$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 9Vp6uCh0K8qDxluRq7Xj77EHjpFt4n3xRgi+QaOgI/0= Subject key identifier: 51:48:73:2A:32:D7:4F:1F:E3:93:46:00:EF:D2:2F:E2:20:00:1A:34 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019DE3A0D5E5BE1E483608657529A881E6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0F60 Signing time: Fri 01 May 2026 13:01:01 +0000 Manifest this update: Fri 01 May 2026 13:01:01 +0000 Manifest next update: Sat 02 May 2026 13:01:01 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: JZTBstI444caYpbzf2vMDXy+VrUvSy7qlxr4FGmzSjQ=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 13: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 14: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 15: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 16: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 17: hrUBYyUNmk1RlzCVJrZZninUqYE.roa (hash: tZuiVSXDojagTNTrWs4BJGVlhszVNx0FmVqH9mQLrnc=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 20: nzgHuhsMefo-kktThn8Cntmw2DI.roa (hash: n7J6eW4XubFzE6V970pzXjS60Z76qDIdwRzD28rUcMI=) 21: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 22: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 23: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e3:a0:d5:e5:be:1e:48:36:08:65:75:29:a8:81:e6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: May 1 13:01:01 2026 GMT Not After : May 2 13:01:01 2026 GMT Subject: CN=5148732a32d74f1fe3934600efd22fe220001a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1b:54:a1:34:c8:59:03:88:36:62:58:1d:61: 6a:43:38:db:fc:61:77:91:ef:d8:f6:d4:32:f9:bf: 0b:93:42:8e:fa:4a:db:c6:25:db:f8:c0:8d:f2:cb: c9:40:da:4f:cb:a8:78:33:10:9e:c0:b8:3f:7d:82: cf:8c:4a:fe:22:00:3c:08:77:5c:7f:65:b9:d9:75: f5:24:6b:39:19:29:62:b8:ac:83:7d:e7:ef:18:b0: 66:e5:c2:fd:20:8f:9a:66:5a:48:46:3b:dc:4f:19: ae:02:22:6b:5f:92:e3:76:a8:5b:27:dd:cc:7f:77: 6b:7b:64:f9:a4:f4:32:80:5d:cf:e0:7f:53:c1:6e: 72:38:3b:52:62:22:3a:81:ea:44:27:9a:1d:90:9d: 22:ff:40:f0:5d:f5:41:3a:39:4c:82:9d:3b:e1:dc: ed:49:ea:8d:b9:d1:33:d6:aa:cf:08:b3:76:79:97: 13:13:d8:a2:c9:b4:35:72:20:38:b8:eb:bb:e9:70: b6:06:bb:f9:ed:78:49:95:94:d7:b7:14:90:ee:a0: 4a:24:70:63:03:54:f9:dc:3b:b9:07:07:44:b0:c9: b6:96:2f:a1:a3:06:01:3a:4b:5f:30:f8:7c:de:76: ad:b4:b9:51:d6:15:4a:95:6d:89:cc:6b:ff:6d:e4: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:73:2A:32:D7:4F:1F:E3:93:46:00:EF:D2:2F:E2:20:00:1A:34 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:9d:9c:14:60:b7:91:8a:2d:0e:53:6a:2a:91:00:aa:87:6d: c4:69:24:fa:48:e5:39:33:99:e3:a2:00:13:19:5d:ef:1b:8b: fa:b3:0d:b9:e2:ca:ea:28:30:92:f6:d7:ad:8e:32:98:35:fa: 50:06:8a:3f:07:7c:76:46:b8:73:9e:f5:27:a0:43:b8:fc:89: 0a:3b:2b:b7:dc:94:39:4c:3a:f7:20:61:54:5d:9f:89:f9:d3: d8:95:7d:75:3e:88:c9:b8:d3:aa:ce:1a:4e:6c:2e:94:33:32: f3:36:72:c9:6f:3b:0c:44:fe:65:18:1e:c0:4a:08:17:1a:1f: db:21:1c:6e:c3:26:ee:4a:16:60:c6:b8:ed:75:93:41:6a:dc: 3f:a0:88:f8:2d:13:c8:c6:d4:aa:6c:b9:12:43:51:55:90:eb: 46:82:41:e2:52:9e:df:57:18:b2:6d:65:73:c7:2c:9e:13:3b: 04:9b:6d:aa:c7:69:d5:61:53:fa:2b:92:b7:dc:ee:6c:19:1d: 6f:d7:6e:ee:c3:49:6f:1a:2e:31:7f:77:0b:42:bf:da:6b:9f: b2:6d:c0:27:99:95:2d:c1:b3:d8:cb:1a:db:bd:c8:bf:7b:bf: df:c0:ee:35:28:f4:5f:6b:ef:79:d5:ef:91:3a:71:34:65:84: 10:ee:d9:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3joNXlvh5INghldSmogea8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwNTAxMTMwMTAxWhcNMjYwNTAyMTMwMTAxWjAzMTEwLwYDVQQD Eyg1MTQ4NzMyYTMyZDc0ZjFmZTM5MzQ2MDBlZmQyMmZlMjIwMDAxYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7htUoTTIWQOINmJYHWFqQzjb/GF3 ke/Y9tQy+b8Lk0KO+krbxiXb+MCN8svJQNpPy6h4MxCewLg/fYLPjEr+IgA8CHdc f2W52XX1JGs5GSliuKyDfefvGLBm5cL9II+aZlpIRjvcTxmuAiJrX5LjdqhbJ93M f3dre2T5pPQygF3P4H9TwW5yODtSYiI6gepEJ5odkJ0i/0DwXfVBOjlMgp074dzt SeqNudEz1qrPCLN2eZcTE9iiybQ1ciA4uOu76XC2Brv57XhJlZTXtxSQ7qBKJHBj A1T53Du5BwdEsMm2li+howYBOktfMPh83nattLlR1hVKlW2JzGv/beSl6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFIcyoy108f45NGAO/SL+IgABo0MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5J2cFGC3 kYotDlNqKpEAqodtxGkk+kjlOTOZ46IAExld7xuL+rMNueLK6igwkvbXrY4ymDX6 UAaKPwd8dka4c571J6BDuPyJCjsrt9yUOUw69yBhVF2fifnT2JV9dT6IybjTqs4a TmwulDMy8zZyyW87DET+ZRgewEoIFxof2yEcbsMm7koWYMa47XWTQWrcP6CI+C0T yMbUqmy5EkNRVZDrRoJB4lKe31cYsm1lc8csnhM7BJttqsdp1WFT+iuSt9zubBkd b9du7sNJbxouMX93C0K/2mufsm3AJ5mVLcGz2Msa273Iv3u/38DuNSj0X2vvedXv kTpxNGWEEO7ZVQ== -----END CERTIFICATE-----Generated at Fri May 1 16:55:30 2026 by rpki-client