$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: H0TIV+szs540RUKqrrRJMhZAtRbExXcH8rb6YYlulto= Subject key identifier: C1:A4:84:AE:35:54:D0:80:FA:CE:05:99:74:CB:9A:6F:4D:7C:38:D3 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019E1DC760E334CB7E42B0785220634B04C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1962 Signing time: Tue 12 May 2026 20:01:06 +0000 Manifest this update: Tue 12 May 2026 20:01:06 +0000 Manifest next update: Wed 13 May 2026 20:01:06 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: 6NnumjbLaK5uH21Kvrb7OjjLMWI.roa (hash: 7pnfS7LcH0iQhlqpTMUeGOkYaMziCcKZ9vKU4S2fblw=) 4: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 5: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 6: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 7: RaSDCVs_3yb1Ag2Siqma7OPDTfI.roa (hash: 1BDwjFvUC8jAom6YokpKMPw9vBJY33AEAijvzVkLCbY=) 8: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 9: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 10: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 11: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 12: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 13: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 14: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: 3bW5+5uX0orJsFdNoFC1yCQImPbaeDBiL1byQUT3Yrk=) 15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:60:e3:34:cb:7e:42:b0:78:52:20:63:4b:04:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: May 12 20:01:06 2026 GMT Not After : May 13 20:01:06 2026 GMT Subject: CN=c1a484ae3554d080face059974cb9a6f4d7c38d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:b3:d9:4e:9a:72:cd:1d:c3:bc:da:49:92: 4a:05:ce:de:44:08:8d:55:33:0a:3f:e0:6b:24:1a: 0f:14:0c:d7:a9:2b:68:f6:14:17:c9:2b:b8:a2:d7: 25:15:d5:fc:e4:2d:99:84:8e:31:58:4a:bf:6c:7c: c5:b5:3f:9d:de:a0:55:ab:27:6b:20:87:65:7c:d2: c0:b8:32:ae:9f:d0:54:f3:8b:ca:9f:f3:60:ab:19: cc:81:1c:88:85:e8:28:1c:73:0d:58:6e:67:20:b2: 72:34:50:8f:8f:94:be:0d:0e:a4:df:4a:cb:79:f3: 64:58:12:7f:f2:66:7d:bb:d8:07:54:e8:82:9b:f8: c9:93:c4:46:f3:91:cb:92:d3:a4:18:0c:8f:7b:e8: d8:f9:08:02:06:f7:01:e1:64:4a:30:ed:69:aa:40: 91:05:51:67:e5:8d:cc:e2:a1:e9:72:ae:6b:40:f9: bb:8d:72:52:b8:f7:69:2e:ce:34:3a:9f:6c:b3:b7: f9:cb:84:09:8a:4a:6d:10:f3:5f:7f:e7:bd:94:c5: ec:28:33:df:01:bd:a0:84:52:a9:1b:19:8e:d9:ac: 85:1a:e4:9c:02:4f:88:9f:e3:e1:fb:88:3c:ff:69: 41:5f:33:51:cf:7e:f8:55:55:28:1c:51:c4:44:0a: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:84:AE:35:54:D0:80:FA:CE:05:99:74:CB:9A:6F:4D:7C:38:D3 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:92:c3:bd:a1:8b:d6:b6:10:5f:f0:09:f8:f5:74:06:35: e5:52:49:21:79:13:58:57:96:f5:10:26:91:b4:37:8e:5b:df: f0:c2:0e:e7:6d:34:52:e9:ed:60:08:50:22:64:d1:b7:bc:96: bc:54:17:c8:92:13:cd:3a:5c:54:d4:7c:c1:79:d7:9c:c6:1b: 3a:b3:bf:7e:e9:44:42:41:aa:9c:ad:19:54:09:9f:84:bc:57: e1:00:42:be:45:73:53:6c:50:67:12:33:71:0d:79:9b:b7:6d: 5d:50:19:40:8e:56:2d:6e:9e:84:91:34:3c:d3:6d:d7:6d:8d: f5:5a:7a:cc:e5:34:90:49:98:12:5e:07:5c:d9:2f:3a:a7:d8: 54:ca:d9:df:31:c5:4c:b5:f8:55:e9:0f:65:08:13:a9:fc:e3: e8:d9:10:f9:79:d0:90:2d:21:b0:9e:34:94:31:90:26:33:69: 4c:24:3e:01:24:66:d4:a3:2b:b8:ae:3b:ce:c5:eb:38:11:70: 91:f4:a2:db:10:9d:a5:0b:d0:7c:25:1b:ed:3a:e0:d6:2f:ef: 85:13:cd:80:47:1a:15:d0:8f:30:42:a0:58:6c:2a:ab:42:97: 46:4d:06:97:76:c4:97:d0:4e:ff:e8:9d:a2:07:23:7d:0b:67: 57:ce:7c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx2DjNMt+QrB4UiBjSwTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwNTEyMjAwMTA2WhcNMjYwNTEzMjAwMTA2WjAzMTEwLwYDVQQD EyhjMWE0ODRhZTM1NTRkMDgwZmFjZTA1OTk3NGNiOWE2ZjRkN2MzOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDmz2U6acs0dw7zaSZJKBc7eRAiN VTMKP+BrJBoPFAzXqSto9hQXySu4otclFdX85C2ZhI4xWEq/bHzFtT+d3qBVqydr IIdlfNLAuDKun9BU84vKn/NgqxnMgRyIhegoHHMNWG5nILJyNFCPj5S+DQ6k30rL efNkWBJ/8mZ9u9gHVOiCm/jJk8RG85HLktOkGAyPe+jY+QgCBvcB4WRKMO1pqkCR BVFn5Y3M4qHpcq5rQPm7jXJSuPdpLs40Op9ss7f5y4QJikptEPNff+e9lMXsKDPf Ab2ghFKpGxmO2ayFGuScAk+In+Ph+4g8/2lBXzNRz374VVUoHFHERArvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGkhK41VNCA+s4FmXTLmm9NfDjTMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBOSw72h i9a2EF/wCfj1dAY15VJJIXkTWFeW9RAmkbQ3jlvf8MIO5200UuntYAhQImTRt7yW vFQXyJITzTpcVNR8wXnXnMYbOrO/fulEQkGqnK0ZVAmfhLxX4QBCvkVzU2xQZxIz cQ15m7dtXVAZQI5WLW6ehJE0PNNt122N9Vp6zOU0kEmYEl4HXNkvOqfYVMrZ3zHF TLX4VekPZQgTqfzj6NkQ+XnQkC0hsJ40lDGQJjNpTCQ+ASRm1KMruK47zsXrOBFw kfSi2xCdpQvQfCUb7Trg1i/vhRPNgEcaFdCPMEKgWGwqq0KXRk0Gl3bEl9BO/+id ogcjfQtnV8585g== -----END CERTIFICATE-----Generated at Wed May 13 05:09:40 2026 by rpki-client