$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: LxgLR/jtl4jW5jEp56y56NeRLvAyfgjm90oJ/sFGg18= Subject key identifier: 03:F9:DD:7E:4C:3E:A5:FE:38:ED:DA:5F:2A:44:73:6A:3B:AB:6A:4B Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 019E5C6F9949E1023A06109F0299A0CEA028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: A1 Signing time: Mon 25 May 2026 00:01:17 +0000 Manifest this update: Mon 25 May 2026 00:01:17 +0000 Manifest next update: Tue 26 May 2026 00:01:17 +0000 Files and hashes: 1: 4inhnc0WsBAw97-SeDoXHxYvgdc.roa (hash: /iM51VLg7HJ8ztk87Lm4bDvMywJ+LPB7Mld35hoQjWE=) 2: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 3: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (hash: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=) 4: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 5: Z5PF9klylgspdllB9sJrDtynvwU.roa (hash: qTqz8G8jL0tEsCWYC2s7WecelJJAJA5ykXR74GyOU4Q=) 6: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=) 7: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 8: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: TBFDWDA5N7sXGIDphURHPE3E2p3oNexwCR7rz3qOez0=) 9: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=) 10: vAyvqClj_fNj-JPGw0WVFpTXnec.roa (hash: zcYIEoZwOnalFjsK7SRCcbtULguKAUh8BvgH8JPZTCc=) 11: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:5c:6f:99:49:e1:02:3a:06:10:9f:02:99:a0:ce:a0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: May 25 00:01:17 2026 GMT Not After : May 26 00:01:17 2026 GMT Subject: CN=03f9dd7e4c3ea5fe38edda5f2a44736a3bab6a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:c6:38:73:fa:8e:7a:e0:66:2a:0a:79:9f: d1:1f:f4:db:08:35:37:9c:64:06:8e:b9:6c:38:17: 4d:e1:ed:4f:d7:d0:2f:7a:ca:c4:d1:5e:8d:5b:a9: 5b:d8:cf:ec:f3:bc:28:7a:e0:87:9c:6b:e2:e1:e9: 93:10:03:8e:55:84:3d:79:4f:74:b2:e5:04:5d:cd: 16:9e:03:01:1d:4b:76:dc:85:75:91:09:14:7d:4d: 18:10:d4:ea:98:1f:8c:15:11:0a:43:02:28:a3:60: f5:17:8b:e0:7f:1c:1c:e1:bb:a4:68:7e:81:9f:fe: 25:ac:f7:72:4f:41:28:77:74:b0:c1:54:d7:79:1b: c8:6b:e7:60:f7:40:37:f1:2a:d2:2a:90:70:f7:d1: 38:49:7d:20:9d:06:f1:1a:22:d5:e0:d9:96:7b:3f: ab:cf:bf:27:4a:15:9b:4f:cb:40:79:56:cb:40:1e: 57:0a:aa:33:96:7a:ad:36:55:e0:6c:25:26:bb:7c: 41:b8:7a:ff:f8:a9:19:8f:7f:b6:39:a1:dc:59:b9: 02:c6:d2:fc:cf:ab:d6:68:6b:f3:71:31:92:1c:88: 75:7b:44:01:48:2e:61:ed:5c:95:4e:07:0a:ab:57: 4e:9f:9a:6e:12:e4:f8:bf:55:9c:90:a5:71:69:4a: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F9:DD:7E:4C:3E:A5:FE:38:ED:DA:5F:2A:44:73:6A:3B:AB:6A:4B X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:11:ca:06:2f:7d:57:0e:0c:a5:3a:4d:ad:f0:a2:10:fa: 07:9b:cf:98:c6:8a:b8:01:e3:e3:08:e6:56:94:45:e5:3d:fb: 1e:3a:50:6d:65:7d:c9:eb:24:90:71:b1:6b:3e:ad:cf:1f:9f: 88:0a:07:b7:0b:b8:c7:d1:5b:70:92:99:1a:45:28:fa:9d:d4: 0c:91:e6:e4:f3:cd:55:61:50:ea:d4:9e:34:a5:e8:3f:ea:1a: e3:84:87:70:99:2c:f2:23:17:87:16:e8:29:51:84:bd:4c:8b: 13:8c:3d:40:45:a5:7d:37:1a:a1:bc:65:90:f7:47:81:26:b3: 4c:63:14:f0:8c:61:46:4e:a5:06:c2:9b:56:59:f2:ff:58:c4: 28:68:a7:3d:a1:93:3f:c7:19:87:f5:57:01:0f:cf:c3:54:cb: 3e:20:02:7d:cd:ce:d3:4f:ef:f9:55:87:4b:61:5f:37:53:85: 91:cb:1f:3f:13:84:5b:1a:ef:f1:d0:59:39:12:da:84:ec:0e: 90:cf:ea:0b:22:44:bc:99:81:ce:92:c7:40:12:c6:25:14:f5: 37:ec:92:43:7f:60:00:1f:ff:35:53:76:f8:d9:46:00:5a:f2: 79:b4:c9:7c:38:87:0e:12:fc:54:03:de:86:7d:cc:9f:f1:21: a7:98:ee:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5cb5lJ4QI6BhCfApmgzqAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwNTI1MDAwMTE3WhcNMjYwNTI2MDAwMTE3WjAzMTEwLwYDVQQD EygwM2Y5ZGQ3ZTRjM2VhNWZlMzhlZGRhNWYyYTQ0NzM2YTNiYWI2YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNnGOHP6jnrgZioKeZ/RH/TbCDU3 nGQGjrlsOBdN4e1P19AvesrE0V6NW6lb2M/s87woeuCHnGvi4emTEAOOVYQ9eU90 suUEXc0WngMBHUt23IV1kQkUfU0YENTqmB+MFREKQwIoo2D1F4vgfxwc4bukaH6B n/4lrPdyT0Eod3SwwVTXeRvIa+dg90A38SrSKpBw99E4SX0gnQbxGiLV4NmWez+r z78nShWbT8tAeVbLQB5XCqozlnqtNlXgbCUmu3xBuHr/+KkZj3+2OaHcWbkCxtL8 z6vWaGvzcTGSHIh1e0QBSC5h7VyVTgcKq1dOn5puEuT4v1WckKVxaUqJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP53X5MPqX+OO3aXypEc2o7q2pLMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanERygYv fVcODKU6Ta3wohD6B5vPmMaKuAHj4wjmVpRF5T37HjpQbWV9yeskkHGxaz6tzx+f iAoHtwu4x9FbcJKZGkUo+p3UDJHm5PPNVWFQ6tSeNKXoP+oa44SHcJks8iMXhxbo KVGEvUyLE4w9QEWlfTcaobxlkPdHgSazTGMU8IxhRk6lBsKbVlny/1jEKGinPaGT P8cZh/VXAQ/Pw1TLPiACfc3O00/v+VWHS2FfN1OFkcsfPxOEWxrv8dBZORLahOwO kM/qCyJEvJmBzpLHQBLGJRT1N+ySQ39gAB//NVN2+NlGAFryebTJfDiHDhL8VAPe hn3Mn/Ehp5juDA== -----END CERTIFICATE-----Generated at Mon May 25 07:19:15 2026 by rpki-client