$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: tm8ynhOSh0KOPaH5LJ4n+mkWYV7QmxlH0x4caE/J458= Subject key identifier: DA:88:99:51:19:25:F1:BD:32:CE:05:D5:56:77:C5:82:52:32:E3:26 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019DA6E71FE9ABB44D0101680BD69C52502B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 11C4 Signing time: Sun 19 Apr 2026 18:00:57 +0000 Manifest this update: Sun 19 Apr 2026 18:00:57 +0000 Manifest next update: Mon 20 Apr 2026 18:00:57 +0000 Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=) 2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=) 3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: XLWxgUGu7NoU2owl2GITU2wAtb8M0kzIdlUbOcJWwlk=) 4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=) 5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=) 6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=) 7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=) 8: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=) 9: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=) 10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=) 11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=) 12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=) 13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=) 14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=) 15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=) 16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=) 17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=) 18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=) 19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=) 20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=) 21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=) 22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=) 23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=) 24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=) 25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=) 26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a6:e7:1f:e9:ab:b4:4d:01:01:68:0b:d6:9c:52:50:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Apr 19 18:00:57 2026 GMT Not After : Apr 20 18:00:57 2026 GMT Subject: CN=da8899511925f1bd32ce05d55677c5825232e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:5d:26:00:07:0f:5f:6c:b4:34:f4:5f:70: 40:37:be:f3:37:40:d4:02:3e:59:1b:b1:ae:52:3b: 02:75:c8:5a:1e:0c:f9:a1:fb:e9:71:98:e3:a6:e7: ed:be:43:07:c8:f3:26:14:ac:98:f9:20:88:7d:0c: 29:be:a4:de:f0:67:d7:7d:74:57:93:0d:93:58:f0: e5:ae:8e:8c:46:d7:6e:a6:39:72:4f:5c:2d:75:a1: 2e:52:70:a6:b2:09:18:fb:52:b7:96:a3:f8:61:7a: 1f:a6:85:c9:45:fa:77:0c:2d:43:d4:e8:9f:b4:b3: 6a:f7:b6:21:c8:7f:37:66:f4:b5:a2:15:45:86:b6: c6:cc:7f:1b:30:52:3c:e2:fd:a0:69:a5:24:96:f6: 01:ca:6e:1a:ed:18:69:c6:07:3c:01:f1:60:c2:51: cb:0c:e7:83:f7:11:17:ca:4a:90:28:27:68:94:9c: b0:49:e9:27:4d:3a:cb:0d:f8:b7:08:88:10:07:2c: 9b:ad:fe:13:d3:b2:ff:db:dd:1b:d7:6b:a1:42:2c: 93:53:48:50:79:74:f6:da:ed:89:e7:0d:5a:b1:05: 2c:2f:15:0b:41:63:7a:07:12:ac:47:6d:19:85:c3: dd:b4:b6:5c:cc:37:0c:aa:db:4b:e5:9f:5f:44:fd: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:99:51:19:25:F1:BD:32:CE:05:D5:56:77:C5:82:52:32:E3:26 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e4:18:a4:ae:f7:79:70:55:83:e6:d8:ab:34:ff:9c:aa:f7: 0a:c4:25:a1:79:e2:84:8d:f9:1d:7b:76:89:93:bb:a8:92:62: 07:db:00:ae:5e:d7:83:04:68:17:c1:27:2a:26:f2:ca:8d:d7: a9:55:5e:e9:be:68:fc:ee:79:c7:bc:fd:b0:1f:6c:ff:93:19: 4c:02:ef:9e:ef:5f:e6:34:b8:2e:41:67:dc:d8:e6:64:32:e4: f2:5b:ca:7d:8e:37:40:50:b8:80:09:45:49:de:80:fc:ca:c8: a1:85:de:1d:3b:a8:c2:94:c0:e6:45:be:f6:75:44:b0:92:07: 41:79:4d:c3:ec:57:da:4a:db:af:97:a3:e3:4d:11:2f:4a:74: 49:f6:9d:d0:7d:2a:e0:0a:fd:68:bc:1c:46:39:0e:07:68:e9: 27:89:c0:4f:79:13:31:4e:a1:72:0c:a8:34:98:de:5a:6e:a2: d7:b1:c8:00:de:e2:74:9f:ac:41:51:6a:5a:1a:88:fe:65:15: e8:24:70:32:3e:39:a2:65:5e:a6:a6:90:e0:20:17:7a:fc:17: 5c:97:e1:d4:39:0b:2c:2c:d0:d5:ef:59:50:3b:10:40:87:34: 71:6d:46:77:53:1f:a8:c8:cb:8b:86:c9:40:25:fb:00:3a:80: 90:0c:21:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2m5x/pq7RNAQFoC9acUlArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwNDE5MTgwMDU3WhcNMjYwNDIwMTgwMDU3WjAzMTEwLwYDVQQD EyhkYTg4OTk1MTE5MjVmMWJkMzJjZTA1ZDU1Njc3YzU4MjUyMzJlMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/VdJgAHD19stDT0X3BAN77zN0DU Aj5ZG7GuUjsCdchaHgz5ofvpcZjjpuftvkMHyPMmFKyY+SCIfQwpvqTe8GfXfXRX kw2TWPDlro6MRtdupjlyT1wtdaEuUnCmsgkY+1K3lqP4YXofpoXJRfp3DC1D1Oif tLNq97YhyH83ZvS1ohVFhrbGzH8bMFI84v2gaaUklvYBym4a7Rhpxgc8AfFgwlHL DOeD9xEXykqQKCdolJywSeknTTrLDfi3CIgQByybrf4T07L/290b12uhQiyTU0hQ eXT22u2J5w1asQUsLxULQWN6BxKsR20ZhcPdtLZczDcMqttL5Z9fRP3m1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqImVEZJfG9Ms4F1VZ3xYJSMuMmMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+QYpK73 eXBVg+bYqzT/nKr3CsQloXnihI35HXt2iZO7qJJiB9sArl7XgwRoF8EnKibyyo3X qVVe6b5o/O55x7z9sB9s/5MZTALvnu9f5jS4LkFn3NjmZDLk8lvKfY43QFC4gAlF Sd6A/MrIoYXeHTuowpTA5kW+9nVEsJIHQXlNw+xX2krbr5ej400RL0p0Sfad0H0q 4Ar9aLwcRjkOB2jpJ4nAT3kTMU6hcgyoNJjeWm6i17HIAN7idJ+sQVFqWhqI/mUV 6CRwMj45omVepqaQ4CAXevwXXJfh1DkLLCzQ1e9ZUDsQQIc0cW1Gd1MfqMjLi4bJ QCX7ADqAkAwhtg== -----END CERTIFICATE-----Generated at Mon Apr 20 04:52:11 2026 by rpki-client