$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: OokCQ9mgsl0QjcCyLvxsSqTGwbJXEUbR2UF4k+LbgGU= Subject key identifier: 22:57:33:42:AB:CB:97:13:25:D2:C2:8B:EA:86:83:49:F5:D5:B3:FC Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019E1DFE83B4195FB46D99CF95C1985201EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1930 Signing time: Tue 12 May 2026 21:01:19 +0000 Manifest this update: Tue 12 May 2026 21:01:19 +0000 Manifest next update: Wed 13 May 2026 21:01:19 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: hqnHPIWQmV2kkmk0TcoSLTxpM280AhXpQNFQpRKw6CQ=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:83:b4:19:5f:b4:6d:99:cf:95:c1:98:52:01:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: May 12 21:01:19 2026 GMT Not After : May 13 21:01:19 2026 GMT Subject: CN=22573342abcb971325d2c28bea868349f5d5b3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:a3:9c:a0:e9:27:5b:1f:c6:ce:b7:36:72: 15:00:ac:63:7c:f5:2c:01:d0:51:07:c9:51:b3:75: cc:d3:f9:85:87:24:a7:a5:2f:43:61:af:b4:f5:88: 1d:41:72:ad:08:51:4d:2f:cc:df:87:ea:b7:d8:08: d7:17:23:a2:b1:a1:25:08:03:74:a4:0c:1f:71:b5: ea:5c:2c:30:9a:a1:25:84:47:90:54:50:03:59:d1: b1:48:2c:6b:0c:2e:79:fb:0c:83:4a:96:bb:8e:3e: ff:30:3e:4a:2e:8b:8f:45:b4:e6:76:7b:4f:e9:03: 4f:53:60:9c:7a:b1:2c:b0:ef:34:c1:35:23:bf:5e: b9:46:12:7b:07:7f:87:fd:7a:8a:50:5b:da:37:cb: fd:a7:c6:76:84:f5:68:a5:07:be:33:a4:13:26:94: 4b:f8:74:ea:2c:74:0c:02:bf:26:4e:63:0f:fa:3f: 7a:a3:8d:d0:78:be:b3:db:ac:34:46:5f:0e:01:10: 72:7d:48:9a:f8:3b:06:8b:78:ab:11:9d:5c:2b:97: 86:92:9a:d7:d2:56:a4:a0:17:13:05:90:94:78:1e: 3c:f3:2a:8b:da:a2:19:24:7f:a3:57:9a:cb:ca:bc: 01:5f:55:dd:2d:dc:5b:7a:9e:2b:d2:ff:95:ee:5b: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:57:33:42:AB:CB:97:13:25:D2:C2:8B:EA:86:83:49:F5:D5:B3:FC X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:08:ab:be:f0:80:a8:97:10:fb:9f:9b:b9:63:54:c2:d0:d7: 9c:e8:6a:79:98:e9:ea:1d:29:f8:87:cf:94:dd:4e:14:b2:43: b6:cc:2d:9e:26:b9:93:23:7d:8f:df:43:05:61:f7:ed:b3:78: 78:49:ee:61:6f:cc:17:df:8e:0a:b3:13:5d:64:95:77:25:6b: 24:8f:9a:f2:8e:4d:f1:49:00:6f:af:24:a5:01:20:95:01:64: c5:0d:cf:46:4b:ea:d3:3b:82:67:81:e6:19:58:78:98:47:a7: de:2d:86:be:e1:4b:00:33:7c:fa:af:7d:07:8f:53:b9:58:0e: eb:b1:39:84:ca:70:d8:e4:9d:ca:41:a4:16:ff:64:74:f5:85: d5:6a:5d:96:5e:4e:67:46:26:5f:24:5a:bd:23:1a:df:53:8f: ac:22:e7:c5:97:e9:af:c9:d2:63:34:04:39:ec:93:9b:99:d7: 21:01:c7:ca:09:1b:ed:33:07:d3:2a:31:64:38:6d:44:62:c7: 8a:8b:6b:57:eb:c8:1e:95:7a:1e:42:f1:74:10:49:11:c4:aa: 0b:36:9e:eb:34:04:04:46:ce:5d:55:e3:23:f6:1a:6d:80:a7: b0:c4:7b:8e:54:93:fa:3b:70:17:dd:1d:81:6c:d5:46:76:24: 7f:4d:c6:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/oO0GV+0bZnPlcGYUgHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNTEyMjEwMTE5WhcNMjYwNTEzMjEwMTE5WjAzMTEwLwYDVQQD EygyMjU3MzM0MmFiY2I5NzEzMjVkMmMyOGJlYTg2ODM0OWY1ZDViM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAqjnKDpJ1sfxs63NnIVAKxjfPUs AdBRB8lRs3XM0/mFhySnpS9DYa+09YgdQXKtCFFNL8zfh+q32AjXFyOisaElCAN0 pAwfcbXqXCwwmqElhEeQVFADWdGxSCxrDC55+wyDSpa7jj7/MD5KLouPRbTmdntP 6QNPU2CcerEssO80wTUjv165RhJ7B3+H/XqKUFvaN8v9p8Z2hPVopQe+M6QTJpRL +HTqLHQMAr8mTmMP+j96o43QeL6z26w0Rl8OARByfUia+DsGi3irEZ1cK5eGkprX 0lakoBcTBZCUeB488yqL2qIZJH+jV5rLyrwBX1XdLdxbep4r0v+V7ltm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJXM0Kry5cTJdLCi+qGg0n11bP8MB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggirvvCA qJcQ+5+buWNUwtDXnOhqeZjp6h0p+IfPlN1OFLJDtswtnia5kyN9j99DBWH37bN4 eEnuYW/MF9+OCrMTXWSVdyVrJI+a8o5N8UkAb68kpQEglQFkxQ3PRkvq0zuCZ4Hm GVh4mEen3i2GvuFLADN8+q99B49TuVgO67E5hMpw2OSdykGkFv9kdPWF1Wpdll5O Z0YmXyRavSMa31OPrCLnxZfpr8nSYzQEOeyTm5nXIQHHygkb7TMH0yoxZDhtRGLH iotrV+vIHpV6HkLxdBBJEcSqCzae6zQEBEbOXVXjI/YabYCnsMR7jlST+jtwF90d gWzVRnYkf03GWw== -----END CERTIFICATE-----Generated at Wed May 13 04:46:50 2026 by rpki-client