$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: FSciqwYMJ8qGzpfnWe3EqhNdjF1hfd0ea5Y2hxMod5g= Subject key identifier: B2:91:02:E7:52:3C:F7:F4:01:C3:7A:73:65:1C:5F:45:97:9E:C5:F8 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019E491F42A542BFFF9FDF0AB7EFD51C005B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1920 Signing time: Thu 21 May 2026 06:00:45 +0000 Manifest this update: Thu 21 May 2026 06:00:45 +0000 Manifest next update: Fri 22 May 2026 06:00:45 +0000 Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=) 2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=) 3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=) 4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=) 5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=) 6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=) 7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=) 8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=) 9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=) 10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=) 11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=) 12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: GDefiTbfcnQu7YtCM72+VNx1uT3pMlbZ7+Q/7U5+txQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:49:1f:42:a5:42:bf:ff:9f:df:0a:b7:ef:d5:1c:00:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: May 21 06:00:45 2026 GMT Not After : May 22 06:00:45 2026 GMT Subject: CN=b29102e7523cf7f401c37a73651c5f45979ec5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:45:ca:e1:39:87:3f:ef:1d:f4:be:32:4b: ee:d8:1c:1f:2e:29:9d:95:29:d8:3f:06:84:bf:33: 1d:8b:04:fd:9d:3f:99:ed:3e:79:3b:81:57:99:18: 10:7f:aa:69:76:b5:78:65:c7:ea:37:58:12:ed:4c: 7d:86:cc:e8:ea:18:54:5d:db:39:bd:4e:56:a7:12: 31:5e:57:bd:bd:58:11:b3:c7:a5:0e:e9:5e:72:11: 05:c8:0c:88:ea:23:fb:37:0e:00:c0:68:34:f5:8f: 5a:9f:8a:ee:35:af:df:2f:20:50:b2:43:6c:83:b6: 15:af:de:91:fa:ed:81:f4:f9:9a:68:97:1e:d6:4d: 2a:56:a0:a8:48:06:3a:cd:d5:c2:2f:fc:68:07:6d: 06:87:c9:7f:66:2b:cb:0a:74:5e:3e:30:6c:72:52: e5:69:ca:0b:5e:aa:52:60:b2:b1:8d:b1:bb:3d:92: 0e:a8:3c:35:bf:fb:89:ae:4a:a1:c6:62:bd:7e:cf: 24:d1:33:e7:bf:b5:1f:e8:6d:bb:77:75:5b:d7:9b: 10:d7:5e:2e:40:30:47:a9:16:62:2e:9a:d8:39:eb: 47:ec:96:b1:99:d4:5c:75:07:f4:69:3f:a7:76:a3: 0e:7b:23:69:8e:56:48:8b:f5:fb:3e:c5:84:b4:52: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:02:E7:52:3C:F7:F4:01:C3:7A:73:65:1C:5F:45:97:9E:C5:F8 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:59:5e:45:8a:17:37:70:03:27:01:af:5e:cd:38:2f:4f:1a: 84:78:b7:18:c6:94:3c:aa:2d:de:f4:f6:64:fa:fa:7d:16:ed: 71:cc:11:43:ad:8b:77:6f:39:bd:5f:47:a1:f1:c7:34:77:47: 93:7c:94:db:24:9a:7b:6c:76:92:93:d5:02:c3:fd:19:44:2e: 4f:71:98:b9:35:c8:e8:08:cc:e7:c6:ca:60:6e:14:30:fb:09: a7:b7:8a:ba:31:06:22:26:56:cb:c8:63:1b:b6:27:2d:d8:43: 59:22:f5:6a:9c:18:0e:2c:06:16:a9:77:15:69:cf:89:da:1d: a0:12:57:b2:6c:96:96:df:80:b6:66:a5:c1:96:ba:82:06:78: 3e:d8:f2:8f:24:c3:a3:bc:5e:64:8e:a9:2e:1d:e5:ef:1d:b9: 5f:65:2d:4e:68:c8:9c:3e:d1:05:90:c7:c0:61:54:ea:70:3f: 62:46:fd:81:da:8f:a3:3f:a8:66:e0:65:d7:e8:c1:b7:6a:78: f4:ab:26:80:64:2f:8a:9e:e2:fa:ee:b1:cf:51:b5:ab:f1:a0: 21:37:f9:7d:78:7e:59:4c:19:a8:6e:1c:54:c9:50:0b:14:c0: ac:c9:a9:29:c9:3b:a2:66:60:2a:84:73:4c:a3:e7:ba:39:b3: de:42:e6:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5JH0KlQr//n98Kt+/VHABbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwNTIxMDYwMDQ1WhcNMjYwNTIyMDYwMDQ1WjAzMTEwLwYDVQQD EyhiMjkxMDJlNzUyM2NmN2Y0MDFjMzdhNzM2NTFjNWY0NTk3OWVjNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm9FyuE5hz/vHfS+Mkvu2BwfLimd lSnYPwaEvzMdiwT9nT+Z7T55O4FXmRgQf6ppdrV4ZcfqN1gS7Ux9hszo6hhUXds5 vU5WpxIxXle9vVgRs8elDulechEFyAyI6iP7Nw4AwGg09Y9an4ruNa/fLyBQskNs g7YVr96R+u2B9PmaaJce1k0qVqCoSAY6zdXCL/xoB20Gh8l/ZivLCnRePjBsclLl acoLXqpSYLKxjbG7PZIOqDw1v/uJrkqhxmK9fs8k0TPnv7Uf6G27d3Vb15sQ114u QDBHqRZiLprYOetH7JaxmdRcdQf0aT+ndqMOeyNpjlZIi/X7PsWEtFLnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKRAudSPPf0AcN6c2UcX0WXnsX4MB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1leRYoX N3ADJwGvXs04L08ahHi3GMaUPKot3vT2ZPr6fRbtccwRQ62Ld285vV9HofHHNHdH k3yU2ySae2x2kpPVAsP9GUQuT3GYuTXI6AjM58bKYG4UMPsJp7eKujEGIiZWy8hj G7YnLdhDWSL1apwYDiwGFql3FWnPidodoBJXsmyWlt+AtmalwZa6ggZ4PtjyjyTD o7xeZI6pLh3l7x25X2UtTmjInD7RBZDHwGFU6nA/Ykb9gdqPoz+oZuBl1+jBt2p4 9KsmgGQvip7i+u6xz1G1q/GgITf5fXh+WUwZqG4cVMlQCxTArMmpKck7omZgKoRz TKPnujmz3kLm4g== -----END CERTIFICATE-----Generated at Thu May 21 12:58:25 2026 by rpki-client