$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: gpH4FMEd72ZPMfeeVlsaIvzlGwI1YP8ns1w8v1hu6LA= Subject key identifier: E6:91:C0:E3:D6:D9:55:89:FC:A2:50:72:A9:0A:D1:E2:2F:40:D4:91 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019E1DC70DE640CE05BB621A69BC9C37B44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 15C8 Signing time: Tue 12 May 2026 20:00:44 +0000 Manifest this update: Tue 12 May 2026 20:00:44 +0000 Manifest next update: Wed 13 May 2026 20:00:44 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 4: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 5: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 6: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: 9BOf89YAX+dSC8NWJKTJu4tHe1YBhkX8rbK3TOx8P64=) 9: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (hash: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=) 10: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:0d:e6:40:ce:05:bb:62:1a:69:bc:9c:37:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: May 12 20:00:44 2026 GMT Not After : May 13 20:00:44 2026 GMT Subject: CN=e691c0e3d6d95589fca25072a90ad1e22f40d491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d2:55:fe:97:29:7a:6e:86:9a:e6:22:f7:a2: 95:4a:31:4c:1e:ae:d0:43:1d:1b:d2:6b:64:41:db: 42:a1:e2:c4:e7:78:31:9a:7e:0b:33:6c:51:49:1d: ba:36:18:b2:23:41:1a:16:8a:76:36:37:58:c0:ec: 3d:ef:53:6c:7c:ae:df:03:fe:91:e0:30:b0:77:d4: 6b:6d:9f:30:ed:76:72:ca:8a:01:c8:cf:2b:67:1b: 14:3f:fd:cc:0f:a6:80:60:b7:ea:ef:01:fb:84:c6: 68:b1:8f:68:79:38:5b:f2:82:a2:39:00:f9:01:92: 2f:e5:57:53:89:60:4b:e9:7b:4f:81:98:1f:79:74: 4b:2f:ac:1b:90:82:eb:6a:19:2e:7e:26:b4:99:1c: 3b:5d:ff:f6:42:d5:ed:c3:7e:f9:93:54:7a:b5:c4: cc:70:e1:e8:76:3d:43:10:84:d9:43:21:d7:06:53: 7c:57:80:64:28:98:1b:74:99:c3:d8:01:ab:ba:d4: 3a:36:2b:fe:ec:2d:e4:97:02:6e:fb:86:5b:ab:5f: 06:ec:6d:a3:46:88:80:8d:1a:a0:37:bf:7f:11:c3: b6:a9:ce:0d:43:c8:a8:d6:3e:9d:6a:cc:d0:da:84: e0:09:99:a7:5c:c7:76:2a:64:0b:d7:7a:ca:bc:98: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:C0:E3:D6:D9:55:89:FC:A2:50:72:A9:0A:D1:E2:2F:40:D4:91 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9f:ab:1d:05:51:60:9b:1e:bc:e3:5a:05:9d:bc:f2:dc:e7: 54:fd:4c:d7:7e:7c:32:82:b8:60:2e:22:07:d5:07:ad:80:3d: be:d0:52:9e:fc:00:e6:f0:2b:de:82:0a:03:64:e1:4e:59:7c: 72:b9:1c:0a:6d:b9:22:ba:b5:fd:d0:de:1a:50:29:18:3f:15: 70:e8:a9:ba:c9:58:bc:82:4e:f4:69:c6:b4:f9:4e:af:e8:c9: bd:42:7d:f9:64:ab:9b:a5:01:2c:93:a6:ca:37:3c:f2:62:4a: ce:40:4d:4c:f1:9b:df:c3:61:6f:a7:c7:0a:81:6e:6f:26:d9: 91:9a:82:28:54:77:7d:77:14:4c:cf:7a:00:4a:56:01:7f:08: c0:ca:5d:d8:49:71:da:60:dd:06:ce:52:53:32:e5:ad:d6:af: 8d:2c:96:e8:c1:09:92:47:01:ae:a6:49:c8:9b:b4:2b:ff:f8: 8c:f1:ce:61:2e:88:5a:10:5b:b2:3d:e3:dc:6f:e7:c6:7f:48: 55:1b:e9:03:da:b0:48:05:4c:7b:e7:47:ee:14:9a:33:ab:48: 9e:33:33:eb:10:29:89:cf:cc:d7:9c:08:e4:47:94:ce:7a:42: 42:c6:b3:76:c5:bb:2d:7e:71:06:06:06:9f:69:b4:6c:7f:0f: 4d:3d:42:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dxw3mQM4Fu2IaabycN7RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwNTEyMjAwMDQ0WhcNMjYwNTEzMjAwMDQ0WjAzMTEwLwYDVQQD EyhlNjkxYzBlM2Q2ZDk1NTg5ZmNhMjUwNzJhOTBhZDFlMjJmNDBkNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NJV/pcpem6GmuYi96KVSjFMHq7Q Qx0b0mtkQdtCoeLE53gxmn4LM2xRSR26NhiyI0EaFop2NjdYwOw971NsfK7fA/6R 4DCwd9RrbZ8w7XZyyooByM8rZxsUP/3MD6aAYLfq7wH7hMZosY9oeThb8oKiOQD5 AZIv5VdTiWBL6XtPgZgfeXRLL6wbkILrahkufia0mRw7Xf/2QtXtw375k1R6tcTM cOHodj1DEITZQyHXBlN8V4BkKJgbdJnD2AGrutQ6Niv+7C3klwJu+4Zbq18G7G2j RoiAjRqgN79/EcO2qc4NQ8io1j6daszQ2oTgCZmnXMd2KmQL13rKvJisAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaRwOPW2VWJ/KJQcqkK0eIvQNSRMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ+rHQVR YJsevONaBZ288tznVP1M1358MoK4YC4iB9UHrYA9vtBSnvwA5vAr3oIKA2ThTll8 crkcCm25Irq1/dDeGlApGD8VcOipuslYvIJO9GnGtPlOr+jJvUJ9+WSrm6UBLJOm yjc88mJKzkBNTPGb38Nhb6fHCoFubybZkZqCKFR3fXcUTM96AEpWAX8IwMpd2Elx 2mDdBs5SUzLlrdavjSyW6MEJkkcBrqZJyJu0K//4jPHOYS6IWhBbsj3j3G/nxn9I VRvpA9qwSAVMe+dH7hSaM6tInjMz6xApic/M15wI5EeUznpCQsazdsW7LX5xBgYG n2m0bH8PTT1CiQ== -----END CERTIFICATE-----Generated at Wed May 13 05:28:57 2026 by rpki-client