$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: Lp9fWcHG/aBguBEzztc7J/lkqGENzND3PckneqHha7k= Subject key identifier: 06:0B:8F:F4:39:EE:A3:A7:0F:EE:C6:DC:C9:B3:CB:66:DC:76:28:CA Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019DF94D2CA8BD9ED5AE7835BE37C12706AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 1121 Signing time: Tue 05 May 2026 18:01:17 +0000 Manifest this update: Tue 05 May 2026 18:01:17 +0000 Manifest next update: Wed 06 May 2026 18:01:17 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 8GxpqzFkgC5Hy_akXhw29hXcvRQ.roa (hash: Aev5WlLyBeoo/iwLCZCFl1FrbyeMZhKq6RcvTv7DoY0=) 3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 4: B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (hash: IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=) 5: BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa (hash: LExdEQ5VC8/M9uctTrGTrEOA+lYTiyS4I7rkKa10kEA=) 6: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 7: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 8: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 9: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 10: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: zgioJo9UcNbLKi8GPFSQ0qWWbaV/l3Rg7HGYDiVkdCI=) 11: d-QxnSqS_V0shL66uqwLAgZFIBo.roa (hash: luvYromzsoLUcbp7ns0bb/QOxsjEI+GNMV9SnMHva8E=) 12: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) 13: saxBhB5iIsj-qtCE-fe90xXgHzc.roa (hash: 0GBMbDY4KzsuDSY2C+PoQvPLfc+cGC76YZoJtCPmub0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:4d:2c:a8:bd:9e:d5:ae:78:35:be:37:c1:27:06:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: May 5 18:01:17 2026 GMT Not After : May 6 18:01:17 2026 GMT Subject: CN=060b8ff439eea3a70feec6dcc9b3cb66dc7628ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5b:38:64:de:7f:a6:1e:62:67:d0:b7:9a:da: 1f:1f:47:ca:67:c5:e5:67:23:c5:f3:95:3d:82:31: 73:90:66:1a:c5:23:80:31:14:7a:3c:53:4c:c3:44: 8b:66:32:0e:f5:e4:91:f1:41:36:23:fb:a4:de:d2: ff:01:83:2c:2b:7a:00:64:9a:1c:16:6b:ef:3e:dc: ad:35:c2:de:76:ac:74:82:fc:83:65:9d:86:69:21: 12:82:28:99:ef:b2:0f:e9:de:df:c3:1d:88:92:d6: 1f:82:f5:6b:2a:a6:e8:31:2c:47:b2:ad:3d:34:a5: 63:d4:83:e2:fd:ca:a4:e5:f9:57:21:50:1f:3c:ed: 54:ac:86:93:ee:a7:14:90:34:84:be:58:e1:46:3b: e0:08:41:23:ff:aa:94:3f:cd:8b:c9:f2:be:90:b6: 43:51:18:fb:3b:7a:74:f5:a1:7e:36:75:85:02:df: 5d:c3:bb:75:c6:4f:18:d1:f9:d5:c3:4b:a5:20:83: 8c:8c:42:f3:e7:fa:81:7f:cc:c4:d9:a3:8b:14:8e: af:1d:a1:c0:a2:35:79:ee:2b:21:6c:8f:9e:42:85: e4:09:3e:bf:a3:3b:87:83:de:5e:f8:de:ac:be:9d: c7:e1:54:ee:53:74:aa:84:50:26:5f:c9:04:cf:8b: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:8F:F4:39:EE:A3:A7:0F:EE:C6:DC:C9:B3:CB:66:DC:76:28:CA X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b0:77:85:32:0d:09:24:14:e4:23:4a:57:91:c5:87:15:bc: e4:dd:14:40:79:f5:00:4b:53:f0:a6:dc:cb:ee:5b:c8:82:ba: f7:82:01:43:29:9c:ab:9d:69:d7:38:d7:ed:75:89:c6:f5:c7: a4:20:22:ca:49:13:f6:a5:46:df:a0:fb:8c:62:bc:7e:30:7c: b8:89:aa:27:56:c5:13:97:28:07:7c:07:8c:77:bf:14:34:05: 24:fc:ed:5b:76:c9:42:d9:d5:ec:c7:01:99:3c:31:53:d4:db: 8a:c4:08:32:8b:3a:c1:97:97:0d:e2:3c:ed:6e:d9:00:d0:5f: 82:2e:26:ec:93:b2:9b:46:a8:73:34:9a:40:01:58:ae:7b:2e: 6a:da:41:b1:27:b0:38:ec:13:81:25:d5:bb:74:78:72:68:54: 6b:b5:64:cf:35:34:19:b0:63:13:10:d8:f2:55:ca:18:22:e7: 31:e9:7a:95:8e:4b:a6:4d:1d:97:51:a8:9f:91:2e:a0:56:61: f0:2b:57:2e:2a:6a:d7:56:5b:79:b5:6c:7d:cd:47:45:15:e5: cb:b0:0e:27:d0:88:40:00:f7:1c:ac:e3:f9:5b:7c:9d:35:f6: eb:90:90:91:4b:ed:5a:ea:e4:7b:6a:9e:67:0c:bc:17:10:2e: 6a:d0:cd:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ35TSyovZ7Vrng1vjfBJwarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwNTA1MTgwMTE3WhcNMjYwNTA2MTgwMTE3WjAzMTEwLwYDVQQD EygwNjBiOGZmNDM5ZWVhM2E3MGZlZWM2ZGNjOWIzY2I2NmRjNzYyOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Vs4ZN5/ph5iZ9C3mtofH0fKZ8Xl ZyPF85U9gjFzkGYaxSOAMRR6PFNMw0SLZjIO9eSR8UE2I/uk3tL/AYMsK3oAZJoc FmvvPtytNcLedqx0gvyDZZ2GaSESgiiZ77IP6d7fwx2IktYfgvVrKqboMSxHsq09 NKVj1IPi/cqk5flXIVAfPO1UrIaT7qcUkDSEvljhRjvgCEEj/6qUP82LyfK+kLZD URj7O3p09aF+NnWFAt9dw7t1xk8Y0fnVw0ulIIOMjELz5/qBf8zE2aOLFI6vHaHA ojV57ishbI+eQoXkCT6/ozuHg95e+N6svp3H4VTuU3SqhFAmX8kEz4vWawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYLj/Q57qOnD+7G3Mmzy2bcdijKMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7B3hTIN CSQU5CNKV5HFhxW85N0UQHn1AEtT8Kbcy+5byIK694IBQymcq51p1zjX7XWJxvXH pCAiykkT9qVG36D7jGK8fjB8uImqJ1bFE5coB3wHjHe/FDQFJPztW3bJQtnV7McB mTwxU9TbisQIMos6wZeXDeI87W7ZANBfgi4m7JOym0aoczSaQAFYrnsuatpBsSew OOwTgSXVu3R4cmhUa7VkzzU0GbBjExDY8lXKGCLnMel6lY5Lpk0dl1Gon5EuoFZh 8CtXLipq11ZbebVsfc1HRRXly7AOJ9CIQAD3HKzj+Vt8nTX265CQkUvtWurke2qe Zwy8FxAuatDNOw== -----END CERTIFICATE-----Generated at Wed May 6 00:20:49 2026 by rpki-client