$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json) Hash identifier: 3ZyjGrzkESDn9EEFrDvcNTTXKH08LqARrywoWSIxRjs= Subject key identifier: F3:0C:08:F9:AA:06:DC:8A:9A:63:8C:3A:58:6B:F1:13:63:0B:CF:B2 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019E1E359A3D3BAA28EEAD13CD62DF8D099D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft Manifest number: 13BE Signing time: Tue 12 May 2026 22:01:29 +0000 Manifest this update: Tue 12 May 2026 22:01:29 +0000 Manifest next update: Wed 13 May 2026 22:01:29 +0000 Files and hashes: 1: 3MWi_sarB7UU3XV2Gox6fZeLswg.roa (hash: HWOigSGmjipZJyJg7lhUPHpbYL3EZByxIWX1N59lfc0=) 2: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (hash: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE=) 3: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (hash: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0=) 4: DZyx25x41UHPF3i1Veq-pYVddR4.roa (hash: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ=) 5: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (hash: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E=) 6: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: r7fhntMlPB+5nTjV82XZhkpFiJ0CL9XDjvLfeLEGH/E=) 7: Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa (hash: Osr/NiaK8ha6IKNjhgOfYzSiPqzBhMGmuLXsdthjQ3k=) 8: ay8yAoc88wAj2V0brdWw5VdAYUE.roa (hash: uEoLe7XoIo5DxCpUn3Ll+nX3PqXVlfbcylC6QSJzhLc=) 9: nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa (hash: 0oA4F2JQGbyYxaGrlY3X98PqMdWzLbRbe+bzFWz2G3g=) 10: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (hash: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:9a:3d:3b:aa:28:ee:ad:13:cd:62:df:8d:09:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: May 12 22:01:29 2026 GMT Not After : May 13 22:01:29 2026 GMT Subject: CN=f30c08f9aa06dc8a9a638c3a586bf113630bcfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:05:e0:9c:94:de:39:7d:d8:23:96:82:bc: 5f:10:4e:a5:a9:e3:91:91:cb:e8:b7:63:dc:79:15: bd:d6:ca:9f:53:2a:39:bd:47:49:86:f8:54:cc:bd: 04:61:fc:4d:3f:45:7f:7b:22:e6:5b:13:a0:ea:76: ae:09:cb:b2:13:a8:99:48:23:7c:f4:ad:47:72:53: ad:a6:89:86:9c:cf:75:2d:9d:27:22:cb:56:e2:d6: 55:42:d3:23:32:15:8e:a7:06:e7:a9:31:5a:6b:af: 66:ba:ea:89:de:5d:72:03:7e:18:71:80:76:bf:98: 84:37:9c:9b:f2:75:0c:dc:e8:cb:24:6b:5c:7d:dd: 18:38:e8:ee:f8:04:e3:f6:fd:7d:26:33:72:c3:bd: 39:f6:10:eb:d6:bb:63:40:4f:70:fd:31:62:f9:1f: 8d:3f:b2:c8:6b:19:35:53:3c:98:0a:6f:ea:c1:52: 44:f7:73:e8:d9:85:2d:33:e3:63:89:f5:f5:52:80: 34:fc:c0:1d:79:ee:f7:dc:cc:b2:62:25:84:0d:c0: 2b:46:a9:95:89:73:25:9f:99:75:44:e8:d0:11:0e: 89:d3:c4:8c:8d:d9:80:fd:b9:55:41:68:53:48:dc: 8d:15:20:22:68:39:ff:18:94:d2:aa:87:59:a4:ca: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0C:08:F9:AA:06:DC:8A:9A:63:8C:3A:58:6B:F1:13:63:0B:CF:B2 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5b:5b:75:64:eb:7d:68:19:e8:87:b7:c4:29:34:45:ed:51: 73:fb:11:bd:e6:af:00:ec:e1:fa:3f:89:fc:fc:45:bf:7b:72: 9d:b0:be:31:60:ae:5f:16:28:8c:3b:af:1d:14:70:6c:69:3c: 0a:34:fd:7d:5c:1c:31:90:a9:42:4f:84:f8:22:25:05:e0:a1: ec:0d:57:e2:82:1f:bd:f1:55:33:6c:ab:23:cd:64:08:b4:79: 47:93:f5:00:06:04:d8:a1:4c:2f:a3:ff:c6:d4:db:58:a9:0b: 26:c1:b3:96:42:b7:6f:83:7d:40:0b:bf:75:76:72:e9:8a:a4: cd:1c:83:07:f6:76:48:c8:d9:4d:22:16:a5:c3:61:89:3f:76: 18:5c:40:a7:1e:b1:b4:93:ac:ae:be:70:56:9a:4d:1d:cd:43: 96:83:a7:00:1d:d0:88:f8:02:58:be:8f:f8:10:de:fa:e6:8c: 52:e7:f2:48:be:8a:c6:46:29:ca:c2:57:05:4f:b4:b1:ba:cc: 2d:d7:90:49:5d:ad:6c:6e:b6:d4:c0:1b:79:8c:0d:b6:17:14: 31:18:a6:f6:65:f8:3f:c6:4a:e9:85:4b:a1:25:15:2c:bc:6c: 9c:99:80:d4:63:bf:4c:84:b1:ca:41:ff:c7:4f:f3:28:ae:9f: 1f:b3:51:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNZo9O6oo7q0TzWLfjQmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwNTEyMjIwMTI5WhcNMjYwNTEzMjIwMTI5WjAzMTEwLwYDVQQD EyhmMzBjMDhmOWFhMDZkYzhhOWE2MzhjM2E1ODZiZjExMzYzMGJjZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjAF4JyU3jl92COWgrxfEE6lqeOR kcvot2PceRW91sqfUyo5vUdJhvhUzL0EYfxNP0V/eyLmWxOg6nauCcuyE6iZSCN8 9K1HclOtpomGnM91LZ0nIstW4tZVQtMjMhWOpwbnqTFaa69muuqJ3l1yA34YcYB2 v5iEN5yb8nUM3OjLJGtcfd0YOOju+ATj9v19JjNyw7059hDr1rtjQE9w/TFi+R+N P7LIaxk1UzyYCm/qwVJE93Po2YUtM+NjifX1UoA0/MAdee733MyyYiWEDcArRqmV iXMln5l1ROjQEQ6J08SMjdmA/blVQWhTSNyNFSAiaDn/GJTSqodZpMpaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMMCPmqBtyKmmOMOlhr8RNjC8+yMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1tbdWTr fWgZ6Ie3xCk0Re1Rc/sRveavAOzh+j+J/PxFv3tynbC+MWCuXxYojDuvHRRwbGk8 CjT9fVwcMZCpQk+E+CIlBeCh7A1X4oIfvfFVM2yrI81kCLR5R5P1AAYE2KFML6P/ xtTbWKkLJsGzlkK3b4N9QAu/dXZy6YqkzRyDB/Z2SMjZTSIWpcNhiT92GFxApx6x tJOsrr5wVppNHc1DloOnAB3QiPgCWL6P+BDe+uaMUufySL6KxkYpysJXBU+0sbrM LdeQSV2tbG621MAbeYwNthcUMRim9mX4P8ZK6YVLoSUVLLxsnJmA1GO/TISxykH/ x0/zKK6fH7NRCw== -----END CERTIFICATE-----Generated at Wed May 13 03:11:33 2026 by rpki-client