$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: eNx56gveGUvwfRWQQyJdFjhkH/lq4/z3fUmYw1YS1s0= Subject key identifier: E2:15:8B:95:8F:02:06:FC:1E:DB:A9:03:83:8C:BD:C5:36:DF:6C:AF Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019E295E376CCE40FE6A3B0CC9C495C87F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1476 Signing time: Fri 15 May 2026 02:01:40 +0000 Manifest this update: Fri 15 May 2026 02:01:40 +0000 Manifest next update: Sat 16 May 2026 02:01:40 +0000 Files and hashes: 1: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 2: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 3: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 4: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 5: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 6: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=) 7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: H0KUq2wBbPvC/KHveUsbKvnAacCAxVWv0MVlr7jRw7w=) 8: fr4aZ8Uu5cjkIPAMz1mEEDth2OQ.roa (hash: u3xz1gSovZyLVFKoLfba+16hM7XAa3x4UM4AaM7LTjw=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:5e:37:6c:ce:40:fe:6a:3b:0c:c9:c4:95:c8:7f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: May 15 02:01:40 2026 GMT Not After : May 16 02:01:40 2026 GMT Subject: CN=e2158b958f0206fc1edba903838cbdc536df6caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:c2:88:ae:be:74:b1:2d:35:3f:d1:7b:7c: 7d:a4:2b:dd:35:01:3f:5b:7b:9f:56:da:42:5d:e0: 9c:b1:c7:b1:74:ad:fd:97:bf:21:50:2a:ec:e5:25: d3:0f:8b:c7:42:4b:d7:a3:9a:5f:23:c7:b1:75:e2: 19:c0:57:9d:8c:ff:eb:76:cd:c4:fd:8f:43:46:7c: 6b:1b:9b:66:9f:67:49:86:78:73:8b:38:c1:d5:30: 5e:72:59:08:90:29:58:a0:d8:fc:db:21:73:b5:83: 9f:f5:b0:ea:5b:ab:09:d9:1a:99:53:ed:88:e8:93: 12:1b:b6:f4:36:f0:5a:ad:c4:a4:4c:f4:b5:84:4c: 6d:8a:07:c1:1f:46:ec:3f:b3:bf:3f:64:4f:3b:91: 04:5f:40:73:f8:82:46:72:a6:aa:c9:af:0e:2a:a5: 80:ac:27:16:bd:d3:95:0a:ff:f0:f6:5c:fa:cb:2a: 81:25:b0:ac:4d:7a:24:ae:36:c9:5f:01:90:c8:ae: 5b:04:ce:c4:ab:3b:3b:6b:2b:fd:4e:24:ae:73:66: 3f:47:14:97:a4:36:d9:44:81:fb:f9:ed:df:9a:0e: 96:ea:67:89:f2:de:52:02:aa:02:ae:d6:00:2c:13: 31:6c:ed:3d:b6:b4:71:10:5e:fb:3b:6d:4d:cb:e0: cb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:15:8B:95:8F:02:06:FC:1E:DB:A9:03:83:8C:BD:C5:36:DF:6C:AF X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:52:c7:b1:73:07:51:d6:3b:96:f7:57:a2:d3:5b:cb:e5:7f: a5:f5:83:23:36:40:f9:43:2c:77:7d:65:fd:32:e1:d0:69:80: 5e:70:2f:68:77:1d:7a:2f:e2:bd:66:3b:6f:04:df:9b:5d:b8: e0:ca:89:ba:7e:7a:87:65:8f:33:28:cb:22:67:79:41:07:b6: 3c:51:2c:57:9f:01:c1:e0:f6:21:de:1d:31:fc:23:eb:97:54: 9e:ff:dc:aa:86:da:f4:dd:20:aa:0b:16:68:63:af:18:62:b9: e1:e0:9a:85:8a:d7:03:c6:e9:ce:e5:c3:90:b2:cc:73:10:6c: 78:cd:67:89:35:e6:07:82:6e:0c:2e:f1:85:d6:8f:b5:8f:6c: 5e:59:c7:d4:49:e4:f8:a8:07:23:31:30:f2:89:82:f2:fb:a2: 2e:c9:1c:6a:a3:71:c7:2a:c4:5f:c3:77:1e:8c:c2:0d:7e:a0: 43:1c:7c:17:b6:36:1f:ad:e8:1e:87:d5:d6:85:ea:f0:ae:01: bc:c5:ac:7d:68:64:a6:b8:1e:a6:86:8a:f0:04:c6:1f:09:16: 28:f4:c6:f5:d8:31:2e:3c:c0:40:57:c9:68:81:86:5b:4e:ed: 42:1a:26:a3:e9:09:54:01:89:b4:88:1b:e7:4c:38:2b:06:cb: ff:ac:41:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4pXjdszkD+ajsMycSVyH9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNTE1MDIwMTQwWhcNMjYwNTE2MDIwMTQwWjAzMTEwLwYDVQQD EyhlMjE1OGI5NThmMDIwNmZjMWVkYmE5MDM4MzhjYmRjNTM2ZGY2Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjjCiK6+dLEtNT/Re3x9pCvdNQE/ W3ufVtpCXeCcscexdK39l78hUCrs5SXTD4vHQkvXo5pfI8exdeIZwFedjP/rds3E /Y9DRnxrG5tmn2dJhnhzizjB1TBeclkIkClYoNj82yFztYOf9bDqW6sJ2RqZU+2I 6JMSG7b0NvBarcSkTPS1hExtigfBH0bsP7O/P2RPO5EEX0Bz+IJGcqaqya8OKqWA rCcWvdOVCv/w9lz6yyqBJbCsTXokrjbJXwGQyK5bBM7Eqzs7ayv9TiSuc2Y/RxSX pDbZRIH7+e3fmg6W6meJ8t5SAqoCrtYALBMxbO09trRxEF77O21Ny+DLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIVi5WPAgb8HtupA4OMvcU232yvMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglLHsXMH UdY7lvdXotNby+V/pfWDIzZA+UMsd31l/TLh0GmAXnAvaHcdei/ivWY7bwTfm124 4MqJun56h2WPMyjLImd5QQe2PFEsV58BweD2Id4dMfwj65dUnv/cqoba9N0gqgsW aGOvGGK54eCahYrXA8bpzuXDkLLMcxBseM1niTXmB4JuDC7xhdaPtY9sXlnH1Enk +KgHIzEw8omC8vuiLskcaqNxxyrEX8N3HozCDX6gQxx8F7Y2H63oHofV1oXq8K4B vMWsfWhkprgepoaK8ATGHwkWKPTG9dgxLjzAQFfJaIGGW07tQhomo+kJVAGJtIgb 50w4KwbL/6xBsA== -----END CERTIFICATE-----Generated at Fri May 15 07:02:29 2026 by rpki-client