$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: oyZO0+IDUGXr+H++8xkuohN/cEk9rmHBSL33h7a4FJc= Subject key identifier: 89:52:2A:6F:F7:F4:30:AE:70:7B:2E:FF:20:5C:41:09:EA:1F:41:6A Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019DE70FC5F15823C3860054D80E4CB7BFA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1904 Signing time: Sat 02 May 2026 05:01:03 +0000 Manifest this update: Sat 02 May 2026 05:01:03 +0000 Manifest next update: Sun 03 May 2026 05:01:03 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: WcMGVxhQNpo72w23XNC2xPPP9LDvZozs1IzOkpSWcrk=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 7: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 8: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 9: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 10: nE6wYHgGBuxz8FTwXNUK5B9PjQQ.roa (hash: lXZsBeZay6RXKXdRBv9xz0vCpEN1NRS9ZSpZrVGkY/o=) 11: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 12: smaQDy2hYnYh5iSHViMMRnAnJh0.roa (hash: zO3TyrLnjBrXJ0HHHzjE+BxHwelGsPuK4Lo5/ikK+P4=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 03 May 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e7:0f:c5:f1:58:23:c3:86:00:54:d8:0e:4c:b7:bf:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: May 2 05:01:03 2026 GMT Not After : May 3 05:01:03 2026 GMT Subject: CN=89522a6ff7f430ae707b2eff205c4109ea1f416a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:ba:77:b0:68:8b:ef:9c:39:50:20:9a:04: 25:1a:79:d9:4a:ad:68:e5:d6:a5:5f:b9:7b:52:ff: 92:f5:db:76:18:e5:34:68:4a:35:ef:07:6d:c5:2f: ac:38:74:fd:c2:7d:ec:cf:a8:be:51:d8:f6:11:da: 5e:d5:83:49:f9:9e:9f:22:f8:f9:71:34:ec:de:d2: b6:16:84:b0:b3:63:80:41:65:47:47:48:6c:25:02: 0d:6e:28:09:08:2b:b4:75:04:68:b2:1c:4b:cb:74: 70:a6:97:f2:f7:6c:e0:51:13:92:c9:36:35:5b:6a: a2:e8:66:2e:41:76:f6:06:7e:2d:11:01:39:8a:21: 4a:8a:00:77:4b:8c:09:a5:9b:41:29:62:a4:00:a9: 43:b0:8e:08:6d:19:02:c7:c2:0b:e0:a5:c0:7a:83: a0:41:2c:ba:4b:a0:ba:b2:09:a3:b7:1e:33:e2:eb: a6:cc:8c:cb:4c:7c:f8:60:1c:69:b8:15:f0:17:ec: 86:46:bd:ec:54:8b:d1:50:3e:f4:75:15:e9:2a:fa: a9:6b:08:e8:8c:d5:20:d2:37:b5:4f:9d:1d:81:1f: c4:9e:c8:52:c6:d1:41:88:6b:06:29:e8:36:cd:92: a2:20:dc:89:fb:c3:61:91:85:a3:27:44:76:e9:e5: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:2A:6F:F7:F4:30:AE:70:7B:2E:FF:20:5C:41:09:EA:1F:41:6A X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:48:68:22:13:cd:a0:dd:5d:00:33:5c:15:4e:03:94:5e:4f: 54:5d:06:73:42:7e:ca:e3:30:91:76:a7:74:a0:8d:d2:90:09: 78:15:68:40:33:ac:57:1e:c3:d4:b3:63:64:01:16:bc:e4:bc: 54:c0:0a:ce:c1:26:0b:7f:c9:02:c7:fb:dd:f1:7b:f9:89:76: 4d:1f:cb:e6:3a:53:66:f0:cf:ee:be:f1:8f:a4:ce:b5:b1:27: 94:f9:53:a6:64:3c:d9:71:81:e4:56:87:fa:cb:ec:56:cd:08: eb:4f:10:70:e7:fa:8d:8f:d5:8a:fc:54:8e:5b:9d:81:f6:3a: e9:be:d1:42:2b:fc:16:45:5f:28:79:f2:86:d2:7d:f1:7d:00: 46:66:ae:0f:2c:4a:a3:38:e8:65:16:4d:c9:8c:f4:65:fe:0e: 98:ff:2d:63:b1:c3:9f:79:36:68:62:8e:1c:20:fd:ea:cf:d9: f0:21:a2:36:10:04:d7:f0:95:a2:b2:43:09:52:89:63:2a:cb: 2e:03:19:a9:8e:b0:ed:d9:08:1f:34:55:2a:c2:78:ef:85:8d: 57:c7:db:69:0d:bf:95:79:20:60:eb:00:96:c1:d8:c0:76:98: ca:8e:fb:c5:dd:d3:ef:6d:fd:90:d2:e3:31:65:0e:b4:6f:2c: 31:37:1b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3nD8XxWCPDhgBU2A5Mt7+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwNTAyMDUwMTAzWhcNMjYwNTAzMDUwMTAzWjAzMTEwLwYDVQQD Eyg4OTUyMmE2ZmY3ZjQzMGFlNzA3YjJlZmYyMDVjNDEwOWVhMWY0MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbS6d7Boi++cOVAgmgQlGnnZSq1o 5dalX7l7Uv+S9dt2GOU0aEo17wdtxS+sOHT9wn3sz6i+Udj2Edpe1YNJ+Z6fIvj5 cTTs3tK2FoSws2OAQWVHR0hsJQINbigJCCu0dQRoshxLy3Rwppfy92zgUROSyTY1 W2qi6GYuQXb2Bn4tEQE5iiFKigB3S4wJpZtBKWKkAKlDsI4IbRkCx8IL4KXAeoOg QSy6S6C6sgmjtx4z4uumzIzLTHz4YBxpuBXwF+yGRr3sVIvRUD70dRXpKvqpawjo jNUg0je1T50dgR/EnshSxtFBiGsGKeg2zZKiINyJ+8NhkYWjJ0R26eUTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlSKm/39DCucHsu/yBcQQnqH0FqMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1UhoIhPN oN1dADNcFU4DlF5PVF0Gc0J+yuMwkXandKCN0pAJeBVoQDOsVx7D1LNjZAEWvOS8 VMAKzsEmC3/JAsf73fF7+Yl2TR/L5jpTZvDP7r7xj6TOtbEnlPlTpmQ82XGB5FaH +svsVs0I608QcOf6jY/VivxUjludgfY66b7RQiv8FkVfKHnyhtJ98X0ARmauDyxK ozjoZRZNyYz0Zf4OmP8tY7HDn3k2aGKOHCD96s/Z8CGiNhAE1/CVorJDCVKJYyrL LgMZqY6w7dkIHzRVKsJ474WNV8fbaQ2/lXkgYOsAlsHYwHaYyo77xd3T7239kNLj MWUOtG8sMTcbvg== -----END CERTIFICATE-----Generated at Sat May 2 13:48:53 2026 by rpki-client