$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: nh7qV9QR6exCPtZwb+zJxi5adg56Jz1a8iOsSORdFLs= Subject key identifier: C4:60:71:B9:AC:0F:7B:BA:4D:9D:DE:3A:43:08:07:CA:35:F4:23:28 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019E1E35E647866711F4C97089256C4BF101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 1657 Signing time: Tue 12 May 2026 22:01:49 +0000 Manifest this update: Tue 12 May 2026 22:01:49 +0000 Manifest next update: Wed 13 May 2026 22:01:49 +0000 Files and hashes: 1: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: doRoq9jmGordhzqdd63vw97VgaQW7SxWyF7Mn6MznZQ=) 2: 8xUINwR_MZF2v4_Uc8NHq55tEu4.roa (hash: BeND2ovC8Tb4Nwoyh9HxRMDQdbkz3PoJwktwooDxVhk=) 3: 9yRC7zAUCj4WsEYWohBubnEg-To.roa (hash: BAP4Q9Aas18vDD1GYMHWN+ne8d9I+odSYSc4FqyAAMk=) 4: B2YoZgrpQEDb8UGkfFFcmk1C8WU.roa (hash: lrmThkzbXwEgonP8nGIi95OkJtxQ+u0aZhl33JVnnGg=) 5: HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa (hash: jvJDycM8Kwx/kDrj1W5EYQK9WGSm7y5sJzrsu3gD7EA=) 6: KVWGAtNaDYuCLBDqyjhmNTSUsco.roa (hash: I+mYgzLuOkLdrV2nmEsQLkeZAGwvKj2fiTFinUQhLus=) 7: O4wX-zREvFToFPAF8_QrfeHlFV8.roa (hash: AuJD+oGrEuzjm5RNbgKhP3+ewZtfDa45xvNHgyGDnu8=) 8: Q5KjtFuA4b13GYFReAXac6ikxMM.roa (hash: C9lFOLqvB3UVVYIvZafTYRaPsoOOXhpw7/LoWS9f3HY=) 9: SigdKS7JtTEVYXgED4DdixD6OgM.roa (hash: NfamlOUNbIv4AqwK/fv2VF3gtE7JmiXqUNd8ZVZzSIc=) 10: T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa (hash: ZWBCyQYdJoW8TuwkXaB5bNFnPnWKEyVuntW9B90XJeU=) 11: VtpjoWz0RdFNmkffYS2weF5bVAs.roa (hash: HVKb03zFb2eoY7pvE7f8ruqUNxZJTuKgQsAR9YLQhCs=) 12: ZJ56n3Y17TFJk-Tqc_ycphu8qgc.roa (hash: J+O1IkyhA+FTfPaWOGsyaFo/vFHRN64aMyNig4w0a6g=) 13: ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa (hash: m/dMgskCu/LRhEwHUxPFbSCbCpuefF8R5De3vG7ME3g=) 14: _1Ck2zOMmaEKy6jWTA2To4WXHOc.roa (hash: PosaMGaTcyPhx+0qx4rcwdvlDm/JVQKWlg+9OoGTG24=) 15: _XNB-uxfsS8Bg-aoGqYMaoc-YB4.roa (hash: +2E5bdIK9sFDQ0WQhkQrjROrGKFuw2mz7mQOzFxJQT0=) 16: _g5wGZfyMy3-AkUPnKNuMg5TWV8.roa (hash: lBSsBrgpgGHjUcWq8qlYBX3qnVmb+Y5QAoDDvYZngGA=) 17: aj3l0yv9XLpdil7kCp_8ryv10IE.roa (hash: PrL6FnkTyQ9oBvc6R+GpyIsFkpSpBE166q8B3+Lb9OA=) 18: c_cnoepM2LH--kK93huc5LFtAGM.roa (hash: yf0pYWUbz2m2vPji81gl+P3qnDg6ATcYw6U5kY+PL4w=) 19: eVgfq36VRdQ-XOngEBCyoqvAPkI.roa (hash: +CVzb6eA5CbaFxZDloliVM6kDTn+ZGIaxtZcOdNZ3+w=) 20: hRBOq97yc0j5iPcr4gfDn3KJQyY.roa (hash: Xy2a29JOYTMfN3fVGwk03l3mrjFbTa3ns9VGhqHF9bU=) 21: n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa (hash: htARq6EX3Sp+hmNjOwGerogqy143+hwQcapChVQW1G8=) 22: oIIbuj2FHcGESIdrcnZdquUCmAw.roa (hash: IYUyIGj5ktu8xidYz/ZKK6vrmLnBBGD3Tn1bdnoOMEY=) 23: qa4AJBW86Czjko9NBPVz9ex8J2A.roa (hash: SNkj/qaNSHoPn945qKVgvTpVHs/z2BHkGTHMKbZzEpM=) 24: uaMX8OCYbSxBlbpnUENrRiTwaY0.roa (hash: AZg0zm8r8ZxZT3h6KfhtY2c5WsXYcVXS9ecTWb+mM/M=) 25: vBIP5l9f7rLOmxHW6g1Sox18wCU.roa (hash: RfnJ5Sz3BFVwYnK6CAz5XEIDTL6Yuu7HFULOecFrd74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:e6:47:86:67:11:f4:c9:70:89:25:6c:4b:f1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: May 12 22:01:49 2026 GMT Not After : May 13 22:01:49 2026 GMT Subject: CN=c46071b9ac0f7bba4d9dde3a430807ca35f42328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:67:ff:05:bf:63:4d:a6:fa:90:16:57:bf: e9:ad:8b:da:22:9f:8e:92:e4:53:11:50:1e:3e:d6: 4f:6f:9d:f2:e8:11:e0:b7:a6:fc:63:d9:5a:8b:70: 32:bd:ab:04:46:2a:9a:7c:fd:f9:d2:45:39:b7:2e: 11:f1:eb:32:5e:86:92:a0:1a:3a:ed:5b:64:21:8d: 61:93:5f:be:35:07:ed:40:37:dc:48:31:5a:26:d8: bb:7b:da:7f:f7:ac:17:94:f8:04:93:8f:06:56:e2: eb:b6:70:4d:94:8d:ee:43:5d:42:19:3f:65:48:67: 01:58:36:61:2e:57:7e:27:7a:d2:22:de:11:e4:bc: 28:55:38:56:17:0a:3b:ea:89:e5:6f:c3:fd:5a:fe: 82:53:e9:09:fc:12:53:f3:d9:00:8e:b8:a5:62:7d: 26:e2:51:ac:c3:ff:78:12:c4:35:53:10:0b:71:a2: 5b:9f:b5:69:19:b6:1b:cd:09:86:ef:aa:f2:c0:92: a9:2d:15:99:52:92:70:b5:4d:bf:aa:1d:fd:24:f8: bd:a8:00:96:bd:f5:d9:ac:17:64:f2:f8:f3:4a:c1: b7:44:d5:f2:9c:7b:f7:a8:a5:e0:0b:89:f2:8e:69: 09:35:9b:72:d3:22:65:30:9d:af:0a:67:40:8e:4e: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:60:71:B9:AC:0F:7B:BA:4D:9D:DE:3A:43:08:07:CA:35:F4:23:28 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b5:d9:98:cd:9f:2b:66:ca:32:c3:6e:56:f4:47:a9:7a:fc: 82:0f:51:3b:7e:40:60:74:da:be:04:07:6b:6a:a2:ed:de:15: aa:03:dd:5e:ff:c9:f3:ce:85:15:f1:52:a1:e7:eb:f3:08:b7: 71:2f:46:34:e0:86:85:ca:2a:af:11:33:84:d4:58:6a:6e:01: ac:d6:5c:05:aa:a6:86:fa:02:6a:8c:13:ed:07:ff:fe:b2:38: ed:62:e7:a3:72:8d:75:74:d7:a3:65:3f:f6:19:83:35:53:25: 26:22:26:3e:50:d2:9a:5c:7d:5b:75:c0:01:ee:b8:7e:31:93: 51:12:7c:f6:66:9e:6f:d2:11:08:91:57:0f:63:14:19:f4:f4: ad:85:ac:26:f5:c5:c3:e8:bf:3b:fe:7a:d8:98:d1:c8:9e:30: 28:9a:6d:59:a3:e2:51:e8:c4:ff:0a:42:03:63:5b:90:7d:6a: 5f:cd:22:8e:58:e5:5e:bd:0f:40:91:85:68:2d:b8:8a:48:4d: df:3d:ab:61:c1:a5:46:ad:0e:bd:6e:d9:80:27:41:b6:ee:70: 85:84:f6:61:c4:c1:9b:9e:73:9b:f5:24:0b:32:15:bd:05:3f: dd:3e:43:64:47:76:d3:33:38:b3:c2:4e:d0:50:e3:71:a1:d1: b7:90:6b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNeZHhmcR9MlwiSVsS/EBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwNTEyMjIwMTQ5WhcNMjYwNTEzMjIwMTQ5WjAzMTEwLwYDVQQD EyhjNDYwNzFiOWFjMGY3YmJhNGQ5ZGRlM2E0MzA4MDdjYTM1ZjQyMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunRn/wW/Y02m+pAWV7/prYvaIp+O kuRTEVAePtZPb53y6BHgt6b8Y9lai3AyvasERiqafP350kU5ty4R8esyXoaSoBo6 7VtkIY1hk1++NQftQDfcSDFaJti7e9p/96wXlPgEk48GVuLrtnBNlI3uQ11CGT9l SGcBWDZhLld+J3rSIt4R5LwoVThWFwo76onlb8P9Wv6CU+kJ/BJT89kAjrilYn0m 4lGsw/94EsQ1UxALcaJbn7VpGbYbzQmG76rywJKpLRWZUpJwtU2/qh39JPi9qACW vfXZrBdk8vjzSsG3RNXynHv3qKXgC4nyjmkJNZty0yJlMJ2vCmdAjk6jwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRgcbmsD3u6TZ3eOkMIB8o19CMoMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrXZmM2f K2bKMsNuVvRHqXr8gg9RO35AYHTavgQHa2qi7d4VqgPdXv/J886FFfFSoefr8wi3 cS9GNOCGhcoqrxEzhNRYam4BrNZcBaqmhvoCaowT7Qf//rI47WLno3KNdXTXo2U/ 9hmDNVMlJiImPlDSmlx9W3XAAe64fjGTURJ89maeb9IRCJFXD2MUGfT0rYWsJvXF w+i/O/562JjRyJ4wKJptWaPiUejE/wpCA2NbkH1qX80ijljlXr0PQJGFaC24ikhN 3z2rYcGlRq0OvW7ZgCdBtu5whYT2YcTBm55zm/UkCzIVvQU/3T5DZEd20zM4s8JO 0FDjcaHRt5Br2w== -----END CERTIFICATE-----Generated at Wed May 13 05:08:25 2026 by rpki-client