$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: aMLOlZURyijikZV1fqn/miW/+uG1v8B8EhzLz2WgDN8= Subject key identifier: 35:2B:71:54:38:18:4B:65:12:7C:4B:7D:28:8B:D8:ED:BD:39:CC:D3 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019E1D22A950E25DD3A8FDABF9C938AF5C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1A19 Signing time: Tue 12 May 2026 17:01:11 +0000 Manifest this update: Tue 12 May 2026 17:01:11 +0000 Manifest next update: Wed 13 May 2026 17:01:11 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: pTriFaJFnh2TurIJY6+G+MlCQWOOi+VaQtxoPLVimxc=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: INtC9yXsHGniRHYrKoSjBy9P9Kw.roa (hash: +R9r5OAR/vAcqDxt7siPETBqbjhDp2iQEbEl+e4C/Lo=) 11: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=) 12: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 13: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 14: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 15: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 16: u312KxFFDJlfhr5LqS3Q2p_us5w.roa (hash: 5O6DXvEWzNyBl60bcUjdQcMwnkfMPhxzOuDi1SOM5Ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:a9:50:e2:5d:d3:a8:fd:ab:f9:c9:38:af:5c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: May 12 17:01:11 2026 GMT Not After : May 13 17:01:11 2026 GMT Subject: CN=352b715438184b65127c4b7d288bd8edbd39ccd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:e8:a4:48:e0:5e:2f:23:e1:50:c7:0c:b0: 21:28:a0:15:00:67:5a:76:d3:c6:0a:92:c5:4a:c5: 40:b4:c9:4b:b7:37:75:22:e4:2d:92:3a:b2:0b:62: 50:5a:c7:53:81:71:c5:f1:36:84:0f:fa:37:56:44: 0c:54:e1:4f:9e:66:2a:c7:85:a1:75:b2:ec:ca:7f: 9c:0f:97:23:a0:7a:5e:18:a5:78:56:44:40:71:69: 12:f9:c3:83:3f:07:27:ef:d9:4b:30:2d:ac:98:d8: 15:0e:75:c7:51:04:f3:e5:66:22:0f:76:4e:90:4c: 08:0d:cf:8a:4c:e6:10:c3:83:9e:21:29:00:7a:b0: 74:ca:4d:11:a5:e0:5c:be:f5:be:a2:99:9e:d0:4b: 3b:04:43:aa:4f:c4:eb:b5:9f:c5:3b:5a:d5:8d:7e: 0f:04:f9:af:28:2e:1a:94:93:30:69:31:45:fc:bc: 6c:60:7f:e2:fb:f6:ba:ea:22:87:b3:aa:b2:3e:3a: 16:d3:02:94:a5:99:95:0e:cd:2f:44:d1:a7:e8:02: ee:ca:d1:1f:a3:91:10:d9:5f:8a:e0:a8:b5:50:c4: 66:00:e1:2e:67:3b:46:6a:fd:18:ad:4c:38:a3:c0: 6b:f2:43:02:bd:62:14:45:15:ee:95:13:da:47:74: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:71:54:38:18:4B:65:12:7C:4B:7D:28:8B:D8:ED:BD:39:CC:D3 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0a:1a:68:e8:49:22:9a:9b:67:d5:32:21:21:2c:6c:a9:0a: 7d:61:67:c0:9a:2f:fe:1c:e1:35:53:97:5a:7c:2f:24:e6:8b: 48:ce:e8:01:bb:4a:f4:c4:14:f1:5d:6f:89:ef:a2:b6:29:c5: bb:d2:5d:69:fd:6b:42:5b:37:a6:9f:31:72:84:ef:f1:36:48: bb:66:98:f7:bb:4f:d6:4a:34:ca:ea:26:e4:76:da:cd:38:e2: 52:4f:6b:c4:7f:1c:c3:8a:67:59:c3:be:5e:8a:06:39:7a:c7: 35:be:dd:99:54:a8:f8:15:21:c4:a8:58:ad:62:3a:75:d0:d0: 3d:27:be:c5:4f:50:de:a5:54:13:a2:88:20:98:57:7f:ee:ee: ea:c4:b0:d0:2b:cc:9c:f0:9d:92:ff:56:25:d6:d0:78:33:d8: eb:3a:c2:b5:21:30:44:98:58:96:f6:a7:7d:3e:10:40:f5:45: 3a:cf:37:33:18:7f:0d:03:08:f3:41:39:77:7d:0e:db:5a:f7: d9:fb:e8:67:f2:5b:92:c0:96:1f:bd:4e:7f:d7:0c:88:bc:50: 46:74:21:90:fb:28:bc:c2:77:c7:90:58:4a:e9:c4:f8:22:4c: 97:38:52:81:9f:42:bc:4e:b1:c8:63:dc:d8:25:17:aa:b7:9a: 3d:4f:4e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIqlQ4l3TqP2r+ck4r1yPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNTEyMTcwMTExWhcNMjYwNTEzMTcwMTExWjAzMTEwLwYDVQQD EygzNTJiNzE1NDM4MTg0YjY1MTI3YzRiN2QyODhiZDhlZGJkMzljY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx7opEjgXi8j4VDHDLAhKKAVAGda dtPGCpLFSsVAtMlLtzd1IuQtkjqyC2JQWsdTgXHF8TaED/o3VkQMVOFPnmYqx4Wh dbLsyn+cD5cjoHpeGKV4VkRAcWkS+cODPwcn79lLMC2smNgVDnXHUQTz5WYiD3ZO kEwIDc+KTOYQw4OeISkAerB0yk0RpeBcvvW+opme0Es7BEOqT8TrtZ/FO1rVjX4P BPmvKC4alJMwaTFF/LxsYH/i+/a66iKHs6qyPjoW0wKUpZmVDs0vRNGn6ALuytEf o5EQ2V+K4Ki1UMRmAOEuZztGav0YrUw4o8Br8kMCvWIURRXulRPaR3RpfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUrcVQ4GEtlEnxLfSiL2O29OczTMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAoaaOhJ IpqbZ9UyISEsbKkKfWFnwJov/hzhNVOXWnwvJOaLSM7oAbtK9MQU8V1vie+itinF u9Jdaf1rQls3pp8xcoTv8TZIu2aY97tP1ko0yuom5HbazTjiUk9rxH8cw4pnWcO+ XooGOXrHNb7dmVSo+BUhxKhYrWI6ddDQPSe+xU9Q3qVUE6KIIJhXf+7u6sSw0CvM nPCdkv9WJdbQeDPY6zrCtSEwRJhYlvanfT4QQPVFOs83Mxh/DQMI80E5d30O21r3 2fvoZ/JbksCWH71Of9cMiLxQRnQhkPsovMJ3x5BYSunE+CJMlzhSgZ9CvE6xyGPc 2CUXqreaPU9OMQ== -----END CERTIFICATE-----Generated at Wed May 13 00:49:05 2026 by rpki-client