$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: 3qedG4Ig/ot+XDKc5bgsoQT49QbTQDCE3ReY/0TnF2s= Subject key identifier: 97:1B:5A:12:68:A7:6F:AC:1D:86:A1:29:35:1C:9B:38:5D:91:EA:0D Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019E1CEB75C69827AD22F7187753955019C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 199F Signing time: Tue 12 May 2026 16:00:53 +0000 Manifest this update: Tue 12 May 2026 16:00:53 +0000 Manifest next update: Wed 13 May 2026 16:00:53 +0000 Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=) 2: 4YrP_GMXN-9_98lTPO7BAnb9Uww.roa (hash: ZE5NJ8weEe35ei1/Z8mIitscXSDfGVCMmkz9eemXrFY=) 3: 4jDuY8VO0qUXF7q46qoMV9gLKuM.roa (hash: viGMatLEXcz0cMUCHgF1aDM1PbJJdZT8heBBxrGwjjQ=) 4: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=) 5: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=) 6: CF8v_7CP69NrOln1kLcho0WvTUQ.roa (hash: qGT89sK/IEAzkkJR4Z6rBcs+Koq0fLCoBmu4JX+p5Xw=) 7: DblLYXIGEMn10bjafoE3RYpg084.roa (hash: /9cYHrgPsrPV+y83ZtewE2z9k66ot5C9ns5yRKrm9zs=) 8: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: lXdvIefQTGdZ3vX91ak7bP1O9+xUn2Ju2qLeXth3LOY=) 9: TMsha0GRszbL5uv24xLt-ZfZgKc.roa (hash: j5QxVvGBFLOVC7/0gok3R4odJR1SrmBkpeCDz/Tn8is=) 10: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=) 11: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=) 12: aT_NF-3W3Lad21l-SRMcNJ4ndmA.roa (hash: /YnsUGWzI7HuX6dhQIDwbZFM15scYBxgtWzy8QmfJ0I=) 13: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:75:c6:98:27:ad:22:f7:18:77:53:95:50:19:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: May 12 16:00:53 2026 GMT Not After : May 13 16:00:53 2026 GMT Subject: CN=971b5a1268a76fac1d86a129351c9b385d91ea0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:2c:ed:32:ea:af:55:0a:74:b2:55:89:f1: 0c:c6:ec:23:56:d9:f5:ce:06:3a:b5:ba:da:25:0c: e2:4c:d6:4a:23:97:c7:39:28:51:6d:b3:0f:d8:0f: e6:6d:c2:eb:55:b8:ea:61:a6:b1:70:ba:82:4f:13: 07:2c:8a:34:b9:93:6b:7c:2d:58:d6:f8:01:a1:ca: ca:33:c6:ed:5f:ed:27:6d:46:c6:7c:7b:f3:13:ce: 99:55:2b:97:ce:40:75:6b:21:34:07:25:67:49:b6: 60:b4:cc:ce:6e:d0:f0:7e:24:c3:57:8f:96:14:13: 41:69:2c:3d:d0:ff:ec:85:6d:48:f6:24:b9:3d:8f: 24:68:66:16:38:46:01:62:37:78:5a:d1:5d:34:ec: ab:2d:7c:99:19:58:8b:a4:80:c2:7b:ee:2a:46:fb: 64:58:96:3b:a7:4c:c7:be:35:68:47:83:e3:8d:30: dd:e7:4b:4e:e8:04:bc:47:dc:46:6c:80:3e:6a:d5: eb:89:94:ea:c5:72:ea:7d:83:f7:ba:3f:8a:63:8b: b7:2d:4a:c6:f0:52:ac:72:4a:b0:b3:cf:65:f8:88: b6:e0:d4:24:c4:cd:bf:97:dd:08:24:5e:c3:39:eb: bd:16:49:f2:0f:0f:de:3b:b8:65:62:bb:ca:7c:76: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:5A:12:68:A7:6F:AC:1D:86:A1:29:35:1C:9B:38:5D:91:EA:0D X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:53:f5:75:5f:32:d7:f1:63:f5:7d:4e:f7:cc:2e:83:7c:86: 37:c2:f3:7b:58:3b:d7:8f:0e:e5:97:29:c7:d6:6f:40:22:36: f4:0e:0a:db:84:b4:82:6a:94:57:19:02:fa:3e:5d:9b:a3:ea: 09:4c:59:d3:6e:bf:85:a0:f9:89:02:ac:11:44:49:6c:f2:00: ef:e7:73:76:d5:a6:03:5c:ed:56:11:c8:fb:3c:fe:dd:ef:3a: d1:08:28:15:c5:89:fd:60:20:df:b8:f7:86:8e:a5:a8:18:b3: b6:c3:55:7d:39:81:ed:5e:ca:05:1e:ae:f4:f2:87:6f:36:a5: 45:8e:d7:18:e7:38:e5:69:3e:1f:9d:52:f5:22:01:57:06:96: d6:04:ad:b1:09:bb:86:33:6e:b5:c0:29:0f:de:f9:91:20:17: 5a:57:23:07:71:fe:9c:05:b4:c7:2c:cc:4e:8d:34:f4:19:49: b0:2a:a5:5a:de:71:b2:be:42:42:ed:72:42:c7:cb:92:45:83: 27:b9:0e:d9:17:5e:26:ee:ff:b6:1a:eb:94:71:4d:98:38:c6: ca:7c:7f:88:52:6b:ed:de:96:e8:d7:a4:ed:ee:dc:7a:e5:86: 80:b2:f7:66:87:87:53:7c:fd:f6:0a:1c:e9:26:7d:8d:a8:8f: 49:14:9d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c63XGmCetIvcYd1OVUBnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwNTEyMTYwMDUzWhcNMjYwNTEzMTYwMDUzWjAzMTEwLwYDVQQD Eyg5NzFiNWExMjY4YTc2ZmFjMWQ4NmExMjkzNTFjOWIzODVkOTFlYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dMs7TLqr1UKdLJVifEMxuwjVtn1 zgY6tbraJQziTNZKI5fHOShRbbMP2A/mbcLrVbjqYaaxcLqCTxMHLIo0uZNrfC1Y 1vgBocrKM8btX+0nbUbGfHvzE86ZVSuXzkB1ayE0ByVnSbZgtMzObtDwfiTDV4+W FBNBaSw90P/shW1I9iS5PY8kaGYWOEYBYjd4WtFdNOyrLXyZGViLpIDCe+4qRvtk WJY7p0zHvjVoR4PjjTDd50tO6AS8R9xGbIA+atXriZTqxXLqfYP3uj+KY4u3LUrG 8FKsckqws89l+Ii24NQkxM2/l90IJF7DOeu9FknyDw/eO7hlYrvKfHYHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcbWhJop2+sHYahKTUcmzhdkeoNMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVP1dV8y 1/Fj9X1O98wug3yGN8Lze1g7148O5Zcpx9ZvQCI29A4K24S0gmqUVxkC+j5dm6Pq CUxZ026/haD5iQKsEURJbPIA7+dzdtWmA1ztVhHI+zz+3e860QgoFcWJ/WAg37j3 ho6lqBiztsNVfTmB7V7KBR6u9PKHbzalRY7XGOc45Wk+H51S9SIBVwaW1gStsQm7 hjNutcApD975kSAXWlcjB3H+nAW0xyzMTo009BlJsCqlWt5xsr5CQu1yQsfLkkWD J7kO2RdeJu7/thrrlHFNmDjGynx/iFJr7d6W6Nek7e7ceuWGgLL3ZoeHU3z99goc 6SZ9jaiPSRSd3A== -----END CERTIFICATE-----Generated at Wed May 13 00:12:16 2026 by rpki-client