$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: W14mA+kyNcG8gwvU31sVV3/rKCPgcHgfkM/32Wry49s= Subject key identifier: 3B:DF:04:2C:33:0F:D1:44:1F:97:75:35:5B:B4:02:EA:FF:CD:2D:5B Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019E1F119C93AB43093D1BD34650F4AE2472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1913 Signing time: Wed 13 May 2026 02:01:48 +0000 Manifest this update: Wed 13 May 2026 02:01:48 +0000 Manifest next update: Thu 14 May 2026 02:01:48 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: kTGX+OHn3hw0KxVJsRHmTcPRSpaMfndXoDrRXfd0I80=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:11:9c:93:ab:43:09:3d:1b:d3:46:50:f4:ae:24:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: May 13 02:01:48 2026 GMT Not After : May 14 02:01:48 2026 GMT Subject: CN=3bdf042c330fd1441f9775355bb402eaffcd2d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:26:bf:33:f5:ec:5d:b3:ed:1b:4c:11:73: f6:02:d2:52:83:56:67:cc:9f:ac:69:a9:38:34:53: 24:aa:88:50:a5:b7:d7:6d:b2:d8:e7:59:bf:b1:0f: ae:f8:62:f5:1f:e2:68:1e:d1:1c:96:c6:3e:69:18: 15:25:8c:45:00:f1:b2:44:9d:ee:ab:25:6d:4f:8a: c0:5a:03:51:d6:82:03:39:b5:f2:a2:5f:3a:96:d0: ba:90:08:3a:f6:cd:42:6a:fe:23:3f:c4:41:b7:59: 38:b6:b6:93:0d:b2:00:eb:ed:cb:cf:d1:e1:cd:5d: 4e:c2:71:72:23:54:f0:3f:ad:0a:4b:48:6d:cd:f6: 78:09:de:4c:5b:3c:15:0e:69:9b:22:b4:ee:4f:29: 45:0e:2f:c1:a0:af:84:9c:56:79:a8:d5:34:a8:a3: 82:3e:63:40:e9:90:ab:93:12:b8:ca:e7:cd:f7:75: 66:05:4c:d9:61:89:04:a8:0c:f6:e1:cd:dd:ff:0a: be:fc:1e:7d:99:52:0c:8c:15:f2:2a:3c:26:b9:11: e1:8f:3d:bc:a0:cc:26:03:b8:67:69:72:e5:50:43: 5f:c0:8e:63:97:4b:ea:72:22:b7:9f:07:08:7b:da: 2f:b0:28:1a:21:b4:e5:cd:a7:76:12:40:cc:c5:5f: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DF:04:2C:33:0F:D1:44:1F:97:75:35:5B:B4:02:EA:FF:CD:2D:5B X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bb:d9:9d:3f:4e:e7:fb:13:a3:89:90:dc:46:8a:71:70:50: 1c:9b:99:32:57:14:c7:1c:d8:d7:4c:67:d4:07:6e:c7:24:3f: 5f:48:49:23:c8:8f:65:96:f2:a7:6c:91:59:4b:07:fd:bb:07: 81:81:c3:42:dc:2d:38:f5:ca:f5:01:e9:21:74:05:cf:6b:9d: 03:23:a1:27:10:aa:26:f5:94:12:43:5e:e8:b0:e2:a9:b6:ad: 5e:69:0e:ff:3c:11:77:28:1c:05:7f:6c:58:f4:30:95:cb:03: ce:c4:06:a6:ba:3b:da:d6:40:ea:6f:d4:db:9a:3a:8f:7f:b9: 90:33:af:7e:45:f7:69:75:13:6c:33:31:b3:6e:d6:28:1f:f1: fc:a7:5d:15:a8:af:99:2c:32:2e:7d:53:0f:5a:72:d3:6c:41: 4c:0b:97:4f:cb:36:c6:40:2b:cd:89:e7:5f:9b:b9:1f:8b:73: 9b:4e:7e:ba:56:ca:6d:87:95:ce:a6:93:38:31:a8:ab:03:de: d2:ce:99:d1:42:6a:90:15:a1:5a:61:8b:4c:ec:ad:8f:05:35: 91:10:e8:3c:ef:65:a7:bb:2f:c4:ba:65:04:0f:15:92:94:91: a0:3a:fb:d4:09:d3:75:4b:92:18:14:9f:5b:d5:53:a5:e7:5b: 40:53:21:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fEZyTq0MJPRvTRlD0riRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwNTEzMDIwMTQ4WhcNMjYwNTE0MDIwMTQ4WjAzMTEwLwYDVQQD EygzYmRmMDQyYzMzMGZkMTQ0MWY5Nzc1MzU1YmI0MDJlYWZmY2QyZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIEmvzP17F2z7RtMEXP2AtJSg1Zn zJ+saak4NFMkqohQpbfXbbLY51m/sQ+u+GL1H+JoHtEclsY+aRgVJYxFAPGyRJ3u qyVtT4rAWgNR1oIDObXyol86ltC6kAg69s1Cav4jP8RBt1k4traTDbIA6+3Lz9Hh zV1OwnFyI1TwP60KS0htzfZ4Cd5MWzwVDmmbIrTuTylFDi/BoK+EnFZ5qNU0qKOC PmNA6ZCrkxK4yufN93VmBUzZYYkEqAz24c3d/wq+/B59mVIMjBXyKjwmuRHhjz28 oMwmA7hnaXLlUENfwI5jl0vqciK3nwcIe9ovsCgaIbTlzad2EkDMxV+HEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvfBCwzD9FEH5d1NVu0Aur/zS1bMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrvZnT9O 5/sTo4mQ3EaKcXBQHJuZMlcUxxzY10xn1AduxyQ/X0hJI8iPZZbyp2yRWUsH/bsH gYHDQtwtOPXK9QHpIXQFz2udAyOhJxCqJvWUEkNe6LDiqbatXmkO/zwRdygcBX9s WPQwlcsDzsQGpro72tZA6m/U25o6j3+5kDOvfkX3aXUTbDMxs27WKB/x/KddFaiv mSwyLn1TD1py02xBTAuXT8s2xkArzYnnX5u5H4tzm05+ulbKbYeVzqaTODGoqwPe 0s6Z0UJqkBWhWmGLTOytjwU1kRDoPO9lp7svxLplBA8VkpSRoDr71AnTdUuSGBSf W9VTpedbQFMh7Q== -----END CERTIFICATE-----Generated at Wed May 13 11:40:02 2026 by rpki-client