$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: iimiOvikS95IIWm7vO9H1IflEO5Q8L8iJGUobsGUPIo= Subject key identifier: 25:AE:93:51:DF:97:CE:A7:AA:F2:E2:C1:B5:E4:94:9A:56:21:09:75 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019E1FB5F238281212D85CFCA3979F34EA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 129E Signing time: Wed 13 May 2026 05:01:17 +0000 Manifest this update: Wed 13 May 2026 05:01:17 +0000 Manifest next update: Thu 14 May 2026 05:01:17 +0000 Files and hashes: 1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: Bky8bwdPPHftYZBN-ihst0Pow_M.roa (hash: dU49KimIgfxMRZLBIY0/XK926Z/Ez4QuK4njGhOd3IU=) 4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 5: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=) 6: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=) 7: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 10: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=) 11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: MnnybVgztS0dhA21JW4dypxRZl0hVVB9sU465uSoy/I=) 12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:b5:f2:38:28:12:12:d8:5c:fc:a3:97:9f:34:ea:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: May 13 05:01:17 2026 GMT Not After : May 14 05:01:17 2026 GMT Subject: CN=25ae9351df97cea7aaf2e2c1b5e4949a56210975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:31:73:69:db:cd:b7:d8:d8:15:99:9f:3b:ff: 40:c2:59:83:70:6d:d8:4e:3a:51:00:ee:9d:da:a9: 7c:e4:38:31:e2:5f:0b:a6:9a:04:35:81:ce:17:97: ef:fc:62:0a:f4:09:6f:b9:d5:76:15:3c:7d:cc:1b: 23:54:75:31:c8:ef:7c:2d:5a:25:ac:14:0f:00:45: 45:67:71:24:a7:e0:37:64:97:3e:21:87:39:43:0a: 02:08:61:69:3e:78:fa:5f:91:1a:a3:78:b5:87:26: e2:29:fd:01:c4:0e:4f:bd:bc:7e:b1:4f:7e:97:ad: f3:28:0d:d5:fe:79:39:72:ae:78:e1:5d:ff:0f:fb: 83:45:c6:5e:dc:6e:e5:d2:51:1b:45:ae:bb:54:5d: 6c:a8:78:f7:91:40:71:77:fe:68:ff:a3:a0:26:68: 52:7f:04:0b:7f:38:94:0e:91:aa:79:bd:40:14:c6: 32:3b:69:fd:82:ea:6f:2d:1a:af:9d:4e:a0:c4:ea: 05:78:5e:f7:33:12:55:03:a7:4c:7a:94:57:22:b6: 96:b7:20:ff:61:fc:4b:fe:e9:74:84:cf:9f:b0:11: 85:b8:b9:c4:95:1b:26:2e:a8:06:ad:05:b5:f4:bc: 0f:7f:9e:61:ef:c1:97:1f:58:bf:ce:24:98:e4:68: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:93:51:DF:97:CE:A7:AA:F2:E2:C1:B5:E4:94:9A:56:21:09:75 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:7e:65:e2:b2:c3:8b:65:96:15:96:22:3b:4b:78:37:93: 2d:51:ab:2f:e0:78:bb:3c:b2:96:65:32:08:54:bc:b7:84:c5: 6e:83:86:b1:03:7e:c1:31:64:cb:d4:c1:00:c4:f9:2b:01:fc: 43:0d:98:fb:42:70:65:c3:83:2a:ec:48:bc:4b:69:20:90:40: 87:84:97:9b:86:6a:1f:36:ee:47:2f:70:a5:b3:0e:37:5a:08: ec:67:f7:6b:23:88:91:d9:83:ac:df:66:07:e4:59:e3:7b:66: 56:41:52:10:7c:aa:1c:b3:c5:37:e0:b5:88:49:2f:6d:c1:9e: db:05:75:72:dd:6e:13:3a:c6:5d:f4:60:50:f1:99:c7:2a:68: 30:0b:62:86:4f:81:7e:7e:0b:52:5c:29:b5:6c:b3:a5:15:78: d1:67:9d:d2:42:e2:6f:97:06:70:5c:ce:4f:e0:f5:eb:97:1a: a1:d6:86:2f:5d:0a:18:d5:06:09:0d:ee:af:84:89:1a:54:90: 1f:84:1f:b4:b7:31:d5:4b:4e:2a:b2:97:80:52:8d:5a:71:fd: 82:56:78:88:ab:7b:e0:c0:13:f7:91:8c:38:7d:c6:75:3c:5c: 5a:85:e3:54:2b:0d:7e:c0:e7:e6:d9:b0:bf:a4:38:ac:0f:c5: be:97:7b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ftfI4KBIS2Fz8o5efNOoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwNTEzMDUwMTE3WhcNMjYwNTE0MDUwMTE3WjAzMTEwLwYDVQQD EygyNWFlOTM1MWRmOTdjZWE3YWFmMmUyYzFiNWU0OTQ5YTU2MjEwOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DFzadvNt9jYFZmfO/9AwlmDcG3Y TjpRAO6d2ql85Dgx4l8LppoENYHOF5fv/GIK9AlvudV2FTx9zBsjVHUxyO98LVol rBQPAEVFZ3Ekp+A3ZJc+IYc5QwoCCGFpPnj6X5Eao3i1hybiKf0BxA5Pvbx+sU9+ l63zKA3V/nk5cq544V3/D/uDRcZe3G7l0lEbRa67VF1sqHj3kUBxd/5o/6OgJmhS fwQLfziUDpGqeb1AFMYyO2n9gupvLRqvnU6gxOoFeF73MxJVA6dMepRXIraWtyD/ YfxL/ul0hM+fsBGFuLnElRsmLqgGrQW19LwPf55h78GXH1i/ziSY5GirdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWuk1Hfl86nqvLiwbXklJpWIQl1MB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhN+ZeKy w4tllhWWIjtLeDeTLVGrL+B4uzyylmUyCFS8t4TFboOGsQN+wTFky9TBAMT5KwH8 Qw2Y+0JwZcODKuxIvEtpIJBAh4SXm4ZqHzbuRy9wpbMON1oI7Gf3ayOIkdmDrN9m B+RZ43tmVkFSEHyqHLPFN+C1iEkvbcGe2wV1ct1uEzrGXfRgUPGZxypoMAtihk+B fn4LUlwptWyzpRV40Wed0kLib5cGcFzOT+D165caodaGL10KGNUGCQ3ur4SJGlSQ H4QftLcx1UtOKrKXgFKNWnH9glZ4iKt74MAT95GMOH3GdTxcWoXjVCsNfsDn5tmw v6Q4rA/Fvpd7Ug== -----END CERTIFICATE-----Generated at Wed May 13 08:27:08 2026 by rpki-client