$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: /5dWIMQEMWpuCgydPDJxFw6ueuE+F3CTsXMIBFP+2dY= Subject key identifier: D0:DF:2D:06:E6:09:18:56:53:07:E4:FA:21:9F:EB:FE:2D:C8:A3:08 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019E1F10F4505BC07F0F86CFEE009F4A8EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1921 Signing time: Wed 13 May 2026 02:01:05 +0000 Manifest this update: Wed 13 May 2026 02:01:05 +0000 Manifest next update: Thu 14 May 2026 02:01:05 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: bWIuqaZsN5EjRmZNehKRD5ad8sOmUrgA/HD5jCyy4jc=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 7: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 8: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 9: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 10: nE6wYHgGBuxz8FTwXNUK5B9PjQQ.roa (hash: lXZsBeZay6RXKXdRBv9xz0vCpEN1NRS9ZSpZrVGkY/o=) 11: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 12: smaQDy2hYnYh5iSHViMMRnAnJh0.roa (hash: zO3TyrLnjBrXJ0HHHzjE+BxHwelGsPuK4Lo5/ikK+P4=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:10:f4:50:5b:c0:7f:0f:86:cf:ee:00:9f:4a:8e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: May 13 02:01:05 2026 GMT Not After : May 14 02:01:05 2026 GMT Subject: CN=d0df2d06e60918565307e4fa219febfe2dc8a308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:9e:fb:d4:fe:2c:83:1a:30:e5:c9:dd:eb: cc:ea:fb:33:c3:a2:c3:e5:70:cf:52:63:e3:db:55: 1b:21:79:52:a9:54:26:00:0b:04:f5:ad:75:72:cf: 76:a1:a8:f0:d8:8e:94:0c:ae:b9:71:d9:24:70:54: 7e:46:f2:f0:1f:f6:62:c0:73:96:8c:fb:38:89:bb: a3:1c:f8:ec:2c:e9:9a:20:f7:06:8f:8d:e3:f6:56: 16:74:fd:60:3a:ea:41:97:ea:50:b1:75:8c:9a:0e: 06:10:4b:de:86:58:80:e0:2e:0a:a7:5f:cf:1b:18: 9e:b9:2c:f8:de:94:d9:04:af:4b:8f:be:12:b3:03: d3:bd:15:95:10:4b:20:06:32:0a:65:85:c6:1e:fd: de:dd:3d:61:c0:0b:7a:92:3d:db:72:1e:2c:a5:bf: 34:d9:5f:08:d8:3c:1b:7f:f7:0a:8c:a2:f2:9c:59: 38:1f:04:91:65:14:54:d1:b6:a5:12:64:4f:a8:ce: d8:75:e3:34:fb:69:c3:69:12:f3:b7:21:e6:ec:5f: 82:7a:50:cb:99:72:8b:b7:8b:4a:c2:92:7d:59:69: 81:1f:a7:74:bd:9d:a3:0c:66:8c:82:f9:61:ea:92: ee:70:f5:16:8f:bb:fa:ce:2d:42:d0:52:11:59:3c: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:2D:06:E6:09:18:56:53:07:E4:FA:21:9F:EB:FE:2D:C8:A3:08 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3f:c9:0d:00:13:e9:6d:05:ee:f7:7a:19:f9:98:0b:3e:7e: 84:e3:e0:76:61:f1:e5:2b:e2:9d:e4:3d:5f:0f:b2:a9:b8:de: 56:a2:d0:7e:21:b5:dd:f2:e1:c1:f3:9f:8f:bf:a7:0e:81:ee: 57:76:ce:23:f0:05:0b:47:fb:09:64:03:09:a2:3c:a9:7c:21: 6a:40:8d:db:23:d9:c4:98:28:e8:ff:b7:1b:bc:e3:71:ad:27: cf:89:13:e1:88:32:2b:67:52:5b:e6:31:be:74:a3:6a:7a:9c: cc:02:be:c6:d8:80:3e:1d:07:fc:54:d2:04:8f:00:12:2a:25: 82:3f:ca:d1:9d:bc:5c:1e:f5:59:75:05:a6:5a:a9:58:58:80: bf:9d:da:23:1c:b2:a1:2e:c5:c2:65:e1:31:57:54:89:ef:4b: f0:68:46:8c:82:59:a4:c1:34:1d:62:5e:e1:5c:fb:69:d0:2a: dd:e1:3e:c2:ed:62:4f:c2:29:14:9a:6f:84:d0:eb:a5:a1:a5: 15:e4:5b:a9:ca:e0:ac:ab:8f:cd:7a:90:d3:b9:20:53:8c:fb: 51:a9:6d:d2:c3:a4:48:f7:1a:df:b5:c3:29:cb:3f:f7:74:ee: ca:61:25:cd:14:b6:dd:ee:81:d3:5f:2d:94:ff:7f:96:43:6c: e8:77:a3:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fEPRQW8B/D4bP7gCfSo7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwNTEzMDIwMTA1WhcNMjYwNTE0MDIwMTA1WjAzMTEwLwYDVQQD EyhkMGRmMmQwNmU2MDkxODU2NTMwN2U0ZmEyMTlmZWJmZTJkYzhhMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl6e+9T+LIMaMOXJ3evM6vszw6LD 5XDPUmPj21UbIXlSqVQmAAsE9a11cs92oajw2I6UDK65cdkkcFR+RvLwH/ZiwHOW jPs4ibujHPjsLOmaIPcGj43j9lYWdP1gOupBl+pQsXWMmg4GEEvehliA4C4Kp1/P GxieuSz43pTZBK9Lj74SswPTvRWVEEsgBjIKZYXGHv3e3T1hwAt6kj3bch4spb80 2V8I2Dwbf/cKjKLynFk4HwSRZRRU0balEmRPqM7YdeM0+2nDaRLztyHm7F+CelDL mXKLt4tKwpJ9WWmBH6d0vZ2jDGaMgvlh6pLucPUWj7v6zi1C0FIRWTy/fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDfLQbmCRhWUwfk+iGf6/4tyKMIMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT/JDQAT 6W0F7vd6GfmYCz5+hOPgdmHx5SvineQ9Xw+yqbjeVqLQfiG13fLhwfOfj7+nDoHu V3bOI/AFC0f7CWQDCaI8qXwhakCN2yPZxJgo6P+3G7zjca0nz4kT4YgyK2dSW+Yx vnSjanqczAK+xtiAPh0H/FTSBI8AEiolgj/K0Z28XB71WXUFplqpWFiAv53aIxyy oS7FwmXhMVdUie9L8GhGjIJZpME0HWJe4Vz7adAq3eE+wu1iT8IpFJpvhNDrpaGl FeRbqcrgrKuPzXqQ07kgU4z7Ualt0sOkSPca37XDKcs/93TuymElzRS23e6B018t lP9/lkNs6HejjQ== -----END CERTIFICATE-----Generated at Wed May 13 07:08:20 2026 by rpki-client