$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: WgnE1O0H6FnwI6uQv83Zx7sKejwnDV7rRkSeGJxI/H4= Subject key identifier: A5:7E:C0:6D:A8:D1:0E:35:98:28:45:B1:A0:B1:C3:F9:C5:F7:06:FD Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019DF5700CD995A08D05E56CFDB3E0E260B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1213 Signing time: Tue 05 May 2026 00:00:54 +0000 Manifest this update: Tue 05 May 2026 00:00:54 +0000 Manifest next update: Wed 06 May 2026 00:00:54 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: TGdfdn7cdtLih9fkSyjP7ugAiKzMh+ly5WVpOVIuzKM=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f5:70:0c:d9:95:a0:8d:05:e5:6c:fd:b3:e0:e2:60:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: May 5 00:00:54 2026 GMT Not After : May 6 00:00:54 2026 GMT Subject: CN=a57ec06da8d10e35982845b1a0b1c3f9c5f706fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:ec:6d:63:8d:bf:de:40:4e:d1:e5:00:24: b8:e6:6e:ee:ba:02:a3:bf:b4:1c:bf:c9:12:6f:82: 7a:ac:10:18:3a:6b:72:26:48:84:bf:2c:c4:bf:46: 01:12:5f:dc:bb:ac:f3:80:ac:3c:d3:23:a9:84:2e: c0:80:f5:ca:6c:4b:78:f4:93:9e:93:98:ed:93:a9: d0:3f:fa:b2:e4:36:ea:4a:57:8a:46:41:94:1c:11: ff:6a:41:69:71:11:32:50:24:3c:3d:fd:1e:d8:d2: d7:f3:83:f9:61:60:c8:8e:fc:0e:6d:3b:d0:dc:74: e2:5a:40:70:f8:fe:54:dc:22:5e:a1:e2:64:80:e6: 99:36:80:20:84:75:9c:6c:df:b5:0d:4f:ba:4b:d8: 46:fa:ea:30:4c:53:63:6e:01:e9:cf:2b:45:85:c9: 23:e8:5e:d8:bd:5d:31:bc:b5:28:b8:36:45:a6:e5: 8f:1f:c3:62:db:b7:ab:cd:ba:98:7b:a0:be:7e:1f: c4:ef:0d:51:87:3c:3f:c6:86:76:11:57:70:01:f4: 35:c2:46:2d:a3:69:bc:c1:96:42:6d:41:dc:45:ff: 65:76:61:1d:d5:87:65:50:fd:9b:0a:f4:fc:d8:4b: 0e:2f:32:2e:48:36:1f:16:ce:0a:7d:0e:18:4e:6d: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:C0:6D:A8:D1:0E:35:98:28:45:B1:A0:B1:C3:F9:C5:F7:06:FD X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a1:cd:03:96:0f:a2:e7:06:71:e0:83:20:c2:d7:a4:41:31: d8:91:f0:08:d1:da:88:05:c3:a6:19:a3:4d:d4:01:e9:b1:03: 7a:42:95:6c:e4:7a:1a:03:11:5a:c3:f3:71:51:af:2a:c6:bb: 49:58:53:90:4d:c3:3f:d4:c3:35:d5:03:21:ac:18:19:df:82: bc:a4:d0:ca:11:0e:64:87:cc:27:9c:b1:43:c6:73:5c:cf:ed: 92:83:2e:67:6c:fe:e5:96:a2:71:a7:ff:a9:72:65:4f:d9:d9: 10:7d:20:c6:ea:4d:05:db:13:6e:d1:93:04:2a:9c:fa:c8:66: f0:69:8f:99:e5:14:cb:6e:6b:41:43:d9:c6:b2:0f:d2:8d:ed: 4e:7d:9e:ff:76:99:c2:82:98:d7:85:29:2c:e6:05:e7:3e:5c: 9d:1a:61:70:85:7f:23:b8:d3:3a:9a:01:fd:fa:31:31:99:23: ef:31:2a:48:4e:ef:f6:f8:6b:d8:bc:33:84:b1:08:cf:6a:cd: ff:1a:8a:62:7b:01:34:d9:06:70:f6:18:0d:bb:11:36:4b:9d: 92:2a:4c:c9:fc:1e:5b:62:1b:e3:f8:91:ad:82:70:ee:71:14: 45:9d:e7:2e:b5:4f:d2:bf:3b:77:4f:d9:0b:10:5d:d8:e5:e2: d6:25:66:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ31cAzZlaCNBeVs/bPg4mC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNTA1MDAwMDU0WhcNMjYwNTA2MDAwMDU0WjAzMTEwLwYDVQQD EyhhNTdlYzA2ZGE4ZDEwZTM1OTgyODQ1YjFhMGIxYzNmOWM1ZjcwNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzsbWONv95ATtHlACS45m7uugKj v7Qcv8kSb4J6rBAYOmtyJkiEvyzEv0YBEl/cu6zzgKw80yOphC7AgPXKbEt49JOe k5jtk6nQP/qy5DbqSleKRkGUHBH/akFpcREyUCQ8Pf0e2NLX84P5YWDIjvwObTvQ 3HTiWkBw+P5U3CJeoeJkgOaZNoAghHWcbN+1DU+6S9hG+uowTFNjbgHpzytFhckj 6F7YvV0xvLUouDZFpuWPH8Ni27erzbqYe6C+fh/E7w1Rhzw/xoZ2EVdwAfQ1wkYt o2m8wZZCbUHcRf9ldmEd1YdlUP2bCvT82EsOLzIuSDYfFs4KfQ4YTm1SGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV+wG2o0Q41mChFsaCxw/nF9wb9MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqHNA5YP oucGceCDIMLXpEEx2JHwCNHaiAXDphmjTdQB6bEDekKVbOR6GgMRWsPzcVGvKsa7 SVhTkE3DP9TDNdUDIawYGd+CvKTQyhEOZIfMJ5yxQ8ZzXM/tkoMuZ2z+5Zaicaf/ qXJlT9nZEH0gxupNBdsTbtGTBCqc+shm8GmPmeUUy25rQUPZxrIP0o3tTn2e/3aZ woKY14UpLOYF5z5cnRphcIV/I7jTOpoB/foxMZkj7zEqSE7v9vhr2LwzhLEIz2rN /xqKYnsBNNkGcPYYDbsRNkudkipMyfweW2Ib4/iRrYJw7nEURZ3nLrVP0r87d0/Z CxBd2OXi1iVmEw== -----END CERTIFICATE-----Generated at Tue May 5 03:31:53 2026 by rpki-client