$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: 7mktlezqw5lrwFMY/vvujH3rjPL6jOoiX4YpCvbzJ9U= Subject key identifier: 82:80:31:58:6D:31:1D:0B:22:1A:EE:96:48:85:EE:C8:43:AF:52:99 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019E1C105DF49DFD358F23AA44A9B1FFAF56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0AD6 Signing time: Tue 12 May 2026 12:01:35 +0000 Manifest this update: Tue 12 May 2026 12:01:35 +0000 Manifest next update: Wed 13 May 2026 12:01:35 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: 4Yea5pLe2cRA3ubceDgtfZIT2/yL5TH+NjP9HBOUNNI=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:10:5d:f4:9d:fd:35:8f:23:aa:44:a9:b1:ff:af:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: May 12 12:01:35 2026 GMT Not After : May 13 12:01:35 2026 GMT Subject: CN=828031586d311d0b221aee964885eec843af5299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:cf:1d:bd:24:c9:5f:96:c7:8f:14:63:12: a2:10:ad:6a:3d:d3:19:45:c6:85:ed:a9:f8:7f:48: cc:da:c4:5c:7b:c4:fe:a7:f2:7a:32:ec:e2:a7:50: 0f:f4:95:77:ab:50:ff:5b:2b:e5:9e:6c:50:d8:7a: 0d:29:ae:9d:5d:c3:71:54:94:9c:50:9d:f9:1a:f3: 96:87:dc:6a:1c:24:24:b5:82:ba:68:00:0a:41:80: 25:69:cd:e8:06:76:7a:f0:70:09:90:9a:80:b8:8e: 05:7a:d5:d5:4d:20:3e:a5:90:62:fa:32:d2:91:35: 8f:1d:e7:3e:87:aa:9b:34:6f:87:32:42:de:70:bf: 0a:4e:5f:75:7d:42:33:3a:02:47:59:b0:46:50:ca: 55:3b:d8:01:a2:53:71:ac:cf:83:0e:58:3a:65:66: 3d:82:ea:b2:f9:46:95:50:52:6a:0e:f2:78:82:b3: 37:6c:1b:d5:6f:25:aa:d5:3f:1b:40:3e:ac:51:e3: b4:f2:42:31:b0:d4:88:d5:bd:e4:75:cc:8f:12:8a: b1:c8:fa:c6:e7:62:ae:d8:c5:23:f3:ec:34:32:92: c5:90:12:ef:e4:3a:14:c6:62:be:66:ed:c8:5b:82: b7:cb:68:ad:04:2e:48:3f:a9:d2:7b:2d:52:0c:7b: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:80:31:58:6D:31:1D:0B:22:1A:EE:96:48:85:EE:C8:43:AF:52:99 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:7a:6c:b6:d9:25:7c:96:a9:92:19:6f:18:4e:b5:09:b3: d6:23:de:62:8e:97:63:b3:45:bb:16:aa:54:8e:ba:85:2b:dd: 3c:a1:3a:47:ca:55:c9:2d:b6:0a:ba:66:50:ae:78:64:3c:47: 41:dd:22:50:59:b2:ac:9f:bd:3b:8b:97:f4:a4:c3:0f:89:46: 35:bd:a7:a5:f2:73:90:01:9e:e9:72:e4:a3:28:0a:fe:1e:dc: 2e:64:e8:96:c9:4b:31:9a:18:3f:eb:7b:48:73:b2:6c:eb:11: 8e:2c:34:03:45:21:3d:69:14:a1:a7:ee:3e:2b:d0:4c:ab:8d: a0:1c:05:3a:55:9b:4e:a9:db:83:96:58:a8:09:91:28:c6:c2: 3f:62:76:49:75:13:a0:33:b0:83:41:1c:69:1a:0a:0f:2e:d8: b8:f8:c1:19:bf:62:b7:00:22:b7:dc:ba:ce:6c:8a:ba:37:a7: 8c:84:34:38:cf:7c:22:27:7a:e3:49:b0:bb:34:6b:ce:e3:70: eb:61:05:b4:c8:39:c2:91:49:fc:9e:ba:71:1a:58:3c:38:30: 13:58:71:6d:06:9f:fb:75:8f:3a:e2:a4:97:81:4e:9b:2b:71: 58:d5:75:eb:1d:29:e8:69:e8:7c:9f:10:7f:1a:b3:0f:26:07: ed:95:04:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cEF30nf01jyOqRKmx/69WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwNTEyMTIwMTM1WhcNMjYwNTEzMTIwMTM1WjAzMTEwLwYDVQQD Eyg4MjgwMzE1ODZkMzExZDBiMjIxYWVlOTY0ODg1ZWVjODQzYWY1Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpPPHb0kyV+Wx48UYxKiEK1qPdMZ RcaF7an4f0jM2sRce8T+p/J6Muzip1AP9JV3q1D/WyvlnmxQ2HoNKa6dXcNxVJSc UJ35GvOWh9xqHCQktYK6aAAKQYAlac3oBnZ68HAJkJqAuI4FetXVTSA+pZBi+jLS kTWPHec+h6qbNG+HMkLecL8KTl91fUIzOgJHWbBGUMpVO9gBolNxrM+DDlg6ZWY9 guqy+UaVUFJqDvJ4grM3bBvVbyWq1T8bQD6sUeO08kIxsNSI1b3kdcyPEoqxyPrG 52Ku2MUj8+w0MpLFkBLv5DoUxmK+Zu3IW4K3y2itBC5IP6nSey1SDHt9CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKAMVhtMR0LIhrulkiF7shDr1KZMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyx6bLbZ JXyWqZIZbxhOtQmz1iPeYo6XY7NFuxaqVI66hSvdPKE6R8pVyS22CrpmUK54ZDxH Qd0iUFmyrJ+9O4uX9KTDD4lGNb2npfJzkAGe6XLkoygK/h7cLmTolslLMZoYP+t7 SHOybOsRjiw0A0UhPWkUoafuPivQTKuNoBwFOlWbTqnbg5ZYqAmRKMbCP2J2SXUT oDOwg0EcaRoKDy7YuPjBGb9itwAit9y6zmyKujenjIQ0OM98Iid640mwuzRrzuNw 62EFtMg5wpFJ/J66cRpYPDgwE1hxbQaf+3WPOuKkl4FOmytxWNV16x0p6GnofJ8Q fxqzDyYH7ZUEMQ== -----END CERTIFICATE-----Generated at Tue May 12 22:14:06 2026 by rpki-client