$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 1jrZ+hzv5QGh83kj+574+qxJXIEq3BUZ/N7KSeKzozw= Subject key identifier: 4A:EC:27:3E:21:E8:54:56:B9:14:20:77:E8:F8:4A:CB:61:66:D6:24 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019E06638109FB7DE8F09BAA5DFC40F2010A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0F72 Signing time: Fri 08 May 2026 07:00:44 +0000 Manifest this update: Fri 08 May 2026 07:00:44 +0000 Manifest next update: Sat 09 May 2026 07:00:44 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: vXtU+qUCekv3H/jQf215AfRegRq6GbaDVqg/8fQwlFw=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 13: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 14: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 15: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 16: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 17: hrUBYyUNmk1RlzCVJrZZninUqYE.roa (hash: tZuiVSXDojagTNTrWs4BJGVlhszVNx0FmVqH9mQLrnc=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 20: nzgHuhsMefo-kktThn8Cntmw2DI.roa (hash: n7J6eW4XubFzE6V970pzXjS60Z76qDIdwRzD28rUcMI=) 21: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 22: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 23: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 May 2026 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:06:63:81:09:fb:7d:e8:f0:9b:aa:5d:fc:40:f2:01:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: May 8 07:00:44 2026 GMT Not After : May 9 07:00:44 2026 GMT Subject: CN=4aec273e21e85456b9142077e8f84acb6166d624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:a3:72:2f:1d:b7:4b:5a:24:ed:82:a2:f2: 4e:0b:43:06:cb:df:77:3c:6b:6d:d1:9e:58:4f:86: 3b:e8:79:55:f5:9e:c1:8e:93:40:54:2b:ac:b0:fb: bf:10:bf:25:77:6c:f9:2c:b4:c5:b1:50:35:f8:c2: ae:cf:56:c1:c7:08:87:7c:bd:2c:a6:2b:9f:38:8a: 9b:ca:d0:bd:90:2c:b6:35:77:81:f9:a7:3f:e5:1d: 56:ca:4d:3b:18:36:03:4b:c6:0f:14:23:9e:4d:03: 25:1c:1b:fa:c2:00:cc:0a:ad:e6:fe:7f:d6:d7:13: f0:4c:7c:94:17:f3:b7:e4:c3:66:97:bb:d1:b4:83: fd:64:8b:c9:53:17:dc:81:dd:8e:05:4b:a1:ee:01: 24:f0:34:dd:ad:9c:d7:b5:d0:5c:0d:e6:df:be:68: 7c:86:4c:c1:2a:fb:c6:77:ec:77:25:a6:24:8f:a2: 67:f4:23:8c:4c:3a:79:3a:96:4a:bd:a8:f1:3d:09: 47:00:d8:4c:59:90:4b:08:cc:80:bd:68:bd:30:5d: 97:81:d8:81:b9:0e:d9:06:8c:de:fa:9b:7a:78:18: 0c:71:b2:b9:14:85:15:de:a5:8c:e3:93:7e:61:ef: eb:3b:2b:41:96:58:94:0f:05:2d:f3:2e:6a:ab:25: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:27:3E:21:E8:54:56:B9:14:20:77:E8:F8:4A:CB:61:66:D6:24 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ea:fa:70:98:8c:53:7d:c2:62:0a:8b:60:ec:76:91:33:d6: 67:9c:e1:00:d3:0d:4b:02:72:49:39:45:bf:6f:49:48:99:ec: 17:c3:45:80:22:00:74:81:e5:db:da:ae:e1:a5:a6:0b:fc:4f: 8a:a6:52:7d:ab:0f:31:21:15:73:4b:ae:23:b4:02:5d:bc:1a: bf:b2:7d:6f:2b:48:b4:55:fe:b6:d5:ab:aa:d4:44:99:cc:1a: 0e:f0:fc:0c:49:10:15:00:2f:d8:75:06:f0:a5:3e:37:36:e8: 59:1d:ef:9b:a0:88:2e:75:3a:8c:58:04:2c:25:65:72:91:2c: 40:1c:dd:29:53:21:51:bc:6a:2e:91:f9:5b:d7:b1:b6:9b:c6: d9:a1:41:4c:d6:ba:4c:e2:7f:53:dc:c9:8c:44:c1:34:e9:81: 67:c0:3a:79:2c:9d:f8:a8:ff:0f:40:5b:a9:32:b9:4e:13:2b: 32:0c:ad:25:2b:cb:9a:64:72:70:5c:09:81:99:2a:f8:82:30: d0:ce:ef:9b:0d:4f:29:7b:a4:47:9e:15:0b:57:b6:1c:f5:e8: 67:fe:09:73:d5:38:5c:2b:b1:5b:0b:8e:27:e7:27:42:06:1a: 84:a4:86:2d:45:7d:e3:44:64:9c:cb:20:78:1f:ea:db:4b:08: e2:87:06:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4GY4EJ+33o8JuqXfxA8gEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwNTA4MDcwMDQ0WhcNMjYwNTA5MDcwMDQ0WjAzMTEwLwYDVQQD Eyg0YWVjMjczZTIxZTg1NDU2YjkxNDIwNzdlOGY4NGFjYjYxNjZkNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIqjci8dt0taJO2CovJOC0MGy993 PGtt0Z5YT4Y76HlV9Z7BjpNAVCussPu/EL8ld2z5LLTFsVA1+MKuz1bBxwiHfL0s piufOIqbytC9kCy2NXeB+ac/5R1Wyk07GDYDS8YPFCOeTQMlHBv6wgDMCq3m/n/W 1xPwTHyUF/O35MNml7vRtIP9ZIvJUxfcgd2OBUuh7gEk8DTdrZzXtdBcDebfvmh8 hkzBKvvGd+x3JaYkj6Jn9COMTDp5OpZKvajxPQlHANhMWZBLCMyAvWi9MF2XgdiB uQ7ZBoze+pt6eBgMcbK5FIUV3qWM45N+Ye/rOytBlliUDwUt8y5qqyX2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErsJz4h6FRWuRQgd+j4SsthZtYkMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAour6cJiM U33CYgqLYOx2kTPWZ5zhANMNSwJySTlFv29JSJnsF8NFgCIAdIHl29qu4aWmC/xP iqZSfasPMSEVc0uuI7QCXbwav7J9bytItFX+ttWrqtREmcwaDvD8DEkQFQAv2HUG 8KU+NzboWR3vm6CILnU6jFgELCVlcpEsQBzdKVMhUbxqLpH5W9extpvG2aFBTNa6 TOJ/U9zJjETBNOmBZ8A6eSyd+Kj/D0BbqTK5ThMrMgytJSvLmmRycFwJgZkq+IIw 0M7vmw1PKXukR54VC1e2HPXoZ/4Jc9U4XCuxWwuOJ+cnQgYahKSGLUV940RknMsg eB/q20sI4ocGaQ== -----END CERTIFICATE-----Generated at Fri May 8 17:37:20 2026 by rpki-client