$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: icJOLipDk7ol+D6uG/o0wjXXxty7KyHmnC3lMmpwAqo= Subject key identifier: D3:A7:56:7C:74:6C:2B:DE:1A:3C:24:E6:A0:60:5E:30:42:A7:71:5C Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019E333C9DBE6109AAA647DB6E2000A5E5C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1233 Signing time: Sun 17 May 2026 00:01:10 +0000 Manifest this update: Sun 17 May 2026 00:01:10 +0000 Manifest next update: Mon 18 May 2026 00:01:10 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: rn62cN4OfV/DsRDix7ONwu4LRvEyaGkQTb43AzDlOg8=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:33:3c:9d:be:61:09:aa:a6:47:db:6e:20:00:a5:e5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: May 17 00:01:10 2026 GMT Not After : May 18 00:01:10 2026 GMT Subject: CN=d3a7567c746c2bde1a3c24e6a0605e3042a7715c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:7a:fd:61:fc:a6:83:80:b5:c1:2f:0d:67: 31:21:15:3e:48:aa:e8:40:cf:9f:2e:e3:83:cb:4b: b7:d1:d2:96:cc:36:3b:3f:2b:c7:ec:d8:5e:3e:c5: 1c:29:69:dc:6d:fb:fa:a7:e5:a0:0f:cc:b2:72:ed: e8:9b:28:f4:0c:e3:e5:24:18:a0:e8:a1:77:d8:f9: c2:17:e2:9c:8f:10:6c:92:dd:83:53:08:d7:2d:b8: bb:7a:73:02:05:32:d8:4c:84:12:fd:a1:b3:d0:0e: 58:50:a2:a3:1c:ff:e1:d9:66:12:73:4b:5c:ea:ad: 3b:41:76:e1:4c:82:58:51:eb:99:19:9f:b9:c8:57: b1:81:ec:10:8e:c6:dc:11:3d:22:84:14:05:5f:30: fa:8b:ee:de:d0:9f:f4:ff:c5:7c:08:a6:b4:a8:77: 7b:78:49:8b:7e:9b:b9:f6:e9:d3:2b:e0:b9:c0:9d: f6:95:6a:44:be:bc:36:5d:7d:e2:dd:6b:93:13:99: 39:a1:e7:9f:d0:d4:f4:59:6d:9d:37:6a:52:0f:9a: 03:8a:a0:e6:e0:bc:b8:3f:e9:a2:79:ee:81:7d:dd: e1:0e:8c:b0:72:49:f8:0f:df:c3:9b:3d:21:21:8d: 16:be:63:d3:d2:97:70:99:4b:8c:dd:11:04:a6:66: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:56:7C:74:6C:2B:DE:1A:3C:24:E6:A0:60:5E:30:42:A7:71:5C X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3f:66:6a:65:a9:9f:3b:4b:ae:10:78:24:fd:65:8d:43:af: 6e:0f:10:7d:8e:71:cb:d5:f6:02:09:63:a5:2e:71:a0:2d:40: 63:7d:b4:7a:a1:bc:64:f4:2d:d1:e2:c8:6b:85:56:85:13:e1: 50:2f:d7:96:6c:62:97:0d:91:41:aa:9e:b6:b4:f4:87:4c:96: ef:ea:b7:3c:6c:fb:17:32:f0:03:6b:0e:cb:26:09:d6:3b:d9: cc:87:4c:b0:3f:67:f3:75:b5:a3:e0:0a:27:4e:62:f0:3d:1c: ed:c8:2b:12:2e:d8:d0:61:b4:e2:68:17:42:0a:0c:8a:92:39: a6:89:ba:55:fa:33:eb:75:21:f0:68:d8:98:bc:d1:11:94:37: e1:ca:04:6d:39:ae:8b:22:af:0c:3f:75:b7:f1:d1:8a:9c:4e: 98:67:af:a7:9c:1b:ec:38:39:30:fe:21:17:9c:b8:71:60:8e: ff:af:a7:66:ff:77:6d:9d:6d:8b:22:1f:8d:73:4d:6f:16:0f: 60:15:c0:d0:70:15:7a:6e:84:41:fe:ff:98:b1:ef:66:d7:77: f4:9f:56:71:97:55:69:ce:1b:f9:25:5a:ca:0b:4c:9f:8c:2b: f4:ee:40:9d:b9:30:df:cd:c2:50:44:48:7a:15:d2:a6:6f:a4: c2:00:a8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4zPJ2+YQmqpkfbbiAApeXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNTE3MDAwMTEwWhcNMjYwNTE4MDAwMTEwWjAzMTEwLwYDVQQD EyhkM2E3NTY3Yzc0NmMyYmRlMWEzYzI0ZTZhMDYwNWUzMDQyYTc3MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwF6/WH8poOAtcEvDWcxIRU+SKro QM+fLuODy0u30dKWzDY7PyvH7NhePsUcKWncbfv6p+WgD8yycu3omyj0DOPlJBig 6KF32PnCF+KcjxBskt2DUwjXLbi7enMCBTLYTIQS/aGz0A5YUKKjHP/h2WYSc0tc 6q07QXbhTIJYUeuZGZ+5yFexgewQjsbcET0ihBQFXzD6i+7e0J/0/8V8CKa0qHd7 eEmLfpu59unTK+C5wJ32lWpEvrw2XX3i3WuTE5k5oeef0NT0WW2dN2pSD5oDiqDm 4Ly4P+miee6Bfd3hDoywckn4D9/Dmz0hIY0WvmPT0pdwmUuM3REEpmaXwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOnVnx0bCveGjwk5qBgXjBCp3FcMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj9mamWp nztLrhB4JP1ljUOvbg8QfY5xy9X2AgljpS5xoC1AY320eqG8ZPQt0eLIa4VWhRPh UC/Xlmxilw2RQaqetrT0h0yW7+q3PGz7FzLwA2sOyyYJ1jvZzIdMsD9n83W1o+AK J05i8D0c7cgrEi7Y0GG04mgXQgoMipI5pom6Vfoz63Uh8GjYmLzREZQ34coEbTmu iyKvDD91t/HRipxOmGevp5wb7Dg5MP4hF5y4cWCO/6+nZv93bZ1tiyIfjXNNbxYP YBXA0HAVem6EQf7/mLHvZtd39J9WcZdVac4b+SVaygtMn4wr9O5Anbkw383CUERI ehXSpm+kwgCo8Q== -----END CERTIFICATE-----Generated at Sun May 17 07:30:29 2026 by rpki-client