$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: SvMhOJXthKP5XqDnbHUI7bkuoNp+Z73eRgXT8D/mlks= Subject key identifier: 4C:85:F1:33:56:F4:C9:99:17:34:B4:C6:68:A3:BD:5D:61:A8:AB:22 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019DEDB6C286D34B99E652E75935456FAB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0F32 Signing time: Sun 03 May 2026 12:01:10 +0000 Manifest this update: Sun 03 May 2026 12:01:10 +0000 Manifest next update: Mon 04 May 2026 12:01:10 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 1PT+PLGAv8PTfEh+oOkAZ89hStSt5OdzimHa7rZzB/g=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 May 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ed:b6:c2:86:d3:4b:99:e6:52:e7:59:35:45:6f:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: May 3 12:01:10 2026 GMT Not After : May 4 12:01:10 2026 GMT Subject: CN=4c85f13356f4c9991734b4c668a3bd5d61a8ab22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:6f:4c:c2:84:b7:8b:c7:c2:ab:c2:f1:a4: 95:e3:2c:ad:96:90:f7:05:6e:31:8a:2b:a2:11:2d: e6:45:57:e5:15:0c:a0:bc:0a:12:56:d9:fc:31:20: 86:47:63:ba:b9:a4:1b:f3:e9:33:4c:b5:45:19:30: f8:34:c2:9b:c2:55:6b:30:a5:c3:f5:17:c9:ac:df: bc:8e:02:59:f4:df:a7:b9:e5:67:f2:9d:79:22:e4: 39:3f:0e:6a:99:f3:5e:ac:03:48:6b:4b:0a:93:87: 56:f1:09:e9:80:1d:35:58:33:a8:b4:54:e6:0c:d4: db:fe:7b:1f:43:66:eb:7c:86:2e:1c:3b:57:5e:62: dd:7b:b2:3f:af:00:dd:ad:3d:7c:7a:b8:ad:ed:8c: 1f:5a:ef:5c:a0:aa:69:da:dd:8b:8b:5a:57:19:12: 70:51:20:1e:1d:c8:9e:e9:32:57:d2:3d:5e:c9:51: 6b:c3:e6:35:74:2a:fa:c7:6a:09:c3:48:80:ad:de: cd:30:0f:c1:24:fd:d6:69:6b:6b:5c:2d:3c:df:8a: e8:f6:3f:a1:38:86:4d:b1:a5:e5:b2:76:05:ec:8e: 3c:3a:86:39:b1:83:53:2b:3b:8e:c8:9e:bc:19:a8: 8f:7b:10:ae:d1:98:cd:6c:05:29:f6:a4:55:83:ea: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:85:F1:33:56:F4:C9:99:17:34:B4:C6:68:A3:BD:5D:61:A8:AB:22 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:47:8f:3f:73:43:d9:5e:b4:9b:a6:e2:d1:64:f3:52:1b:0e: 75:28:fb:a1:06:0d:4a:ba:24:9a:61:f0:39:12:ff:a8:e7:d9: 5b:73:75:e8:e0:07:ee:9b:7a:45:91:72:33:23:26:84:7a:9b: b0:c3:e5:7d:0a:e9:57:31:2a:1a:88:20:01:fa:67:9c:90:02: 7f:24:32:b1:5a:86:fe:6d:2d:37:00:ea:1c:59:ef:84:fa:56: 5f:8d:e1:b8:85:b6:86:73:6d:75:3b:5c:a6:9a:c1:3c:96:98: 02:e7:f5:61:80:2c:64:2c:d7:b8:1b:5d:44:38:68:1e:24:40: 63:67:f5:af:13:4f:6f:cc:3a:4c:91:9f:9a:93:9c:59:03:dc: 98:f7:7d:d2:e1:ed:8a:34:8b:1d:8a:ba:35:95:e4:70:9c:16: 59:eb:b0:6f:4e:3a:0b:fb:76:ed:c2:36:0c:7c:25:fb:09:81: 94:11:73:47:08:06:43:43:23:49:07:bc:73:4f:9e:cf:d4:eb: 08:3b:85:f4:65:7d:59:2d:96:16:77:d3:85:69:5e:8c:45:4f: 00:d1:c0:89:0f:7c:52:23:92:8e:e3:e3:be:55:07:8e:34:67: dc:6b:ce:2d:70:32:c7:68:19:03:74:ab:a8:30:e1:8d:6a:db: 8e:3e:4d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3ttsKG00uZ5lLnWTVFb6svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwNTAzMTIwMTEwWhcNMjYwNTA0MTIwMTEwWjAzMTEwLwYDVQQD Eyg0Yzg1ZjEzMzU2ZjRjOTk5MTczNGI0YzY2OGEzYmQ1ZDYxYThhYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPVvTMKEt4vHwqvC8aSV4yytlpD3 BW4xiiuiES3mRVflFQygvAoSVtn8MSCGR2O6uaQb8+kzTLVFGTD4NMKbwlVrMKXD 9RfJrN+8jgJZ9N+nueVn8p15IuQ5Pw5qmfNerANIa0sKk4dW8QnpgB01WDOotFTm DNTb/nsfQ2brfIYuHDtXXmLde7I/rwDdrT18erit7YwfWu9coKpp2t2Li1pXGRJw USAeHcie6TJX0j1eyVFrw+Y1dCr6x2oJw0iArd7NMA/BJP3WaWtrXC0834ro9j+h OIZNsaXlsnYF7I48OoY5sYNTKzuOyJ68GaiPexCu0ZjNbAUp9qRVg+ryRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyF8TNW9MmZFzS0xmijvV1hqKsiMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEePP3ND 2V60m6bi0WTzUhsOdSj7oQYNSrokmmHwORL/qOfZW3N16OAH7pt6RZFyMyMmhHqb sMPlfQrpVzEqGoggAfpnnJACfyQysVqG/m0tNwDqHFnvhPpWX43huIW2hnNtdTtc pprBPJaYAuf1YYAsZCzXuBtdRDhoHiRAY2f1rxNPb8w6TJGfmpOcWQPcmPd90uHt ijSLHYq6NZXkcJwWWeuwb046C/t27cI2DHwl+wmBlBFzRwgGQ0MjSQe8c0+ez9Tr CDuF9GV9WS2WFnfThWlejEVPANHAiQ98UiOSjuPjvlUHjjRn3GvOLXAyx2gZA3Sr qDDhjWrbjj5NrQ== -----END CERTIFICATE-----Generated at Sun May 3 17:08:48 2026 by rpki-client