$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: JZpWiH20sFkzhHEwWeW0bNYmejsr/aaWMMqcCD3ucGI= Subject key identifier: 40:54:C1:C9:C1:30:30:25:9E:44:67:4E:EC:13:D6:43:67:55:F5:1E Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019E1EDA670EB1D6A4483522968C87242E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1919 Signing time: Wed 13 May 2026 01:01:30 +0000 Manifest this update: Wed 13 May 2026 01:01:30 +0000 Manifest next update: Thu 14 May 2026 01:01:30 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: d85pknBUsbZMDF/kkMGTtU3Ipx3uS6xXgYtPDxnkIpY=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:da:67:0e:b1:d6:a4:48:35:22:96:8c:87:24:2e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: May 13 01:01:30 2026 GMT Not After : May 14 01:01:30 2026 GMT Subject: CN=4054c1c9c13030259e44674eec13d6436755f51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:98:93:ed:ba:bb:b9:50:7a:61:17:ec:bb: 95:31:aa:60:cc:82:46:18:41:22:f5:fe:b3:7b:9c: 90:17:18:71:6b:d3:80:60:e2:7d:56:a9:65:9f:01: f4:59:9f:7b:c9:dd:1c:ac:26:43:55:fa:d3:07:e9: 8d:d3:0e:b2:59:01:42:53:f6:a6:23:59:0e:51:eb: 4b:a3:b7:7b:66:6d:94:93:d0:4f:92:02:83:3e:97: 69:a1:8b:92:d8:17:31:ea:71:20:3e:68:f5:81:d8: e9:ed:e5:b0:d5:bd:09:77:44:30:d4:50:65:8d:cc: c2:db:28:31:79:2a:0e:81:24:05:6a:cf:bd:7a:9d: f2:36:2d:57:3c:6e:74:8f:60:ce:ea:87:5e:17:e6: 8f:7f:ab:37:ae:74:6c:b1:47:ae:46:c2:6a:1c:72: 6d:c3:26:94:d3:c8:58:2c:54:22:85:45:74:6d:7b: 00:dc:e2:70:7a:45:3a:44:7c:bb:a6:c3:70:23:fb: 39:fe:ab:7a:2a:85:67:e5:37:d6:38:98:66:2a:d8: 26:73:e3:d2:ac:5e:83:f4:0f:96:7a:aa:61:91:86: c7:77:1d:58:17:48:4a:86:4d:73:a9:03:46:81:62: f2:37:24:88:21:31:e7:bb:ba:92:63:dd:11:a0:c4: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:C1:C9:C1:30:30:25:9E:44:67:4E:EC:13:D6:43:67:55:F5:1E X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e4:9b:0f:37:e2:d9:a2:f3:43:a6:de:7e:cb:89:24:08:39: 24:ad:4b:d3:90:07:65:84:42:f5:2c:09:6f:b2:19:e4:53:cc: 86:47:b1:6b:f3:e5:de:ef:50:07:40:f1:f3:af:85:f6:16:82: 7c:86:67:46:7c:18:ee:09:0e:ef:61:f9:40:eb:32:35:c7:62: f6:59:9c:5f:6c:15:43:ab:d8:f1:b6:40:79:0b:3c:46:de:8a: 86:ac:a2:8a:64:79:80:c4:94:ea:85:6a:30:a6:06:ca:a0:a2: 0d:52:45:3b:42:53:9b:d5:32:39:bb:ba:4f:db:23:08:38:69: 08:05:17:76:f2:ef:dc:7c:49:dd:9e:49:10:5f:af:01:87:61: 41:38:04:92:ed:62:6e:13:03:84:2c:5f:7b:af:4f:cb:78:23: ba:a6:43:bc:92:39:d2:bd:0a:bf:ce:d4:94:cf:63:b7:d6:b9: 9e:11:8a:3e:ae:03:78:3d:f7:4a:e6:ab:93:20:76:31:b9:82: 2f:80:ea:ad:fc:6c:f7:2e:30:41:6e:d6:1e:7f:dc:94:3e:ea: ad:51:64:5a:a2:52:59:41:2b:9b:00:4f:fd:cd:bf:7d:89:a1: 63:f1:e7:a4:f8:b8:1c:5d:1f:7a:ea:1d:5a:cc:cf:c9:02:55: 64:21:9f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2mcOsdakSDUiloyHJC4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwNTEzMDEwMTMwWhcNMjYwNTE0MDEwMTMwWjAzMTEwLwYDVQQD Eyg0MDU0YzFjOWMxMzAzMDI1OWU0NDY3NGVlYzEzZDY0MzY3NTVmNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5KYk+26u7lQemEX7LuVMapgzIJG GEEi9f6ze5yQFxhxa9OAYOJ9VqllnwH0WZ97yd0crCZDVfrTB+mN0w6yWQFCU/am I1kOUetLo7d7Zm2Uk9BPkgKDPpdpoYuS2Bcx6nEgPmj1gdjp7eWw1b0Jd0Qw1FBl jczC2ygxeSoOgSQFas+9ep3yNi1XPG50j2DO6odeF+aPf6s3rnRssUeuRsJqHHJt wyaU08hYLFQihUV0bXsA3OJwekU6RHy7psNwI/s5/qt6KoVn5TfWOJhmKtgmc+PS rF6D9A+WeqphkYbHdx1YF0hKhk1zqQNGgWLyNySIITHnu7qSY90RoMQN7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBUwcnBMDAlnkRnTuwT1kNnVfUeMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+SbDzfi 2aLzQ6befsuJJAg5JK1L05AHZYRC9SwJb7IZ5FPMhkexa/Pl3u9QB0Dx86+F9haC fIZnRnwY7gkO72H5QOsyNcdi9lmcX2wVQ6vY8bZAeQs8Rt6KhqyiimR5gMSU6oVq MKYGyqCiDVJFO0JTm9UyObu6T9sjCDhpCAUXdvLv3HxJ3Z5JEF+vAYdhQTgEku1i bhMDhCxfe69Py3gjuqZDvJI50r0Kv87UlM9jt9a5nhGKPq4DeD33SuarkyB2MbmC L4Dqrfxs9y4wQW7WHn/clD7qrVFkWqJSWUErmwBP/c2/fYmhY/HnpPi4HF0feuod WszPyQJVZCGfTw== -----END CERTIFICATE-----Generated at Wed May 13 12:55:56 2026 by rpki-client