$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: aM+C3kLMqE7aWFcdpGuUKdNis6fUYGc7BdDo6CVRyC4= Subject key identifier: CD:32:15:C4:E8:41:CB:98:EA:A3:C7:4F:0B:F6:31:77:C2:A6:DE:71 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019DCD86A605875F84FC644A7FD7420CDB16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 1063 Signing time: Mon 27 Apr 2026 06:00:46 +0000 Manifest this update: Mon 27 Apr 2026 06:00:46 +0000 Manifest next update: Tue 28 Apr 2026 06:00:46 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 4: IN8_0shZRjqy0BSNcA6vSwjizsE.roa (hash: j3OMYKONkpCF4kIbEhnrl95j/FvtjhK3uRKyc6fY7qM=) 5: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 6: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 7: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 8: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 9: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 10: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 11: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 12: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: q9nRtj9ZlmHk1pME4kxDMCNXYWQEK9VsGKiiwP+oe9I=) 13: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 14: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (hash: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=) 15: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:86:a6:05:87:5f:84:fc:64:4a:7f:d7:42:0c:db:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Apr 27 06:00:46 2026 GMT Not After : Apr 28 06:00:46 2026 GMT Subject: CN=cd3215c4e841cb98eaa3c74f0bf63177c2a6de71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:ec:db:72:3c:56:16:a6:74:fd:18:e0:b9: 07:5e:11:f4:18:f8:87:1b:cb:a9:e4:b7:bc:2d:7d: 08:95:2c:71:e1:e9:1a:2c:c1:d3:4a:34:1c:09:4c: 02:9a:2a:ff:91:72:ea:70:d3:db:4c:05:c1:0e:76: 6f:3c:b4:29:0c:63:d5:70:9d:dc:dd:24:41:1b:44: aa:60:2a:47:c1:93:d8:bd:5b:5f:12:6e:6a:b8:f3: d5:73:82:37:c5:82:8d:37:cd:12:88:32:fb:08:8d: a1:b3:e1:31:d1:05:95:5b:2e:ef:f0:a2:e8:7d:70: 48:b2:93:6c:a2:50:49:03:67:71:c0:34:8b:04:38: d8:4d:0c:da:52:d4:0c:0d:2b:6d:6b:fd:c9:5d:80: 16:b0:1b:b9:80:5c:f4:62:84:f4:14:dd:42:bd:c4: 5b:86:ca:d2:5e:80:25:6d:b2:aa:50:13:1c:26:78: 0a:96:6b:65:eb:33:22:e9:93:a7:7c:e1:0c:bc:f0: 9f:d8:f6:b2:67:06:98:bd:9a:eb:42:a0:af:f0:b5: 09:77:16:9c:e4:c3:4c:1e:11:a9:aa:53:73:b7:e7: 0b:e1:81:8f:f3:dd:1a:14:65:86:ef:eb:b2:11:15: 45:b5:12:c9:4e:3d:d7:d7:07:d4:78:16:a3:ce:24: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:15:C4:E8:41:CB:98:EA:A3:C7:4F:0B:F6:31:77:C2:A6:DE:71 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:ce:8e:9d:7a:1e:90:f5:91:11:58:3f:5a:22:fe:62:3f: 76:1c:bd:3d:b4:3c:f7:b1:ef:2c:58:a9:c0:8c:92:b8:f8:b1: 05:16:c1:83:b6:92:88:9f:f5:f2:6f:21:41:ff:73:e7:6c:65: cd:6a:c1:bc:f9:e9:08:80:82:6f:47:1c:e9:43:b2:37:25:54: d0:0a:2d:4c:a2:ca:0f:83:db:56:e5:87:fc:1b:bc:73:c6:22: c2:21:4e:9b:bd:ba:a1:0a:dd:51:d5:17:05:7a:2d:1f:b8:0c: b4:56:6c:35:72:42:e1:ce:19:97:c3:14:ba:ac:60:01:4c:9e: b2:04:f2:b3:51:10:a4:9e:14:87:eb:3a:ed:3c:da:42:f1:d5: c0:41:12:b9:73:67:63:91:26:d9:6b:9e:4c:c8:df:9c:1e:dd: a0:50:2d:c3:c0:ef:19:57:ae:95:e0:c4:ee:f3:76:7f:38:69: 36:93:c8:1b:81:c8:a2:de:83:f8:f8:80:63:37:14:dc:1c:fd: 0d:cb:bd:4d:ab:4b:1c:3c:9d:a4:aa:d0:f6:19:63:bc:8f:06: 70:e0:70:7b:6a:ee:c5:80:98:6f:79:20:73:24:8f:8e:d1:3e: 85:a7:97:78:ab:2a:1c:54:5e:7b:d6:22:e6:f2:4e:32:79:3f: a0:1d:8b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NhqYFh1+E/GRKf9dCDNsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwNDI3MDYwMDQ2WhcNMjYwNDI4MDYwMDQ2WjAzMTEwLwYDVQQD EyhjZDMyMTVjNGU4NDFjYjk4ZWFhM2M3NGYwYmY2MzE3N2MyYTZkZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Xs23I8VhamdP0Y4LkHXhH0GPiH G8up5Le8LX0IlSxx4ekaLMHTSjQcCUwCmir/kXLqcNPbTAXBDnZvPLQpDGPVcJ3c 3SRBG0SqYCpHwZPYvVtfEm5quPPVc4I3xYKNN80SiDL7CI2hs+Ex0QWVWy7v8KLo fXBIspNsolBJA2dxwDSLBDjYTQzaUtQMDStta/3JXYAWsBu5gFz0YoT0FN1CvcRb hsrSXoAlbbKqUBMcJngKlmtl6zMi6ZOnfOEMvPCf2PayZwaYvZrrQqCv8LUJdxac 5MNMHhGpqlNzt+cL4YGP890aFGWG7+uyERVFtRLJTj3X1wfUeBajziTmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0yFcToQcuY6qPHTwv2MXfCpt5xMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjzOjp16 HpD1kRFYP1oi/mI/dhy9PbQ897HvLFipwIySuPixBRbBg7aSiJ/18m8hQf9z52xl zWrBvPnpCICCb0cc6UOyNyVU0AotTKLKD4PbVuWH/Bu8c8YiwiFOm726oQrdUdUX BXotH7gMtFZsNXJC4c4Zl8MUuqxgAUyesgTys1EQpJ4Uh+s67TzaQvHVwEESuXNn Y5Em2WueTMjfnB7doFAtw8DvGVeuleDE7vN2fzhpNpPIG4HIot6D+PiAYzcU3Bz9 Dcu9TatLHDydpKrQ9hljvI8GcOBwe2ruxYCYb3kgcySPjtE+haeXeKsqHFRee9Yi 5vJOMnk/oB2L8g== -----END CERTIFICATE-----Generated at Mon Apr 27 09:09:51 2026 by rpki-client