$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: 5/v9bAkhZrfKuo6zyWQVDrRrF7pyDGcsibSNqsAra6M= Subject key identifier: 47:10:11:7A:65:E1:E2:15:A2:D7:C1:51:A2:19:D2:4E:59:1F:75:FE Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019E1DC70B2F4F2BEEE035C9CF123FE29B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1914 Signing time: Tue 12 May 2026 20:00:44 +0000 Manifest this update: Tue 12 May 2026 20:00:44 +0000 Manifest next update: Wed 13 May 2026 20:00:44 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: AdO/0gpgjxRUD1Yrxhzk6+0w0kTY3OO5+2ZzVBqDnSY=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:0b:2f:4f:2b:ee:e0:35:c9:cf:12:3f:e2:9b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: May 12 20:00:44 2026 GMT Not After : May 13 20:00:44 2026 GMT Subject: CN=4710117a65e1e215a2d7c151a219d24e591f75fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:99:39:56:31:1d:1e:09:79:c3:03:42:ef: 81:f9:97:77:e1:d2:00:89:9d:60:ae:d7:77:9c:df: 37:1c:68:c4:ca:a3:78:40:45:fe:63:25:8b:3f:f0: a0:a6:51:38:8f:24:68:95:cf:c0:c4:29:fd:01:fe: db:fa:f5:db:55:b4:2f:55:41:21:d1:48:fe:e0:cd: 79:7d:01:c6:44:38:3a:e6:cf:0a:7a:f9:b7:e3:94: d1:bd:15:22:6c:c2:88:31:de:4b:5a:67:f2:82:e0: 02:dc:3b:ce:57:43:2d:18:eb:27:2b:af:d7:35:f6: d0:e5:5c:dc:e0:12:76:6c:64:e6:f0:e5:74:ce:fc: 91:e4:19:d0:55:c2:46:3e:d1:3d:ea:97:5a:ab:ba: 24:bf:00:83:16:a8:11:02:7c:52:91:f6:82:87:13: 0f:3b:7c:a3:68:a7:98:c5:79:37:61:d5:44:09:19: 1b:2b:2f:6c:77:8c:56:9f:50:e5:4f:18:35:f1:a5: 4e:8f:a5:b9:d7:08:36:f5:f0:71:08:34:85:e7:07: c4:8a:12:65:8f:00:bb:b5:87:88:a7:1b:fe:59:84: 7b:1c:5b:10:58:a9:a1:62:9a:69:c8:fd:ca:28:a3: 1a:9c:66:37:7f:27:86:f1:b3:bd:a1:44:77:e7:15: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:11:7A:65:E1:E2:15:A2:D7:C1:51:A2:19:D2:4E:59:1F:75:FE X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:24:e6:05:e4:a3:43:1a:c0:89:bf:3d:f3:c2:a2:17:06: 13:f7:21:bb:8e:99:5d:7f:b2:aa:87:0e:d9:db:56:82:00:4e: 1f:11:12:16:89:a5:11:0c:36:a0:2d:c0:6f:5e:f0:68:6d:68: 47:9a:d7:4c:0f:c4:2a:0d:ba:30:d5:be:dd:88:84:6c:96:26: f3:3c:84:08:07:fe:a5:e8:4f:4a:1d:90:0f:bf:3e:35:31:fe: 96:67:35:96:3d:4e:62:6c:b9:ab:2a:98:6b:8f:9a:df:46:03: 36:08:c0:f3:0d:f5:a9:9c:93:b4:37:2d:b4:6b:76:c9:3f:90: be:b9:a7:9c:bf:1f:1f:54:6a:9c:ce:59:cb:b3:67:5e:a1:03: ab:e1:44:13:9e:98:cf:3b:81:61:15:1b:10:bd:e6:26:78:bc: ec:bb:38:e1:11:f5:11:da:da:a1:f0:cf:b4:d0:2e:d0:c5:34: a3:0c:d2:66:3b:7e:19:20:68:60:b3:55:c4:0c:d5:a5:81:b2: 74:20:13:2f:d9:86:ff:e0:a3:ca:86:77:d1:06:81:70:f4:f5: 26:15:d8:e0:85:5b:5a:b3:a1:87:b3:21:55:70:ae:07:6c:6d: 40:f3:b8:47:3c:b6:b8:19:31:89:91:2a:59:0e:ed:e4:f9:9a: db:d9:a9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dxwsvTyvu4DXJzxI/4ptVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNTEyMjAwMDQ0WhcNMjYwNTEzMjAwMDQ0WjAzMTEwLwYDVQQD Eyg0NzEwMTE3YTY1ZTFlMjE1YTJkN2MxNTFhMjE5ZDI0ZTU5MWY3NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIaZOVYxHR4JecMDQu+B+Zd34dIA iZ1grtd3nN83HGjEyqN4QEX+YyWLP/CgplE4jyRolc/AxCn9Af7b+vXbVbQvVUEh 0Uj+4M15fQHGRDg65s8Kevm345TRvRUibMKIMd5LWmfyguAC3DvOV0MtGOsnK6/X NfbQ5Vzc4BJ2bGTm8OV0zvyR5BnQVcJGPtE96pdaq7okvwCDFqgRAnxSkfaChxMP O3yjaKeYxXk3YdVECRkbKy9sd4xWn1DlTxg18aVOj6W51wg29fBxCDSF5wfEihJl jwC7tYeIpxv+WYR7HFsQWKmhYpppyP3KKKManGY3fyeG8bO9oUR35xUuSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcQEXpl4eIVotfBUaIZ0k5ZH3X+MB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ0k5gXk o0MawIm/PfPCohcGE/chu46ZXX+yqocO2dtWggBOHxESFomlEQw2oC3Ab17waG1o R5rXTA/EKg26MNW+3YiEbJYm8zyECAf+pehPSh2QD78+NTH+lmc1lj1OYmy5qyqY a4+a30YDNgjA8w31qZyTtDcttGt2yT+QvrmnnL8fH1RqnM5Zy7NnXqEDq+FEE56Y zzuBYRUbEL3mJni87Ls44RH1EdraofDPtNAu0MU0owzSZjt+GSBoYLNVxAzVpYGy dCATL9mG/+CjyoZ30QaBcPT1JhXY4IVbWrOhh7MhVXCuB2xtQPO4Rzy2uBkxiZEq WQ7t5Pma29mpKQ== -----END CERTIFICATE-----Generated at Wed May 13 06:49:35 2026 by rpki-client