$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: zLrmbvsupW4nxtuM4lsDEQJqcLKB86QoZQRkbCgdDgY= Subject key identifier: B2:75:1C:65:14:91:CF:A8:C4:BB:1F:15:77:63:C6:7B:15:45:37:1A Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019E1E35654C1DD4E135331621B1467F57B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 07AC Signing time: Tue 12 May 2026 22:01:16 +0000 Manifest this update: Tue 12 May 2026 22:01:16 +0000 Manifest next update: Wed 13 May 2026 22:01:16 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: z1zFm9fEe5YklbsQnX4wodgZ23jIY4Vnm93SxNa5yNE=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:65:4c:1d:d4:e1:35:33:16:21:b1:46:7f:57:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: May 12 22:01:16 2026 GMT Not After : May 13 22:01:16 2026 GMT Subject: CN=b2751c651491cfa8c4bb1f157763c67b1545371a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:f5:ad:1f:17:f3:47:d0:f0:0c:f7:2c:5e: 1a:ff:00:9a:b8:bd:e9:ce:54:3b:2f:08:85:03:7a: b9:c2:8d:8e:1c:16:e9:35:8c:2c:16:f7:90:0f:a9: 83:78:24:63:4a:06:0a:af:d1:7b:a3:43:44:1c:11: b5:ee:b6:9e:1c:1e:3f:93:2a:bd:b1:9f:45:05:c5: 96:9a:dd:10:4c:9c:02:23:95:b6:e9:e4:55:91:3e: e7:96:8e:75:aa:08:97:b8:69:30:07:c3:4b:78:bb: ba:4c:71:7d:1d:4e:5a:79:27:31:28:d1:f8:fb:95: 64:a2:fa:69:51:ba:ec:f9:7a:57:d4:c9:99:24:0e: ad:5d:f8:a4:05:f8:ef:a2:da:e6:c5:37:45:d9:37: 16:4c:da:13:1f:19:33:77:58:28:eb:45:b6:99:44: ff:e8:d9:22:89:56:7c:58:98:67:6f:07:d1:d9:9a: d0:b8:ed:88:bf:d0:4c:7a:ce:63:17:9e:b2:3a:b1: 49:f1:1c:13:e8:e0:7a:b1:ea:fa:c4:1a:4f:ab:a3: 32:26:9a:12:77:c3:b5:f6:1b:a4:84:26:6d:78:bd: c8:39:47:9f:91:a6:24:20:1f:0b:1f:17:ac:35:ba: 80:b4:fe:51:fa:3d:b6:90:26:d5:c3:21:16:06:84: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:1C:65:14:91:CF:A8:C4:BB:1F:15:77:63:C6:7B:15:45:37:1A X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:99:93:c0:4b:9e:06:ef:c9:9f:b3:5a:fb:1d:8d:fa:41: 46:4d:a7:1d:4f:5e:0a:59:54:86:29:05:80:15:5f:7e:90:e5: 6d:2f:ad:4a:73:4e:e0:98:9e:00:d6:23:e6:ae:cd:18:7b:b5: f4:40:9d:44:52:7f:03:cf:4f:5e:f1:e4:df:c2:1b:ed:93:7e: f5:f2:ed:60:0d:d4:bd:7e:47:60:6e:b1:6c:e3:be:cd:53:d7: 86:c5:0e:f6:db:b9:fd:cb:18:3d:7d:9f:19:87:dc:07:d3:60: a2:69:3d:2f:dd:c0:1d:c9:d8:91:21:2b:5a:e8:31:bb:59:53: 2a:93:3b:fb:4c:45:6d:83:25:e6:b6:b6:17:4e:bc:2d:1c:a1: 69:64:4a:18:71:72:74:e1:a1:21:d2:0e:a9:4e:e0:be:c6:58: 6e:b9:f2:57:f4:fe:db:63:ad:cb:cb:16:9e:fa:02:89:e4:46: d5:4b:3f:88:ef:05:d8:46:ba:35:fb:c5:b5:f8:ee:cb:b2:ba: d7:f9:83:65:03:2e:c7:39:d4:59:60:0c:4a:fb:ae:55:9b:b3: fd:6a:75:27:7e:30:c6:43:bb:12:0c:5a:8d:ea:db:85:c9:3f: 8d:0f:30:3b:4e:b2:53:e0:13:34:b6:cd:f2:b0:78:8f:db:e9: a2:d5:0c:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNWVMHdThNTMWIbFGf1eyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwNTEyMjIwMTE2WhcNMjYwNTEzMjIwMTE2WjAzMTEwLwYDVQQD EyhiMjc1MWM2NTE0OTFjZmE4YzRiYjFmMTU3NzYzYzY3YjE1NDUzNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFT1rR8X80fQ8Az3LF4a/wCauL3p zlQ7LwiFA3q5wo2OHBbpNYwsFveQD6mDeCRjSgYKr9F7o0NEHBG17raeHB4/kyq9 sZ9FBcWWmt0QTJwCI5W26eRVkT7nlo51qgiXuGkwB8NLeLu6THF9HU5aeScxKNH4 +5VkovppUbrs+XpX1MmZJA6tXfikBfjvotrmxTdF2TcWTNoTHxkzd1go60W2mUT/ 6NkiiVZ8WJhnbwfR2ZrQuO2Iv9BMes5jF56yOrFJ8RwT6OB6ser6xBpPq6MyJpoS d8O19hukhCZteL3IOUefkaYkIB8LHxesNbqAtP5R+j22kCbVwyEWBoRebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ1HGUUkc+oxLsfFXdjxnsVRTcaMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMeZk8BL ngbvyZ+zWvsdjfpBRk2nHU9eCllUhikFgBVffpDlbS+tSnNO4JieANYj5q7NGHu1 9ECdRFJ/A89PXvHk38Ib7ZN+9fLtYA3UvX5HYG6xbOO+zVPXhsUO9tu5/csYPX2f GYfcB9Ngomk9L93AHcnYkSErWugxu1lTKpM7+0xFbYMl5ra2F068LRyhaWRKGHFy dOGhIdIOqU7gvsZYbrnyV/T+22Oty8sWnvoCieRG1Us/iO8F2Ea6NfvFtfjuy7K6 1/mDZQMuxznUWWAMSvuuVZuz/Wp1J34wxkO7Egxajerbhck/jQ8wO06yU+ATNLbN 8rB4j9vpotUMLw== -----END CERTIFICATE-----Generated at Wed May 13 01:02:59 2026 by rpki-client