$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: Omcd+ERWtnwipQTsLQgZYjz6sU6OAhdpC72W/jgOwZ4= Subject key identifier: 7C:55:B7:BF:B2:74:B9:BE:D7:9D:B6:F6:E6:9F:CC:05:96:C2:1C:FD Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019E1CEB5AB391EFBBAA0041401236A4C394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1994 Signing time: Tue 12 May 2026 16:00:46 +0000 Manifest this update: Tue 12 May 2026 16:00:46 +0000 Manifest next update: Wed 13 May 2026 16:00:46 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (hash: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU=) 3: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 4: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 5: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 6: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 7: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 10: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (hash: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: bwHzKtCRzkUxVEcZdJ/0CXgoxPoVn6GLY7BolZYTD2I=) 14: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 15: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:5a:b3:91:ef:bb:aa:00:41:40:12:36:a4:c3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: May 12 16:00:46 2026 GMT Not After : May 13 16:00:46 2026 GMT Subject: CN=7c55b7bfb274b9bed79db6f6e69fcc0596c21cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:66:21:7f:77:d7:9c:47:d9:6c:91:2d:df: 60:99:35:de:64:a1:1c:c9:ac:bb:2a:59:93:25:29: ea:3e:10:1a:0d:2e:93:90:79:15:ad:f1:35:ab:e4: 8f:74:9b:3a:49:8e:7b:2d:d3:b3:67:a2:82:f0:40: bd:e2:a2:50:32:8a:9f:44:4b:55:b9:bd:ae:9f:0c: 85:e0:44:7a:e6:1d:c0:fa:b8:1c:11:89:28:24:40: d7:78:70:bf:af:36:ed:9c:3e:f6:a4:7a:55:0e:bb: b3:85:f1:84:3d:56:cb:69:69:2f:71:5b:78:b0:31: da:d8:cf:89:7e:19:61:0e:97:d6:bb:21:fb:ea:68: 5f:23:c3:e0:13:b2:b0:fa:a7:c0:61:48:32:34:88: cb:bc:09:2c:8b:fd:ca:ed:29:d0:a5:17:f7:ba:d4: ff:2a:e1:1b:34:ff:f7:0f:ff:b6:5f:fb:cf:6d:3c: e7:02:bd:5b:ec:27:3b:db:d0:8c:12:13:ef:f1:22: b6:74:e9:c2:97:58:80:65:f9:56:f9:c4:25:22:31: a3:66:ba:74:c1:c7:49:43:57:ed:1f:e5:da:2d:ef: f0:62:65:6a:d4:82:2d:13:14:55:fa:35:c7:34:0a: de:d1:91:2d:7e:6f:e3:00:49:a8:c0:c6:30:ff:64: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:B7:BF:B2:74:B9:BE:D7:9D:B6:F6:E6:9F:CC:05:96:C2:1C:FD X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c9:d9:99:0c:0c:52:62:84:a4:7b:89:61:a2:a6:73:66:4c: fd:55:de:1d:0f:eb:12:09:de:e6:cf:b1:81:a2:29:af:6b:6c: 6c:76:48:f8:ee:90:e9:ee:f3:3f:d7:0c:f9:d5:f1:ed:08:15: 33:6b:ea:5f:35:11:88:2b:1f:55:03:b7:b5:e5:0c:a5:e8:0b: fe:81:e5:26:ce:89:b8:e6:dc:1b:b5:ef:fb:9e:ea:91:4c:ea: e9:60:39:87:01:ff:89:6f:57:af:68:fd:96:b5:85:46:92:5d: 2e:a2:09:fd:a1:f5:f1:23:39:c3:a4:d7:e1:7c:10:bc:9a:2d: 91:47:45:aa:f1:07:3e:c8:c7:e3:36:8d:62:30:71:dc:b9:2a: b2:3b:3c:2a:a9:83:d7:05:4f:35:42:32:88:8b:5a:a7:9c:e1: 6b:e3:94:a1:b5:ad:65:41:ab:7b:07:fa:f7:8a:6c:ca:b1:64: f4:65:b6:97:6e:6f:3d:92:81:42:59:d0:c4:ec:68:37:d1:80: 56:76:8f:82:88:a4:52:bd:46:e1:b9:ca:e9:65:9a:61:49:55: c1:f6:bd:aa:35:82:68:cf:02:68:7d:6a:84:fe:c3:2c:dc:27: a8:59:8b:ee:86:91:f6:0f:4f:3f:58:49:1a:3d:25:26:5f:e7: 4f:46:9c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c61qzke+7qgBBQBI2pMOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwNTEyMTYwMDQ2WhcNMjYwNTEzMTYwMDQ2WjAzMTEwLwYDVQQD Eyg3YzU1YjdiZmIyNzRiOWJlZDc5ZGI2ZjZlNjlmY2MwNTk2YzIxY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO9mIX9315xH2WyRLd9gmTXeZKEc yay7KlmTJSnqPhAaDS6TkHkVrfE1q+SPdJs6SY57LdOzZ6KC8EC94qJQMoqfREtV ub2unwyF4ER65h3A+rgcEYkoJEDXeHC/rzbtnD72pHpVDruzhfGEPVbLaWkvcVt4 sDHa2M+JfhlhDpfWuyH76mhfI8PgE7Kw+qfAYUgyNIjLvAksi/3K7SnQpRf3utT/ KuEbNP/3D/+2X/vPbTznAr1b7Cc729CMEhPv8SK2dOnCl1iAZflW+cQlIjGjZrp0 wcdJQ1ftH+XaLe/wYmVq1IItExRV+jXHNAre0ZEtfm/jAEmowMYw/2RSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxVt7+ydLm+15229uafzAWWwhz9MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMnZmQwM UmKEpHuJYaKmc2ZM/VXeHQ/rEgne5s+xgaIpr2tsbHZI+O6Q6e7zP9cM+dXx7QgV M2vqXzURiCsfVQO3teUMpegL/oHlJs6JuObcG7Xv+57qkUzq6WA5hwH/iW9Xr2j9 lrWFRpJdLqIJ/aH18SM5w6TX4XwQvJotkUdFqvEHPsjH4zaNYjBx3Lkqsjs8KqmD 1wVPNUIyiItap5zha+OUobWtZUGrewf694psyrFk9GW2l25vPZKBQlnQxOxoN9GA VnaPgoikUr1G4bnK6WWaYUlVwfa9qjWCaM8CaH1qhP7DLNwnqFmL7oaR9g9PP1hJ Gj0lJl/nT0acxw== -----END CERTIFICATE-----Generated at Wed May 13 03:35:27 2026 by rpki-client