$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: a9ujomy40rhnE0IslnU+JorhvwZ1DJFog98nZI0SwxM= Subject key identifier: CE:8F:CE:8E:CE:9D:D3:A0:13:9E:33:14:54:4E:15:92:87:CE:E2:83 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019E1D592091B03A4B8C0F28A88BAA775DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1916 Signing time: Tue 12 May 2026 18:00:40 +0000 Manifest this update: Tue 12 May 2026 18:00:40 +0000 Manifest next update: Wed 13 May 2026 18:00:40 +0000 Files and hashes: 1: 6SfzyA20maGiI5XJBQeDm_u97nY.roa (hash: u3qBuRlWiB0K8K8vlPB1p6jUd1Xd8XzeiX/KEClwly8=) 2: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=) 3: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=) 4: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=) 5: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=) 6: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=) 7: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=) 8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=) 9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=) 10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=) 11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=) 12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=) 13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=) 14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=) 15: UWaCKuifSAXQ_q_qbqARMjeLkuk.roa (hash: xqvi3BTcN1RVOAgMAoZQMY8MT30m6KbWtN2qeSF/sR8=) 16: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=) 17: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=) 18: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=) 19: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=) 20: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=) 21: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=) 22: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=) 23: rtnNKdzuer1cLaHeVd2Efr32DmI.roa (hash: hrsJtWgWWgXT2uF4n4YErrta4DlZR555cIdEsyDsEYM=) 24: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=) 25: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=) 26: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: MLdz6YfZdE2irogxbG/NufpPyzUH3jDrJOTCBU8FMLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:20:91:b0:3a:4b:8c:0f:28:a8:8b:aa:77:5d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: May 12 18:00:40 2026 GMT Not After : May 13 18:00:40 2026 GMT Subject: CN=ce8fce8ece9dd3a0139e3314544e159287cee283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:17:e1:2a:c0:19:57:80:34:23:11:61:e5: d0:54:fd:d4:60:7f:af:37:5f:62:a9:87:83:c8:b6: 3a:fc:28:ba:18:01:29:65:67:94:ba:87:82:df:a4: 17:60:c5:34:89:c3:40:5f:17:af:6d:fd:90:d8:9c: 55:bf:17:66:bf:78:32:33:ad:7d:eb:a1:a4:74:a0: 43:21:38:e2:1e:b5:cd:2e:29:d6:b8:f8:b5:1a:f6: 46:b5:d4:23:a2:9c:45:29:e2:48:0a:b2:da:36:31: 9d:7f:ee:d0:5b:54:9a:ec:8c:5b:c2:b8:16:85:17: a7:3e:22:ff:df:e1:ef:29:69:72:f6:78:9a:12:b7: 5b:91:7f:76:40:2b:57:09:c1:05:27:05:25:d9:44: 9a:b6:49:dc:7d:1f:d7:99:09:14:84:bc:7d:06:0d: 7f:f0:2a:95:5a:90:d0:f6:bf:5a:70:1b:9d:12:83: 3a:8d:2a:3d:47:68:f8:6d:02:c9:0e:a0:78:0f:16: 2f:3f:6e:7a:55:96:60:dc:22:e6:95:3d:88:03:5d: ac:ef:f5:a1:a0:c6:96:1f:33:a3:27:d3:82:11:21: e8:9c:de:f7:93:3c:53:1a:5f:5d:8b:43:0b:cf:ea: 77:e4:52:88:3d:47:25:9e:cb:fe:3f:d8:56:09:35: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8F:CE:8E:CE:9D:D3:A0:13:9E:33:14:54:4E:15:92:87:CE:E2:83 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c7:da:04:92:4e:67:d9:0e:58:89:1f:ec:9b:c8:a4:d4:2a: 85:b1:97:4d:45:93:dd:5c:fe:14:43:78:8a:e2:84:61:b5:c5: 9a:1e:54:f4:d7:b2:5c:55:88:22:22:47:73:b2:46:09:e1:9b: 39:72:7f:f7:56:a9:45:5c:5e:84:61:50:9d:c1:f6:81:9c:0e: da:cc:08:1d:c3:34:d2:54:46:fb:ad:72:06:1c:ab:37:9f:ff: c8:46:b5:37:8c:5b:6f:2b:7d:1d:db:80:fb:dc:f7:5b:bb:f6: a0:b5:36:d5:8c:69:9b:0f:9c:fa:9a:3c:67:a3:f4:9a:4c:14: b0:b5:00:ed:dd:db:23:e5:d6:1b:6e:6e:61:55:e7:1b:e8:57: 9f:36:dc:15:32:a2:15:83:4d:83:cd:57:90:60:76:66:74:62: 6a:2f:7b:2f:0f:96:45:d5:7c:1f:ba:65:48:97:ba:f9:12:f8: cd:ce:20:17:e8:cc:bf:bb:5a:84:72:2c:7b:ff:21:7d:09:f1: 95:99:03:a2:4c:44:6b:cb:25:22:4a:11:a0:1f:d6:e3:f7:aa: 21:7e:cf:ee:80:ae:b3:87:30:a0:41:40:74:15:c6:c1:5c:c2: da:8f:ec:e9:58:1f:7b:b0:8b:54:57:ae:db:c1:b2:a3:9f:76: 8a:f8:92:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWSCRsDpLjA8oqIuqd123MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwNTEyMTgwMDQwWhcNMjYwNTEzMTgwMDQwWjAzMTEwLwYDVQQD EyhjZThmY2U4ZWNlOWRkM2EwMTM5ZTMzMTQ1NDRlMTU5Mjg3Y2VlMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyMX4SrAGVeANCMRYeXQVP3UYH+v N19iqYeDyLY6/Ci6GAEpZWeUuoeC36QXYMU0icNAXxevbf2Q2JxVvxdmv3gyM619 66GkdKBDITjiHrXNLinWuPi1GvZGtdQjopxFKeJICrLaNjGdf+7QW1Sa7IxbwrgW hRenPiL/3+HvKWly9niaErdbkX92QCtXCcEFJwUl2USatkncfR/XmQkUhLx9Bg1/ 8CqVWpDQ9r9acBudEoM6jSo9R2j4bQLJDqB4DxYvP256VZZg3CLmlT2IA12s7/Wh oMaWHzOjJ9OCESHonN73kzxTGl9di0MLz+p35FKIPUclnsv+P9hWCTWYEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Pzo7OndOgE54zFFROFZKHzuKDMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsfaBJJO Z9kOWIkf7JvIpNQqhbGXTUWT3Vz+FEN4iuKEYbXFmh5U9NeyXFWIIiJHc7JGCeGb OXJ/91apRVxehGFQncH2gZwO2swIHcM00lRG+61yBhyrN5//yEa1N4xbbyt9HduA +9z3W7v2oLU21Yxpmw+c+po8Z6P0mkwUsLUA7d3bI+XWG25uYVXnG+hXnzbcFTKi FYNNg81XkGB2ZnRiai97Lw+WRdV8H7plSJe6+RL4zc4gF+jMv7tahHIse/8hfQnx lZkDokxEa8slIkoRoB/W4/eqIX7P7oCus4cwoEFAdBXGwVzC2o/s6Vgfe7CLVFeu 28Gyo592iviSZA== -----END CERTIFICATE-----Generated at Wed May 13 03:01:04 2026 by rpki-client