$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: R49WYQ76VRw6Jf6aSaHziraS479n83sEUmXQlwFBGUU= Subject key identifier: 76:EF:1E:56:00:D5:54:1A:71:C2:B9:3B:49:8E:A8:D7:95:CB:60:95 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019DCCAAA512CB4AA177CDCA383CB8172593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1917 Signing time: Mon 27 Apr 2026 02:00:28 +0000 Manifest this update: Mon 27 Apr 2026 02:00:28 +0000 Manifest next update: Tue 28 Apr 2026 02:00:28 +0000 Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=) 2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=) 3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=) 4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=) 5: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (hash: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I=) 6: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=) 7: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=) 8: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=) 9: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=) 10: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=) 11: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=) 12: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=) 13: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=) 14: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=) 15: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=) 16: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=) 17: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=) 18: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: my0Rc1bKt5QtpnqZMg/JJI4gAhyVFKwUCH66VBV77bw=) 19: wEezPkEzN7e4KBElW04dGq39yXE.roa (hash: tPPcQRNIUmCvUpl1+b0ZJ2Bt31w7/vOz4ZjosTuObmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 02:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:aa:a5:12:cb:4a:a1:77:cd:ca:38:3c:b8:17:25:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Apr 27 02:00:28 2026 GMT Not After : Apr 28 02:00:28 2026 GMT Subject: CN=76ef1e5600d5541a71c2b93b498ea8d795cb6095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:01:b1:67:16:24:4b:b0:bd:6c:79:f4:4d: fd:67:48:31:10:a1:5e:9b:9d:96:92:c7:ee:d2:09: 3e:5a:5b:47:3a:d9:6e:d5:01:bc:08:fa:0c:28:80: 81:50:86:d4:7c:45:de:23:c1:f7:8f:84:64:f2:ab: ed:93:39:12:34:0d:78:50:1d:cc:32:a3:38:22:80: f6:aa:11:34:95:b1:d6:82:d9:17:ef:6c:8e:51:d6: 06:c0:ee:b5:38:90:62:3c:71:1f:ec:c6:6e:e2:ca: 42:7c:ec:83:ab:e8:b2:0f:30:a5:20:c1:50:ca:1f: 09:fa:c6:6b:e6:60:72:b1:00:dc:28:1d:07:39:ec: 47:60:aa:0d:42:5c:62:b4:5e:26:60:38:51:c9:c1: eb:ae:9e:8b:0f:51:1c:16:22:a5:2e:4c:11:f3:9d: ee:46:3b:88:8a:c7:0b:90:95:76:8a:e5:44:e6:4b: be:42:cc:1b:b5:04:8b:e3:25:fa:46:be:50:f7:4b: 1e:63:3b:d6:3a:bb:16:1b:f4:54:6e:77:f9:fa:cc: 95:09:75:14:97:8e:47:07:e4:e2:f4:7c:ee:6a:54: 8b:58:30:8d:67:5e:53:8d:c4:38:ec:fe:9d:69:d5: 77:71:6e:c3:14:e9:2f:da:aa:41:00:d2:cb:04:fe: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EF:1E:56:00:D5:54:1A:71:C2:B9:3B:49:8E:A8:D7:95:CB:60:95 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:93:8f:84:bb:42:5c:8c:39:76:8b:0f:2a:dc:f6:4e:30:63: e1:48:96:10:8e:25:84:29:86:37:ec:f4:08:c6:b1:83:c9:0b: a4:bc:97:27:c0:3a:1e:bd:da:f4:79:cb:56:ff:17:f6:cd:8e: da:48:18:d7:d6:d2:26:dc:b3:26:2e:75:d7:79:17:a2:e6:16: 0f:71:cc:1f:a3:70:31:42:92:23:6e:3a:1b:05:09:b4:e1:cb: 67:1b:53:16:82:43:b2:14:6a:3b:78:7b:dd:10:95:da:14:18: f9:cc:85:68:b5:08:fa:b4:5c:f4:91:22:dd:60:41:4e:48:7d: 20:c4:14:98:f0:ba:2e:67:ed:b7:59:69:ce:f7:95:c7:a0:bf: f3:26:03:91:6d:11:fb:85:58:be:a4:18:74:87:6a:60:99:a3: 76:b4:1f:0e:47:f6:73:aa:05:66:a1:55:e7:a8:49:54:18:d5: 3a:48:7c:a2:27:12:0e:3d:77:71:65:65:17:31:ed:c8:b7:a4: 84:18:d6:26:1d:2d:5f:8a:64:23:a9:c8:a9:29:2b:fa:81:e8: 26:59:6d:6e:29:3a:8a:ea:46:18:09:39:f4:43:c8:f9:f4:74: 45:5f:02:98:d8:5e:6d:ad:b6:12:1b:ed:61:08:b3:b8:0f:77: 81:37:3a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MqqUSy0qhd83KODy4FyWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwNDI3MDIwMDI4WhcNMjYwNDI4MDIwMDI4WjAzMTEwLwYDVQQD Eyg3NmVmMWU1NjAwZDU1NDFhNzFjMmI5M2I0OThlYThkNzk1Y2I2MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQBsWcWJEuwvWx59E39Z0gxEKFe m52Wksfu0gk+WltHOtlu1QG8CPoMKICBUIbUfEXeI8H3j4Rk8qvtkzkSNA14UB3M MqM4IoD2qhE0lbHWgtkX72yOUdYGwO61OJBiPHEf7MZu4spCfOyDq+iyDzClIMFQ yh8J+sZr5mBysQDcKB0HOexHYKoNQlxitF4mYDhRycHrrp6LD1EcFiKlLkwR853u RjuIiscLkJV2iuVE5ku+QswbtQSL4yX6Rr5Q90seYzvWOrsWG/RUbnf5+syVCXUU l45HB+Ti9HzualSLWDCNZ15TjcQ47P6dadV3cW7DFOkv2qpBANLLBP5iXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbvHlYA1VQaccK5O0mOqNeVy2CVMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5OPhLtC XIw5dosPKtz2TjBj4UiWEI4lhCmGN+z0CMaxg8kLpLyXJ8A6Hr3a9HnLVv8X9s2O 2kgY19bSJtyzJi5113kXouYWD3HMH6NwMUKSI246GwUJtOHLZxtTFoJDshRqO3h7 3RCV2hQY+cyFaLUI+rRc9JEi3WBBTkh9IMQUmPC6Lmftt1lpzveVx6C/8yYDkW0R +4VYvqQYdIdqYJmjdrQfDkf2c6oFZqFV56hJVBjVOkh8oicSDj13cWVlFzHtyLek hBjWJh0tX4pkI6nIqSkr+oHoJlltbik6iupGGAk59EPI+fR0RV8CmNheba22Ehvt YQizuA93gTc6kg== -----END CERTIFICATE-----Generated at Mon Apr 27 10:45:04 2026 by rpki-client