$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: +dXBG50kILcqPsFQ2NI2YAfezx5n0cSzRtyaB4NHnuQ= Subject key identifier: 3C:21:C4:2B:C2:64:F2:1F:AF:1E:74:71:90:77:91:22:39:CB:C1:38 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019DF803BA0FBF829AB3FC4A832249EBBE94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0C5A Signing time: Tue 05 May 2026 12:01:26 +0000 Manifest this update: Tue 05 May 2026 12:01:26 +0000 Manifest next update: Wed 06 May 2026 12:01:26 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 5: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: E3nX81MMFM/pk6XEbt0I+rxxnYWsWNOTdhscKx+IwmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:03:ba:0f:bf:82:9a:b3:fc:4a:83:22:49:eb:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: May 5 12:01:26 2026 GMT Not After : May 6 12:01:26 2026 GMT Subject: CN=3c21c42bc264f21faf1e74719077912239cbc138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:81:6d:0f:64:62:9d:0d:71:1d:1d:52:1b: 50:83:5c:f2:50:79:74:50:f4:c8:d0:7b:b4:a7:ac: db:18:89:ac:8b:32:72:6d:61:14:cb:3b:f2:06:a7: d2:80:ee:23:47:3e:f0:f4:1c:90:1d:60:5a:be:98: ec:b4:a7:39:e3:f5:c5:88:71:ff:de:4e:82:12:40: f7:0c:21:d0:7d:b3:af:7f:a4:05:42:5e:af:76:f8: 03:b6:4f:69:44:85:2f:e2:8b:bb:e1:bf:25:39:e1: 66:38:a1:2f:7d:d6:55:74:e8:cf:1c:10:ab:33:5c: 10:9c:d2:b1:f2:90:a2:b4:f3:28:4d:ca:06:08:88: 87:df:1e:d5:84:e9:3a:ab:75:39:cd:5f:97:1c:a0: dc:db:8b:e6:f5:4c:8a:fe:ff:f0:52:d2:0c:e7:0e: 78:9c:99:a3:64:ee:17:ec:4f:ea:ab:12:3c:00:92: f6:98:93:29:b1:10:de:59:d3:39:8c:88:f8:59:a9: 14:40:c5:ce:12:aa:a5:d8:e7:57:bf:23:83:b2:c9: 8d:af:6f:13:9d:97:c5:b1:84:a2:70:60:e4:24:de: 16:b9:74:ef:c1:ce:8f:77:4a:43:0d:34:3a:5e:bf: 6e:1e:ae:77:e5:51:65:7b:88:1a:b0:c3:37:d5:22: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:21:C4:2B:C2:64:F2:1F:AF:1E:74:71:90:77:91:22:39:CB:C1:38 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:26:75:51:7c:ce:18:2e:2f:26:3b:88:8e:cc:a4:4e:a7:bd: 7f:60:f7:63:da:fa:75:48:d5:bf:84:e3:5b:ce:1c:6f:db:b7: be:b7:d8:66:50:11:40:6e:54:6b:42:ac:76:c9:28:40:64:c4: 1e:a3:c5:27:e3:70:3f:f3:12:5c:e0:89:22:6b:71:cf:e8:19: 57:f8:59:6f:78:96:4f:dd:03:3d:e5:d1:f6:c1:99:32:5a:40: 2a:83:e0:f6:02:8b:05:34:1b:15:ea:b3:95:f8:46:da:93:6d: 68:84:d3:b8:12:84:86:5f:da:52:10:59:5f:4d:f0:be:f7:75: 81:28:ff:9d:d4:0b:b4:b3:32:a7:8d:99:8a:91:59:e8:3c:47: 5c:2c:6e:26:26:d1:12:b7:42:0d:60:66:fa:ee:45:5a:d6:57: 3f:1d:a2:6c:c1:e5:ac:40:aa:0f:b2:d4:1d:2f:82:57:80:0b: 3c:ee:fe:41:75:44:b3:68:56:c4:a6:48:ab:40:29:a6:ae:71: 15:ba:c2:4c:33:6e:da:b1:21:15:f8:41:95:1d:86:d8:be:33: 04:c9:21:5e:50:8a:21:e9:72:64:fb:73:c5:7e:a9:e1:31:8b: c3:c8:5f:86:03:08:9d:1b:16:8a:cd:4e:b6:05:52:65:55:bf: 7a:a5:a1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ34A7oPv4Kas/xKgyJJ676UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwNTA1MTIwMTI2WhcNMjYwNTA2MTIwMTI2WjAzMTEwLwYDVQQD EygzYzIxYzQyYmMyNjRmMjFmYWYxZTc0NzE5MDc3OTEyMjM5Y2JjMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1KBbQ9kYp0NcR0dUhtQg1zyUHl0 UPTI0Hu0p6zbGImsizJybWEUyzvyBqfSgO4jRz7w9ByQHWBavpjstKc54/XFiHH/ 3k6CEkD3DCHQfbOvf6QFQl6vdvgDtk9pRIUv4ou74b8lOeFmOKEvfdZVdOjPHBCr M1wQnNKx8pCitPMoTcoGCIiH3x7VhOk6q3U5zV+XHKDc24vm9UyK/v/wUtIM5w54 nJmjZO4X7E/qqxI8AJL2mJMpsRDeWdM5jIj4WakUQMXOEqql2OdXvyODssmNr28T nZfFsYSicGDkJN4WuXTvwc6Pd0pDDTQ6Xr9uHq535VFle4gasMM31SJehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwhxCvCZPIfrx50cZB3kSI5y8E4MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSZ1UXzO GC4vJjuIjsykTqe9f2D3Y9r6dUjVv4TjW84cb9u3vrfYZlARQG5Ua0KsdskoQGTE HqPFJ+NwP/MSXOCJImtxz+gZV/hZb3iWT90DPeXR9sGZMlpAKoPg9gKLBTQbFeqz lfhG2pNtaITTuBKEhl/aUhBZX03wvvd1gSj/ndQLtLMyp42ZipFZ6DxHXCxuJibR ErdCDWBm+u5FWtZXPx2ibMHlrECqD7LUHS+CV4ALPO7+QXVEs2hWxKZIq0Appq5x FbrCTDNu2rEhFfhBlR2G2L4zBMkhXlCKIelyZPtzxX6p4TGLw8hfhgMInRsWis1O tgVSZVW/eqWhhA== -----END CERTIFICATE-----Generated at Tue May 5 20:11:14 2026 by rpki-client