$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: f3BdPNw6YqpookmNQuSL+kqZcNqwPNwFZNZlarNfliU= Subject key identifier: 68:D9:28:48:5B:28:59:E0:7E:12:72:4D:0B:56:AC:B0:27:28:94:1F Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019E1E35DDF1E14833093C4453D513D5E4D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 191C Signing time: Tue 12 May 2026 22:01:47 +0000 Manifest this update: Tue 12 May 2026 22:01:47 +0000 Manifest next update: Wed 13 May 2026 22:01:47 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: BjYwIT3izBxvkDB3uOlODK11z7IfLdXBZ4gR9HyoR+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:dd:f1:e1:48:33:09:3c:44:53:d5:13:d5:e4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: May 12 22:01:47 2026 GMT Not After : May 13 22:01:47 2026 GMT Subject: CN=68d928485b2859e07e12724d0b56acb02728941f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:84:05:ae:ce:8e:50:b7:10:db:9b:20:36: 24:e5:ea:61:56:03:72:f1:ef:9a:11:f5:1f:18:ad: 52:70:6a:4b:8a:af:ff:85:0b:9c:04:fc:a9:54:d5: 08:3b:10:f8:6f:3b:69:fb:8b:13:80:ee:75:2d:3f: 60:33:95:8a:e9:3b:82:df:64:4d:b0:c7:a9:58:1a: bd:b6:3a:2c:c5:46:03:85:90:f0:fc:f3:c9:55:6f: 59:69:d4:50:5d:07:98:a3:34:90:5d:96:e9:5a:0d: 53:a2:d5:63:81:b6:52:b5:58:b6:55:aa:39:6f:32: e4:f7:05:13:b0:0a:47:b4:7d:c6:d6:07:fd:8e:d5: 65:55:1a:14:67:80:24:eb:a2:59:a5:39:3c:9b:02: 02:5f:cd:c1:4a:6f:b9:07:57:17:b1:f2:70:6a:40: b6:19:66:4e:1d:3d:b8:12:ed:b4:ca:74:2f:b6:ee: 1b:64:78:7d:68:87:4b:fc:81:e4:58:ef:58:53:63: 7f:b0:e3:c7:0c:93:07:e8:ef:a4:5b:9f:b6:2b:56: 99:68:ed:57:94:ba:f0:59:54:a0:c5:da:32:30:ed: c7:58:de:df:7d:48:11:4b:cd:16:06:dd:82:7f:aa: 47:c2:4d:8b:59:47:63:9e:71:2c:63:cb:f2:9d:31: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D9:28:48:5B:28:59:E0:7E:12:72:4D:0B:56:AC:B0:27:28:94:1F X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4c:0d:68:41:a3:cb:8a:b1:a9:1a:6f:9b:df:3d:eb:3b:a3: f2:e4:0d:38:10:b6:cb:2b:9c:94:57:8a:64:5e:ad:c7:38:9c: a2:49:84:db:ab:65:bd:25:ab:a6:97:d4:86:a5:db:ff:3d:16: 80:00:9e:8c:ae:29:cd:15:9b:42:25:ed:03:ab:6b:51:24:79: 76:a9:8f:b3:10:19:db:2d:08:37:e0:a6:c6:9f:5c:f5:19:e0: e2:0c:2e:6a:3e:aa:fd:ea:7f:49:42:c7:43:56:5e:de:de:fd: 48:c2:76:f3:7d:fc:4d:fa:df:84:6f:a7:57:59:a3:13:5f:49: 36:4a:a5:ee:77:db:f8:06:39:db:88:e9:76:5d:14:45:f1:f6: 8c:89:cc:28:94:bc:d6:d8:f0:43:1a:23:6d:c9:e4:01:39:cb: d3:72:4d:24:8b:cc:3a:ac:38:89:69:a1:aa:40:5b:d7:2d:98: ba:9b:2d:a4:5d:14:3e:31:5d:79:51:22:76:8f:ff:9f:4d:c7: 92:45:4a:db:a3:c6:ed:64:ba:a3:c7:d5:41:d7:c2:52:5c:0c: e2:07:ab:ea:24:17:7e:36:a2:4b:de:1a:14:45:ef:cb:bd:19: 5a:1c:00:18:d5:7d:7e:de:50:91:ba:2a:78:b8:ff:e7:69:a5: 0e:56:06:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNd3x4UgzCTxEU9UT1eTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwNTEyMjIwMTQ3WhcNMjYwNTEzMjIwMTQ3WjAzMTEwLwYDVQQD Eyg2OGQ5Mjg0ODViMjg1OWUwN2UxMjcyNGQwYjU2YWNiMDI3Mjg5NDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y6EBa7OjlC3ENubIDYk5ephVgNy 8e+aEfUfGK1ScGpLiq//hQucBPypVNUIOxD4bztp+4sTgO51LT9gM5WK6TuC32RN sMepWBq9tjosxUYDhZDw/PPJVW9ZadRQXQeYozSQXZbpWg1TotVjgbZStVi2Vao5 bzLk9wUTsApHtH3G1gf9jtVlVRoUZ4Ak66JZpTk8mwICX83BSm+5B1cXsfJwakC2 GWZOHT24Eu20ynQvtu4bZHh9aIdL/IHkWO9YU2N/sOPHDJMH6O+kW5+2K1aZaO1X lLrwWVSgxdoyMO3HWN7ffUgRS80WBt2Cf6pHwk2LWUdjnnEsY8vynTFuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjZKEhbKFngfhJyTQtWrLAnKJQfMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUwNaEGj y4qxqRpvm9896zuj8uQNOBC2yyuclFeKZF6txzicokmE26tlvSWrppfUhqXb/z0W gACejK4pzRWbQiXtA6trUSR5dqmPsxAZ2y0IN+Cmxp9c9Rng4gwuaj6q/ep/SULH Q1Ze3t79SMJ28338TfrfhG+nV1mjE19JNkql7nfb+AY524jpdl0URfH2jInMKJS8 1tjwQxojbcnkATnL03JNJIvMOqw4iWmhqkBb1y2YupstpF0UPjFdeVEido//n03H kkVK26PG7WS6o8fVQdfCUlwM4ger6iQXfjaiS94aFEXvy70ZWhwAGNV9ft5Qkboq eLj/52mlDlYG5g== -----END CERTIFICATE-----Generated at Wed May 13 05:27:26 2026 by rpki-client