$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: oEO7PtVgYOYjVLuiKRPbVYSEMAKK5P+ZUOsE3CKLDAw= Subject key identifier: CA:CD:7B:A7:24:5A:C5:C0:8C:48:77:1B:95:D3:CD:AB:3A:F7:08:58 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D7FA317193DC64F117AE2496259B892BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11D6 Signing time: Sun 12 Apr 2026 03:01:27 +0000 Manifest this update: Sun 12 Apr 2026 03:01:27 +0000 Manifest next update: Mon 13 Apr 2026 03:01:27 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: kKhx4MEVnKj9z14HmKZsLMYphu5+MS4jasNf99rUHBs=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 02:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:7f:a3:17:19:3d:c6:4f:11:7a:e2:49:62:59:b8:92:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 12 03:01:27 2026 GMT Not After : Apr 13 03:01:27 2026 GMT Subject: CN=cacd7ba7245ac5c08c48771b95d3cdab3af70858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:47:6b:71:b7:58:7c:fa:ef:6f:93:e4:a2: 4a:39:f6:70:af:6a:55:67:37:b5:36:42:85:00:b7: 1d:e8:40:bd:de:ee:3a:41:ab:95:04:e3:07:22:f3: d0:dd:3b:6a:a1:2b:32:58:e8:8f:9f:ee:8e:cb:38: 75:31:54:e5:64:c9:37:af:bd:1e:03:a1:b7:57:a2: 58:3b:e1:0a:48:38:a9:69:12:c9:cd:a5:c7:78:fc: a3:57:a2:64:15:7a:4f:b7:bf:9f:b9:3f:4a:83:0d: 62:b6:c1:fc:d3:aa:75:7d:13:47:40:b5:d1:8c:64: 48:53:1f:09:a5:f0:c3:c9:34:60:57:1d:30:19:e6: a7:20:59:23:62:19:d5:08:96:e7:6b:0d:54:d6:50: c3:49:67:9b:a8:70:66:eb:f6:4f:01:d1:75:39:a1: 98:12:e2:7f:3e:0e:e1:bb:97:c9:14:a4:2a:d2:e8: c5:ef:fa:0b:5b:36:37:34:15:4d:87:d3:f4:73:18: 36:6e:69:c8:8b:6a:1a:e2:19:e1:b7:9b:3f:40:33: 03:3d:4a:94:62:b0:ff:2e:15:fa:63:34:20:5c:fa: 10:9a:ba:9d:8b:04:02:39:19:4d:2b:33:d1:d2:5b: b0:a7:de:2d:99:68:b0:d5:90:8f:83:55:de:25:1e: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:7B:A7:24:5A:C5:C0:8C:48:77:1B:95:D3:CD:AB:3A:F7:08:58 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:58:c4:37:b2:16:10:4a:86:27:c0:28:97:c9:7e:c7:c9: 2b:b4:a5:77:0b:83:da:fe:07:1f:21:f8:9a:97:16:05:14:f3: 40:a7:36:8e:1a:c7:a0:cc:2d:92:3c:ff:81:ac:86:d7:65:94: cf:d7:2a:f2:97:24:aa:29:5d:27:22:cf:93:83:c0:ab:f1:a9: d9:57:b1:18:e4:d7:b7:70:b9:b9:b8:d1:74:da:90:de:02:12: c3:67:61:92:ca:19:de:8c:d9:be:5e:1d:7b:92:92:4d:14:71: 24:7f:d0:65:be:03:b7:50:83:0f:86:12:ac:ae:6f:09:1f:be: 53:d8:ae:d2:d6:33:09:91:1b:1a:4e:bf:fa:5e:22:07:04:45: 9b:c1:cb:9f:62:87:ba:cd:0c:73:68:41:df:fe:10:ee:1a:43: c2:ba:ff:d6:d0:22:ad:ff:6d:76:46:4b:2d:6c:a8:5e:0a:7d: 88:f0:06:c9:d8:25:6b:e9:f9:13:52:d1:38:bd:3a:51:a3:21: 30:be:8b:b9:79:96:c0:1e:a9:cb:f1:15:c4:4d:69:41:ba:a3: e9:f8:3a:94:11:f2:73:38:5d:b0:37:46:24:6d:64:05:27:0a: 1b:83:dd:33:48:3a:4a:0d:d0:e9:03:5b:8c:d8:3b:73:41:2f: 46:ee:a4:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1/oxcZPcZPEXriSWJZuJK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDEyMDMwMTI3WhcNMjYwNDEzMDMwMTI3WjAzMTEwLwYDVQQD EyhjYWNkN2JhNzI0NWFjNWMwOGM0ODc3MWI5NWQzY2RhYjNhZjcwODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LpHa3G3WHz672+T5KJKOfZwr2pV Zze1NkKFALcd6EC93u46QauVBOMHIvPQ3TtqoSsyWOiPn+6Oyzh1MVTlZMk3r70e A6G3V6JYO+EKSDipaRLJzaXHePyjV6JkFXpPt7+fuT9Kgw1itsH806p1fRNHQLXR jGRIUx8JpfDDyTRgVx0wGeanIFkjYhnVCJbnaw1U1lDDSWebqHBm6/ZPAdF1OaGY EuJ/Pg7hu5fJFKQq0ujF7/oLWzY3NBVNh9P0cxg2bmnIi2oa4hnht5s/QDMDPUqU YrD/LhX6YzQgXPoQmrqdiwQCORlNKzPR0luwp94tmWiw1ZCPg1XeJR68EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrNe6ckWsXAjEh3G5XTzas69whYMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMRYxDey FhBKhifAKJfJfsfJK7SldwuD2v4HHyH4mpcWBRTzQKc2jhrHoMwtkjz/gayG12WU z9cq8pckqildJyLPk4PAq/Gp2VexGOTXt3C5ubjRdNqQ3gISw2dhksoZ3ozZvl4d e5KSTRRxJH/QZb4Dt1CDD4YSrK5vCR++U9iu0tYzCZEbGk6/+l4iBwRFm8HLn2KH us0Mc2hB3/4Q7hpDwrr/1tAirf9tdkZLLWyoXgp9iPAGydgla+n5E1LROL06UaMh ML6LuXmWwB6py/EVxE1pQbqj6fg6lBHyczhdsDdGJG1kBScKG4PdM0g6Sg3Q6QNb jNg7c0EvRu6kOQ== -----END CERTIFICATE-----Generated at Sun Apr 12 07:52:05 2026 by rpki-client