$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: icfS9AUGonnPL6CIojcdwwFJKUhwyekij+PoWuK7xH4= Subject key identifier: 06:0C:9E:06:7D:B9:C1:90:B0:1A:6D:DD:C5:30:FE:50:8D:F5:1F:C7 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019E1D228DB7C9D68790800FCE755FFA1CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 19C1 Signing time: Tue 12 May 2026 17:01:04 +0000 Manifest this update: Tue 12 May 2026 17:01:04 +0000 Manifest next update: Wed 13 May 2026 17:01:04 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 3: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 4: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 5: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 6: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 7: TqC5cslAjOBidLHAZI8XGLZ-bAQ.roa (hash: bLuUwhyQVd1VS9DwSq655y43wtPrqbuVYv80UPVmwic=) 8: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 9: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: yNRJLZv4o5a9pxCLjTGkVsmP2qwEkqA8ALaEH8H9CtE=) 10: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 11: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:8d:b7:c9:d6:87:90:80:0f:ce:75:5f:fa:1c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: May 12 17:01:04 2026 GMT Not After : May 13 17:01:04 2026 GMT Subject: CN=060c9e067db9c190b01a6dddc530fe508df51fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:a4:fc:76:78:f5:2f:d2:d3:52:d9:66:47: 4f:db:f9:6f:13:44:fe:70:ff:ae:17:a9:99:ed:d4: ec:c8:93:24:9a:b1:9d:3a:e3:82:09:6b:f0:5b:a1: 15:e5:36:b3:df:f3:33:c0:eb:7c:9f:2c:91:b2:db: 59:14:30:ce:f9:81:4f:a4:fb:06:ed:6f:a2:13:28: 24:b0:2c:3f:f9:36:70:67:ad:51:8c:79:f9:58:7d: 02:39:8c:92:94:eb:eb:b0:a4:ab:bc:63:4f:f0:4a: ef:1a:17:1c:51:6f:32:39:eb:b4:05:56:8d:4c:4b: 58:f2:7d:67:f9:9d:3c:29:52:3e:28:59:34:07:3c: d4:fb:14:3a:27:88:15:12:b5:d0:c3:20:46:8c:aa: 5f:97:90:5d:3b:58:45:59:66:e3:a6:a8:20:cc:62: d5:59:d6:f9:8b:0c:54:49:cb:37:b7:2c:3a:48:df: ba:45:4f:49:1f:dd:a2:85:d8:22:5c:e5:8b:97:39: f2:c6:bb:65:b2:05:dd:30:b9:01:73:05:15:c7:6d: 43:e3:dc:b9:20:a5:66:e7:bf:9a:69:61:6d:50:bc: 10:7b:ea:45:d3:36:61:de:34:88:44:ba:6a:88:3b: 77:02:c6:53:01:5f:4e:b9:9d:a1:35:a9:cb:e3:1a: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:9E:06:7D:B9:C1:90:B0:1A:6D:DD:C5:30:FE:50:8D:F5:1F:C7 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:96:46:f8:4d:5f:c3:88:f1:07:24:27:95:f4:b6:e5:c6:46: 05:e7:e8:35:e6:d7:62:ec:c2:b7:c6:37:5a:ee:9f:14:0b:e5: f3:23:67:35:cb:5f:ef:65:de:fe:61:3a:f2:20:ba:c8:97:9a: 1b:71:20:5e:17:1f:b2:7b:c2:0f:e2:60:9d:85:cd:dc:c2:3c: 16:9b:6d:87:80:d5:36:74:2f:c0:96:5b:3d:12:de:ad:39:8d: 88:bd:09:dc:c7:1f:b9:9c:2f:2c:5d:c9:74:3a:21:ff:36:ef: 1a:d5:f6:88:06:7a:77:86:f8:5f:be:df:40:5f:24:fe:2c:22: 7c:8f:6d:e3:70:1b:4c:46:85:af:85:61:f7:b7:6d:e5:4f:c1: c8:ea:a6:85:50:5f:0d:fb:f1:b8:17:f0:48:41:f5:20:31:22: fc:c5:83:fe:0f:eb:92:f1:e5:53:3e:80:3f:34:bd:da:cf:c2: df:76:a8:fe:95:94:01:21:cb:f7:54:b0:aa:51:b4:4e:f5:21: 29:32:69:e0:e9:d0:0a:94:34:05:5c:e5:fc:14:a3:83:aa:20: ac:a1:c2:0d:2c:51:e0:09:40:e1:87:41:63:e9:70:88:83:1c: e4:6c:b2:ac:2c:65:53:3e:86:3a:84:90:78:00:ca:ec:fd:22: d0:41:e4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIo23ydaHkIAPznVf+hzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwNTEyMTcwMTA0WhcNMjYwNTEzMTcwMTA0WjAzMTEwLwYDVQQD EygwNjBjOWUwNjdkYjljMTkwYjAxYTZkZGRjNTMwZmU1MDhkZjUxZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqk/HZ49S/S01LZZkdP2/lvE0T+ cP+uF6mZ7dTsyJMkmrGdOuOCCWvwW6EV5Taz3/MzwOt8nyyRsttZFDDO+YFPpPsG 7W+iEygksCw/+TZwZ61RjHn5WH0COYySlOvrsKSrvGNP8ErvGhccUW8yOeu0BVaN TEtY8n1n+Z08KVI+KFk0BzzU+xQ6J4gVErXQwyBGjKpfl5BdO1hFWWbjpqggzGLV Wdb5iwxUScs3tyw6SN+6RU9JH92ihdgiXOWLlznyxrtlsgXdMLkBcwUVx21D49y5 IKVm57+aaWFtULwQe+pF0zZh3jSIRLpqiDt3AsZTAV9OuZ2hNanL4xoQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYMngZ9ucGQsBpt3cUw/lCN9R/HMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5ZG+E1f w4jxByQnlfS25cZGBefoNebXYuzCt8Y3Wu6fFAvl8yNnNctf72Xe/mE68iC6yJea G3EgXhcfsnvCD+JgnYXN3MI8Fptth4DVNnQvwJZbPRLerTmNiL0J3McfuZwvLF3J dDoh/zbvGtX2iAZ6d4b4X77fQF8k/iwifI9t43AbTEaFr4Vh97dt5U/ByOqmhVBf DfvxuBfwSEH1IDEi/MWD/g/rkvHlUz6APzS92s/C33ao/pWUASHL91SwqlG0TvUh KTJp4OnQCpQ0BVzl/BSjg6ogrKHCDSxR4AlA4YdBY+lwiIMc5GyyrCxlUz6GOoSQ eADK7P0i0EHkBw== -----END CERTIFICATE-----Generated at Wed May 13 03:06:39 2026 by rpki-client