$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: NVS8rxp8RTFxTZmGzPxe+dos2/5nPOB0/Uo3mTNQqUU= Subject key identifier: 45:A4:9D:74:40:B7:7D:77:BE:BD:F7:69:7B:D6:3F:FF:23:78:07:B0 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019DEC36BC667A70A7FB388020CA16F645B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 193D Signing time: Sun 03 May 2026 05:01:43 +0000 Manifest this update: Sun 03 May 2026 05:01:43 +0000 Manifest next update: Mon 04 May 2026 05:01:43 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: +beQmx0jon4A7WQgo0hiUy0W+wwtHq6242ZU/CxQIfE=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 May 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ec:36:bc:66:7a:70:a7:fb:38:80:20:ca:16:f6:45:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: May 3 05:01:43 2026 GMT Not After : May 4 05:01:43 2026 GMT Subject: CN=45a49d7440b77d77bebdf7697bd63fff237807b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:51:e8:a5:26:7e:6b:1b:2f:b9:9b:c8:c7: a7:fc:aa:eb:e1:03:bf:e4:04:79:fe:95:63:92:5a: ae:0e:33:49:d6:e4:4d:ba:fe:5b:47:6e:4a:a4:fe: cc:02:3c:7d:76:31:2e:ea:25:fa:09:24:dc:37:fd: ff:2d:67:e2:c8:16:1e:e1:8f:34:58:5a:99:d3:1f: d7:9b:62:b2:cc:e6:e8:b2:fd:1d:0d:12:09:51:c4: 3b:2f:a7:40:32:5d:0e:8c:9b:c6:d9:db:3c:c0:8c: 39:7c:66:6b:16:75:ab:53:4c:54:1f:fc:06:0c:11: c3:65:fc:0c:0c:85:8c:de:ee:32:57:4e:76:65:95: c3:7b:e5:76:98:2f:07:30:e4:c3:38:40:f1:c9:ab: e8:b4:c5:2a:2d:2d:45:43:da:43:3d:ce:36:d8:b0: 9b:0a:a2:47:27:5c:21:2f:56:ad:a8:1c:d0:cc:44: 72:a5:e9:f8:3b:4e:41:6c:02:a3:32:5d:f3:af:7b: 33:50:ad:b9:25:d1:a3:a2:ee:99:72:2e:8e:7e:e9: 12:2b:70:0e:42:65:96:04:a8:b3:8b:51:49:b4:f6: 3e:a1:7d:c3:33:eb:f0:6e:8d:21:18:e9:3f:43:18: b2:df:d8:23:06:ae:e8:bd:1c:5c:21:da:44:91:99: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A4:9D:74:40:B7:7D:77:BE:BD:F7:69:7B:D6:3F:FF:23:78:07:B0 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4f:5d:14:be:2c:1e:30:4e:b3:86:0d:d1:e0:41:57:48:2e: f6:e5:f2:0d:7e:94:42:52:23:a9:65:85:3f:85:df:ed:86:32: eb:9c:a8:f7:c7:e6:cc:87:1c:0f:1a:09:11:77:03:df:35:e9: 69:07:6e:15:d8:f3:d7:5c:70:af:f6:13:a9:e0:f4:c5:61:6b: d8:b9:dc:1b:8a:cc:c4:3b:49:1b:4b:6b:32:10:94:99:17:74: f3:bc:31:b7:68:54:e7:df:14:37:72:ac:da:c7:d5:9b:4c:60: 62:ed:15:41:fa:62:64:99:fc:c3:34:c1:41:2f:64:f2:f9:e0: 8e:e0:68:a8:89:6f:3e:18:06:b5:b7:18:76:3d:7c:d6:b4:69: d5:7b:4c:ad:49:38:e5:04:bb:76:f5:77:4d:ab:9a:bd:7c:e1: 42:4e:a8:30:2b:98:b8:08:be:9b:ac:dc:23:55:05:55:46:eb: aa:3e:26:d8:15:fa:8d:cd:ab:03:d7:0e:db:a6:ff:45:85:d9: 8e:b8:7b:5c:27:a8:ec:13:f0:e8:5f:1b:1a:ad:05:dd:fb:07: 50:9f:ed:17:5b:73:fb:ea:f0:de:8f:68:c0:7e:cd:a4:48:5c: d7:df:7e:23:26:b9:ff:05:29:b1:2d:10:1a:75:77:76:f5:15: 47:4c:3f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3sNrxmenCn+ziAIMoW9kW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwNTAzMDUwMTQzWhcNMjYwNTA0MDUwMTQzWjAzMTEwLwYDVQQD Eyg0NWE0OWQ3NDQwYjc3ZDc3YmViZGY3Njk3YmQ2M2ZmZjIzNzgwN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkRR6KUmfmsbL7mbyMen/Krr4QO/ 5AR5/pVjklquDjNJ1uRNuv5bR25KpP7MAjx9djEu6iX6CSTcN/3/LWfiyBYe4Y80 WFqZ0x/Xm2KyzObosv0dDRIJUcQ7L6dAMl0OjJvG2ds8wIw5fGZrFnWrU0xUH/wG DBHDZfwMDIWM3u4yV052ZZXDe+V2mC8HMOTDOEDxyavotMUqLS1FQ9pDPc422LCb CqJHJ1whL1atqBzQzERypen4O05BbAKjMl3zr3szUK25JdGjou6Zci6OfukSK3AO QmWWBKizi1FJtPY+oX3DM+vwbo0hGOk/Qxiy39gjBq7ovRxcIdpEkZlkKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWknXRAt313vr33aXvWP/8jeAewMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZE9dFL4s HjBOs4YN0eBBV0gu9uXyDX6UQlIjqWWFP4Xf7YYy65yo98fmzIccDxoJEXcD3zXp aQduFdjz11xwr/YTqeD0xWFr2LncG4rMxDtJG0trMhCUmRd087wxt2hU598UN3Ks 2sfVm0xgYu0VQfpiZJn8wzTBQS9k8vngjuBoqIlvPhgGtbcYdj181rRp1XtMrUk4 5QS7dvV3TauavXzhQk6oMCuYuAi+m6zcI1UFVUbrqj4m2BX6jc2rA9cO26b/RYXZ jrh7XCeo7BPw6F8bGq0F3fsHUJ/tF1tz++rw3o9owH7NpEhc199+Iya5/wUpsS0Q GnV3dvUVR0w/Lg== -----END CERTIFICATE-----Generated at Sun May 3 15:34:59 2026 by rpki-client