$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: YfeXk9Jr2iFL5Tleq8W7dtX6ozC4++bfpro0/GPlcRI= Subject key identifier: 52:AB:86:25:1B:1A:A8:2A:74:70:7B:78:51:46:D1:07:D3:AF:1C:1E Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019E1CB48D0B57640DB24E4526474AC10082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1914 Signing time: Tue 12 May 2026 15:00:54 +0000 Manifest this update: Tue 12 May 2026 15:00:54 +0000 Manifest next update: Wed 13 May 2026 15:00:54 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: AYG6hvkrW+RBXsR9FrTCTpnBi2w0/UjJ4nJbOtH7qFI=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:8d:0b:57:64:0d:b2:4e:45:26:47:4a:c1:00:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: May 12 15:00:54 2026 GMT Not After : May 13 15:00:54 2026 GMT Subject: CN=52ab86251b1aa82a74707b785146d107d3af1c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:41:09:c6:77:9f:99:d9:a6:3d:27:57:29:56: 08:6b:14:3e:61:17:0d:4d:93:de:8e:f5:d4:74:f2: c1:ab:94:f5:14:bd:4b:c0:ca:55:7a:73:7e:c4:b5: dc:1d:ff:44:1c:68:5f:67:98:66:1e:4c:c2:60:62: 2a:53:df:b0:af:3a:89:fa:50:ac:71:ac:53:1b:06: 14:29:28:56:0a:3a:13:36:39:56:d4:1d:70:65:f2: 94:f3:08:36:e7:3f:e0:26:17:31:2b:44:8c:53:ef: d2:9d:b8:42:c0:20:9c:f3:e2:71:58:2c:18:40:2c: 4f:7c:17:38:d7:6a:93:14:92:33:01:a2:ad:5d:a8: 0f:af:56:42:db:8f:a3:bb:a8:de:95:6d:f8:21:7d: b4:a6:4d:5b:ba:25:42:b1:3a:7a:ca:e5:d0:9b:5c: ea:f2:c1:30:a9:71:d7:68:16:a4:f9:a5:63:8a:5c: ce:84:bc:d6:d6:9e:0b:4a:08:93:d2:7a:a3:8b:0d: 70:ab:d9:fa:da:a1:13:1f:4d:dd:68:55:51:9a:39: b7:d7:5b:39:d3:1d:cc:55:88:1a:75:35:ab:6c:8a: 03:35:2d:5d:0e:64:66:be:36:9e:6c:d1:90:e0:c5: ec:e2:b2:c6:bf:59:aa:da:57:f6:28:68:3e:15:02: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:86:25:1B:1A:A8:2A:74:70:7B:78:51:46:D1:07:D3:AF:1C:1E X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c4:40:53:2a:6b:c1:2d:f6:8e:1d:68:e6:0b:0c:8c:7e:70: f9:de:e2:0c:00:ba:a7:6b:18:1b:0a:33:a1:18:34:c7:bc:a0: f9:e1:c9:2b:e9:4d:34:c2:e1:4a:64:34:ff:fb:06:f0:68:b0: 22:c3:94:59:7d:9e:cc:03:27:58:2e:2e:cf:a9:1a:82:14:3b: ba:9e:c7:71:06:fc:c2:90:8f:02:6c:55:15:7f:74:1b:2d:32: 22:59:9f:59:a9:7e:dd:85:4a:4c:42:62:39:4f:a4:ce:cf:63: 64:57:01:99:ce:88:f7:38:b0:5a:75:0f:f7:76:9a:9c:da:cd: d0:fd:fd:3c:33:08:66:6f:8c:5a:05:07:5d:94:c3:8f:32:a1: 14:1e:2a:73:7f:ea:ce:5a:9e:9a:3f:c7:a0:f5:96:e5:f9:cb: 23:82:66:66:d1:69:86:c9:d1:df:59:04:53:df:9e:e9:52:c0: b7:20:30:5f:b1:a4:0d:c6:43:02:e8:d0:fd:ce:75:16:74:35: 53:58:90:7f:95:a1:fa:cf:ae:1e:22:ba:2d:99:d4:c3:16:9d: 60:14:bb:ee:8c:c3:4f:fb:6d:48:51:64:11:71:6b:88:7e:ae: e4:4b:34:b3:21:3e:e1:bd:95:41:1e:ea:8f:fe:1b:7d:d0:26: be:7b:4e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctI0LV2QNsk5FJkdKwQCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNTEyMTUwMDU0WhcNMjYwNTEzMTUwMDU0WjAzMTEwLwYDVQQD Eyg1MmFiODYyNTFiMWFhODJhNzQ3MDdiNzg1MTQ2ZDEwN2QzYWYxYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50EJxnefmdmmPSdXKVYIaxQ+YRcN TZPejvXUdPLBq5T1FL1LwMpVenN+xLXcHf9EHGhfZ5hmHkzCYGIqU9+wrzqJ+lCs caxTGwYUKShWCjoTNjlW1B1wZfKU8wg25z/gJhcxK0SMU+/SnbhCwCCc8+JxWCwY QCxPfBc412qTFJIzAaKtXagPr1ZC24+ju6jelW34IX20pk1buiVCsTp6yuXQm1zq 8sEwqXHXaBak+aVjilzOhLzW1p4LSgiT0nqjiw1wq9n62qETH03daFVRmjm311s5 0x3MVYgadTWrbIoDNS1dDmRmvjaebNGQ4MXs4rLGv1mq2lf2KGg+FQLebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKrhiUbGqgqdHB7eFFG0QfTrxweMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8RAUypr wS32jh1o5gsMjH5w+d7iDAC6p2sYGwozoRg0x7yg+eHJK+lNNMLhSmQ0//sG8Giw IsOUWX2ezAMnWC4uz6kaghQ7up7HcQb8wpCPAmxVFX90Gy0yIlmfWal+3YVKTEJi OU+kzs9jZFcBmc6I9ziwWnUP93aanNrN0P39PDMIZm+MWgUHXZTDjzKhFB4qc3/q zlqemj/HoPWW5fnLI4JmZtFphsnR31kEU9+e6VLAtyAwX7GkDcZDAujQ/c51FnQ1 U1iQf5Wh+s+uHiK6LZnUwxadYBS77ozDT/ttSFFkEXFriH6u5Es0syE+4b2VQR7q j/4bfdAmvntOsA== -----END CERTIFICATE-----Generated at Wed May 13 01:26:30 2026 by rpki-client