$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: PzYZHIIc4j4o4XaZg2rCLrvoBpFjd4TQDGxiK1wE6tY= Subject key identifier: AE:1F:CB:8F:58:66:BB:EE:31:51:0F:58:DC:9A:86:E4:1C:00:49:4E Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019E216D22679775D5224294ECCE5A68C057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 1876 Signing time: Wed 13 May 2026 13:01:00 +0000 Manifest this update: Wed 13 May 2026 13:01:00 +0000 Manifest next update: Thu 14 May 2026 13:01:00 +0000 Files and hashes: 1: 4zPyCmOCOHn0UmU25C34lBLrfsc.roa (hash: mYeF9TieLkXAP7pTIPCY5kfzmWlfrZulfwAKyol+I8w=) 2: 8U9Wp8aMDTMHire9KsQQwLfqs00.roa (hash: X/erkao+YL7ZRtCVh/gBhtM8++R5nL+zCJPtIYT4ET0=) 3: HUNURVAA892dDIzCfcEspa0FlqE.roa (hash: zuRP0sT5Q7shDkaltBQBAdM4I77s5Z8T+hSw7WgROyk=) 4: Hd3ojefiZSO4EQV3qaL7pExW__U.roa (hash: gRRtQEbW2/M2MaLd+m10UeRJYblia3Rho50OsDCy5PY=) 5: OB9RZiF89Z1uRZeWn1vTQcGDais.roa (hash: jAA2Lpyh8IWvH3ZZq1p0bZ1EbJHY9jTF1clJ6M81wgk=) 6: Ti8i0UIny7Sj-LCspkWODf7h3eQ.roa (hash: iUMW9CXtMXsoO7pWBR6eDo8RzWNspIapoeSgUIgm3y8=) 7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: BvCQSfPocyJHN3i5VQWKzlzvcpEHr5vQ9hKog5kGuAQ=) 8: _IW__XFXehaq9QdxRfT864VriOU.roa (hash: k90WCGYeq167jhMKLuGJ73HDgSUqj5sLLRTsPnjXIoA=) 9: cxkZbn0blHBZhN_WVkm447mHt1o.roa (hash: PIh/jQ39BbhdqKW9+Xaf1VMc438vWZrDb53e0GQNo2w=) 10: jgOsHUWcbSDiI_fNSViiorGknbI.roa (hash: ExxFYpwqdFjHSrJxztsKKOJte37WACbeefcX87tcqNs=) 11: nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa (hash: RvmrVvYCv5AOaoQZhyeX78k0GCJb5MBQlGW4Cu7wFrA=) 12: prmQZEtK7d8LPnJ5d9AMaIwx-vE.roa (hash: a0MOVqD8PQL7h5XQHdpb3HadDSEFipAD1XuOUI4ggCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:21:6d:22:67:97:75:d5:22:42:94:ec:ce:5a:68:c0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: May 13 13:01:00 2026 GMT Not After : May 14 13:01:00 2026 GMT Subject: CN=ae1fcb8f5866bbee31510f58dc9a86e41c00494e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:07:cc:3c:7f:c3:88:d5:01:4a:4c:cb:61: c9:8f:09:f9:89:ba:27:45:a5:b8:1f:23:b0:c6:b9: 20:e8:33:aa:56:0f:96:8b:12:e0:aa:24:51:4b:14: 63:d9:58:ab:3c:b2:c5:cf:78:2d:2c:8c:e7:a1:93: a4:f8:e2:e4:21:5d:3b:0a:77:d7:c7:ab:66:b9:c1: 29:d6:52:88:a9:78:69:c7:fe:b0:48:9b:d4:e0:c3: d5:e9:5a:5a:34:91:b3:cc:44:e5:a5:7e:8c:0b:f2: 12:2a:8e:06:f6:38:cf:95:23:34:d3:1d:34:74:c7: 6d:a7:e7:11:5d:77:ba:1d:e5:22:b0:0b:41:ba:c0: cf:6a:f9:0c:0c:ea:87:15:87:0a:1a:1a:1b:29:94: ba:4c:31:0e:6f:e9:18:c3:d6:2c:2d:61:8e:99:9f: 99:2f:61:d6:75:7c:98:97:e3:c6:74:4c:2d:92:62: 2c:0d:d2:7e:63:9c:52:71:50:96:d5:00:32:0d:f1: 0e:0a:7f:e3:55:cf:60:fc:fa:2d:84:82:85:93:d0: 35:ca:f2:55:5e:07:77:e3:d2:f1:52:80:74:9a:21: 72:72:95:8b:ba:a4:94:13:25:1c:dd:28:2f:83:80: 0b:b4:0d:e7:54:5c:57:63:ef:e5:b1:1d:94:29:5b: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:CB:8F:58:66:BB:EE:31:51:0F:58:DC:9A:86:E4:1C:00:49:4E X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:be:e1:ea:f6:53:76:7a:b7:2d:5f:39:cd:1f:8b:a0:d5:5c: 97:0c:3b:09:93:91:fb:8b:bb:6e:ae:55:be:c2:1b:57:55:77: 00:21:af:bc:79:20:39:c7:1f:5c:d4:cb:aa:c4:70:0a:4d:25: fb:2d:4c:8e:f0:98:fe:2a:55:63:ef:f4:f3:79:75:40:ad:a5: 85:0b:4f:f1:61:f3:8a:b7:b8:46:c1:4e:f6:b3:9e:d8:c2:d4: 5d:c7:21:86:dc:cf:e2:f0:2d:29:a0:66:66:8d:38:58:dd:33: c5:99:c6:a1:5e:1d:dc:72:de:ea:18:cd:2f:f7:d2:07:c2:58: c8:6b:1d:18:c0:5c:50:07:88:b0:ac:7c:19:df:04:2e:e0:5e: 18:5f:ba:27:62:f5:05:ff:34:72:24:c3:ce:b2:79:2e:29:e0: 52:7b:39:26:af:4f:43:5e:f1:bb:a2:cb:31:b4:a5:7c:df:27: 4a:9e:89:a7:06:8e:fa:dc:9a:22:8a:93:8a:53:6a:0d:5d:c2: 7a:bd:9e:dc:82:cb:dc:35:ee:63:25:45:d4:e1:bb:1e:ca:4d: 8e:4c:40:6f:6e:ee:90:fb:09:c6:e8:23:da:b5:55:0b:ec:c1: 7a:21:45:25:ea:c2:59:98:4a:eb:7b:b4:e7:65:ac:14:52:46: 68:7d:ea:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4hbSJnl3XVIkKU7M5aaMBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwNTEzMTMwMTAwWhcNMjYwNTE0MTMwMTAwWjAzMTEwLwYDVQQD EyhhZTFmY2I4ZjU4NjZiYmVlMzE1MTBmNThkYzlhODZlNDFjMDA0OTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLsHzDx/w4jVAUpMy2HJjwn5ibon RaW4HyOwxrkg6DOqVg+WixLgqiRRSxRj2VirPLLFz3gtLIznoZOk+OLkIV07CnfX x6tmucEp1lKIqXhpx/6wSJvU4MPV6VpaNJGzzETlpX6MC/ISKo4G9jjPlSM00x00 dMdtp+cRXXe6HeUisAtBusDPavkMDOqHFYcKGhobKZS6TDEOb+kYw9YsLWGOmZ+Z L2HWdXyYl+PGdEwtkmIsDdJ+Y5xScVCW1QAyDfEOCn/jVc9g/PothIKFk9A1yvJV Xgd349LxUoB0miFycpWLuqSUEyUc3Sgvg4ALtA3nVFxXY+/lsR2UKVuCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4fy49YZrvuMVEPWNyahuQcAElOMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAir7h6vZT dnq3LV85zR+LoNVclww7CZOR+4u7bq5VvsIbV1V3ACGvvHkgOccfXNTLqsRwCk0l +y1MjvCY/ipVY+/083l1QK2lhQtP8WHzire4RsFO9rOe2MLUXcchhtzP4vAtKaBm Zo04WN0zxZnGoV4d3HLe6hjNL/fSB8JYyGsdGMBcUAeIsKx8Gd8ELuBeGF+6J2L1 Bf80ciTDzrJ5LingUns5Jq9PQ17xu6LLMbSlfN8nSp6JpwaO+tyaIoqTilNqDV3C er2e3ILL3DXuYyVF1OG7HspNjkxAb27ukPsJxugj2rVVC+zBeiFFJerCWZhK63u0 52WsFFJGaH3q2Q== -----END CERTIFICATE-----Generated at Wed May 13 15:09:38 2026 by rpki-client