$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: 0UBeH9+S6OBHwSp4jNlfQkpph9FhjV8xuiLmLGsrMuU= Subject key identifier: EB:7C:C6:85:B1:9E:91:A2:BC:0D:3B:3D:B7:69:B0:40:F5:04:50:98 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019DCC3D31903AB12C6410CC4B7DACCAD1DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1903 Signing time: Mon 27 Apr 2026 00:00:55 +0000 Manifest this update: Mon 27 Apr 2026 00:00:55 +0000 Manifest next update: Tue 28 Apr 2026 00:00:55 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 6n_hkZcF-cF30EEk5-jd2IN_wO8.roa (hash: DcZmoLZGm/trptAiaEUhPRAyxAeOKtODy6lVi50yIeA=) 3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: EYgsnV8RRrC64KURW5mXNA2nZBeXeOAxWi3V0uerMGA=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3d:31:90:3a:b1:2c:64:10:cc:4b:7d:ac:ca:d1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Apr 27 00:00:55 2026 GMT Not After : Apr 28 00:00:55 2026 GMT Subject: CN=eb7cc685b19e91a2bc0d3b3db769b040f5045098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:ea:c1:4c:b3:47:7c:0f:58:4c:ed:bf:aa: 80:61:37:d3:fa:9a:c9:09:d9:6c:38:89:5f:1c:2f: 2e:2f:a6:00:54:aa:e5:b7:3d:e6:b3:c7:b8:55:e3: 22:74:8f:f5:b6:16:4a:b8:a2:cf:89:3e:3b:52:0d: e8:76:4f:5a:0f:a3:2b:53:0d:09:45:1e:41:8b:cf: 31:25:2f:85:be:92:65:ad:1d:1d:1e:53:bf:3d:62: 90:d9:ff:11:30:d2:08:20:c2:b6:ad:b9:50:28:ae: 12:ff:1f:8f:af:3a:0e:00:65:d8:2b:fa:50:ab:41: d2:27:b1:b4:63:41:e0:8f:a1:97:47:e2:4c:58:d7: 26:f5:8e:8c:e8:97:a2:92:bf:64:a9:ee:a1:09:4c: 5b:92:2e:8c:94:25:e2:b4:69:c2:4b:9e:7a:4f:7e: 84:65:ea:a7:24:53:94:59:85:9e:0f:dc:27:7b:58: f2:1c:ac:c5:82:40:dc:7c:92:10:73:da:51:6c:5e: 87:cb:0f:a6:ba:68:0c:cb:cf:cd:9b:24:04:94:3b: f8:f7:13:2e:4d:fd:13:8d:6a:53:61:f4:52:6e:07: 0d:25:5a:cc:7b:39:8b:a9:12:f0:11:32:ce:9d:0e: b0:44:22:99:85:93:67:3e:4f:d6:49:da:b9:54:33: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:C6:85:B1:9E:91:A2:BC:0D:3B:3D:B7:69:B0:40:F5:04:50:98 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5c:fa:ff:44:34:fb:a4:89:ee:dc:6a:8f:4f:b6:d2:c6:0c: ef:f6:51:b5:a7:4d:b9:e1:e5:f4:32:af:ad:da:1a:36:9e:29: 4b:e1:5c:87:e9:4e:38:74:b4:66:5e:7b:38:a0:cf:df:8c:39: 37:31:8c:dd:4a:e4:5e:98:1f:cf:3b:94:cf:20:68:84:33:b3: df:9e:72:49:0c:2b:f5:52:70:cc:b0:4f:0e:1e:33:0f:d2:ef: 78:dd:d8:79:78:57:30:fe:f1:57:cb:c3:f6:0a:32:06:3a:d3: 7f:43:fc:dd:5f:d0:4d:4a:8e:5e:96:58:7a:5e:37:16:27:05: 88:59:ef:d5:9a:de:bf:7a:43:9f:8d:59:38:32:ee:b3:75:af: 9a:e8:fd:29:8c:a7:a0:ac:0b:c9:25:b5:ee:e2:f4:50:ba:de: 8e:11:03:fd:76:15:7e:4c:d5:6e:23:29:fc:d3:5d:27:0f:93: be:ed:c3:1d:0a:27:b9:de:8a:81:9c:88:00:03:ca:9b:f9:19: 02:f8:7e:24:76:7f:0a:45:a8:a5:c9:89:dd:d3:ec:34:53:fc: b1:51:f9:bc:1c:1b:05:f9:5f:43:34:df:1a:56:b7:dc:97:b3: 20:3c:4b:a1:78:cc:78:67:12:e4:d8:9d:75:0e:6d:6d:9d:6b: b2:a5:ce:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPTGQOrEsZBDMS32sytHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwNDI3MDAwMDU1WhcNMjYwNDI4MDAwMDU1WjAzMTEwLwYDVQQD EyhlYjdjYzY4NWIxOWU5MWEyYmMwZDNiM2RiNzY5YjA0MGY1MDQ1MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IvqwUyzR3wPWEztv6qAYTfT+prJ CdlsOIlfHC8uL6YAVKrltz3ms8e4VeMidI/1thZKuKLPiT47Ug3odk9aD6MrUw0J RR5Bi88xJS+FvpJlrR0dHlO/PWKQ2f8RMNIIIMK2rblQKK4S/x+PrzoOAGXYK/pQ q0HSJ7G0Y0Hgj6GXR+JMWNcm9Y6M6Jeikr9kqe6hCUxbki6MlCXitGnCS556T36E ZeqnJFOUWYWeD9wne1jyHKzFgkDcfJIQc9pRbF6Hyw+mumgMy8/NmyQElDv49xMu Tf0TjWpTYfRSbgcNJVrMezmLqRLwETLOnQ6wRCKZhZNnPk/WSdq5VDP+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt8xoWxnpGivA07PbdpsED1BFCYMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1z6/0Q0 +6SJ7txqj0+20sYM7/ZRtadNueHl9DKvrdoaNp4pS+Fch+lOOHS0Zl57OKDP34w5 NzGM3UrkXpgfzzuUzyBohDOz355ySQwr9VJwzLBPDh4zD9LveN3YeXhXMP7xV8vD 9goyBjrTf0P83V/QTUqOXpZYel43FicFiFnv1Zrev3pDn41ZODLus3Wvmuj9KYyn oKwLySW17uL0ULrejhED/XYVfkzVbiMp/NNdJw+Tvu3DHQonud6KgZyIAAPKm/kZ Avh+JHZ/CkWopcmJ3dPsNFP8sVH5vBwbBflfQzTfGla33JezIDxLoXjMeGcS5Nid dQ5tbZ1rsqXOvQ== -----END CERTIFICATE-----Generated at Mon Apr 27 04:32:09 2026 by rpki-client