$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: VkaLstPSGmp98mzHVWNXn63JvKXZQxXSv4pipd06+Oo= Subject key identifier: A4:E8:64:90:40:89:11:DB:EA:81:6E:D0:97:01:14:29:CF:FF:AE:84 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019DCD8663811E4B421B6A7DAEBA00D08979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1642 Signing time: Mon 27 Apr 2026 06:00:29 +0000 Manifest this update: Mon 27 Apr 2026 06:00:29 +0000 Manifest next update: Tue 28 Apr 2026 06:00:29 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: 5qrffbIxf6TMhI3rU1byiJn16CmvJZ1toRz49n3bAZg=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:86:63:81:1e:4b:42:1b:6a:7d:ae:ba:00:d0:89:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Apr 27 06:00:29 2026 GMT Not After : Apr 28 06:00:29 2026 GMT Subject: CN=a4e86490408911dbea816ed097011429cfffae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:d6:e7:9e:32:07:ec:28:4b:38:20:6d:06: 3e:4e:59:c0:4a:04:ff:94:b4:2c:3e:b9:fd:39:f0: d4:c3:66:4c:2d:e8:86:94:69:6a:9e:91:62:73:35: b7:09:bc:a5:b0:af:b9:08:a1:74:dc:ab:f9:ca:ae: 6e:10:4c:1e:c7:98:86:6c:ab:63:82:3c:7f:a3:82: bc:59:5d:c4:7c:da:44:33:0b:81:10:29:e9:b8:ba: d0:8d:9c:fe:77:1a:87:ed:b8:a4:e1:d2:84:18:15: a8:d6:14:41:83:f0:7e:e1:a8:02:b0:41:16:e6:b4: db:54:93:23:a1:6f:45:47:04:70:6b:27:10:36:a8: f2:36:d7:51:86:67:85:7b:d7:7b:a7:97:12:03:67: bc:8e:c0:20:bc:de:d1:e7:b5:10:89:54:00:7a:0a: 8d:53:83:7a:d6:b3:11:6b:76:cf:78:0b:e2:bd:22: 89:18:36:4a:7a:4c:a4:4c:a8:a7:16:00:de:f4:68: cb:19:d1:66:cf:d5:75:83:5a:d7:06:f0:b6:79:c8: b6:d7:7b:8a:4e:a0:e6:60:44:9d:25:d8:67:69:77: 85:5d:68:ad:53:7a:bc:1e:b9:7d:cd:68:cf:6a:7e: bb:26:64:98:72:bd:86:94:c3:85:7e:b4:bb:a4:0a: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E8:64:90:40:89:11:DB:EA:81:6E:D0:97:01:14:29:CF:FF:AE:84 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ef:4f:a7:3e:31:2d:55:af:f3:c0:9f:d9:4d:ca:6f:bf:86: 9f:d7:37:b2:d6:8f:00:c6:84:f2:dc:ff:cf:b3:84:67:48:b0: e5:0e:b7:6c:69:63:9d:eb:44:f6:1a:7d:4a:c1:c5:b2:3c:ad: d8:24:a8:ab:5b:58:de:9d:62:44:bc:b8:47:bd:f6:81:5e:81: 0b:58:33:b0:d5:f0:b3:53:81:a0:2d:42:f0:24:7a:e6:df:46: e1:fc:be:c8:f1:2c:23:31:0a:19:79:14:3c:2f:9c:8f:7f:4b: b7:3c:a4:ec:21:b2:f8:42:e2:35:e0:9b:43:a5:38:95:e8:dc: 5f:26:d1:db:7e:bd:a2:ad:c3:64:fe:b2:b4:1d:0f:32:c6:48: 5a:b9:95:34:df:89:c5:53:f5:28:e0:46:65:0f:7d:4b:c6:ff: 54:85:9d:42:47:c7:02:9a:6e:7f:a2:8e:0a:ca:8a:20:d1:f8: c9:92:e4:30:53:d5:96:4d:42:8b:ad:f7:fd:ad:2a:87:9b:36: a0:5a:9b:fc:05:91:29:8f:de:21:ba:4e:71:1b:5f:6b:01:ce: df:9f:ff:07:5c:f9:b7:2e:ae:21:2a:24:c2:3d:62:35:76:d0: b3:79:c7:53:07:fc:73:f9:cd:29:83:15:d2:5f:67:89:14:bb: d7:52:36:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NhmOBHktCG2p9rroA0Il5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwNDI3MDYwMDI5WhcNMjYwNDI4MDYwMDI5WjAzMTEwLwYDVQQD EyhhNGU4NjQ5MDQwODkxMWRiZWE4MTZlZDA5NzAxMTQyOWNmZmZhZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHjW554yB+woSzggbQY+TlnASgT/ lLQsPrn9OfDUw2ZMLeiGlGlqnpFiczW3CbylsK+5CKF03Kv5yq5uEEwex5iGbKtj gjx/o4K8WV3EfNpEMwuBECnpuLrQjZz+dxqH7bik4dKEGBWo1hRBg/B+4agCsEEW 5rTbVJMjoW9FRwRwaycQNqjyNtdRhmeFe9d7p5cSA2e8jsAgvN7R57UQiVQAegqN U4N61rMRa3bPeAvivSKJGDZKekykTKinFgDe9GjLGdFmz9V1g1rXBvC2eci213uK TqDmYESdJdhnaXeFXWitU3q8Hrl9zWjPan67JmSYcr2GlMOFfrS7pAr0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKToZJBAiRHb6oFu0JcBFCnP/66EMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhe9Ppz4x LVWv88Cf2U3Kb7+Gn9c3staPAMaE8tz/z7OEZ0iw5Q63bGljnetE9hp9SsHFsjyt 2CSoq1tY3p1iRLy4R732gV6BC1gzsNXws1OBoC1C8CR65t9G4fy+yPEsIzEKGXkU PC+cj39Ltzyk7CGy+ELiNeCbQ6U4lejcXybR2369oq3DZP6ytB0PMsZIWrmVNN+J xVP1KOBGZQ99S8b/VIWdQkfHAppuf6KOCsqKINH4yZLkMFPVlk1Ci633/a0qh5s2 oFqb/AWRKY/eIbpOcRtfawHO35//B1z5ty6uISokwj1iNXbQs3nHUwf8c/nNKYMV 0l9niRS711I2Cg== -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:06 2026 by rpki-client