$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: 4H/6GCFi6fIjDMoJv/OKWPMc9sWh++AId1n0OO7yalw= Subject key identifier: B8:CC:24:0F:97:9E:C3:D1:79:ED:E6:77:98:95:F4:76:D3:66:6D:D3 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019E1C473D07EEB664B98D2CC6EBC468BED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 190C Signing time: Tue 12 May 2026 13:01:31 +0000 Manifest this update: Tue 12 May 2026 13:01:31 +0000 Manifest next update: Wed 13 May 2026 13:01:31 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: CMq5Ryu1MZH2YQwjJajL5x53QKwtdiR89jmc1waTo2w=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: JzVOn48opN5OmQw_kWDCZlB03-8.roa (hash: WnteOYQuoH/SPZnd3lWEYH6qe+d3lLK1B3+/F/zOHBo=) 8: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 12: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 13: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:47:3d:07:ee:b6:64:b9:8d:2c:c6:eb:c4:68:be:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: May 12 13:01:31 2026 GMT Not After : May 13 13:01:31 2026 GMT Subject: CN=b8cc240f979ec3d179ede6779895f476d3666dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:bd:8a:ab:f0:75:b5:77:60:c3:fd:d5:bb: 54:5f:25:bc:8e:13:20:7f:22:38:ba:f1:58:90:fa: 8c:86:98:cc:7b:04:56:c2:13:03:c0:c2:70:df:8c: 56:00:d5:d5:ee:ef:83:b5:28:70:57:3b:78:68:db: 28:6e:5f:7c:f1:34:e8:4a:14:57:c9:cc:a0:cc:9d: 15:e3:d3:b6:39:c7:91:bd:a6:63:9b:1c:42:5c:b8: b8:2a:d4:3d:d2:13:eb:71:c3:d9:00:ec:24:23:e5: 1b:5d:fb:ff:51:c8:73:2a:09:35:25:b8:d6:f1:68: 9c:09:46:1f:00:e3:18:a5:44:43:53:28:d3:b1:22: 3c:41:83:a2:ae:4d:ff:3e:1e:b8:fa:4a:1c:49:59: 6e:49:5f:16:67:b2:0c:c7:00:85:12:a6:61:80:aa: b3:84:a5:7d:8a:13:d4:a3:f9:62:7c:0a:56:20:51: 8d:ef:5c:72:6e:51:7d:d3:5e:a4:dc:a2:62:2f:f5: 3b:cf:de:b7:55:dd:84:d5:42:8d:d6:97:bd:61:c4: 4a:6f:0d:2d:83:52:b6:e4:b8:1c:f5:c9:d2:3e:35: e4:95:89:96:7b:35:69:37:c6:13:6a:ff:8f:aa:9b: a6:24:8e:ed:a3:13:be:d9:7a:f3:3a:83:57:37:24: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CC:24:0F:97:9E:C3:D1:79:ED:E6:77:98:95:F4:76:D3:66:6D:D3 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:fd:f9:09:91:4a:61:79:da:55:63:13:2d:d4:4b:80:66: 79:db:7c:84:a8:fb:92:94:4e:23:86:d0:92:37:1d:fd:3b:eb: be:2e:a1:dd:cb:2d:b8:24:11:2d:61:a2:2f:72:c6:84:52:bb: 7a:e7:41:7f:6d:03:37:fe:0a:a0:0d:37:32:b8:08:89:15:55: b2:c1:a2:7e:c0:0c:c5:fd:b6:7b:0d:a0:d2:12:87:ed:fd:72: 0b:60:b4:e7:45:f6:ef:2c:0a:b2:53:e5:d4:b2:b0:57:a6:ad: 7d:c4:28:94:ab:be:a2:c4:a8:fc:c6:53:dc:4a:4d:b6:a2:29: 38:d9:85:65:f0:e9:c9:6b:65:72:1b:3e:cc:57:f7:6a:21:e0: 7d:38:05:9e:ac:4d:e0:1e:53:cd:7e:b8:78:96:8b:a2:d0:52: c0:c0:94:f1:68:39:da:d5:77:79:5c:fd:d3:e7:e7:4a:07:af: 44:ad:e9:33:df:eb:ad:30:01:f6:28:05:08:1e:9e:2c:97:1d: 6e:c3:90:d0:57:a4:68:1d:cc:07:84:bb:27:8d:74:67:a9:44: 6b:c7:74:07:2b:76:5c:2e:83:b3:b5:3e:99:d9:b0:22:39:e5: a7:f3:a4:de:f9:80:94:41:3b:c3:14:fd:98:ff:d0:3a:d6:4c: a5:99:11:fa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ4cRz0H7rZkuY0sxuvEaL7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNTEyMTMwMTMxWhcNMjYwNTEzMTMwMTMxWjAzMTEwLwYDVQQD EyhiOGNjMjQwZjk3OWVjM2QxNzllZGU2Nzc5ODk1ZjQ3NmQzNjY2ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzq9iqvwdbV3YMP91btUXyW8jhMg fyI4uvFYkPqMhpjMewRWwhMDwMJw34xWANXV7u+DtShwVzt4aNsobl988TToShRX ycygzJ0V49O2OceRvaZjmxxCXLi4KtQ90hPrccPZAOwkI+UbXfv/UchzKgk1JbjW 8WicCUYfAOMYpURDUyjTsSI8QYOirk3/Ph64+kocSVluSV8WZ7IMxwCFEqZhgKqz hKV9ihPUo/lifApWIFGN71xyblF9016k3KJiL/U7z963Vd2E1UKN1pe9YcRKbw0t g1K25Lgc9cnSPjXklYmWezVpN8YTav+PqpumJI7toxO+2XrzOoNXNySKpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLjMJA+XnsPRee3md5iV9HbTZm3TMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9r9 +QmRSmF52lVjEy3US4Bmedt8hKj7kpROI4bQkjcd/Tvrvi6h3cstuCQRLWGiL3LG hFK7eudBf20DN/4KoA03MrgIiRVVssGifsAMxf22ew2g0hKH7f1yC2C050X27ywK slPl1LKwV6atfcQolKu+osSo/MZT3EpNtqIpONmFZfDpyWtlchs+zFf3aiHgfTgF nqxN4B5TzX64eJaLotBSwMCU8Wg52tV3eVz90+fnSgevRK3pM9/rrTAB9igFCB6e LJcdbsOQ0FekaB3MB4S7J410Z6lEa8d0Byt2XC6Ds7U+mdmwIjnlp/Ok3vmAlEE7 wxT9mP/QOtZMpZkR+g== -----END CERTIFICATE-----Generated at Tue May 12 21:26:12 2026 by rpki-client