$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: 1S5Vs4UJTDsYOl0+c1VEzlxLjD550T/eP5K1Pxv+9yk= Subject key identifier: F0:5D:AB:62:E4:C1:90:4C:A6:9B:26:5D:A3:80:4E:5F:F6:E0:6B:DB Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019E1D22527562E06FEDA0F19B631349677E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1918 Signing time: Tue 12 May 2026 17:00:48 +0000 Manifest this update: Tue 12 May 2026 17:00:48 +0000 Manifest next update: Wed 13 May 2026 17:00:48 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 5J30Kl52WmsEAdHICw+h+neFCQc81ebw4BrnHNu9Op4=) 9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:52:75:62:e0:6f:ed:a0:f1:9b:63:13:49:67:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: May 12 17:00:48 2026 GMT Not After : May 13 17:00:48 2026 GMT Subject: CN=f05dab62e4c1904ca69b265da3804e5ff6e06bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:63:b5:29:6e:44:c6:aa:57:06:79:16:d5: 86:b2:23:70:53:d8:5b:5f:97:51:c2:fd:1b:27:5f: 04:c9:06:8b:cd:0b:55:3e:8e:7d:6d:b8:c4:c7:96: 5a:7b:7d:0f:88:93:10:fb:d5:ae:08:be:e9:b0:38: 49:a5:4a:7a:8f:c0:57:36:c6:97:7e:43:f9:9b:40: 4d:25:0b:55:c4:1a:46:f6:ea:48:83:00:95:59:9a: c8:bd:09:2f:0c:a3:72:b6:17:1e:d3:33:55:af:5b: 09:56:b2:b5:92:4e:ed:c2:87:3d:b2:e0:c7:4f:8f: 3c:9e:4a:cc:86:87:fc:4e:6a:0b:cd:82:5d:d3:7c: 91:a3:ee:3d:a4:24:a0:83:35:4f:ff:d5:ce:cb:c1: e2:a0:85:b0:c7:c8:30:c9:22:44:82:8c:82:d8:db: 79:fc:de:2e:09:d5:a1:7e:98:94:c6:9a:62:9f:cb: 9d:0c:f6:c7:a8:75:ce:8c:3b:48:b1:ba:c6:c8:ff: 54:32:79:af:07:04:78:ce:95:22:2c:1d:e8:10:79: c6:ac:aa:d6:96:cb:1f:11:b8:87:95:df:44:6f:50: 60:21:d2:21:bc:69:d6:6e:1e:cf:68:00:f6:ce:1f: ae:ea:ce:34:80:39:98:7b:5c:56:a3:b8:be:a2:73: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5D:AB:62:E4:C1:90:4C:A6:9B:26:5D:A3:80:4E:5F:F6:E0:6B:DB X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:39:cf:49:f6:f6:02:fe:bd:04:c8:e8:ae:a6:1b:e4:ca:4a: 9d:59:9b:79:89:85:f3:b3:21:e2:cb:da:40:ef:33:ff:80:d2: 9c:b4:8b:12:0d:21:36:79:df:8c:af:19:4a:2f:16:31:33:3c: 2b:79:9b:f0:ea:03:b2:84:32:ba:6f:d1:fe:62:ad:8d:d4:06: ad:09:51:9d:03:06:4c:a5:1d:dd:24:67:c5:44:ba:e7:1d:f9: e4:d2:3e:b5:43:a7:a9:7d:17:0e:86:8a:28:e5:d1:d5:99:98: 94:23:2b:89:2d:36:44:e3:60:5e:d0:3f:ff:97:3c:b0:d8:81: 5a:0f:ee:55:2b:cb:35:dc:c7:45:ea:87:2e:96:e9:66:5c:4b: f4:fb:8a:3c:e3:54:55:c4:ff:b6:21:ef:79:3e:6f:2d:51:6b: f9:f4:0d:67:e9:13:1a:93:e9:cc:99:a4:d2:48:56:b6:10:87: 46:97:0e:e2:e6:af:be:88:07:f8:65:4a:21:c6:c5:d1:d2:3e: 18:f7:72:d6:dd:78:1c:d8:2b:59:8e:f0:a4:97:d8:d4:fb:a6: 6c:30:1f:7d:21:8b:41:81:25:89:73:b0:c1:73:89:6d:32:9c: 00:2e:ea:b5:c7:96:81:52:b9:66:da:a8:9c:9d:55:fa:1d:e2: a2:39:6a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIlJ1YuBv7aDxm2MTSWd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwNTEyMTcwMDQ4WhcNMjYwNTEzMTcwMDQ4WjAzMTEwLwYDVQQD EyhmMDVkYWI2MmU0YzE5MDRjYTY5YjI2NWRhMzgwNGU1ZmY2ZTA2YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAljtSluRMaqVwZ5FtWGsiNwU9hb X5dRwv0bJ18EyQaLzQtVPo59bbjEx5Zae30PiJMQ+9WuCL7psDhJpUp6j8BXNsaX fkP5m0BNJQtVxBpG9upIgwCVWZrIvQkvDKNythce0zNVr1sJVrK1kk7twoc9suDH T488nkrMhof8TmoLzYJd03yRo+49pCSggzVP/9XOy8HioIWwx8gwySJEgoyC2Nt5 /N4uCdWhfpiUxppin8udDPbHqHXOjDtIsbrGyP9UMnmvBwR4zpUiLB3oEHnGrKrW lssfEbiHld9Eb1BgIdIhvGnWbh7PaAD2zh+u6s40gDmYe1xWo7i+onPkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBdq2LkwZBMppsmXaOATl/24GvbMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDnPSfb2 Av69BMjorqYb5MpKnVmbeYmF87Mh4svaQO8z/4DSnLSLEg0hNnnfjK8ZSi8WMTM8 K3mb8OoDsoQyum/R/mKtjdQGrQlRnQMGTKUd3SRnxUS65x355NI+tUOnqX0XDoaK KOXR1ZmYlCMriS02RONgXtA//5c8sNiBWg/uVSvLNdzHReqHLpbpZlxL9PuKPONU VcT/tiHveT5vLVFr+fQNZ+kTGpPpzJmk0khWthCHRpcO4uavvogH+GVKIcbF0dI+ GPdy1t14HNgrWY7wpJfY1PumbDAffSGLQYEliXOwwXOJbTKcAC7qtceWgVK5Ztqo nJ1V+h3iojlqOw== -----END CERTIFICATE-----Generated at Wed May 13 02:35:36 2026 by rpki-client