$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: QGh7k9Aap3hHNrXssPK42JJhXiCcn0EDj4DL3EGawIs= Subject key identifier: 5C:2D:A3:FD:4E:B1:43:82:63:B6:BF:29:2E:78:29:9B:1D:D0:2F:FE Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D740D3F3919D863C5511DE7CAEAB8F708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11D0 Signing time: Thu 09 Apr 2026 21:01:58 +0000 Manifest this update: Thu 09 Apr 2026 21:01:58 +0000 Manifest next update: Fri 10 Apr 2026 21:01:58 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: Uf9s4GTh89cBQuFHx3gzSIRyVHsTafUzCD20nfSvSi4=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 21:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:74:0d:3f:39:19:d8:63:c5:51:1d:e7:ca:ea:b8:f7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 9 21:01:58 2026 GMT Not After : Apr 10 21:01:58 2026 GMT Subject: CN=5c2da3fd4eb1438263b6bf292e78299b1dd02ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:a2:2f:81:7d:12:8f:0b:45:6e:b6:39:6e: 57:f0:f3:e9:92:05:12:b6:c0:c4:fc:73:10:17:ae: 41:ca:cd:14:5f:c5:71:72:46:04:31:72:cc:17:68: fb:b1:16:be:fc:3f:5b:e7:17:7b:c1:a1:b5:c0:cc: f3:70:cd:85:0c:34:d3:b0:28:5c:da:c0:54:ad:6f: 00:1c:58:d4:f0:52:d1:f5:56:96:c7:85:d1:77:73: b6:19:8f:f0:c2:c1:86:ce:e6:48:d7:3d:da:bc:10: 04:83:6f:39:00:6e:2f:11:fb:c5:74:ca:33:3e:ff: bf:89:4d:8b:ac:88:bf:68:1f:73:fd:ba:c0:f3:fe: 8d:54:25:8e:85:77:ba:e9:4b:fe:72:8a:1a:13:9c: d5:ab:ab:94:fe:5f:ba:01:04:12:e9:f8:e8:a7:69: 52:ff:a1:e6:8c:5a:18:59:02:16:20:13:56:56:d0: 73:11:95:93:69:35:37:58:74:05:d8:24:5f:15:07: a9:32:d0:b1:32:6a:f4:40:17:bc:e9:03:49:72:4b: f0:08:fb:9e:83:d0:09:bc:04:e3:69:c1:bc:e0:f2: 92:3b:64:21:3e:b1:23:4c:83:fd:63:f2:e9:ba:32: 4f:52:be:b5:8b:05:d6:b4:51:27:5b:af:ac:43:15: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2D:A3:FD:4E:B1:43:82:63:B6:BF:29:2E:78:29:9B:1D:D0:2F:FE X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ac:8b:8b:26:3b:3a:d7:17:b4:77:44:97:d9:8f:d5:90:22: cb:ea:da:68:42:5e:b9:53:f7:6e:36:5b:bc:dc:e2:63:6d:4b: eb:f9:95:c9:b9:04:9a:37:3c:3b:e7:78:20:51:46:cf:53:eb: b2:72:18:db:8c:98:6d:f3:e1:17:93:aa:a0:37:51:06:7c:62: 52:f3:13:e4:be:9c:cc:d3:e9:cd:1a:2c:74:1e:75:5f:31:3a: fa:67:c1:65:5b:f4:d3:ce:e6:ff:4f:fd:9c:8e:49:84:b5:bd: 1e:80:e8:33:80:ac:65:c1:89:b7:cc:4b:55:4c:31:b9:07:ce: d7:2e:6c:64:22:4f:21:df:79:dc:ea:15:7a:5d:9f:85:15:fd: 95:4e:21:c0:eb:43:c3:68:14:20:e8:59:5f:fc:a1:7c:1e:6a: 28:b3:20:31:61:7c:a5:3e:40:be:e6:98:f7:ad:73:ea:10:81: 65:9e:8c:c7:e8:27:7f:42:f3:9c:c5:a4:51:28:2b:66:9e:e8: a7:fd:47:09:3c:31:41:58:05:55:0a:8b:49:93:1b:f4:55:b8: 4e:17:a8:b9:d2:32:e7:c9:da:e9:c2:16:27:fa:a3:b7:8f:8d: d9:60:fa:81:48:fe:2a:92:99:f8:48:ff:5a:3b:6e:15:ac:40: 58:0a:9f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ10DT85GdhjxVEd58rquPcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDA5MjEwMTU4WhcNMjYwNDEwMjEwMTU4WjAzMTEwLwYDVQQD Eyg1YzJkYTNmZDRlYjE0MzgyNjNiNmJmMjkyZTc4Mjk5YjFkZDAyZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AyiL4F9Eo8LRW62OW5X8PPpkgUS tsDE/HMQF65Bys0UX8VxckYEMXLMF2j7sRa+/D9b5xd7waG1wMzzcM2FDDTTsChc 2sBUrW8AHFjU8FLR9VaWx4XRd3O2GY/wwsGGzuZI1z3avBAEg285AG4vEfvFdMoz Pv+/iU2LrIi/aB9z/brA8/6NVCWOhXe66Uv+cooaE5zVq6uU/l+6AQQS6fjop2lS /6HmjFoYWQIWIBNWVtBzEZWTaTU3WHQF2CRfFQepMtCxMmr0QBe86QNJckvwCPue g9AJvATjacG84PKSO2QhPrEjTIP9Y/LpujJPUr61iwXWtFEnW6+sQxX2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwto/1OsUOCY7a/KS54KZsd0C/+MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqyLiyY7 OtcXtHdEl9mP1ZAiy+raaEJeuVP3bjZbvNziY21L6/mVybkEmjc8O+d4IFFGz1Pr snIY24yYbfPhF5OqoDdRBnxiUvMT5L6czNPpzRosdB51XzE6+mfBZVv0087m/0/9 nI5JhLW9HoDoM4CsZcGJt8xLVUwxuQfO1y5sZCJPId953OoVel2fhRX9lU4hwOtD w2gUIOhZX/yhfB5qKLMgMWF8pT5AvuaY961z6hCBZZ6Mx+gnf0LznMWkUSgrZp7o p/1HCTwxQVgFVQqLSZMb9FW4TheoudIy58na6cIWJ/qjt4+N2WD6gUj+KpKZ+Ej/ WjtuFaxAWAqfxw== -----END CERTIFICATE-----Generated at Fri Apr 10 06:48:18 2026 by rpki-client