$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: zILdWVslkwivyIYNeN0uuDKPzV2pVriBKMNZzAd2b8A= Subject key identifier: 45:73:1A:4D:0A:07:91:6F:A4:BE:D9:30:09:F9:38:40:1A:E9:9A:2B Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019E1D59428CC61141AF747363D24DC2ABA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0D23 Signing time: Tue 12 May 2026 18:00:49 +0000 Manifest this update: Tue 12 May 2026 18:00:49 +0000 Manifest next update: Wed 13 May 2026 18:00:49 +0000 Files and hashes: 1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=) 2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=) 3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=) 4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=) 5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=) 6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=) 7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=) 8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=) 9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=) 10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=) 11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=) 12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=) 13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=) 14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=) 15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=) 16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=) 17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=) 18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: id1Rfg7b4S6gh1YkGZUWUSSENYFWX512zIJd1my2QI8=) 19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=) 20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:42:8c:c6:11:41:af:74:73:63:d2:4d:c2:ab:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: May 12 18:00:49 2026 GMT Not After : May 13 18:00:49 2026 GMT Subject: CN=45731a4d0a07916fa4bed93009f938401ae99a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ac:fe:fd:ca:af:cd:7b:9f:bc:3f:3a:53:32: fe:8d:7a:62:bf:cf:b8:52:d7:9e:b7:62:36:16:ec: 70:b8:60:50:69:57:be:14:e4:da:bd:48:36:2f:65: 45:ad:84:3c:b3:93:da:ba:06:29:be:75:7d:a7:e6: 07:c1:26:00:0f:de:59:43:f6:62:98:45:e4:78:6d: d1:37:d2:8c:d3:ef:35:de:db:24:1d:f8:f8:31:1b: f0:dd:a7:dd:d0:97:27:7d:c3:cc:d5:ea:9a:6b:ff: 23:6b:8d:b3:b4:e5:56:e0:eb:6e:06:7e:77:42:cc: c1:60:3c:8d:8e:35:8e:b8:4c:c2:55:e1:33:7d:36: 37:e1:ad:fb:41:0f:f6:42:b4:6b:6e:30:c0:f9:72: 07:ee:0d:f2:cd:f7:7b:e9:0a:57:fb:f5:98:29:7d: b4:a7:3f:7d:4c:bd:90:ca:87:70:82:e0:cb:b2:5b: c4:7e:72:fe:9d:63:38:7a:a0:a7:bf:d5:cb:15:8e: 7f:07:be:24:d6:2e:3c:78:be:8c:94:e9:78:b1:48: ca:61:4d:8f:b5:1d:0d:5e:26:5c:55:bc:47:30:ce: 4c:d0:35:a5:44:94:f9:3f:14:b0:7d:ca:75:b6:29: bb:bb:ab:2e:24:33:c4:bb:91:09:f7:41:7b:e6:b6: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:73:1A:4D:0A:07:91:6F:A4:BE:D9:30:09:F9:38:40:1A:E9:9A:2B X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:0c:1f:c6:7a:1f:77:c9:81:20:5f:f9:81:e4:d4:d2:46: d1:d3:fd:57:56:59:9e:24:dd:cd:92:af:aa:6a:04:fd:e0:86: 77:f7:c6:a6:95:6a:36:47:26:ac:ac:10:80:8f:12:42:88:c7: c0:16:c5:47:f0:ce:13:8a:d9:05:66:76:f8:f0:dd:f5:23:dc: c1:f7:48:97:a0:e2:fe:75:3c:61:04:99:ae:26:a7:de:31:06: 0f:2c:bc:59:2d:3d:98:0d:73:0c:06:5d:bf:ef:24:fd:13:8c: ba:93:f1:2b:ab:44:0f:19:5e:e5:ed:42:41:b1:32:7e:75:c8: 10:74:28:e1:e2:49:78:d5:25:8f:e1:f2:5d:33:76:3a:66:af: 41:1b:13:f5:0c:ad:83:50:41:50:0f:b0:a0:49:8f:84:62:ce: 47:43:f6:6e:74:03:6f:a6:a1:0c:ef:2d:4a:25:e4:e5:cf:cf: de:d0:25:9b:1d:d8:51:53:cd:4e:03:2c:80:5b:40:49:5a:0e: 6e:55:27:5c:7a:0e:d5:f4:b0:40:64:c8:8f:f4:5e:d8:fd:17: eb:28:7e:9f:f2:e5:14:69:29:22:16:28:1d:ac:2c:d3:e7:4d: 8f:92:ec:30:b7:04:12:f1:ec:b7:75:a9:eb:e2:6e:85:b8:ff: 34:df:26:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWUKMxhFBr3RzY9JNwqulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwNTEyMTgwMDQ5WhcNMjYwNTEzMTgwMDQ5WjAzMTEwLwYDVQQD Eyg0NTczMWE0ZDBhMDc5MTZmYTRiZWQ5MzAwOWY5Mzg0MDFhZTk5YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Kz+/cqvzXufvD86UzL+jXpiv8+4 Uteet2I2FuxwuGBQaVe+FOTavUg2L2VFrYQ8s5PaugYpvnV9p+YHwSYAD95ZQ/Zi mEXkeG3RN9KM0+813tskHfj4MRvw3afd0JcnfcPM1eqaa/8ja42ztOVW4OtuBn53 QszBYDyNjjWOuEzCVeEzfTY34a37QQ/2QrRrbjDA+XIH7g3yzfd76QpX+/WYKX20 pz99TL2QyodwguDLslvEfnL+nWM4eqCnv9XLFY5/B74k1i48eL6MlOl4sUjKYU2P tR0NXiZcVbxHMM5M0DWlRJT5PxSwfcp1tim7u6suJDPEu5EJ90F75ra8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVzGk0KB5FvpL7ZMAn5OEAa6ZorMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEX4MH8Z6 H3fJgSBf+YHk1NJG0dP9V1ZZniTdzZKvqmoE/eCGd/fGppVqNkcmrKwQgI8SQojH wBbFR/DOE4rZBWZ2+PDd9SPcwfdIl6Di/nU8YQSZrian3jEGDyy8WS09mA1zDAZd v+8k/ROMupPxK6tEDxle5e1CQbEyfnXIEHQo4eJJeNUlj+HyXTN2OmavQRsT9Qyt g1BBUA+woEmPhGLOR0P2bnQDb6ahDO8tSiXk5c/P3tAlmx3YUVPNTgMsgFtASVoO blUnXHoO1fSwQGTIj/Re2P0X6yh+n/LlFGkpIhYoHaws0+dNj5LsMLcEEvHst3Wp 6+Juhbj/NN8mqQ== -----END CERTIFICATE-----Generated at Wed May 13 03:25:56 2026 by rpki-client