$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: p1dC6juIy2HukNHMry/fe/lZKzc2ctq9etSmSgVxhZ8= Subject key identifier: 7C:7F:54:F1:E5:5A:5C:DE:01:A1:4E:D2:75:3B:37:66:8D:D9:4D:F6 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019E1DC77ACFC98152D9BBAE977AA8C384D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1929 Signing time: Tue 12 May 2026 20:01:12 +0000 Manifest this update: Tue 12 May 2026 20:01:12 +0000 Manifest next update: Wed 13 May 2026 20:01:12 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: Lbd7OlSYZZwy_6X1BIMG6Koz7d4.roa (hash: tiYUvDBlf1LQU9lfVQg2G8kbpiC1hXVYCRazqiEsZus=) 3: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=) 4: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: QR3SFn/7LcRpvoWS6kqEvszJY3zweRwj3GqrZEbmm8Q=) 5: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 6: UKBFNmW-avu0y-ZELfNkwrzKuSM.roa (hash: SdZuGRpwFqsC6fwO8VFNthsAajlBrQzgt1h1a3a0ulc=) 7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 8: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:7a:cf:c9:81:52:d9:bb:ae:97:7a:a8:c3:84:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: May 12 20:01:12 2026 GMT Not After : May 13 20:01:12 2026 GMT Subject: CN=7c7f54f1e55a5cde01a14ed2753b37668dd94df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:f5:98:e7:4a:a8:1c:50:30:06:81:30:f6: a7:09:82:50:fb:1b:92:33:34:c2:06:a3:91:75:70: 41:67:46:e8:46:fc:aa:c2:cd:db:fd:61:9e:a9:b4: 79:13:e2:30:2a:d8:08:9d:57:6b:b9:04:30:d3:14: 07:7d:8a:10:b7:f4:eb:27:42:80:e5:9b:13:ac:a1: 37:3f:fe:33:2e:d4:69:d9:20:36:a9:52:1d:34:70: e0:eb:cf:46:c5:0f:74:5a:8b:9e:2a:5d:e7:ab:f2: 07:a9:3d:03:5c:6c:7a:ff:f3:f0:52:35:15:31:b5: 5f:d8:1a:36:69:05:01:10:ac:ea:3b:d2:74:7f:75: 98:92:ae:f3:6b:c4:17:2b:bd:9f:e2:bb:bb:30:d6: b4:80:23:ab:9e:29:c5:c5:07:ec:ea:4b:46:0f:cc: d0:17:c3:d2:ed:d4:9d:12:d8:bb:1f:40:dd:17:a1: d2:c7:4e:9e:3f:2c:12:8e:3f:0e:45:82:c8:6a:e3: d7:76:a4:c8:a4:dc:9f:f4:8a:69:4b:74:aa:6a:76: 67:7e:f2:5c:94:7f:16:1d:d7:99:a0:8b:b8:f4:23: 49:3a:29:f9:c5:82:19:ae:5f:00:49:f8:42:49:27: bd:18:6f:6c:e7:13:7d:73:fe:89:50:b3:05:ef:58: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:54:F1:E5:5A:5C:DE:01:A1:4E:D2:75:3B:37:66:8D:D9:4D:F6 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e6:6d:34:55:26:e2:75:eb:81:53:1e:06:fd:70:c9:ce:c5: 6f:27:42:86:9a:af:5e:16:a0:09:b6:a2:ed:83:33:d9:19:3e: 7d:bb:a4:53:e4:b3:78:e4:c3:70:6c:29:47:9a:a4:26:a9:85: ff:88:3b:42:92:ed:6d:d3:b2:20:3a:05:e4:60:39:85:fb:29: c2:70:3b:e5:cb:36:1a:c7:ba:58:53:85:36:5d:93:7f:cb:28: 6e:d4:47:76:13:ca:2d:90:00:ad:16:19:bf:c5:de:db:7e:ae: 4c:88:fc:87:69:7a:70:4f:19:a6:b4:08:44:26:6e:e6:1a:87: a9:ac:82:5e:c4:fc:8b:88:b1:43:e6:7d:b5:c7:99:67:8c:12: fe:25:cd:5c:45:5a:54:4f:d4:08:8a:8e:ff:47:b9:84:6d:3e: 9e:0f:d2:fa:24:8b:d9:50:17:f3:c4:6f:3e:d7:9c:fa:67:b7: fa:67:a6:4e:fd:80:fe:ee:80:7b:02:c5:be:39:f9:e7:f9:b9: 09:46:88:38:70:fb:44:19:93:88:c3:59:3d:d7:6b:5d:79:17: ab:b9:a5:ab:63:de:fe:b8:e0:57:78:1b:0d:7e:19:27:18:96: 88:ae:fa:f0:ea:ad:fa:d1:13:57:0a:fc:d8:50:38:45:3d:77: d8:68:d4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx3rPyYFS2buul3qow4TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwNTEyMjAwMTEyWhcNMjYwNTEzMjAwMTEyWjAzMTEwLwYDVQQD Eyg3YzdmNTRmMWU1NWE1Y2RlMDFhMTRlZDI3NTNiMzc2NjhkZDk0ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx/1mOdKqBxQMAaBMPanCYJQ+xuS MzTCBqORdXBBZ0boRvyqws3b/WGeqbR5E+IwKtgInVdruQQw0xQHfYoQt/TrJ0KA 5ZsTrKE3P/4zLtRp2SA2qVIdNHDg689GxQ90WoueKl3nq/IHqT0DXGx6//PwUjUV MbVf2Bo2aQUBEKzqO9J0f3WYkq7za8QXK72f4ru7MNa0gCOrninFxQfs6ktGD8zQ F8PS7dSdEti7H0DdF6HSx06ePywSjj8ORYLIauPXdqTIpNyf9IppS3SqanZnfvJc lH8WHdeZoIu49CNJOin5xYIZrl8ASfhCSSe9GG9s5xN9c/6JULMF71im8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx/VPHlWlzeAaFO0nU7N2aN2U32MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOZtNFUm 4nXrgVMeBv1wyc7FbydChpqvXhagCbai7YMz2Rk+fbukU+SzeOTDcGwpR5qkJqmF /4g7QpLtbdOyIDoF5GA5hfspwnA75cs2Gse6WFOFNl2Tf8sobtRHdhPKLZAArRYZ v8Xe236uTIj8h2l6cE8ZprQIRCZu5hqHqayCXsT8i4ixQ+Z9tceZZ4wS/iXNXEVa VE/UCIqO/0e5hG0+ng/S+iSL2VAX88RvPtec+me3+memTv2A/u6AewLFvjn55/m5 CUaIOHD7RBmTiMNZPddrXXkXq7mlq2Pe/rjgV3gbDX4ZJxiWiK768Oqt+tETVwr8 2FA4RT132GjU+A== -----END CERTIFICATE-----Generated at Wed May 13 04:55:31 2026 by rpki-client