$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: WaqvNg4iHwWw/zKEdWc8lAQ1pwRV84XL+3jF7qW4x9E= Subject key identifier: BE:D8:DF:3E:73:87:EE:F9:0C:6E:49:04:53:76:6A:96:9C:32:95:5D Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019E1D22262BE874AFF7EDEDBF42334DD0DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 0BC0 Signing time: Tue 12 May 2026 17:00:37 +0000 Manifest this update: Tue 12 May 2026 17:00:37 +0000 Manifest next update: Wed 13 May 2026 17:00:37 +0000 Files and hashes: 1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=) 2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=) 3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=) 4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: Xu1pOZfJ/R8UJqyEh/wIxcJb+ejvXVla3UAizX+yals=) 6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=) 7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=) 8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=) 9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=) 10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=) 11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=) 12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=) 13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=) 14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:26:2b:e8:74:af:f7:ed:ed:bf:42:33:4d:d0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: May 12 17:00:37 2026 GMT Not After : May 13 17:00:37 2026 GMT Subject: CN=bed8df3e7387eef90c6e490453766a969c32955d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:fd:de:8d:12:65:25:4a:7f:9a:45:e1:7b: 18:b7:1f:ec:d0:4c:92:fa:e6:50:75:c2:4e:b3:05: 57:ba:32:b9:2e:a4:e0:c5:27:88:57:cf:6a:14:cb: a9:ce:de:44:6c:56:6e:cc:d6:a0:d3:4b:f7:3b:e8: ed:3f:64:f0:cb:5e:f1:81:be:28:78:24:54:67:85: 41:99:27:26:d2:02:57:45:eb:8e:52:e1:d1:46:0f: e5:d8:9f:2e:ea:ca:e7:78:cc:3d:72:79:6a:70:ab: fa:dd:a4:f8:a7:ce:a7:10:8b:73:8d:73:c3:e4:89: 28:78:e3:6a:84:be:af:2e:8b:b0:f7:60:b6:41:26: 04:58:41:6b:84:e9:01:c9:b4:c6:4f:eb:87:1f:d0: 1f:f8:dd:9f:dc:a6:16:1a:c0:29:37:55:ff:9c:00: 78:8b:50:14:30:8e:3f:1a:f5:75:6f:66:06:1c:3e: 9f:85:88:3b:ef:55:f4:9f:2e:6c:3e:43:86:8b:f1: c7:b6:ac:a2:ee:bd:2b:db:34:06:a7:a6:3f:f1:ec: cd:6e:37:0c:90:93:7a:12:76:d9:ca:f2:52:36:3e: a9:9d:9b:80:c2:f7:b2:82:cf:4c:ba:2a:c7:92:c2: 1b:27:00:e2:dd:bf:17:d1:ca:e1:30:00:95:33:59: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:DF:3E:73:87:EE:F9:0C:6E:49:04:53:76:6A:96:9C:32:95:5D X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5a:4e:3b:69:3d:23:e5:83:64:96:67:2c:41:71:d6:26:3a: 73:54:80:f2:ee:3b:01:74:18:6b:e7:d5:37:3d:c5:ec:fc:fb: 35:72:ef:b0:05:08:08:89:42:da:e3:ef:a2:9b:5e:fa:2b:18: 28:0a:9f:8b:ee:31:a2:ce:c0:bb:c1:ab:50:d0:aa:15:67:a9: 45:94:99:c4:64:59:9c:21:0e:53:ff:6f:42:6f:c3:99:f0:b6: 2d:f3:ea:da:7f:7e:b9:f3:30:9b:1d:c6:67:1b:93:05:17:a7: 59:c3:a2:84:e8:2b:99:47:9d:5e:fb:2d:d6:d3:8c:24:ba:86: a0:54:48:70:62:a6:2c:cb:9e:e7:71:e2:44:f4:bb:2e:13:85: 29:43:a0:3e:79:75:56:89:98:01:bf:6e:d9:a5:fa:f6:db:18: e2:09:02:eb:52:38:85:a8:63:a7:66:43:98:99:7b:54:cb:ba: 4c:96:7f:19:c2:dd:f2:9a:c2:69:f2:fd:16:a2:ee:2d:1b:09: ba:a8:64:cd:a9:b3:ca:57:f0:94:f1:69:07:c5:04:32:4c:fd: 77:2d:a7:3e:02:ab:ee:5c:0a:de:bc:7d:f2:c7:ff:c0:70:24: 2e:65:35:d3:71:ed:f7:8b:0f:ac:a1:6c:01:89:c1:87:3c:9d: 6d:d7:4f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIiYr6HSv9+3tv0IzTdDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwNTEyMTcwMDM3WhcNMjYwNTEzMTcwMDM3WjAzMTEwLwYDVQQD EyhiZWQ4ZGYzZTczODdlZWY5MGM2ZTQ5MDQ1Mzc2NmE5NjljMzI5NTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIP93o0SZSVKf5pF4XsYtx/s0EyS +uZQdcJOswVXujK5LqTgxSeIV89qFMupzt5EbFZuzNag00v3O+jtP2Twy17xgb4o eCRUZ4VBmScm0gJXReuOUuHRRg/l2J8u6srneMw9cnlqcKv63aT4p86nEItzjXPD 5IkoeONqhL6vLouw92C2QSYEWEFrhOkBybTGT+uHH9Af+N2f3KYWGsApN1X/nAB4 i1AUMI4/GvV1b2YGHD6fhYg771X0ny5sPkOGi/HHtqyi7r0r2zQGp6Y/8ezNbjcM kJN6EnbZyvJSNj6pnZuAwveygs9MuirHksIbJwDi3b8X0crhMACVM1k/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Y3z5zh+75DG5JBFN2apacMpVdMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFpOO2k9 I+WDZJZnLEFx1iY6c1SA8u47AXQYa+fVNz3F7Pz7NXLvsAUICIlC2uPvopte+isY KAqfi+4xos7Au8GrUNCqFWepRZSZxGRZnCEOU/9vQm/DmfC2LfPq2n9+ufMwmx3G ZxuTBRenWcOihOgrmUedXvst1tOMJLqGoFRIcGKmLMue53HiRPS7LhOFKUOgPnl1 VomYAb9u2aX69tsY4gkC61I4hahjp2ZDmJl7VMu6TJZ/GcLd8prCafL9FqLuLRsJ uqhkzamzylfwlPFpB8UEMkz9dy2nPgKr7lwK3rx98sf/wHAkLmU103Ht94sPrKFs AYnBhzydbddPjw== -----END CERTIFICATE-----Generated at Wed May 13 02:22:36 2026 by rpki-client