$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: gmA8wsD/cYAs/eD1Gvpev+dh7F0FNuEC/1gk0Kki4Sk= Subject key identifier: AC:4F:DB:C3:56:FC:C1:CD:11:E0:65:CA:CD:8F:0B:5E:10:19:7D:96 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019E1BD8AB56A7105F857F11C1A17247C0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 198F Signing time: Tue 12 May 2026 11:00:44 +0000 Manifest this update: Tue 12 May 2026 11:00:44 +0000 Manifest next update: Wed 13 May 2026 11:00:44 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 3: KQ7ouqmQq6rimpCFwitrDscYvt8.roa (hash: Unj26FbEC9PGSIpaJtW9C2fRWD57Q0oqMWHcZfhIbek=) 4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 8: ejxSY9TKj20nwUenCWY904eeisM.roa (hash: nrnnn9DeLLHHt78QR3l33T9y9AiL94VkdF6b7pD3MV0=) 9: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: JSYu2MPIsUXq8Lo4UI9s8nY9Mz6ulDL9Gq+2daHKffY=) 10: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d8:ab:56:a7:10:5f:85:7f:11:c1:a1:72:47:c0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: May 12 11:00:44 2026 GMT Not After : May 13 11:00:44 2026 GMT Subject: CN=ac4fdbc356fcc1cd11e065cacd8f0b5e10197d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:43:11:2c:c8:4f:b1:d4:a8:2e:96:aa:cf: d3:82:d8:58:0a:9e:62:73:47:1d:3b:86:d5:2d:de: ee:d1:8d:96:c5:8c:77:06:61:82:6e:c7:9d:19:b1: 5d:20:3c:9f:ff:07:fc:59:19:3d:f1:b4:8a:2d:0a: 88:0d:43:7a:12:2d:eb:3f:9d:ce:44:2a:cc:d5:08: 90:cc:64:63:52:d5:bc:eb:3b:5e:9b:ef:57:4b:79: a0:8e:5a:f4:cd:80:10:96:ca:05:fb:79:bf:df:9c: 93:93:99:a7:f9:be:a0:ad:72:0b:0b:b1:f5:94:61: bb:00:51:3c:21:d1:de:55:fd:ef:a0:f9:f4:9d:37: f3:83:7f:eb:5f:a9:40:7d:2b:1a:9c:8f:4e:f6:c0: de:8d:1a:9f:cd:09:60:aa:4d:56:a5:51:47:2a:de: b0:38:42:55:8e:6b:65:02:cf:63:14:22:b0:3b:2e: a1:db:8e:b1:a9:fa:dd:01:2a:9a:3d:fa:b3:96:d1: 37:8c:d3:d6:af:c7:48:95:20:21:81:72:13:c1:a7: 35:ee:32:76:2f:99:68:70:c9:2f:da:05:65:e7:28: 78:05:a4:ff:29:06:c7:e0:b1:2e:d4:9b:90:ff:8e: f2:e3:4c:9d:7e:6a:0b:03:a5:67:ce:73:27:21:b0: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:DB:C3:56:FC:C1:CD:11:E0:65:CA:CD:8F:0B:5E:10:19:7D:96 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:20:b8:e3:d7:45:b3:23:b1:5c:82:4f:87:df:09:fa:b6:98: d9:4a:91:a2:30:3b:3c:f2:76:79:8a:8b:01:46:73:8c:a4:3d: 1a:a0:20:97:57:07:df:87:c9:78:aa:ff:41:8a:c9:f5:53:62: 19:c2:28:d0:fc:ab:4e:9b:f2:65:d1:3e:fa:bb:7d:59:ee:87: 02:fc:d0:9c:5b:e0:f8:fa:c8:ba:a4:92:cf:ff:ef:a1:b2:c2: 7a:e0:7b:72:7a:2d:c8:7a:fd:2f:10:ae:a7:3d:21:e4:c1:92: 42:c3:37:dd:3e:f8:a5:f2:a1:ca:9d:90:19:a4:ce:6e:be:de: 54:4f:0c:99:fb:50:58:39:fb:fb:61:88:59:43:d3:9f:b5:7d: f0:0b:a2:75:3f:54:da:94:8f:18:f0:73:68:90:4d:27:e6:16: c5:ff:e5:c6:4c:59:ad:ff:8a:98:e3:0a:e3:ca:42:c0:95:2a: 73:4d:d6:a8:5e:d8:72:35:d7:e5:f7:df:e8:03:d4:b2:61:f9: 2f:c9:51:ab:9f:9d:05:85:14:59:32:6b:a3:73:6b:fa:29:9c: 18:da:da:e9:aa:fe:da:b0:ee:5f:ae:2b:30:c1:7c:09:4d:a0: cd:f5:25:07:0a:2f:10:63:ce:37:c8:32:41:f2:d5:6d:2f:c8: 46:14:7f:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2KtWpxBfhX8RwaFyR8C+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwNTEyMTEwMDQ0WhcNMjYwNTEzMTEwMDQ0WjAzMTEwLwYDVQQD EyhhYzRmZGJjMzU2ZmNjMWNkMTFlMDY1Y2FjZDhmMGI1ZTEwMTk3ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG5DESzIT7HUqC6Wqs/TgthYCp5i c0cdO4bVLd7u0Y2WxYx3BmGCbsedGbFdIDyf/wf8WRk98bSKLQqIDUN6Ei3rP53O RCrM1QiQzGRjUtW86ztem+9XS3mgjlr0zYAQlsoF+3m/35yTk5mn+b6grXILC7H1 lGG7AFE8IdHeVf3voPn0nTfzg3/rX6lAfSsanI9O9sDejRqfzQlgqk1WpVFHKt6w OEJVjmtlAs9jFCKwOy6h246xqfrdASqaPfqzltE3jNPWr8dIlSAhgXITwac17jJ2 L5locMkv2gVl5yh4BaT/KQbH4LEu1JuQ/47y40ydfmoLA6VnznMnIbDRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxP28NW/MHNEeBlys2PC14QGX2WMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCC449dF syOxXIJPh98J+raY2UqRojA7PPJ2eYqLAUZzjKQ9GqAgl1cH34fJeKr/QYrJ9VNi GcIo0PyrTpvyZdE++rt9We6HAvzQnFvg+PrIuqSSz//vobLCeuB7cnotyHr9LxCu pz0h5MGSQsM33T74pfKhyp2QGaTObr7eVE8MmftQWDn7+2GIWUPTn7V98AuidT9U 2pSPGPBzaJBNJ+YWxf/lxkxZrf+KmOMK48pCwJUqc03WqF7YcjXX5fff6APUsmH5 L8lRq5+dBYUUWTJro3Nr+imcGNra6ar+2rDuX64rMMF8CU2gzfUlBwovEGPON8gy QfLVbS/IRhR/Kw== -----END CERTIFICATE-----Generated at Tue May 12 21:26:29 2026 by rpki-client