$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: EDJX04XkmbGIMRDARj1Vg7gvMUjhcbVOR0/xSlaSwbA= Subject key identifier: A5:96:D9:E9:66:87:FC:AC:95:B8:E5:89:78:2D:1D:5B:DF:28:CA:6C Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019E1D905443447F8B0BF51A24F7839579A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0F2A Signing time: Tue 12 May 2026 19:00:58 +0000 Manifest this update: Tue 12 May 2026 19:00:58 +0000 Manifest next update: Wed 13 May 2026 19:00:58 +0000 Files and hashes: 1: 83OVzlvIqdDKmb_5wBRC0WcFjfM.roa (hash: 8PFHggPnaezbnMW4+XspuMTvGK1XDvaIsNpmC/tZiA8=) 2: 8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa (hash: pt73BuJ/y3ShDrV/pgMGCwb8k6XcsAIy36ogWlsMzYQ=) 3: 93xRwXpEpvdfu9D_C-KrLh1b6As.roa (hash: leXeXBLmLha3JNSqzQ4BFegXrFN7Eijpd8KQkk0NAh4=) 4: MoLMeFuKRB5fSqCUEGIMd9NqbII.roa (hash: 2nEk1yywEjq90iYPNBoF+GySwSGBEmj1Y+cZziwwoak=) 5: N7KzbnSCtBZxo6leDNHJYf_fUpw.roa (hash: /UrnKy1zrMq95TUGKkiYPqqZU6gx6ujjcxvogPKd0Oo=) 6: P_6IShMFNgR5rYiKUd5B4hkOq_g.roa (hash: UoRcEGme82B9sqi+ETxLhQLp8oMIQLyedB9QtBQNKpY=) 7: RPo8eB7TZwH-qoRrhBhooLWyEQ8.roa (hash: UPu1koY4JF1LcA8p6+irpfb83+3cPePZ79AIb+7ynxA=) 8: XF8zxRoIDsp4mguzCSf0vyETBPY.roa (hash: eAwYUTgt//k+vdVNboj1Og7x7yfNtzEkOGt1neMt2EY=) 9: c39XLxbuf04BBQGWyZ8HrunasNs.roa (hash: qIVoFOvsadu807fb8uoOZyhJ816nDFPiWTVq0YiWMP4=) 10: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: CAe6Fhv90eawCVp6FYzRQGsGyE3P9zOCUh9NigNOYVE=) 11: kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa (hash: Euiqd1yuKucYUcEoHqhT7bG61J5J4k6BCCOLw+qgcsQ=) 12: pBk0yt_6vuxeGY1jU4yJ8-yRUFM.roa (hash: fe08iune66Qa8TNGXx66Qrxz/FmbKuSxTs3zQ3rIYZQ=) 13: qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa (hash: rrRJdISE3OX5lQS17cb4m8EoKPH8zP9CsSTb1fh6uuA=) 14: xjNLjU3b2WsIHiu-UnAiZx4zW0A.roa (hash: 3AhW2nrmM5OnTh+BBjpHS3tXRibur6Y4nLYhWncigUQ=) 15: zEBs86zGS_SSxBEkDz6-kuaSJLU.roa (hash: +izB1O36HKhSNVBtwLzkamZR78LVdjBtAu54YXie8sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:54:43:44:7f:8b:0b:f5:1a:24:f7:83:95:79:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: May 12 19:00:58 2026 GMT Not After : May 13 19:00:58 2026 GMT Subject: CN=a596d9e96687fcac95b8e589782d1d5bdf28ca6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:3e:cf:45:55:75:4f:6a:13:04:c6:1e:90: d1:f5:14:0f:f5:04:c8:bf:c2:c2:b9:bc:98:4d:ee: c8:4d:0f:f3:0a:64:ec:b2:97:53:bd:a1:e1:43:f4: 74:10:a1:ad:2e:b8:cd:53:bf:20:0a:fa:18:79:22: f2:39:97:82:68:65:6c:71:01:71:ea:51:86:9c:a3: 7b:05:57:e1:fd:0f:b5:52:f7:2c:da:f8:ff:46:94: b8:52:b5:6e:d7:d5:c5:45:dc:73:87:b0:dd:d0:c6: d0:73:0b:50:f0:18:b7:b2:a0:75:c3:88:21:f3:7f: 79:ce:cc:2f:b3:e6:5a:ed:d3:02:1d:d5:05:4f:cc: 83:47:f9:d2:1b:ac:c5:35:53:8b:83:e1:51:1b:13: 80:3b:22:1a:a6:6f:2b:76:9c:19:c8:81:fe:cc:3d: 8c:54:36:b4:31:69:e7:84:cc:fe:5a:2f:ad:fe:a4: a6:6d:58:bf:77:89:c6:9a:cd:be:56:0b:6a:a3:5a: a6:0d:05:c4:0d:27:60:69:51:b6:26:f9:01:8b:d0: aa:8f:f0:1b:2d:12:70:78:70:0c:40:d0:fa:c1:73: cf:f5:2d:89:a1:22:db:01:cb:ab:b7:9d:ce:c7:ff: 75:ce:86:9a:ec:45:eb:b4:0f:5f:b2:f3:b8:b5:20: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:D9:E9:66:87:FC:AC:95:B8:E5:89:78:2D:1D:5B:DF:28:CA:6C X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:68:33:64:f2:f2:37:67:07:a1:fd:1b:45:6f:a4:9f:16:48: 32:1e:b2:87:24:40:fc:78:aa:78:82:c1:73:37:ea:5d:b2:c7: 94:8a:de:99:f7:5d:47:a5:fd:df:f4:d3:77:c0:24:a3:9f:66: 9e:09:4e:bb:f3:42:5c:b0:a9:0a:66:d1:bb:94:ea:b9:7d:ee: 71:cb:d7:aa:81:96:6e:e1:b3:8d:8f:e0:1d:59:d4:e0:28:ca: ae:64:d4:ee:3b:75:f7:3b:bc:b2:54:a6:22:f1:2c:3f:4c:a8: 44:33:d5:cf:0c:00:a1:51:7a:1d:56:d6:dc:9b:3b:19:81:99: 0c:f4:ab:f3:d1:36:3c:e6:9f:40:66:3d:5a:5c:c6:80:b8:e0: 98:ab:e3:4f:03:c3:35:70:46:3f:65:d0:fc:db:b4:b6:d9:bd: 82:ea:ca:18:a7:00:aa:b0:32:68:e6:ae:56:cc:3d:81:34:75: 3d:96:6b:62:6d:0d:68:83:97:41:ea:e8:49:75:a6:cc:f2:5d: 9c:f4:dd:46:fc:0d:61:88:0a:d5:47:7b:9b:df:c9:10:1f:75: 5f:a4:a2:ba:2e:e8:c6:4b:c3:48:06:95:bb:68:2d:da:93:bf: 7a:bb:13:72:3f:8e:8a:fb:82:57:58:30:2e:d3:9d:af:96:c5: 29:f2:92:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkFRDRH+LC/UaJPeDlXmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjYwNTEyMTkwMDU4WhcNMjYwNTEzMTkwMDU4WjAzMTEwLwYDVQQD EyhhNTk2ZDllOTY2ODdmY2FjOTViOGU1ODk3ODJkMWQ1YmRmMjhjYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor4+z0VVdU9qEwTGHpDR9RQP9QTI v8LCubyYTe7ITQ/zCmTsspdTvaHhQ/R0EKGtLrjNU78gCvoYeSLyOZeCaGVscQFx 6lGGnKN7BVfh/Q+1Uvcs2vj/RpS4UrVu19XFRdxzh7Dd0MbQcwtQ8Bi3sqB1w4gh 8395zswvs+Za7dMCHdUFT8yDR/nSG6zFNVOLg+FRGxOAOyIapm8rdpwZyIH+zD2M VDa0MWnnhMz+Wi+t/qSmbVi/d4nGms2+Vgtqo1qmDQXEDSdgaVG2JvkBi9Cqj/Ab LRJweHAMQND6wXPP9S2JoSLbAcurt53Ox/91zoaa7EXrtA9fsvO4tSA3GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWW2elmh/yslbjliXgtHVvfKMpsMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmgzZPLy N2cHof0bRW+knxZIMh6yhyRA/HiqeILBczfqXbLHlIremfddR6X93/TTd8Ako59m nglOu/NCXLCpCmbRu5TquX3uccvXqoGWbuGzjY/gHVnU4CjKrmTU7jt19zu8slSm IvEsP0yoRDPVzwwAoVF6HVbW3Js7GYGZDPSr89E2POafQGY9WlzGgLjgmKvjTwPD NXBGP2XQ/Nu0ttm9gurKGKcAqrAyaOauVsw9gTR1PZZrYm0NaIOXQeroSXWmzPJd nPTdRvwNYYgK1Ud7m9/JEB91X6Siui7oxkvDSAaVu2gt2pO/ersTcj+OivuCV1gw LtOdr5bFKfKS1A== -----END CERTIFICATE-----Generated at Wed May 13 03:28:59 2026 by rpki-client