$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: AR2ZTUrRE+cPa9BUFwsKk/k5CAl6OLtXFsZquD0d5o8= Subject key identifier: BD:30:9E:D8:09:BB:76:BF:05:20:33:72:25:BA:A4:29:3A:4E:60:32 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019E1DFE6FCC390351F9399FF44E703AE463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 12D4 Signing time: Tue 12 May 2026 21:01:14 +0000 Manifest this update: Tue 12 May 2026 21:01:14 +0000 Manifest next update: Wed 13 May 2026 21:01:14 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: MdJL8xO0ZCWdjPzBX5tHvJd+QyuOJL4ZjXN5RplO2jE=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:6f:cc:39:03:51:f9:39:9f:f4:4e:70:3a:e4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: May 12 21:01:14 2026 GMT Not After : May 13 21:01:14 2026 GMT Subject: CN=bd309ed809bb76bf0520337225baa4293a4e6032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:3b:79:06:af:94:0e:76:68:37:66:f8:18: ed:cd:b8:4c:0c:5c:71:cc:6c:f3:f5:11:6f:8a:8c: b8:5d:de:77:38:9d:5c:7c:f5:9f:9c:b4:0a:d9:b4: e9:94:c5:3e:4c:02:bc:99:51:4d:e6:a3:6a:16:92: c9:04:28:06:c6:83:d1:ca:1b:d1:64:58:35:28:61: 6e:d9:cf:1f:49:59:43:0d:c5:0e:01:47:73:cf:12: 3f:be:21:b9:a5:40:43:3a:b4:0f:31:2b:68:3f:0a: 78:7c:ef:bf:c6:ec:45:b1:c9:d5:b3:ea:b6:37:f5: 73:4d:6c:95:4f:15:75:f0:dd:01:49:2c:10:7b:79: 8c:ea:bd:5f:d9:65:ee:ad:89:32:cf:ac:66:83:fe: 89:f5:25:a3:89:97:d1:7c:38:b5:44:9e:e9:b3:b7: 42:49:6c:2f:9f:8b:7f:fb:59:da:0c:0a:3d:9c:df: 9f:4f:f1:1a:b2:8d:1d:10:5d:91:5e:a4:41:d2:2f: 48:6f:27:db:a0:db:d2:9d:79:ca:4a:a3:a7:0b:df: b2:cd:31:c9:bd:4e:06:c6:6f:b8:67:0a:18:40:af: cb:0c:99:3d:f3:65:07:ec:3e:55:aa:34:26:83:ca: ed:b3:3b:a3:8e:d1:af:4f:09:76:ef:b3:ff:50:bb: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:30:9E:D8:09:BB:76:BF:05:20:33:72:25:BA:A4:29:3A:4E:60:32 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:26:9f:bd:a8:e5:6f:c9:55:c4:f2:ea:ac:17:0b:a1:58:20: eb:65:72:2f:ac:0e:ee:33:12:1e:ed:d3:f4:c0:5c:d8:5a:5c: 25:a4:9b:78:eb:e3:da:e9:f0:96:b3:42:76:68:52:cc:4b:41: 9a:f0:bd:4c:6c:a7:11:e7:50:a4:22:05:e9:29:bf:6e:3b:01: fc:72:9d:4f:4f:62:a3:bc:d1:6f:ab:78:cc:e6:78:d1:67:04: a7:16:60:df:1a:83:72:f0:a8:80:df:5a:d6:ff:89:c9:0d:80: 2c:ad:c3:a1:44:a0:d5:59:52:42:45:7c:48:90:ce:58:b6:93: 16:56:06:6e:41:20:5f:07:71:c5:95:71:25:61:c2:40:6b:ed: 7f:e8:17:68:be:77:45:4e:79:af:ca:70:f2:9e:54:e0:88:24: 8d:ee:15:2b:fa:50:6f:86:83:62:a9:2e:3a:ba:49:dd:ab:84: c6:db:9b:1d:9a:b3:ca:87:bb:2d:57:b9:62:18:76:2d:7f:40: c4:1f:70:d4:8f:53:c4:1f:16:22:8d:f4:04:02:33:b3:ce:c6: 74:ce:d7:03:21:ba:46:c5:42:26:79:7c:95:be:81:8f:5e:5a: 90:11:79:ef:4d:34:1d:a2:3d:f2:d5:c5:9c:30:be:4c:fc:71: e0:99:9a:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/m/MOQNR+Tmf9E5wOuRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNTEyMjEwMTE0WhcNMjYwNTEzMjEwMTE0WjAzMTEwLwYDVQQD EyhiZDMwOWVkODA5YmI3NmJmMDUyMDMzNzIyNWJhYTQyOTNhNGU2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttM7eQavlA52aDdm+BjtzbhMDFxx zGzz9RFvioy4Xd53OJ1cfPWfnLQK2bTplMU+TAK8mVFN5qNqFpLJBCgGxoPRyhvR ZFg1KGFu2c8fSVlDDcUOAUdzzxI/viG5pUBDOrQPMStoPwp4fO+/xuxFscnVs+q2 N/VzTWyVTxV18N0BSSwQe3mM6r1f2WXurYkyz6xmg/6J9SWjiZfRfDi1RJ7ps7dC SWwvn4t/+1naDAo9nN+fT/Easo0dEF2RXqRB0i9IbyfboNvSnXnKSqOnC9+yzTHJ vU4Gxm+4ZwoYQK/LDJk982UH7D5VqjQmg8rtszujjtGvTwl277P/ULuMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0wntgJu3a/BSAzciW6pCk6TmAyMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASafvajl b8lVxPLqrBcLoVgg62VyL6wO7jMSHu3T9MBc2FpcJaSbeOvj2unwlrNCdmhSzEtB mvC9TGynEedQpCIF6Sm/bjsB/HKdT09io7zRb6t4zOZ40WcEpxZg3xqDcvCogN9a 1v+JyQ2ALK3DoUSg1VlSQkV8SJDOWLaTFlYGbkEgXwdxxZVxJWHCQGvtf+gXaL53 RU55r8pw8p5U4Igkje4VK/pQb4aDYqkuOrpJ3auExtubHZqzyoe7LVe5Yhh2LX9A xB9w1I9TxB8WIo30BAIzs87GdM7XAyG6RsVCJnl8lb6Bj15akBF57000HaI98tXF nDC+TPxx4JmabQ== -----END CERTIFICATE-----Generated at Wed May 13 03:04:31 2026 by rpki-client