$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: e3b6mopzQp3/IEBtcwU7f8KHsGoFHGB0hfFySEKQm0k= Subject key identifier: 48:D9:70:13:15:82:A0:CE:AD:D0:92:62:53:43:00:5D:64:F5:8F:62 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019E1DFEA897D6D7B1DFFE1BF8FFCBB34807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0F4B Signing time: Tue 12 May 2026 21:01:28 +0000 Manifest this update: Tue 12 May 2026 21:01:28 +0000 Manifest next update: Wed 13 May 2026 21:01:28 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: LBl5GckvpkfaTiI4MYcBOjbQGVBelhwRZGUV7KvkBZE=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:a8:97:d6:d7:b1:df:fe:1b:f8:ff:cb:b3:48:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: May 12 21:01:28 2026 GMT Not After : May 13 21:01:28 2026 GMT Subject: CN=48d970131582a0ceadd092625343005d64f58f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:7c:26:f5:f9:7c:03:0b:43:b2:37:4a:51: 97:09:04:8a:18:16:0e:fe:a9:99:67:ec:9e:5d:63: 81:f2:97:3d:47:47:d6:76:4f:13:d1:61:46:fd:99: 7e:b5:db:07:d0:4e:18:a8:19:ea:c8:b4:cb:a7:fa: 1b:19:cd:f3:2e:3b:ad:00:99:7c:7c:15:a8:9c:6e: 20:b8:c7:da:d0:f4:7a:b2:3e:18:9c:55:03:8f:5e: da:54:b9:24:95:05:ed:a6:27:5f:31:3e:6e:a0:da: d6:17:0d:04:d3:c0:2f:5d:be:cb:75:13:45:dc:b9: 01:df:15:85:ad:cb:70:14:f6:d3:88:0d:57:b3:9a: d2:93:c1:46:b3:ee:28:3b:73:fa:31:0e:8e:98:db: dd:9b:4c:da:73:dd:51:4e:c6:fe:44:db:a4:fb:82: 92:cb:4b:a4:65:d0:f1:c7:2d:fc:ac:67:ea:34:66: 21:47:be:ef:2c:87:3b:7c:b8:38:c9:a4:a9:40:51: a2:d4:b8:5f:2d:4c:e2:11:27:23:49:37:0f:d2:05: b1:9f:32:d2:16:a6:8c:41:29:d2:a6:10:2d:1c:56: f8:98:a6:1b:39:7c:bd:1f:b8:88:52:72:1e:2e:83: d6:0b:b8:c2:d0:e6:96:a7:2c:41:3f:07:81:eb:e3: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:70:13:15:82:A0:CE:AD:D0:92:62:53:43:00:5D:64:F5:8F:62 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c4:80:b6:07:3f:70:78:d1:88:c9:bf:a6:73:81:16:94:ca: d8:8c:c1:bf:3c:75:80:82:39:ba:c8:78:c7:18:b4:b9:fc:b2: 71:32:34:27:ed:1a:48:f4:34:e8:36:91:a8:27:2c:67:e1:4e: 96:5f:fd:88:bd:64:58:6b:f8:81:7b:08:05:0d:86:72:38:70: 61:56:36:9b:ba:0c:77:aa:bc:97:a5:c6:ef:3d:c5:2e:00:eb: 16:1f:93:20:c2:e6:47:ae:83:ed:c0:a6:04:1a:da:4a:48:be: b4:a8:3d:9c:ca:67:26:3d:73:81:61:44:68:4e:c4:66:c7:dc: e6:59:a5:59:00:72:b3:00:61:d7:10:f7:dc:f8:b1:2b:25:be: 10:54:d5:b4:e7:a3:46:e5:69:29:97:50:38:5a:e8:41:d5:e7: 51:9d:17:e1:4e:fe:c3:6b:28:bc:7a:d9:76:75:4f:26:fc:65: 04:25:92:06:33:51:07:ae:f0:f7:3a:0b:8e:ba:89:ef:48:c4: 68:02:95:19:eb:e5:07:0d:97:2c:f6:bb:d0:6d:50:ad:b4:ce: 8a:17:66:f9:50:55:94:bb:64:f6:e3:85:7a:5c:bd:b0:1e:85: be:cd:4a:67:bc:32:3f:ce:6a:84:bd:0d:f1:b3:d5:a4:e9:43: f5:0a:a0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/qiX1tex3/4b+P/Ls0gHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwNTEyMjEwMTI4WhcNMjYwNTEzMjEwMTI4WjAzMTEwLwYDVQQD Eyg0OGQ5NzAxMzE1ODJhMGNlYWRkMDkyNjI1MzQzMDA1ZDY0ZjU4ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksF8JvX5fAMLQ7I3SlGXCQSKGBYO /qmZZ+yeXWOB8pc9R0fWdk8T0WFG/Zl+tdsH0E4YqBnqyLTLp/obGc3zLjutAJl8 fBWonG4guMfa0PR6sj4YnFUDj17aVLkklQXtpidfMT5uoNrWFw0E08AvXb7LdRNF 3LkB3xWFrctwFPbTiA1Xs5rSk8FGs+4oO3P6MQ6OmNvdm0zac91RTsb+RNuk+4KS y0ukZdDxxy38rGfqNGYhR77vLIc7fLg4yaSpQFGi1LhfLUziEScjSTcP0gWxnzLS FqaMQSnSphAtHFb4mKYbOXy9H7iIUnIeLoPWC7jC0OaWpyxBPweB6+PRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjZcBMVgqDOrdCSYlNDAF1k9Y9iMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8SAtgc/ cHjRiMm/pnOBFpTK2IzBvzx1gII5ush4xxi0ufyycTI0J+0aSPQ06DaRqCcsZ+FO ll/9iL1kWGv4gXsIBQ2GcjhwYVY2m7oMd6q8l6XG7z3FLgDrFh+TIMLmR66D7cCm BBraSki+tKg9nMpnJj1zgWFEaE7EZsfc5lmlWQByswBh1xD33PixKyW+EFTVtOej RuVpKZdQOFroQdXnUZ0X4U7+w2sovHrZdnVPJvxlBCWSBjNRB67w9zoLjrqJ70jE aAKVGevlBw2XLPa70G1QrbTOihdm+VBVlLtk9uOFely9sB6Fvs1KZ7wyP85qhL0N 8bPVpOlD9Qqgfg== -----END CERTIFICATE-----Generated at Wed May 13 05:38:47 2026 by rpki-client