$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: i56ymVYtcnPfAKgtEEEuwQOctmITR/HtcWM5VYCbs1o= Subject key identifier: 34:A4:6F:CB:1A:88:6E:33:3F:FC:EB:26:28:54:FE:38:3E:50:CA:11 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019E2B83359AD55B246F0E4306169EA6FC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1911 Signing time: Fri 15 May 2026 12:01:19 +0000 Manifest this update: Fri 15 May 2026 12:01:19 +0000 Manifest next update: Sat 16 May 2026 12:01:19 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: f5Xe718ta5PuEWgIZvc00D5O38e25jmShJY3mSGlanI=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2b:83:35:9a:d5:5b:24:6f:0e:43:06:16:9e:a6:fc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: May 15 12:01:19 2026 GMT Not After : May 16 12:01:19 2026 GMT Subject: CN=34a46fcb1a886e333ffceb262854fe383e50ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:a4:a7:04:38:19:68:33:24:e5:32:4a:41: a6:93:3c:71:26:b1:1f:d9:5e:d3:22:b3:0e:16:fe: d3:6b:19:d1:d3:ca:4a:dd:24:0f:3e:fd:18:cf:c4: 76:6e:29:5b:7b:07:a1:2d:b5:84:e8:ac:8f:1f:d2: 4c:1a:21:80:3a:cd:70:e4:62:97:96:7b:21:77:14: 5e:f6:8c:77:57:20:2c:ae:cc:dc:50:54:ff:cc:df: 23:cf:11:38:7f:a8:16:de:43:bc:6c:d3:de:6b:f2: 91:73:1a:89:b8:69:41:cc:2d:26:3d:9f:e3:ae:62: 19:06:e7:b1:da:4a:65:60:cb:a0:60:34:63:96:c0: bb:51:8f:ac:54:ff:85:c3:79:92:0e:9d:64:35:43: 8d:67:04:0e:23:88:92:ae:78:11:30:e7:61:84:29: 7a:2c:2c:53:43:e1:e7:e4:f6:2f:f4:4c:49:6c:75: 77:11:bf:96:e2:86:28:a4:e1:54:74:5a:0a:7a:30: ac:79:40:3a:c8:ea:97:6b:a7:46:6c:61:04:42:24: 31:7d:e5:49:30:50:f7:cc:c0:16:8e:08:79:bb:17: 7d:1f:ff:fe:6f:e6:be:c1:7a:db:e0:55:57:36:56: 75:67:8d:7a:5e:28:16:35:9b:2a:de:2d:5c:7e:0c: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A4:6F:CB:1A:88:6E:33:3F:FC:EB:26:28:54:FE:38:3E:50:CA:11 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:95:8d:13:eb:23:da:5d:23:71:bb:77:04:4d:b4:ef:39: 08:41:67:a8:ef:f4:2a:1a:4a:3b:38:3d:df:bc:1c:1c:47:1f: ce:b4:de:20:01:b6:b7:13:3b:88:ac:51:d4:4b:01:64:ba:8a: 6e:ed:45:11:cc:0b:42:43:08:38:86:28:0b:cb:3a:a6:9a:bb: db:2e:a7:9c:3b:3d:4c:f4:2a:16:ad:a2:44:c3:1d:83:dd:98: be:f1:d3:76:7e:51:f1:d1:e2:5a:3b:a2:d7:58:c9:19:19:e6: ab:e5:84:50:84:28:54:20:57:a8:01:9a:a8:7e:54:48:bb:73: 42:48:51:7a:8e:58:47:68:6d:f2:02:92:c7:2a:1d:2a:53:c7: 3c:cd:d8:b8:1f:b4:8a:27:53:bc:5f:6e:ea:1c:4c:15:15:90: 2b:39:98:50:ab:6e:8f:62:01:9f:df:13:54:10:1f:b6:aa:c3: 27:c2:6f:96:b2:7d:ba:67:52:4a:57:3d:c4:a6:f6:a6:09:e6: e7:c4:19:81:ab:30:d1:3f:97:cf:11:ae:6d:5a:db:d3:d2:78: cc:cb:0c:91:37:9e:17:b3:41:a6:1c:3d:d0:88:a0:cb:d1:ab: 9d:71:fd:93:60:97:9c:06:2c:1b:34:7e:64:9c:35:5f:76:c7: d0:dc:6c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4rgzWa1Vskbw5DBhaepvxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNTE1MTIwMTE5WhcNMjYwNTE2MTIwMTE5WjAzMTEwLwYDVQQD EygzNGE0NmZjYjFhODg2ZTMzM2ZmY2ViMjYyODU0ZmUzODNlNTBjYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPqkpwQ4GWgzJOUySkGmkzxxJrEf 2V7TIrMOFv7TaxnR08pK3SQPPv0Yz8R2bilbewehLbWE6KyPH9JMGiGAOs1w5GKX lnshdxRe9ox3VyAsrszcUFT/zN8jzxE4f6gW3kO8bNPea/KRcxqJuGlBzC0mPZ/j rmIZBuex2kplYMugYDRjlsC7UY+sVP+Fw3mSDp1kNUONZwQOI4iSrngRMOdhhCl6 LCxTQ+Hn5PYv9ExJbHV3Eb+W4oYopOFUdFoKejCseUA6yOqXa6dGbGEEQiQxfeVJ MFD3zMAWjgh5uxd9H//+b+a+wXrb4FVXNlZ1Z416XigWNZsq3i1cfgx0zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSkb8saiG4zP/zrJihU/jg+UMoRMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ2VjRPr I9pdI3G7dwRNtO85CEFnqO/0KhpKOzg937wcHEcfzrTeIAG2txM7iKxR1EsBZLqK bu1FEcwLQkMIOIYoC8s6ppq72y6nnDs9TPQqFq2iRMMdg92YvvHTdn5R8dHiWjui 11jJGRnmq+WEUIQoVCBXqAGaqH5USLtzQkhReo5YR2ht8gKSxyodKlPHPM3YuB+0 iidTvF9u6hxMFRWQKzmYUKtuj2IBn98TVBAftqrDJ8JvlrJ9umdSSlc9xKb2pgnm 58QZgasw0T+XzxGubVrb09J4zMsMkTeeF7NBphw90Iigy9GrnXH9k2CXnAYsGzR+ ZJw1X3bH0NxsHQ== -----END CERTIFICATE-----Generated at Fri May 15 15:19:13 2026 by rpki-client