$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: LwxTp2wged47ndQeqk7O/iLGsEvnidZHyX92MAFPLnk= Subject key identifier: 2A:5A:67:33:BF:D3:A5:23:DC:EA:DC:E3:D0:6B:AD:56:9A:A5:D6:B3 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019E1DC7A4DC50CA026C0A33B4E7A02B1C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 1944 Signing time: Tue 12 May 2026 20:01:23 +0000 Manifest this update: Tue 12 May 2026 20:01:23 +0000 Manifest next update: Wed 13 May 2026 20:01:23 +0000 Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=) 2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=) 3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=) 4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=) 5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=) 6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=) 7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=) 8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: m3T0HzhxTv6DKdbJU+Qu+TG/4C1ZMVWPkE42251TWXs=) 9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=) 10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=) 11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=) 12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:a4:dc:50:ca:02:6c:0a:33:b4:e7:a0:2b:1c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: May 12 20:01:23 2026 GMT Not After : May 13 20:01:23 2026 GMT Subject: CN=2a5a6733bfd3a523dceadce3d06bad569aa5d6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:f2:ec:75:15:e0:b2:9d:08:bf:85:62:95: 81:ad:bc:a5:3e:f1:16:10:1d:34:ef:d9:c3:16:eb: 75:9a:48:cb:40:e8:a0:69:84:e2:91:2e:4e:b9:13: 1f:fc:b6:7a:99:7a:c4:1b:f7:c0:af:51:10:37:97: be:e3:a3:7a:00:01:0a:71:8b:3c:56:14:4e:5f:93: 09:86:ef:bd:b5:40:73:50:8f:26:71:0d:dd:3e:66: 35:ba:fe:48:75:6d:e9:64:9e:c9:b9:06:9c:3a:58: 1d:a4:da:3b:d8:9e:9b:c2:ec:cc:97:bc:e3:d8:80: 81:b4:ca:45:73:ca:c7:a7:d3:1a:09:22:b5:68:6f: 45:c5:99:68:0a:d2:d7:ad:36:6e:ef:34:b5:7a:a5: 9a:63:7a:ec:a0:db:9c:b0:1b:9a:3f:46:63:f7:2d: 07:de:b0:ea:0e:36:91:3d:02:c6:0d:f2:e3:f7:b3: a0:44:c7:9b:bd:9f:b3:e3:cb:cc:91:b1:c7:15:81: e5:76:d3:f5:86:8c:d3:d3:e2:28:8b:1a:5c:3a:51: 6e:bd:ff:a0:2c:4a:2a:e7:75:fa:2e:d4:91:58:c7: b4:07:be:29:4c:cd:a5:de:d6:17:53:5f:21:f0:cb: 1e:f9:e2:ac:6a:e7:b3:b5:5b:67:cc:1f:9e:7a:db: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:67:33:BF:D3:A5:23:DC:EA:DC:E3:D0:6B:AD:56:9A:A5:D6:B3 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:68:ed:49:fc:5c:75:cf:1a:79:be:65:1a:f6:da:bb:3f:62: ce:b4:f3:15:61:73:fc:b0:cc:4c:08:07:57:cd:bd:82:27:d9: f0:ea:21:e4:59:b3:7a:96:bc:fc:4a:0a:92:59:16:2f:a1:7a: 4e:f9:1b:d1:f6:f9:cd:b9:85:d4:41:fa:84:4a:bc:fc:c1:d2: a1:2d:31:b9:4d:2b:54:99:d4:4c:ec:11:38:02:1d:31:f3:7e: ef:86:42:75:02:29:ee:ac:c8:17:29:2c:4b:8d:ac:73:e2:97: 3b:88:b5:d6:d3:bf:76:66:06:7b:a0:bd:a7:7b:11:68:b6:19: 67:cd:b6:62:8c:78:c3:b3:41:27:bd:a2:bc:bf:6b:03:55:ef: 1f:42:e4:f0:43:be:c5:a4:f7:55:e6:d6:bb:9a:3e:55:ae:e2: c7:bb:fb:d8:4e:d0:ac:9e:ee:88:c4:fb:24:2d:b4:8a:c5:df: 12:51:cd:16:af:37:7a:2a:ed:cd:5b:53:93:8d:d2:34:a9:f7: 18:ee:01:52:a6:bc:7e:0a:47:17:09:fc:24:c7:cc:4a:6c:a2: f6:07:7a:a0:90:1e:36:a1:9f:8b:ba:2d:4c:d7:06:7d:e7:d2: 18:a1:01:d2:cf:cf:04:9c:4b:b3:c0:d9:4b:cf:da:c9:13:9e: 2e:b2:25:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx6TcUMoCbAoztOegKxxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwNTEyMjAwMTIzWhcNMjYwNTEzMjAwMTIzWjAzMTEwLwYDVQQD EygyYTVhNjczM2JmZDNhNTIzZGNlYWRjZTNkMDZiYWQ1NjlhYTVkNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT7y7HUV4LKdCL+FYpWBrbylPvEW EB0079nDFut1mkjLQOigaYTikS5OuRMf/LZ6mXrEG/fAr1EQN5e+46N6AAEKcYs8 VhROX5MJhu+9tUBzUI8mcQ3dPmY1uv5IdW3pZJ7JuQacOlgdpNo72J6bwuzMl7zj 2ICBtMpFc8rHp9MaCSK1aG9FxZloCtLXrTZu7zS1eqWaY3rsoNucsBuaP0Zj9y0H 3rDqDjaRPQLGDfLj97OgRMebvZ+z48vMkbHHFYHldtP1hozT0+IoixpcOlFuvf+g LEoq53X6LtSRWMe0B74pTM2l3tYXU18h8Mse+eKsaueztVtnzB+eetst5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpaZzO/06Uj3Orc49BrrVaapdazMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWjtSfxc dc8aeb5lGvbauz9izrTzFWFz/LDMTAgHV829gifZ8Ooh5Fmzepa8/EoKklkWL6F6 Tvkb0fb5zbmF1EH6hEq8/MHSoS0xuU0rVJnUTOwROAIdMfN+74ZCdQIp7qzIFyks S42sc+KXO4i11tO/dmYGe6C9p3sRaLYZZ822Yox4w7NBJ72ivL9rA1XvH0Lk8EO+ xaT3VebWu5o+Va7ix7v72E7QrJ7uiMT7JC20isXfElHNFq83eirtzVtTk43SNKn3 GO4BUqa8fgpHFwn8JMfMSmyi9gd6oJAeNqGfi7otTNcGfefSGKEB0s/PBJxLs8DZ S8/ayROeLrIlJg== -----END CERTIFICATE-----Generated at Wed May 13 03:25:19 2026 by rpki-client