$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: XSTw+ruKAaEtXG/PYJYi2bdQtPUGFtoZts8v/a6zzB4= Subject key identifier: BE:F8:1C:36:1F:70:75:3B:CF:1E:42:A5:8C:2D:08:6C:F3:98:12:41 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019E1DC799A980B427A598C7F9B01837F7BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0D5F Signing time: Tue 12 May 2026 20:01:20 +0000 Manifest this update: Tue 12 May 2026 20:01:20 +0000 Manifest next update: Wed 13 May 2026 20:01:20 +0000 Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=) 2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=) 3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=) 4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=) 5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=) 6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=) 7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=) 8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=) 9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: rO6NJ//erVUQviBJy9q/gS4cSrXsbbpe6N0PYgpR2rs=) 10: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=) 11: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=) 12: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=) 13: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=) 14: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=) 15: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=) 16: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=) 17: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:99:a9:80:b4:27:a5:98:c7:f9:b0:18:37:f7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: May 12 20:01:20 2026 GMT Not After : May 13 20:01:20 2026 GMT Subject: CN=bef81c361f70753bcf1e42a58c2d086cf3981241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:ed:eb:e3:a9:a5:4d:f9:2d:68:fb:3a:3d: 4a:c5:26:7d:c0:0b:59:4a:08:70:3c:7c:96:3b:5c: 77:3e:ef:03:53:e5:a5:d3:8e:3f:5f:60:0e:82:90: 3c:25:70:29:67:7b:e6:74:11:6a:dc:63:f1:b0:73: 13:db:df:cb:9f:c2:f9:41:5f:41:c9:fc:6b:81:44: b3:27:5d:a1:59:8c:35:2e:4f:a8:b7:51:13:3c:1e: c6:8b:fb:27:a4:79:33:9b:dc:a1:9a:d0:9e:b7:d3: 99:fe:ef:84:ee:b3:9a:42:c8:68:37:79:b5:8b:98: fe:3f:c2:05:bd:1c:3a:35:5d:64:89:08:1b:f3:7b: 42:5b:86:4e:c4:12:53:dc:b8:00:77:04:bc:c3:58: 81:3b:eb:33:8f:68:50:bd:d9:9d:26:d1:ac:8f:be: d0:18:4b:0b:b3:39:84:1d:6b:9e:f1:54:3a:4e:c0: f3:69:5c:33:46:59:c6:f6:6a:96:34:42:08:cf:6f: 2f:2b:c2:1b:17:94:bb:a8:57:01:3f:7b:cb:17:2c: 58:60:b9:48:b3:71:b3:43:1e:33:e5:5d:4b:bf:79: ec:fa:05:19:97:dc:3d:80:21:27:44:4b:e4:74:2b: 0a:9f:12:28:b4:f1:ed:50:b1:d8:3b:9d:27:50:94: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F8:1C:36:1F:70:75:3B:CF:1E:42:A5:8C:2D:08:6C:F3:98:12:41 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:10:59:64:ef:c9:2b:32:d8:04:d4:39:61:e7:26:2b:f4:64: db:0a:b0:a7:08:55:a1:83:8e:45:43:11:ec:63:10:09:98:b0: 46:8d:71:bb:46:bc:24:1a:1a:cd:7a:fd:f8:b3:a9:37:26:70: 0d:8a:75:df:fc:37:8a:aa:3e:d7:ce:cd:5a:15:74:bf:ae:41: 67:fd:00:1b:58:16:08:6a:ae:37:86:e6:f9:7f:ca:0d:7a:4b: 8a:e4:4f:34:c0:63:ca:f8:a7:a4:18:b2:6e:f2:0d:53:df:cc: 7d:4f:7e:de:d8:ce:e2:2d:49:aa:0e:4e:23:25:b3:f4:dd:88: a6:9d:19:33:1b:ac:82:33:45:d1:8b:21:ad:5f:21:e1:9f:cb: 0c:d5:41:c9:11:89:2b:31:fa:35:c8:ce:87:16:31:ca:9d:d6: 93:ce:01:6f:70:0a:8d:22:91:9b:96:d3:9b:fa:ce:11:4a:5c: 2e:f2:25:4b:f7:e1:8b:62:f7:cc:c6:59:2b:b5:92:1e:80:fc: b7:e7:db:27:10:bc:d2:1a:43:29:99:9f:ae:d7:f1:c4:71:f2: 5d:50:a2:48:a2:f3:f5:44:63:37:ec:0b:80:ca:67:c8:5e:e9: bb:e7:aa:78:ef:64:37:54:d1:0a:52:2e:ba:65:61:63:81:d6: 97:4c:8c:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx5mpgLQnpZjH+bAYN/e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwNTEyMjAwMTIwWhcNMjYwNTEzMjAwMTIwWjAzMTEwLwYDVQQD EyhiZWY4MWMzNjFmNzA3NTNiY2YxZTQyYTU4YzJkMDg2Y2YzOTgxMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj7t6+OppU35LWj7Oj1KxSZ9wAtZ SghwPHyWO1x3Pu8DU+Wl044/X2AOgpA8JXApZ3vmdBFq3GPxsHMT29/Ln8L5QV9B yfxrgUSzJ12hWYw1Lk+ot1ETPB7Gi/snpHkzm9yhmtCet9OZ/u+E7rOaQshoN3m1 i5j+P8IFvRw6NV1kiQgb83tCW4ZOxBJT3LgAdwS8w1iBO+szj2hQvdmdJtGsj77Q GEsLszmEHWue8VQ6TsDzaVwzRlnG9mqWNEIIz28vK8IbF5S7qFcBP3vLFyxYYLlI s3GzQx4z5V1Lv3ns+gUZl9w9gCEnREvkdCsKnxIotPHtULHYO50nUJQdawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL74HDYfcHU7zx5CpYwtCGzzmBJBMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxBZZO/J KzLYBNQ5YecmK/Rk2wqwpwhVoYOORUMR7GMQCZiwRo1xu0a8JBoazXr9+LOpNyZw DYp13/w3iqo+187NWhV0v65BZ/0AG1gWCGquN4bm+X/KDXpLiuRPNMBjyvinpBiy bvINU9/MfU9+3tjO4i1Jqg5OIyWz9N2Ipp0ZMxusgjNF0YshrV8h4Z/LDNVByRGJ KzH6NcjOhxYxyp3Wk84Bb3AKjSKRm5bTm/rOEUpcLvIlS/fhi2L3zMZZK7WSHoD8 t+fbJxC80hpDKZmfrtfxxHHyXVCiSKLz9URjN+wLgMpnyF7pu+eqeO9kN1TRClIu umVhY4HWl0yM+Q== -----END CERTIFICATE-----Generated at Wed May 13 07:28:22 2026 by rpki-client