$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: rLDsspB8lDnRQdqBYKGHfNIYllGVtU/vSmC22Kubel4= Subject key identifier: 55:00:07:C9:57:CB:41:5E:A7:E4:79:70:1C:C6:6E:5C:CB:34:97:C8 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019DF9F2582FA9723B20FEC3C1C96A929D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 05F2 Signing time: Tue 05 May 2026 21:01:42 +0000 Manifest this update: Tue 05 May 2026 21:01:42 +0000 Manifest next update: Wed 06 May 2026 21:01:42 +0000 Files and hashes: 1: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (hash: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=) 2: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: vzif66g4a8qPjwPcHaOaZIyPvWEOfFRRgJ6eFqr5VZI=) 3: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 4: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: PT8f8KrDCyi-fOHRybRu5os8t7I.roa (hash: aps2zxt1lkijYJV6i+9YBPtT0emoODtU3jQBxhvYqO0=) 8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 10: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 11: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 12: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 13: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:f2:58:2f:a9:72:3b:20:fe:c3:c1:c9:6a:92:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: May 5 21:01:42 2026 GMT Not After : May 6 21:01:42 2026 GMT Subject: CN=550007c957cb415ea7e479701cc66e5ccb3497c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:05:72:f4:63:78:04:ca:86:d8:6d:ea:c2: 71:9f:f8:89:8f:0f:38:af:86:97:35:cb:f3:04:56: 85:8a:97:95:5d:d0:55:48:8a:69:52:52:8a:bd:f2: 75:2e:c6:3a:94:a0:87:b1:4c:5c:02:0a:b8:51:ac: 50:75:d8:a9:cf:62:00:c9:57:24:2f:c9:d9:1e:63: db:62:7b:fa:31:48:04:95:d7:47:ff:2c:64:e4:49: 86:e2:2e:8e:c7:86:0a:10:21:32:fa:33:28:33:a7: 7f:e0:85:ff:d0:97:bf:7c:f6:31:cb:3b:bd:4a:77: 84:9c:b1:5d:61:ae:9b:1f:e5:50:c7:0e:f8:c5:d6: f7:75:a2:a4:18:de:fb:ee:56:4b:08:25:9f:63:53: 4c:83:82:b5:70:89:47:70:e7:f2:b3:c1:9f:35:65: 7b:85:62:69:c1:5a:07:f5:97:cc:52:15:76:2d:7c: c0:d0:47:0e:25:ce:e0:9f:fd:9a:e2:9b:25:c8:9c: 70:79:bb:5c:5d:72:29:16:2d:1c:58:a9:de:97:72: 3c:3f:16:be:7d:aa:e5:13:9c:50:41:bb:7f:95:20: f3:17:f9:1c:22:bd:69:fd:33:85:d1:c0:e6:3b:5f: d5:a4:ee:3c:13:5f:b6:23:12:6e:79:40:21:67:26: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:07:C9:57:CB:41:5E:A7:E4:79:70:1C:C6:6E:5C:CB:34:97:C8 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:24:14:10:13:56:06:d5:a0:82:60:a0:d8:f2:9d:06:f8:5e: 30:5f:0f:4b:a7:76:d6:3e:96:56:90:4f:bb:70:a7:90:d8:96: fc:87:c8:2e:59:17:51:91:c7:8f:14:0b:8d:9c:17:df:c1:dc: 5d:6e:d9:a7:6b:ec:a4:2c:a0:39:06:cd:9f:15:23:18:38:90: a6:4c:a7:ce:03:46:64:28:cb:97:a1:39:f3:c6:e1:91:91:da: bf:6f:10:a0:fb:0d:95:cc:1f:91:f9:d2:7f:6e:50:b7:61:10: 9e:99:db:da:2c:5c:ac:aa:a9:11:c5:b3:f1:fb:31:d3:46:88: 72:fe:ac:3e:a3:31:42:a2:e4:db:d2:96:3f:bc:cf:db:ef:ea: c2:8f:a1:ee:a5:62:69:3b:7d:e4:1c:64:72:f8:fe:16:78:40: 26:aa:17:9b:db:ec:06:79:9f:24:0a:37:cd:4e:78:35:de:11: d4:38:07:ed:a6:9d:9d:ca:6c:6a:53:9f:a5:f2:50:00:13:b8: d7:8f:b4:6d:8b:86:3f:b8:e0:aa:71:22:d8:35:a7:45:c4:0b: 06:7b:0f:8f:5d:24:4d:54:46:05:35:e6:4e:9b:a4:c4:27:b8: 85:8a:ba:5e:6b:d8:01:57:3c:96:fa:a3:ca:b6:8e:71:63:64: f2:5b:ab:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ358lgvqXI7IP7Dwclqkp1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNTA1MjEwMTQyWhcNMjYwNTA2MjEwMTQyWjAzMTEwLwYDVQQD Eyg1NTAwMDdjOTU3Y2I0MTVlYTdlNDc5NzAxY2M2NmU1Y2NiMzQ5N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUAFcvRjeATKhtht6sJxn/iJjw84 r4aXNcvzBFaFipeVXdBVSIppUlKKvfJ1LsY6lKCHsUxcAgq4UaxQddipz2IAyVck L8nZHmPbYnv6MUgElddH/yxk5EmG4i6Ox4YKECEy+jMoM6d/4IX/0Je/fPYxyzu9 SneEnLFdYa6bH+VQxw74xdb3daKkGN777lZLCCWfY1NMg4K1cIlHcOfys8GfNWV7 hWJpwVoH9ZfMUhV2LXzA0EcOJc7gn/2a4pslyJxwebtcXXIpFi0cWKnel3I8Pxa+ farlE5xQQbt/lSDzF/kcIr1p/TOF0cDmO1/VpO48E1+2IxJueUAhZyZvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUAB8lXy0Fep+R5cBzGblzLNJfIMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiQUEBNW BtWggmCg2PKdBvheMF8PS6d21j6WVpBPu3CnkNiW/IfILlkXUZHHjxQLjZwX38Hc XW7Zp2vspCygOQbNnxUjGDiQpkynzgNGZCjLl6E588bhkZHav28QoPsNlcwfkfnS f25Qt2EQnpnb2ixcrKqpEcWz8fsx00aIcv6sPqMxQqLk29KWP7zP2+/qwo+h7qVi aTt95Bxkcvj+FnhAJqoXm9vsBnmfJAo3zU54Nd4R1DgH7aadncpsalOfpfJQABO4 14+0bYuGP7jgqnEi2DWnRcQLBnsPj10kTVRGBTXmTpukxCe4hYq6XmvYAVc8lvqj yraOcWNk8lurbA== -----END CERTIFICATE-----Generated at Wed May 6 03:28:42 2026 by rpki-client