$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: wcY586zeWZoN8WP9ht9typkKZv7K1gZeQHOkBPKdYpw= Subject key identifier: EB:4B:FA:D8:26:09:A0:E1:04:63:D7:52:CF:4C:28:74:3B:01:85:4A Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019DB13377C75CC3C940911BC82882775D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 18F5 Signing time: Tue 21 Apr 2026 18:00:33 +0000 Manifest this update: Tue 21 Apr 2026 18:00:33 +0000 Manifest next update: Wed 22 Apr 2026 18:00:33 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: YyihUr+to9Gk7LakSo2ynXu0b6ytqgFk0DE18dI2yYw=) 8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b1:33:77:c7:5c:c3:c9:40:91:1b:c8:28:82:77:5d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Apr 21 18:00:33 2026 GMT Not After : Apr 22 18:00:33 2026 GMT Subject: CN=eb4bfad82609a0e10463d752cf4c28743b01854a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:b7:0f:13:a7:6f:66:31:9b:03:f6:e5:c4: 9b:5d:64:45:43:e6:88:8c:97:2c:41:1f:2e:5c:e1: 58:04:14:6d:65:a7:3c:bf:2d:16:28:df:fd:1a:e8: 6e:b5:eb:22:a4:3b:d3:be:97:09:9f:6f:08:60:e2: d7:c3:d3:31:b5:4d:e7:25:93:dd:3d:b5:41:14:73: 8b:e8:a0:f3:25:7b:fb:89:e1:32:a4:02:f8:fb:0b: 7f:fe:ad:33:57:ed:a7:31:64:62:43:31:9f:99:0c: d1:c3:5b:1f:40:50:3a:b6:b4:6e:5b:3f:83:c1:0b: 44:3f:1d:fd:75:73:8a:50:ee:e0:ab:c9:18:9a:c4: d0:65:48:fb:b3:e9:7a:7e:0e:a5:6c:a3:ac:e8:73: 25:26:80:1a:ba:4d:54:49:7a:da:66:84:71:75:9d: 82:be:51:cb:04:aa:9f:df:3a:18:99:47:dd:5c:6f: 8e:5a:19:f0:0c:66:de:0f:a1:31:9a:dc:0e:5e:b4: f7:2f:32:21:03:02:3f:bd:08:e3:82:31:50:2e:a8: 17:a5:eb:15:08:cb:e5:19:1a:0c:7a:f9:b6:b3:93: 88:45:fc:52:5e:24:66:d3:9a:71:d0:e1:2d:24:28: 04:d7:5f:c9:1f:3f:af:8d:76:21:b4:8f:2c:f5:0c: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4B:FA:D8:26:09:A0:E1:04:63:D7:52:CF:4C:28:74:3B:01:85:4A X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d0:d1:17:90:73:9f:f4:83:b9:66:a3:d9:94:0d:1c:40:fe: e4:f7:52:49:7a:e0:16:12:92:42:ed:b2:58:04:fa:7c:7f:27: 25:5f:5b:e3:6b:5f:6b:c3:92:78:b5:50:88:2a:25:50:3a:38: 81:dc:68:16:28:37:e5:dd:5f:b9:38:88:4d:dc:f8:20:80:ee: b2:2c:48:26:b2:d3:98:eb:1b:44:d5:ea:09:78:aa:5d:c9:0c: 51:31:6a:8e:7a:68:e5:09:a0:4a:2a:71:eb:9e:3a:a0:b8:0f: 29:44:1b:b9:c8:2e:33:8f:a4:d0:55:d2:b1:a0:61:56:91:7a: af:e5:5a:a8:26:43:ee:bf:b4:d4:2a:9d:3c:2b:22:c0:ed:58: 11:87:2e:6d:a8:76:1a:94:92:30:2b:d5:9c:6a:ef:8e:b3:66: 24:02:43:6b:70:5f:3e:d9:6f:e5:81:09:1f:ac:91:11:46:c5: cf:79:0c:b7:2e:38:03:72:88:8b:2a:3c:bf:cb:32:a9:6a:54: 45:4e:ec:de:7c:78:5c:22:35:3e:8c:4e:4f:6b:00:72:2f:de: 28:92:4c:97:37:93:9f:29:9c:97:e5:92:f4:b1:b7:96:7e:17: a5:fb:b7:99:a0:c5:7c:dc:44:55:06:35:8c:8e:91:2c:77:92: e9:34:3e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2xM3fHXMPJQJEbyCiCd11EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwNDIxMTgwMDMzWhcNMjYwNDIyMTgwMDMzWjAzMTEwLwYDVQQD EyhlYjRiZmFkODI2MDlhMGUxMDQ2M2Q3NTJjZjRjMjg3NDNiMDE4NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK63DxOnb2YxmwP25cSbXWRFQ+aI jJcsQR8uXOFYBBRtZac8vy0WKN/9GuhutesipDvTvpcJn28IYOLXw9MxtU3nJZPd PbVBFHOL6KDzJXv7ieEypAL4+wt//q0zV+2nMWRiQzGfmQzRw1sfQFA6trRuWz+D wQtEPx39dXOKUO7gq8kYmsTQZUj7s+l6fg6lbKOs6HMlJoAauk1USXraZoRxdZ2C vlHLBKqf3zoYmUfdXG+OWhnwDGbeD6ExmtwOXrT3LzIhAwI/vQjjgjFQLqgXpesV CMvlGRoMevm2s5OIRfxSXiRm05px0OEtJCgE11/JHz+vjXYhtI8s9QzH7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtL+tgmCaDhBGPXUs9MKHQ7AYVKMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNDRF5Bz n/SDuWaj2ZQNHED+5PdSSXrgFhKSQu2yWAT6fH8nJV9b42tfa8OSeLVQiColUDo4 gdxoFig35d1fuTiITdz4IIDusixIJrLTmOsbRNXqCXiqXckMUTFqjnpo5QmgSipx 6546oLgPKUQbucguM4+k0FXSsaBhVpF6r+VaqCZD7r+01CqdPCsiwO1YEYcubah2 GpSSMCvVnGrvjrNmJAJDa3BfPtlv5YEJH6yREUbFz3kMty44A3KIiyo8v8syqWpU RU7s3nx4XCI1PoxOT2sAci/eKJJMlzeTnymcl+WS9LG3ln4Xpfu3maDFfNxEVQY1 jI6RLHeS6TQ+xw== -----END CERTIFICATE-----Generated at Wed Apr 22 02:37:31 2026 by rpki-client