$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: y0AnEsQP6ZKf95tbwFXA4Hu3AYIhKrpzj0nU82W0phM= Subject key identifier: A6:AF:D9:0F:71:D9:89:12:14:5C:56:47:B0:E1:EB:F0:6C:F7:9B:D8 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019E1D59450FE0768427025A8AE216EF87D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 193F Signing time: Tue 12 May 2026 18:00:49 +0000 Manifest this update: Tue 12 May 2026 18:00:49 +0000 Manifest next update: Wed 13 May 2026 18:00:49 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: QY/Sx6hI7bg0NkJtCNMpCzG2wCkptYFKYiLk72d9E68=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=) 11: eUbHTyUSavH8iggt7_qSKew38qc.roa (hash: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) 14: wIQN1qjszJK_EWTG2KZPYPb7pjY.roa (hash: gRnICZ8LPFfQ15En6Kpg0jEOMzCzPNmoOaQr/MOyZDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:45:0f:e0:76:84:27:02:5a:8a:e2:16:ef:87:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: May 12 18:00:49 2026 GMT Not After : May 13 18:00:49 2026 GMT Subject: CN=a6afd90f71d98912145c5647b0e1ebf06cf79bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:01:d6:3b:3b:78:76:ab:aa:d3:a3:14:30: ae:f0:50:21:45:f0:60:a8:af:cc:47:a8:98:72:26: 10:e0:c1:c1:aa:33:f0:10:13:7a:84:6d:54:ea:cc: a9:5b:87:54:17:24:f6:35:cc:1b:e3:3c:3d:a9:58: ab:7f:f9:f7:97:61:b4:bf:eb:02:da:0c:05:04:2b: d1:e6:78:05:b5:23:70:8c:d6:21:31:c7:18:cb:23: ed:92:82:e1:b1:57:58:e7:91:00:9c:ed:ef:f1:7e: c0:d4:27:b4:bb:95:b8:e7:b5:37:48:ee:2b:6a:ef: 64:27:58:08:d1:2a:65:f8:2a:bb:26:0d:51:a3:34: 8a:b5:88:0e:d5:04:12:60:87:13:ea:6a:2a:9f:dc: 45:09:0c:40:bb:86:8e:b1:05:75:48:75:ed:f7:16: 70:b4:11:e1:ba:38:3c:db:de:03:b8:f7:a4:cd:0e: 52:b9:45:1d:24:c8:be:6a:87:b5:c2:4f:5b:4c:86: 7b:29:5e:70:dc:4e:cd:60:fc:d5:a6:df:e4:5a:ca: 29:96:e0:21:7d:3d:a7:b5:d3:b3:7a:28:c0:cf:af: 3e:74:e4:32:0c:8b:0e:bc:12:2b:b2:e3:97:b4:29: 9c:47:86:2b:b6:39:05:52:23:ca:ae:aa:33:0e:45: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AF:D9:0F:71:D9:89:12:14:5C:56:47:B0:E1:EB:F0:6C:F7:9B:D8 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:36:c3:d3:3d:45:05:b4:12:94:fc:3c:d7:ce:59:65:ec:80: 39:94:c4:91:a4:a3:7e:3c:07:39:ca:b6:f0:32:ad:76:98:af: 7d:15:82:91:f1:f8:39:82:a7:5b:46:7e:b4:70:b3:a9:8a:48: 06:0d:ef:b7:4d:c5:05:9e:37:42:19:b6:5e:00:07:78:34:42: 66:c8:97:83:3d:e1:1a:a2:cd:50:2f:5b:77:93:58:f2:49:b1: e1:e5:29:08:ed:c6:23:e2:4e:61:a0:cb:d7:80:32:3c:8e:1c: 04:40:1d:68:e7:24:9b:c8:2d:ae:d1:da:0d:02:6e:79:a6:f0: 22:b4:28:dc:7d:50:61:64:8a:99:3f:f7:7c:c3:fb:ac:9b:18: 7e:9c:dc:21:fe:35:5a:84:8c:37:6a:6a:96:92:20:ef:58:a5: e1:e8:6f:9a:6e:e0:fe:0e:b8:d0:42:41:e5:a5:e8:3c:3a:87: a7:9c:93:c3:8e:3b:77:8b:bd:ca:cc:84:be:39:20:8b:e6:a6: 33:17:a0:7b:14:bd:0e:18:fb:65:5c:43:1b:07:0b:c9:05:52: c3:f6:d4:8a:eb:e8:7a:54:0b:08:49:62:33:a9:b7:b2:3b:54: 43:c0:49:f3:b5:24:76:e4:7b:36:e9:dc:5c:80:78:5a:48:f1: 8b:63:82:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWUUP4HaEJwJaiuIW74fVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwNTEyMTgwMDQ5WhcNMjYwNTEzMTgwMDQ5WjAzMTEwLwYDVQQD EyhhNmFmZDkwZjcxZDk4OTEyMTQ1YzU2NDdiMGUxZWJmMDZjZjc5YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm38B1js7eHarqtOjFDCu8FAhRfBg qK/MR6iYciYQ4MHBqjPwEBN6hG1U6sypW4dUFyT2Ncwb4zw9qVirf/n3l2G0v+sC 2gwFBCvR5ngFtSNwjNYhMccYyyPtkoLhsVdY55EAnO3v8X7A1Ce0u5W457U3SO4r au9kJ1gI0Spl+Cq7Jg1RozSKtYgO1QQSYIcT6moqn9xFCQxAu4aOsQV1SHXt9xZw tBHhujg8294DuPekzQ5SuUUdJMi+aoe1wk9bTIZ7KV5w3E7NYPzVpt/kWsopluAh fT2ntdOzeijAz68+dOQyDIsOvBIrsuOXtCmcR4YrtjkFUiPKrqozDkVguwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKav2Q9x2YkSFFxWR7Dh6/Bs95vYMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDbD0z1F BbQSlPw8185ZZeyAOZTEkaSjfjwHOcq28DKtdpivfRWCkfH4OYKnW0Z+tHCzqYpI Bg3vt03FBZ43Qhm2XgAHeDRCZsiXgz3hGqLNUC9bd5NY8kmx4eUpCO3GI+JOYaDL 14AyPI4cBEAdaOckm8gtrtHaDQJueabwIrQo3H1QYWSKmT/3fMP7rJsYfpzcIf41 WoSMN2pqlpIg71il4ehvmm7g/g640EJB5aXoPDqHp5yTw447d4u9ysyEvjkgi+am MxegexS9Dhj7ZVxDGwcLyQVSw/bUiuvoelQLCEliM6m3sjtUQ8BJ87UkduR7Nunc XIB4Wkjxi2OCig== -----END CERTIFICATE-----Generated at Tue May 12 21:20:49 2026 by rpki-client