$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: 8TDwb4JMUbOPMQClYYLC3nZxem7Hw8UtBCCTnE/1uOI= Subject key identifier: 66:72:F1:E2:B5:60:3C:DD:AB:6C:6D:A4:B2:2D:03:7B:AA:3C:C0:0A Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019E1D59721CA7F4D67055ECFC8FA3FA4DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 01C6 Signing time: Tue 12 May 2026 18:01:01 +0000 Manifest this update: Tue 12 May 2026 18:01:01 +0000 Manifest next update: Wed 13 May 2026 18:01:01 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: CfM76n34AWD3DHpF5BV6IGsyulqi5r5W/0TkC0c1E0s=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:72:1c:a7:f4:d6:70:55:ec:fc:8f:a3:fa:4d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: May 12 18:01:01 2026 GMT Not After : May 13 18:01:01 2026 GMT Subject: CN=6672f1e2b5603cddab6c6da4b22d037baa3cc00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:44:cd:f4:51:41:f7:43:72:41:b6:ef:84: 35:08:24:1f:90:c1:0d:1d:7b:98:83:82:c3:26:74: 43:52:b7:13:8a:fe:2d:f2:4a:18:9c:b3:6a:44:76: 11:94:40:be:e7:67:0d:1a:47:e6:cd:e6:9b:3c:d0: 10:3a:d2:e1:17:1e:bc:e4:78:50:97:15:ba:54:89: 96:92:64:02:07:be:8c:a6:1f:6d:b0:ee:9b:78:f0: 42:31:92:22:6a:ac:9a:54:f5:c4:8a:62:25:65:8d: fd:38:7d:89:31:db:fc:8d:3f:a3:d7:ac:41:f6:34: c7:f0:bb:23:b0:31:45:19:28:85:77:2a:5d:e5:99: b4:b3:98:0b:98:e6:4a:41:80:8e:2d:f5:ca:35:30: ea:cd:22:46:29:cf:05:14:a7:be:6d:d3:8d:bd:d5: a0:9d:8f:a2:1f:72:b0:32:5c:06:2f:5c:89:47:52: 32:52:59:c5:c2:87:7f:b8:96:bc:a9:54:c6:4d:df: b1:38:0e:82:ec:60:4e:12:3f:d3:b1:dd:a4:70:21: 42:c4:fc:9e:62:c7:25:59:38:97:42:3b:cb:ac:c0: 54:93:4a:a8:63:2e:c9:31:25:9b:de:9b:e1:12:bb: 4a:d4:0e:a7:92:d7:d2:03:04:7b:05:c6:4b:06:a2: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:F1:E2:B5:60:3C:DD:AB:6C:6D:A4:B2:2D:03:7B:AA:3C:C0:0A X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:1b:ed:67:8b:3c:9c:ff:60:d5:b1:87:17:df:c1:cc:de:5c: ea:01:7c:d6:8f:12:60:e5:8a:85:c5:f9:61:96:fd:99:a0:d8: b0:2f:d5:83:53:2c:6a:b1:48:e3:47:0a:17:98:38:4b:63:3a: c8:e8:17:42:54:b4:b1:4a:ef:f0:92:fd:d1:1b:42:04:c3:0e: 60:5e:b5:07:93:ad:e5:9b:8a:55:90:d6:2b:0c:09:aa:17:27: 3d:44:9e:85:e0:a0:79:6f:43:52:77:b7:7e:2e:30:33:84:0f: 4d:8b:87:7c:fa:b8:ad:62:c7:a8:eb:86:6b:80:a9:3e:09:86: c0:ae:61:fb:21:e9:23:d3:49:d8:79:24:de:43:fe:01:03:73: 7a:d7:41:a2:75:20:8d:ae:e3:fa:c3:dc:20:e6:d2:0e:fe:d0: d3:75:9c:0b:5c:50:27:15:0d:a7:d2:3c:aa:29:3b:f9:d6:10: 4a:0e:2e:57:0d:59:fb:2f:d7:3e:9e:52:d8:7c:a6:a9:c3:50: 7e:9e:81:e3:40:3f:b3:a3:d2:fd:51:03:93:50:3c:00:e2:9e: 5d:ff:f1:f0:0c:12:52:e0:4a:fd:2d:05:cb:ed:00:ca:d2:79: 37:d3:88:de:a1:40:57:9f:3d:ea:d8:b1:33:18:78:30:8c:3d: 9c:17:4e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWXIcp/TWcFXs/I+j+k3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNTEyMTgwMTAxWhcNMjYwNTEzMTgwMTAxWjAzMTEwLwYDVQQD Eyg2NjcyZjFlMmI1NjAzY2RkYWI2YzZkYTRiMjJkMDM3YmFhM2NjMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzlEzfRRQfdDckG274Q1CCQfkMEN HXuYg4LDJnRDUrcTiv4t8koYnLNqRHYRlEC+52cNGkfmzeabPNAQOtLhFx685HhQ lxW6VImWkmQCB76Mph9tsO6bePBCMZIiaqyaVPXEimIlZY39OH2JMdv8jT+j16xB 9jTH8LsjsDFFGSiFdypd5Zm0s5gLmOZKQYCOLfXKNTDqzSJGKc8FFKe+bdONvdWg nY+iH3KwMlwGL1yJR1IyUlnFwod/uJa8qVTGTd+xOA6C7GBOEj/Tsd2kcCFCxPye YsclWTiXQjvLrMBUk0qoYy7JMSWb3pvhErtK1A6nktfSAwR7BcZLBqKRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZy8eK1YDzdq2xtpLItA3uqPMAKMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxvtZ4s8 nP9g1bGHF9/BzN5c6gF81o8SYOWKhcX5YZb9maDYsC/Vg1MsarFI40cKF5g4S2M6 yOgXQlS0sUrv8JL90RtCBMMOYF61B5Ot5ZuKVZDWKwwJqhcnPUSeheCgeW9DUne3 fi4wM4QPTYuHfPq4rWLHqOuGa4CpPgmGwK5h+yHpI9NJ2Hkk3kP+AQNzetdBonUg ja7j+sPcIObSDv7Q03WcC1xQJxUNp9I8qik7+dYQSg4uVw1Z+y/XPp5S2HymqcNQ fp6B40A/s6PS/VEDk1A8AOKeXf/x8AwSUuBK/S0Fy+0AytJ5N9OI3qFAV5896tix Mxh4MIw9nBdOiw== -----END CERTIFICATE-----Generated at Wed May 13 03:10:44 2026 by rpki-client