$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: FeLQt93n4VZEwu9vOvJ87tEVd4Z99bqs+mK1efRx/p4= Subject key identifier: 7F:BF:F5:EF:D8:48:C9:63:38:F6:5C:29:63:22:BA:F8:06:C0:7E:D5 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019E1E6C7132A08C30272BE3C689BFC8D10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 0495 Signing time: Tue 12 May 2026 23:01:23 +0000 Manifest this update: Tue 12 May 2026 23:01:23 +0000 Manifest next update: Wed 13 May 2026 23:01:23 +0000 Files and hashes: 1: 0Oic1IcERTEb5DlaPzbn0th6N50.roa (hash: bDlBbgczPM559YYoDu7tlNakooG/ffcXd8tnjCuBkcE=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3p_wd6vJjZUyWJtHMCK8ESOv_AE.roa (hash: PxepYwEvTDnK7OgAV3Azq1CJ9rgZFmA7S3U2X7fVhUI=) 4: 4IdsjnThncy8CG7B4TEdC8OXYTg.roa (hash: qFz8bZzW9j+BuaK9Mq/+zPbN9lxrJMGuuYqn1jNVi7U=) 5: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=) 6: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 7: ITp4Lu_JhDqXqNns4N0BFezyH2s.roa (hash: u+ylQQKU2zMSBYliF/K/naeeubiOd3Oqig4YiCJdHxg=) 8: JmZyr_HiGWhXrQT4G35RdzY5FBo.roa (hash: 7gA8L5P9/nr9jLYxlFbsO9wNhD1sAVMuCpL277mztEA=) 9: PoQtev16fJQLT3dnRAKVV5qiNec.roa (hash: 9CBcAgTyt/fW+093wUg2FiWuZ3yNFJB3tFLfYn9rVOA=) 10: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 11: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=) 12: UiRIOFkRgvabFdVCAz-FrcovEjw.roa (hash: +1uBi+0I8q7iwlz/Y/VRhlkVw4+oWOkdSjW4jigeH+o=) 13: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 14: YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa (hash: zD4f/kaHp2DURR07uKQMW1jZdmkie967aQyuFRXFV34=) 15: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 16: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 17: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=) 18: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 19: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=) 20: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=) 21: pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa (hash: DDiufBot2z3oX+2RZxG2JEHDnkreGqKnf5XhZxIEUqQ=) 22: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 23: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=) 24: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (hash: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=) 25: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=) 26: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: j92ADZg+bWSlPFEMykFSC+yEQngnRLQiOyGCr6z7dRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:71:32:a0:8c:30:27:2b:e3:c6:89:bf:c8:d1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: May 12 23:01:23 2026 GMT Not After : May 13 23:01:23 2026 GMT Subject: CN=7fbff5efd848c96338f65c296322baf806c07ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:bc:fc:af:67:de:75:d1:b6:48:d3:e3:b3: 65:71:55:15:fd:8c:6b:e5:97:86:f3:64:c9:f3:f1: 14:4c:ce:51:7d:c9:92:63:10:39:4c:37:68:65:0b: 0a:4b:e8:7d:bb:a7:de:a2:49:62:f5:5d:19:d4:e6: dd:fe:64:83:ba:3b:b3:c1:77:3f:e7:51:16:8a:03: c1:02:41:37:cd:57:27:5d:b1:b3:05:0e:73:b8:46: 46:35:ae:33:4e:3b:28:85:45:d8:18:f1:a3:8e:8c: 2a:e0:bd:b0:4c:64:4b:4f:dd:b5:49:f3:99:98:0f: a1:f1:4e:65:ce:b0:7f:86:45:d1:e3:79:72:a3:17: 52:3e:9f:7f:1e:46:62:a3:43:1a:f3:d1:14:ac:36: 00:45:e1:7d:95:3f:6a:74:40:4b:5d:4f:e7:b5:e9: 2e:9b:d8:3d:1c:be:3a:87:df:77:7a:3e:fe:ef:62: 04:52:d4:32:1e:50:c4:d6:68:63:4e:53:7c:50:3a: b9:60:2d:e0:46:7f:26:d9:5c:2d:b7:4a:b0:7f:9c: 74:4c:50:ea:78:2c:00:57:1e:e3:0d:ea:a5:44:a1: bd:04:18:d6:01:4a:c2:c4:6a:cc:e1:88:b4:eb:8e: 1b:66:ee:40:51:d7:72:9d:e8:19:4d:29:75:51:7d: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:F5:EF:D8:48:C9:63:38:F6:5C:29:63:22:BA:F8:06:C0:7E:D5 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:76:05:55:1b:5f:b5:39:fd:e8:43:6b:70:82:8a:fa:20:9e: e0:d7:29:ec:72:c2:d7:ae:bd:37:79:b1:b8:d4:ba:34:89:24: a4:1a:a9:05:5a:34:8e:ab:dd:b9:75:3b:2e:7b:e6:40:31:b1: 19:d9:c3:ad:fc:7e:a5:d8:c1:18:20:73:79:fc:85:e0:65:fc: 71:00:bf:29:04:f7:d5:6d:43:8d:41:a1:85:19:49:78:ee:c8: d9:fe:77:a0:5f:fc:00:ad:45:d2:3c:18:f7:46:ad:e5:23:0b: a1:56:27:b0:59:39:17:aa:26:4a:20:8a:4a:ad:fd:c8:93:ee: 63:a2:41:57:3e:d1:cd:ba:b7:d6:6a:c2:8c:e6:e8:4a:bf:be: f9:0b:73:54:5f:13:85:79:28:ad:3b:f8:89:c3:3d:a5:2d:31: 77:41:40:2c:59:8d:d0:81:3d:44:10:e5:50:2d:0b:55:f6:05: f8:af:85:a1:e6:15:86:31:7a:24:90:29:56:2b:81:60:f5:82: 04:f8:33:c9:aa:93:b9:c1:51:5d:80:ef:17:75:ff:65:6b:7d: 9b:eb:b6:6f:ee:52:b7:e0:9b:e6:ec:f8:8b:a7:76:f5:51:15: 5f:3b:7c:b9:8d:8a:89:54:dc:fd:38:9e:f7:76:ba:a8:e5:74: 26:86:33:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebHEyoIwwJyvjxom/yNENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwNTEyMjMwMTIzWhcNMjYwNTEzMjMwMTIzWjAzMTEwLwYDVQQD Eyg3ZmJmZjVlZmQ4NDhjOTYzMzhmNjVjMjk2MzIyYmFmODA2YzA3ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXe8/K9n3nXRtkjT47NlcVUV/Yxr 5ZeG82TJ8/EUTM5RfcmSYxA5TDdoZQsKS+h9u6feokli9V0Z1Obd/mSDujuzwXc/ 51EWigPBAkE3zVcnXbGzBQ5zuEZGNa4zTjsohUXYGPGjjowq4L2wTGRLT921SfOZ mA+h8U5lzrB/hkXR43lyoxdSPp9/HkZio0Ma89EUrDYAReF9lT9qdEBLXU/nteku m9g9HL46h993ej7+72IEUtQyHlDE1mhjTlN8UDq5YC3gRn8m2Vwtt0qwf5x0TFDq eCwAVx7jDeqlRKG9BBjWAUrCxGrM4Yi0644bZu5AUddynegZTSl1UX3+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+/9e/YSMljOPZcKWMiuvgGwH7VMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHYFVRtf tTn96ENrcIKK+iCe4Ncp7HLC1669N3mxuNS6NIkkpBqpBVo0jqvduXU7LnvmQDGx GdnDrfx+pdjBGCBzefyF4GX8cQC/KQT31W1DjUGhhRlJeO7I2f53oF/8AK1F0jwY 90at5SMLoVYnsFk5F6omSiCKSq39yJPuY6JBVz7Rzbq31mrCjOboSr+++QtzVF8T hXkorTv4icM9pS0xd0FALFmN0IE9RBDlUC0LVfYF+K+FoeYVhjF6JJApViuBYPWC BPgzyaqTucFRXYDvF3X/ZWt9m+u2b+5St+Cb5uz4i6d29VEVXzt8uY2KiVTc/Tie 93a6qOV0JoYz8Q== -----END CERTIFICATE-----Generated at Wed May 13 03:29:35 2026 by rpki-client