$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: /ubfBMKw6ATld8Dgjko5yTnNZpDY0Z4miZbgDtECVQg= Subject key identifier: 0E:6E:3A:C9:5A:34:66:6B:AC:53:27:CE:5A:AB:E4:49:80:4A:6F:D1 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019E1E6CAAD9869705B24FC1106355E1161B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1933 Signing time: Tue 12 May 2026 23:01:38 +0000 Manifest this update: Tue 12 May 2026 23:01:38 +0000 Manifest next update: Wed 13 May 2026 23:01:38 +0000 Files and hashes: 1: 8RjWLmkOfBFVB99jlL40-lbquu4.asa (hash: cPK/LotGLsuTU9/s/Ip3nQ0vHAaDXf27kyaBoPUr+rM=) 2: An-yON-8-r9L0DQDMhGD3sk31bc.roa (hash: miEMEQQpwYbXLNF1GOKOC9kUJsEHXLwJ6GIu1E7pOyY=) 3: BReMM-HKMDiHcQvoyIT1xPxsg3w.roa (hash: aXBnjHE3xDdUmCqEBO3waOLTZzIvmij/g3V6Hn6E6Fs=) 4: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 5: a1iiCcOaxmzS0-8TIKQtOTVhn-s.roa (hash: VjhgE/ADiBXCV7jVQEBRzjdY9qu85RcYlku/EAwZIuw=) 6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: eJY657LIxbwxUs/d5rdcgrW9VxPaTY4eYcL1QXpbOjg=) 7: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=) 8: iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (hash: CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=) 9: iiUeWWy4vNdQT2JqfLyriOKyBds.roa (hash: X//YchsgfpGi9KC+KU3RuTcaBCPtGN0++IEL/F/EXV0=) 10: p0GDdN-xxKyg8Gf7N5r5gMiQ4M0.roa (hash: 3BflJNAULniEze9ExWAF/NtnD5BDpxEJYWJuUEJNS7k=) 11: qYl8U2V2wjymoE5EgbVi4zr15oA.roa (hash: 0cj0suyJHPGPdlrD72Qi8AuzhT9mmYmtajsb58y/ZiU=) 12: uzurr2xmZJqK_nXHAqCc38VmZP4.asa (hash: CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:aa:d9:86:97:05:b2:4f:c1:10:63:55:e1:16:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: May 12 23:01:38 2026 GMT Not After : May 13 23:01:38 2026 GMT Subject: CN=0e6e3ac95a34666bac5327ce5aabe449804a6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:9f:05:50:c4:08:29:bd:6e:b0:91:56:6d: c2:64:6d:77:a6:10:fa:eb:21:07:08:08:df:4e:0b: 35:2e:0c:aa:3d:f1:56:85:3d:8d:42:74:1a:e5:0c: bf:02:55:e2:c3:26:f9:af:1c:59:bd:ba:d0:6a:a1: 6e:fc:26:9a:26:ee:2e:08:78:be:88:15:22:55:10: 72:1d:55:17:31:3a:3f:87:bb:d9:34:67:3b:73:33: 65:72:c7:d5:68:b7:d8:b9:9b:ea:eb:b3:ba:3e:55: e3:f0:a9:46:ac:46:f8:35:40:c6:be:68:2e:4c:d4: 17:49:ec:fa:60:0b:79:f2:e2:04:ef:0c:2f:82:01: 87:cf:c6:2e:49:5b:c7:76:d4:dd:ce:d9:79:64:df: 8b:9d:1c:3b:b9:c6:4c:e5:28:89:45:f4:8d:1c:44: ed:96:cb:4a:3b:6a:29:f3:03:36:bb:a5:04:70:91: 8a:f0:92:bd:59:37:87:1a:0e:fc:a8:d6:88:bb:e1: f2:21:58:02:53:83:04:91:38:ce:d9:be:b3:c2:f6: 01:de:48:e5:56:26:29:9c:8f:1f:7d:57:dd:43:7c: 11:28:3c:e4:73:c5:53:08:51:96:66:b0:32:87:2b: a0:25:07:54:03:4d:82:17:3d:f3:3c:df:ae:62:47: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6E:3A:C9:5A:34:66:6B:AC:53:27:CE:5A:AB:E4:49:80:4A:6F:D1 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:8a:5f:99:09:81:18:fe:2c:7b:60:b3:5c:c1:dd:54:6e: 20:bd:1e:04:4d:20:6d:6a:ea:16:79:d6:1d:39:56:d2:36:ee: f0:c7:d0:56:5a:e0:eb:79:7a:5a:41:f3:1c:42:77:b7:fb:2b: ca:80:9b:f4:d7:a1:92:da:76:2b:5b:eb:32:14:6c:36:bf:92: d7:ac:47:31:99:b0:71:a3:f3:ef:05:fa:e2:87:fb:fc:f1:66: ee:66:c0:7e:21:2e:b7:82:90:a6:1c:06:27:8b:60:7f:10:b2: 9c:de:f4:8e:1b:e9:94:e6:fa:f5:4a:0c:d0:e1:f6:95:cb:96: 08:5c:39:7f:c9:03:83:19:35:62:4c:8d:2b:55:7a:3a:f8:0f: 06:3a:15:af:b0:ac:aa:f3:db:f3:83:7e:ce:b7:25:06:d5:7c: ac:bf:d7:26:98:ff:6e:1b:88:f6:aa:2f:f0:f8:03:20:a6:0a: f3:88:81:9e:7c:0c:9a:a3:83:94:1a:81:8b:eb:b1:04:c3:f3: 48:7f:86:bf:2f:ba:7e:89:4f:62:82:fc:07:8b:a7:11:4e:07: 05:00:0d:7c:a9:8c:73:58:ad:35:35:15:e3:48:a3:cf:09:78: 36:1a:1c:81:c4:9c:bd:d1:0c:78:b8:dc:7c:6c:c1:75:96:fa: f6:b7:80:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebKrZhpcFsk/BEGNV4RYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwNTEyMjMwMTM4WhcNMjYwNTEzMjMwMTM4WjAzMTEwLwYDVQQD EygwZTZlM2FjOTVhMzQ2NjZiYWM1MzI3Y2U1YWFiZTQ0OTgwNGE2ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt96fBVDECCm9brCRVm3CZG13phD6 6yEHCAjfTgs1LgyqPfFWhT2NQnQa5Qy/AlXiwyb5rxxZvbrQaqFu/CaaJu4uCHi+ iBUiVRByHVUXMTo/h7vZNGc7czNlcsfVaLfYuZvq67O6PlXj8KlGrEb4NUDGvmgu TNQXSez6YAt58uIE7wwvggGHz8YuSVvHdtTdztl5ZN+LnRw7ucZM5SiJRfSNHETt lstKO2op8wM2u6UEcJGK8JK9WTeHGg78qNaIu+HyIVgCU4MEkTjO2b6zwvYB3kjl ViYpnI8ffVfdQ3wRKDzkc8VTCFGWZrAyhyugJQdUA02CFz3zPN+uYkc9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5uOslaNGZrrFMnzlqr5EmASm/RMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMCKX5kJ gRj+LHtgs1zB3VRuIL0eBE0gbWrqFnnWHTlW0jbu8MfQVlrg63l6WkHzHEJ3t/sr yoCb9Nehktp2K1vrMhRsNr+S16xHMZmwcaPz7wX64of7/PFm7mbAfiEut4KQphwG J4tgfxCynN70jhvplOb69UoM0OH2lcuWCFw5f8kDgxk1YkyNK1V6OvgPBjoVr7Cs qvPb84N+zrclBtV8rL/XJpj/bhuI9qov8PgDIKYK84iBnnwMmqODlBqBi+uxBMPz SH+Gvy+6folPYoL8B4unEU4HBQANfKmMc1itNTUV40ijzwl4NhocgcScvdEMeLjc fGzBdZb69reAyA== -----END CERTIFICATE-----Generated at Wed May 13 02:36:11 2026 by rpki-client