$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: 4ejMmQh6OiCsOysSy6cvA8nPskbJ/CaNnwk4qtA3CEI= Subject key identifier: 43:CB:FF:8B:F5:D2:1E:0C:4A:1E:41:57:E1:BB:36:A7:F5:FC:C5:67 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019E1C477EE767931B0C4D13F3D3CC1A0D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 192B Signing time: Tue 12 May 2026 13:01:48 +0000 Manifest this update: Tue 12 May 2026 13:01:48 +0000 Manifest next update: Wed 13 May 2026 13:01:48 +0000 Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=) 2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: I5dHecbk78BxY6U3ySBXeRsLJGvAFiy5rQejs5eA3vs=) 3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=) 4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=) 5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=) 6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=) 7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=) 8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=) 9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=) 10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=) 11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=) 12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:47:7e:e7:67:93:1b:0c:4d:13:f3:d3:cc:1a:0d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: May 12 13:01:48 2026 GMT Not After : May 13 13:01:48 2026 GMT Subject: CN=43cbff8bf5d21e0c4a1e4157e1bb36a7f5fcc567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:ea:30:db:59:d9:54:c1:24:ea:75:1d:70: af:f9:fa:3d:9e:4b:ec:aa:05:85:3d:47:09:05:8c: f7:d0:95:a5:da:cf:b8:94:8d:83:c1:49:82:d4:1c: 3b:c2:57:da:69:65:47:98:fd:76:6e:0b:52:bc:6d: 2b:7a:d8:ff:a0:7c:37:96:01:26:0a:fc:3d:dd:01: 7f:b9:97:ef:8c:94:3a:05:c8:82:af:69:a0:4d:b7: 4d:4e:22:78:a2:b4:f9:8a:87:f8:b4:a8:a7:b5:72: e3:d1:e4:6c:f1:c9:ea:48:8f:f8:cb:aa:90:e0:7f: 5c:f7:ba:f1:b8:55:0d:c7:81:b3:77:31:f6:64:74: d9:10:02:92:7a:b9:4a:0e:07:9b:d4:9c:09:05:bf: 83:09:92:7d:f3:ee:04:e5:00:1f:fe:5e:f5:91:ef: de:14:76:62:9e:f8:09:d9:0e:aa:2a:c1:ef:81:6b: 24:16:f3:17:90:aa:d1:3a:75:59:d1:ba:77:f4:c4: 35:53:63:08:cf:4f:73:46:e3:54:c3:ad:bd:93:48: b8:02:10:9b:2a:cc:3a:da:b9:8c:56:8a:9e:57:98: ba:98:22:29:71:65:cc:5d:58:a4:3d:b8:e3:0c:4e: 4b:a9:79:6f:22:bb:04:10:77:10:37:61:19:4e:de: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:FF:8B:F5:D2:1E:0C:4A:1E:41:57:E1:BB:36:A7:F5:FC:C5:67 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:3b:ac:05:77:33:2f:31:6e:38:05:76:34:1d:4d:29:32: 07:bb:37:8a:ef:25:cd:fc:09:96:7d:d3:b3:9d:5d:06:d9:bd: ec:7e:12:ed:d9:c5:68:a4:f9:55:c2:32:f9:81:2f:a6:a9:6d: 0d:6c:81:ad:e7:4c:d9:ce:9c:98:37:3c:25:d3:c3:5e:0c:eb: 8f:a3:4e:e0:8e:17:75:5f:72:5f:d1:d7:e0:ee:7a:30:70:59: 90:5e:47:8a:38:06:56:6a:e2:cf:e0:26:20:ba:9b:04:ff:e7: 38:9e:b4:73:47:03:4c:72:99:dc:f5:c9:03:ed:a7:bc:fa:2d: e4:27:5c:69:27:c7:e1:c0:36:7b:d7:ba:27:fc:c7:e7:48:aa: a3:09:54:13:4e:30:46:03:7b:96:15:f2:26:27:99:5d:10:2b: d4:b3:74:1a:d6:ae:53:98:20:f6:aa:eb:7b:fb:36:3e:ad:b1: 71:02:1c:15:71:22:e2:a8:04:16:fc:2f:c1:c4:79:b2:15:4c: ea:91:23:6d:fb:4d:fe:95:da:59:da:f6:ad:fd:97:77:39:c5: ad:96:ac:74:d6:d9:5a:87:da:c2:59:b0:64:55:02:79:09:65: c7:d0:63:c3:7a:2c:80:ee:90:15:ee:b7:e8:db:64:05:59:9d: ec:79:87:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cR37nZ5MbDE0T89PMGg2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwNTEyMTMwMTQ4WhcNMjYwNTEzMTMwMTQ4WjAzMTEwLwYDVQQD Eyg0M2NiZmY4YmY1ZDIxZTBjNGExZTQxNTdlMWJiMzZhN2Y1ZmNjNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTHqMNtZ2VTBJOp1HXCv+fo9nkvs qgWFPUcJBYz30JWl2s+4lI2DwUmC1Bw7wlfaaWVHmP12bgtSvG0retj/oHw3lgEm Cvw93QF/uZfvjJQ6BciCr2mgTbdNTiJ4orT5iof4tKintXLj0eRs8cnqSI/4y6qQ 4H9c97rxuFUNx4GzdzH2ZHTZEAKSerlKDgeb1JwJBb+DCZJ98+4E5QAf/l71ke/e FHZinvgJ2Q6qKsHvgWskFvMXkKrROnVZ0bp39MQ1U2MIz09zRuNUw629k0i4AhCb Ksw62rmMVoqeV5i6mCIpcWXMXVikPbjjDE5LqXlvIrsEEHcQN2EZTt4AjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPL/4v10h4MSh5BV+G7Nqf1/MVnMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMY7rAV3 My8xbjgFdjQdTSkyB7s3iu8lzfwJln3Ts51dBtm97H4S7dnFaKT5VcIy+YEvpqlt DWyBredM2c6cmDc8JdPDXgzrj6NO4I4XdV9yX9HX4O56MHBZkF5HijgGVmriz+Am ILqbBP/nOJ60c0cDTHKZ3PXJA+2nvPot5CdcaSfH4cA2e9e6J/zH50iqowlUE04w RgN7lhXyJieZXRAr1LN0GtauU5gg9qrre/s2Pq2xcQIcFXEi4qgEFvwvwcR5shVM 6pEjbftN/pXaWdr2rf2XdznFrZasdNbZWofawlmwZFUCeQllx9Bjw3osgO6QFe63 6NtkBVmd7HmHUw== -----END CERTIFICATE-----Generated at Tue May 12 21:25:42 2026 by rpki-client