgGiO okFWXM4HK65QVQY0nAqvvnaUR/IPAarsv4VcQz2xmjBPUJubjWXKLejC557e0Y9+ +I5FB2Lm3ewG6QqfNOiK/NeHGmTf2CxUAwH3rNTaxBih3rz9WmxINJ2B8/+gMdh0 PAFTJYjk9QjEyA== -----END CERTIFICATE-----Generated at Wed May 13 00:29:28 2026 by rpki-client