$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: LqpA50VLAKH2G4STc4qRGeitFIZMT77o8c7C5HqorJE= Subject key identifier: AD:37:AA:C7:30:F7:6C:4B:9D:6A:DA:FD:11:CA:CB:12:3C:48:68:A4 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019E1CEB62340BC67FC4832D386E847A5D76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 16AF Signing time: Tue 12 May 2026 16:00:48 +0000 Manifest this update: Tue 12 May 2026 16:00:48 +0000 Manifest next update: Wed 13 May 2026 16:00:48 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: MxThfJ6j7SSM+tDgOqYTflSWMzWR1kzIOYN6uBrBPD0=) 16: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 17: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 18: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 19: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 20: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 21: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:62:34:0b:c6:7f:c4:83:2d:38:6e:84:7a:5d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: May 12 16:00:48 2026 GMT Not After : May 13 16:00:48 2026 GMT Subject: CN=ad37aac730f76c4b9d6adafd11cacb123c4868a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:0a:a8:15:04:f9:a5:be:13:1f:48:88:4e: 09:11:0b:b7:8e:71:ed:91:11:41:34:15:f7:26:b9: 51:f7:ec:20:0b:f8:a2:42:2f:e2:63:18:5e:07:0e: fa:bf:3f:a4:5d:10:a5:ba:3f:49:6b:a5:f4:38:08: d0:17:cb:68:ef:d6:2a:2a:fe:ac:5c:6a:d8:e6:92: 34:1f:d7:82:82:c5:3f:96:8b:9d:f9:29:2e:da:ff: de:2b:e4:70:12:e8:e0:df:0a:31:05:a7:9d:9b:a5: f9:47:fb:c2:6e:99:4d:c6:68:ee:ed:e0:5f:ad:b8: cd:f9:e1:a0:2e:21:de:e0:8f:2b:81:88:67:ad:c3: 76:dd:c4:0b:ef:23:49:8d:6e:72:80:66:28:00:b4: 6e:5d:0c:30:64:5a:34:89:64:e0:87:7a:77:1b:52: ea:ce:1e:d7:e0:37:37:e8:4c:ed:c9:e7:a4:bc:e3: 12:24:56:3b:72:ab:61:b7:95:ce:49:e8:0f:30:e4: 9c:e6:29:7d:4f:ed:52:fc:46:10:10:10:df:09:37: d9:08:85:ad:99:35:57:70:73:aa:be:f9:e4:ab:0a: c6:24:5d:35:e9:47:80:6a:80:4b:3d:f9:f6:10:90: 4c:57:4c:b4:8e:0c:1c:2d:97:96:48:a9:d6:7b:e0: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:AA:C7:30:F7:6C:4B:9D:6A:DA:FD:11:CA:CB:12:3C:48:68:A4 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:23:0d:9a:29:2e:0a:1d:c0:b4:b0:3b:3e:e8:4b:13:14:80: 84:4c:21:69:aa:f2:5d:57:26:03:a8:9a:24:fd:5b:77:ad:60: dd:9a:a9:3f:33:77:d0:08:69:f3:c5:8c:68:f3:d8:c2:67:0b: 02:de:b6:9d:c3:f3:6a:6e:97:ae:61:d2:34:b1:2f:5b:fd:f8: 2d:88:6e:a9:3f:7b:8c:a7:3f:7e:8b:f9:5c:36:2c:55:18:c7: 63:7e:29:43:3c:9f:a3:55:fe:6a:c3:19:69:7c:a9:67:0a:03: f7:94:7d:dc:2d:90:ee:d0:cb:09:67:3e:ff:3e:af:6e:0b:6b: 37:f8:16:03:7e:6c:5c:35:92:81:e4:36:c3:a3:21:16:89:f1: d8:56:12:47:1e:77:91:60:11:41:26:c8:85:1c:d2:28:2c:31: 35:07:7c:c4:50:a0:39:9f:2d:e4:f4:9b:8b:4f:df:60:b0:4c: 6f:2b:e0:49:30:5d:ad:3d:8a:2f:0d:e2:99:8a:2c:fc:e1:0c: 9b:1b:4d:01:36:94:9a:07:e9:19:53:d9:bf:56:9d:ad:77:c1: af:39:d6:a0:47:bf:af:53:ce:72:15:b6:0c:47:af:d1:e1:0b: 5c:67:fa:c3:5f:4e:78:72:be:d3:9c:21:93:ad:5f:5e:c3:4b: 30:df:53:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c62I0C8Z/xIMtOG6Eel12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNTEyMTYwMDQ4WhcNMjYwNTEzMTYwMDQ4WjAzMTEwLwYDVQQD EyhhZDM3YWFjNzMwZjc2YzRiOWQ2YWRhZmQxMWNhY2IxMjNjNDg2OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+wKqBUE+aW+Ex9IiE4JEQu3jnHt kRFBNBX3JrlR9+wgC/iiQi/iYxheBw76vz+kXRCluj9Ja6X0OAjQF8to79YqKv6s XGrY5pI0H9eCgsU/loud+Sku2v/eK+RwEujg3woxBaedm6X5R/vCbplNxmju7eBf rbjN+eGgLiHe4I8rgYhnrcN23cQL7yNJjW5ygGYoALRuXQwwZFo0iWTgh3p3G1Lq zh7X4Dc36EztyeekvOMSJFY7cqtht5XOSegPMOSc5il9T+1S/EYQEBDfCTfZCIWt mTVXcHOqvvnkqwrGJF016UeAaoBLPfn2EJBMV0y0jgwcLZeWSKnWe+BElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK03qscw92xLnWra/RHKyxI8SGikMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyMNmiku Ch3AtLA7PuhLExSAhEwhaaryXVcmA6iaJP1bd61g3ZqpPzN30Ahp88WMaPPYwmcL At62ncPzam6XrmHSNLEvW/34LYhuqT97jKc/fov5XDYsVRjHY34pQzyfo1X+asMZ aXypZwoD95R93C2Q7tDLCWc+/z6vbgtrN/gWA35sXDWSgeQ2w6MhFonx2FYSRx53 kWARQSbIhRzSKCwxNQd8xFCgOZ8t5PSbi0/fYLBMbyvgSTBdrT2KLw3imYos/OEM mxtNATaUmgfpGVPZv1adrXfBrznWoEe/r1POchW2DEev0eELXGf6w19OeHK+05wh k61fXsNLMN9TbQ== -----END CERTIFICATE-----Generated at Wed May 13 01:39:25 2026 by rpki-client