$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: RIZtPEVjoJjJEqnn2O5S6fUJNHN70My1jo8HTywgu2M= Subject key identifier: 9A:E5:CE:EF:B0:53:42:88:CC:66:4A:19:F2:C2:91:EC:2C:F3:9D:6A Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019E1E6C1B6FDCA7488395224176AB85CD46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1915 Signing time: Tue 12 May 2026 23:01:01 +0000 Manifest this update: Tue 12 May 2026 23:01:01 +0000 Manifest next update: Wed 13 May 2026 23:01:01 +0000 Files and hashes: 1: 5iygaSWZF0yjUJ8jGYfCtVGM300.roa (hash: ET/P3Mdg0xkHqABx2gsgHyGvGIp2jJSSoXAlISRhnZ4=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 7: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: m5LczkdvlG51Qinfee3QFGxpsDdEowCbpmKcnkmfurc=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:1b:6f:dc:a7:48:83:95:22:41:76:ab:85:cd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: May 12 23:01:01 2026 GMT Not After : May 13 23:01:01 2026 GMT Subject: CN=9ae5ceefb0534288cc664a19f2c291ec2cf39d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:15:98:6d:f2:01:a5:a5:8c:e5:7e:14:d3: 12:ac:6f:b0:41:18:b5:07:9e:b3:77:b5:12:b5:66: 1a:89:91:ed:1d:d1:67:eb:b9:65:c1:56:6a:56:6d: cf:67:ef:3b:6e:7a:a0:a7:91:5d:04:91:21:f0:e5: 9c:3f:70:f6:f1:eb:3b:19:8d:38:f4:f5:48:02:c6: 11:7e:12:0a:19:3d:f9:fe:7b:0e:f0:10:a6:6f:bf: bc:38:ed:9d:43:69:d3:67:eb:82:e1:df:2c:e0:b9: a3:85:c7:7a:94:4a:5e:ee:1a:39:28:12:6c:24:12: d6:79:b4:85:dc:b3:b8:bc:53:d8:d3:50:ec:6e:82: 32:2e:85:1d:38:16:ec:d4:be:54:8b:ee:d5:4b:45: b9:d8:b0:83:00:e7:93:97:34:b2:6f:b5:8f:7b:f1: 91:2d:54:43:7f:79:7e:e0:ed:b1:62:a1:c3:2d:f2: 55:04:ce:91:df:82:33:24:d0:05:33:9e:2d:dc:36: f9:82:29:72:5b:25:3f:49:12:10:c6:1b:63:8c:c8: 3b:9c:96:bb:c6:2a:d8:cb:66:a9:da:8b:cd:5e:f0: 3c:1f:bf:56:49:9f:f3:43:9d:69:74:ae:c3:27:b4: cc:26:2a:25:7e:97:65:83:0e:e6:b6:84:01:44:ac: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:CE:EF:B0:53:42:88:CC:66:4A:19:F2:C2:91:EC:2C:F3:9D:6A X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ea:62:b3:53:a4:2d:27:b9:1d:f2:17:f8:20:d1:6d:7d:6c: c4:cd:c1:14:3d:62:d0:80:4e:d7:f1:b0:e6:97:ee:65:cf:7e: 1f:33:e7:de:ab:25:fd:b5:ed:55:70:0a:c6:45:68:6d:a8:1a: 87:6f:91:eb:de:6d:be:37:23:9e:78:fd:4c:2d:4b:d0:75:15: b2:40:2b:e1:1e:d6:d8:f3:89:0b:31:1a:66:bd:a8:39:15:6f: 53:b0:40:b6:f5:79:3a:8b:78:b1:af:83:32:81:4b:e4:ad:c2: 40:36:de:1d:78:4a:cf:24:7c:84:78:a9:ea:d6:23:61:2c:94: 7e:7b:cc:55:9e:4a:35:15:1d:bb:9b:5d:cf:61:e2:65:42:21: ad:5c:1c:75:5d:ff:44:ce:1b:1a:5c:f5:92:f3:77:8a:e0:bb: 95:ba:4c:0a:a7:db:b9:8a:91:d5:8b:46:58:85:69:20:24:67: 46:98:7d:15:fa:67:97:61:35:73:cb:01:a5:ca:59:53:2b:4f: ca:01:25:db:1e:8a:54:9b:12:a1:72:b9:b9:fd:c3:80:2a:8b: c2:a9:08:52:76:44:01:61:c8:c3:6a:5c:86:60:7a:ab:ca:c9: 9b:73:20:01:62:13:a1:23:e2:9e:5c:0f:65:58:5a:31:67:c5: 0d:6d:97:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebBtv3KdIg5UiQXarhc1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwNTEyMjMwMTAxWhcNMjYwNTEzMjMwMTAxWjAzMTEwLwYDVQQD Eyg5YWU1Y2VlZmIwNTM0Mjg4Y2M2NjRhMTlmMmMyOTFlYzJjZjM5ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAEVmG3yAaWljOV+FNMSrG+wQRi1 B56zd7UStWYaiZHtHdFn67llwVZqVm3PZ+87bnqgp5FdBJEh8OWcP3D28es7GY04 9PVIAsYRfhIKGT35/nsO8BCmb7+8OO2dQ2nTZ+uC4d8s4Lmjhcd6lEpe7ho5KBJs JBLWebSF3LO4vFPY01DsboIyLoUdOBbs1L5Ui+7VS0W52LCDAOeTlzSyb7WPe/GR LVRDf3l+4O2xYqHDLfJVBM6R34IzJNAFM54t3Db5gilyWyU/SRIQxhtjjMg7nJa7 xirYy2ap2ovNXvA8H79WSZ/zQ51pdK7DJ7TMJiolfpdlgw7mtoQBRKyJMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrlzu+wU0KIzGZKGfLCkews851qMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHepis1Ok LSe5HfIX+CDRbX1sxM3BFD1i0IBO1/Gw5pfuZc9+HzPn3qsl/bXtVXAKxkVobaga h2+R695tvjcjnnj9TC1L0HUVskAr4R7W2POJCzEaZr2oORVvU7BAtvV5Oot4sa+D MoFL5K3CQDbeHXhKzyR8hHip6tYjYSyUfnvMVZ5KNRUdu5tdz2HiZUIhrVwcdV3/ RM4bGlz1kvN3iuC7lbpMCqfbuYqR1YtGWIVpICRnRph9Ffpnl2E1c8sBpcpZUytP ygEl2x6KVJsSoXK5uf3DgCqLwqkIUnZEAWHIw2pchmB6q8rJm3MgAWIToSPinlwP ZVhaMWfFDW2Xfg== -----END CERTIFICATE-----Generated at Wed May 13 11:01:39 2026 by rpki-client