$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: aYi6mvgKC5D2RNmkxr6ITYxvCGArsCGmGVBU9Rj1avA= Subject key identifier: 14:1F:15:AC:5B:C9:2F:66:C3:E6:CA:A5:22:39:20:14:6E:31:09:FD Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019E1D22496DDDB93633A23456B3FADFD92B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1917 Signing time: Tue 12 May 2026 17:00:46 +0000 Manifest this update: Tue 12 May 2026 17:00:46 +0000 Manifest next update: Wed 13 May 2026 17:00:46 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: 0toj+3+LItBQ6VjXEgfFIwfy0cj/MuLhC7eamE1erCQ=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:49:6d:dd:b9:36:33:a2:34:56:b3:fa:df:d9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: May 12 17:00:46 2026 GMT Not After : May 13 17:00:46 2026 GMT Subject: CN=141f15ac5bc92f66c3e6caa5223920146e3109fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8a:7f:eb:7f:35:4f:d1:78:97:60:5e:07:9b: 67:55:bb:28:0d:d3:08:cd:f0:09:02:97:55:90:8f: 5e:03:fe:c3:b6:67:40:5d:c9:c5:89:4a:78:63:13: 45:69:23:4b:72:af:c7:81:d7:13:32:a1:49:31:01: 57:26:81:10:5a:f6:3b:4e:1f:2f:cb:ae:b1:93:16: bf:07:28:dd:93:a1:44:29:56:65:64:39:e4:bf:66: 1f:ac:c1:07:2d:1e:01:f6:d4:be:65:83:af:f5:30: 7e:35:d9:56:a3:1d:85:04:77:c8:ab:5e:ba:1b:da: 95:4d:64:c5:94:d1:ac:73:e4:65:89:e8:97:e5:90: 3c:d7:de:7c:29:0b:b6:b6:95:0f:0b:63:58:df:42: 3c:ae:f7:df:d0:9a:df:f1:01:7c:59:18:b7:e0:3c: 23:ec:88:40:69:b9:07:e2:20:63:58:bf:2d:69:c1: fa:93:88:72:b7:85:54:e6:8b:f6:67:25:1b:62:3a: 28:6f:dd:b1:92:c7:2f:09:38:16:3b:b6:c5:a1:eb: 18:3a:ac:38:50:b5:a9:b1:d6:f8:16:64:e2:7a:15: 13:9e:6f:a9:0e:f4:6b:e0:0f:ec:56:dc:70:8f:37: 03:64:84:20:34:e6:12:6f:10:30:d8:24:a7:73:5b: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1F:15:AC:5B:C9:2F:66:C3:E6:CA:A5:22:39:20:14:6E:31:09:FD X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:13:d3:ac:85:4a:e6:04:0e:04:03:c0:32:28:17:0f:1b:45: 3e:51:2d:32:d6:77:8c:ce:1f:22:71:fd:64:e9:92:76:46:c3: 73:58:58:f0:52:51:4a:e2:0a:b9:c6:d4:4e:0b:7b:ec:9b:90: 89:04:f7:b1:81:1b:ce:e2:6d:42:4b:23:78:0b:3e:10:24:f7: b2:90:9e:59:32:29:5e:72:67:0a:26:0b:0b:eb:3d:9a:42:81: fa:aa:1a:d0:0e:d2:b8:59:c9:86:6a:be:5c:91:dd:c8:b7:cc: 3b:b8:48:47:2e:d5:08:43:ee:ac:05:bc:8b:f0:bf:cf:ee:5c: b4:a5:4e:2a:20:82:c9:5b:1c:76:f7:73:ae:4b:1e:ff:c9:d9: 39:a0:6d:e6:e0:f3:c2:45:e3:ae:c0:c1:96:74:f9:53:2f:18: 0e:75:34:6f:62:c0:5d:84:ee:03:33:c6:7a:93:84:aa:83:55: 03:a1:8e:4c:02:30:ba:d9:ee:cd:06:74:49:77:7c:b9:ba:50: b6:0c:9c:14:65:03:f8:90:9e:97:d8:6c:00:0a:f2:3a:5d:8c: be:3a:95:22:e5:2e:4e:ba:aa:1f:8a:5b:f6:c4:f5:39:23:7e: 5d:4c:ee:3d:92:1e:98:a2:6b:c0:de:c8:82:da:2f:73:d9:59: 38:97:77:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIklt3bk2M6I0VrP639krMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNTEyMTcwMDQ2WhcNMjYwNTEzMTcwMDQ2WjAzMTEwLwYDVQQD EygxNDFmMTVhYzViYzkyZjY2YzNlNmNhYTUyMjM5MjAxNDZlMzEwOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ip/6381T9F4l2BeB5tnVbsoDdMI zfAJApdVkI9eA/7DtmdAXcnFiUp4YxNFaSNLcq/HgdcTMqFJMQFXJoEQWvY7Th8v y66xkxa/Byjdk6FEKVZlZDnkv2YfrMEHLR4B9tS+ZYOv9TB+NdlWox2FBHfIq166 G9qVTWTFlNGsc+RlieiX5ZA81958KQu2tpUPC2NY30I8rvff0Jrf8QF8WRi34Dwj 7IhAabkH4iBjWL8tacH6k4hyt4VU5ov2ZyUbYjoob92xkscvCTgWO7bFoesYOqw4 ULWpsdb4FmTiehUTnm+pDvRr4A/sVtxwjzcDZIQgNOYSbxAw2CSnc1v9QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQfFaxbyS9mw+bKpSI5IBRuMQn9MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxPTrIVK 5gQOBAPAMigXDxtFPlEtMtZ3jM4fInH9ZOmSdkbDc1hY8FJRSuIKucbUTgt77JuQ iQT3sYEbzuJtQksjeAs+ECT3spCeWTIpXnJnCiYLC+s9mkKB+qoa0A7SuFnJhmq+ XJHdyLfMO7hIRy7VCEPurAW8i/C/z+5ctKVOKiCCyVscdvdzrkse/8nZOaBt5uDz wkXjrsDBlnT5Uy8YDnU0b2LAXYTuAzPGepOEqoNVA6GOTAIwutnuzQZ0SXd8ubpQ tgycFGUD+JCel9hsAAryOl2MvjqVIuUuTrqqH4pb9sT1OSN+XUzuPZIemKJrwN7I gtovc9lZOJd3Fw== -----END CERTIFICATE-----Generated at Wed May 13 03:40:25 2026 by rpki-client