$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: iwfnGnuDr4BpKXHDkX6KGTq7gdigzHDhUsNbEWmXO+I= Subject key identifier: 43:FC:2E:63:3D:B1:9F:60:B9:F3:4B:94:43:02:F8:87:B1:63:73:1D Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019E1E6C41222E1FBDD52232D315A521FFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1917 Signing time: Tue 12 May 2026 23:01:11 +0000 Manifest this update: Tue 12 May 2026 23:01:11 +0000 Manifest next update: Wed 13 May 2026 23:01:11 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 4QIM1Fqn4hNEy9kn8eJKI1AXM2Y.roa (hash: 8GhUo4SPnyakq3CpcXOgLhb5ZUAB3EKXaLNGW0+jsu8=) 4: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 5: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 6: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 7: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 8: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 9: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=) 11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 21: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 22: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 23: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 24: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 25: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: Xco/ToCfJdXtO8S4+eu5B3BpXzNP17BwKS0z6N/9BYM=) 26: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 27: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:41:22:2e:1f:bd:d5:22:32:d3:15:a5:21:ff:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: May 12 23:01:11 2026 GMT Not After : May 13 23:01:11 2026 GMT Subject: CN=43fc2e633db19f60b9f34b944302f887b163731d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:eb:42:1f:74:7f:d7:e1:60:58:fd:03:71: 83:08:4c:d1:99:9f:16:6e:c7:a3:f8:54:25:eb:6e: 7b:4f:ab:b0:85:2d:68:7e:d3:3b:43:7d:e8:bf:18: b1:f9:6e:6b:e3:71:41:72:61:9a:8e:ac:7b:ea:55: a3:06:2f:e9:0e:5e:2f:44:d2:15:d3:83:86:10:74: 72:61:95:fd:06:8e:07:73:46:1f:f1:03:d1:88:ea: c9:53:44:ec:f4:15:7a:5b:f7:d4:93:10:8c:39:c6: 32:00:7d:ae:44:e0:be:d7:82:30:0d:bb:67:f9:d1: b0:80:f7:96:00:c0:ba:50:aa:4f:73:a9:6b:9f:1b: f0:6f:76:c7:19:e7:b2:d5:b2:d6:d8:c2:4e:14:3f: 15:87:9f:02:f7:53:70:1e:09:45:01:b4:ae:b5:80: 6e:4c:0c:e6:8e:9e:2f:5d:94:db:c9:cd:e0:fa:39: 05:d2:a4:19:64:2b:0e:e7:ae:33:50:92:45:2a:62: e9:10:ac:ca:b0:5d:37:90:71:55:54:49:31:eb:94: 27:5d:10:7e:56:a2:8b:14:b2:7b:18:03:4c:a3:c2: fc:ec:0a:b7:cb:48:c2:2f:0a:99:f6:76:6d:7a:4a: df:f0:86:be:86:64:a3:d9:68:1c:6c:83:c0:8e:1b: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:2E:63:3D:B1:9F:60:B9:F3:4B:94:43:02:F8:87:B1:63:73:1D X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:00:1c:d3:1e:43:f7:8c:51:ce:1d:9a:17:be:5c:92:99:67: 28:3c:3f:16:76:67:f7:88:3a:e5:77:a2:60:b8:fd:0e:14:4e: 48:d7:3f:ed:ca:45:07:78:05:96:48:8d:ed:f9:8e:4c:f1:5a: 4e:8a:20:08:74:fb:1b:33:8f:de:66:2c:25:69:cc:79:6a:a9: 4c:13:28:90:1a:60:77:98:02:1e:32:20:52:2d:0b:88:9b:93: 55:01:f0:99:a3:c5:7b:3a:04:69:af:da:c6:1a:d0:f7:81:e1: 44:a1:70:33:db:9a:cd:f5:18:7f:91:0f:b0:37:74:f7:8e:7f: 0f:a3:89:17:c6:d6:41:0a:6b:4e:32:09:e8:fd:31:a3:61:0f: 70:57:b3:91:1a:98:31:6a:e6:0d:a4:ab:66:af:c8:45:f1:61: c1:f2:b3:1d:30:13:1e:79:29:f8:67:d9:50:ce:36:01:bf:c6: 88:9c:92:a4:b3:ff:b4:0d:71:95:a5:91:02:7f:46:81:2c:11: 70:6e:00:b9:4a:de:bd:93:e0:00:e5:74:db:15:4a:82:da:e1: 0a:31:b8:d9:6e:33:b1:8f:37:23:7e:2f:5d:86:d7:a6:ff:20: 67:79:c6:30:30:78:56:3f:ce:37:cb:e0:e8:45:05:43:51:da: 2d:47:b0:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebEEiLh+91SIy0xWlIf/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwNTEyMjMwMTExWhcNMjYwNTEzMjMwMTExWjAzMTEwLwYDVQQD Eyg0M2ZjMmU2MzNkYjE5ZjYwYjlmMzRiOTQ0MzAyZjg4N2IxNjM3MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhavrQh90f9fhYFj9A3GDCEzRmZ8W bsej+FQl6257T6uwhS1oftM7Q33ovxix+W5r43FBcmGajqx76lWjBi/pDl4vRNIV 04OGEHRyYZX9Bo4Hc0Yf8QPRiOrJU0Ts9BV6W/fUkxCMOcYyAH2uROC+14IwDbtn +dGwgPeWAMC6UKpPc6lrnxvwb3bHGeey1bLW2MJOFD8Vh58C91NwHglFAbSutYBu TAzmjp4vXZTbyc3g+jkF0qQZZCsO564zUJJFKmLpEKzKsF03kHFVVEkx65QnXRB+ VqKLFLJ7GANMo8L87Aq3y0jCLwqZ9nZtekrf8Ia+hmSj2WgcbIPAjht2zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP8LmM9sZ9gufNLlEMC+IexY3MdMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQAc0x5D 94xRzh2aF75ckplnKDw/FnZn94g65XeiYLj9DhROSNc/7cpFB3gFlkiN7fmOTPFa ToogCHT7GzOP3mYsJWnMeWqpTBMokBpgd5gCHjIgUi0LiJuTVQHwmaPFezoEaa/a xhrQ94HhRKFwM9uazfUYf5EPsDd0945/D6OJF8bWQQprTjIJ6P0xo2EPcFezkRqY MWrmDaSrZq/IRfFhwfKzHTATHnkp+GfZUM42Ab/GiJySpLP/tA1xlaWRAn9GgSwR cG4AuUrevZPgAOV02xVKgtrhCjG42W4zsY83I34vXYbXpv8gZ3nGMDB4Vj/ON8vg 6EUFQ1HaLUewWw== -----END CERTIFICATE-----Generated at Wed May 13 04:36:12 2026 by rpki-client