$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: Gb1tUqzZVZk+YXoWyKGbYlKl20tXphAVtBRQXxNOYvk= Subject key identifier: 9A:D1:22:0B:BE:DE:39:06:66:8E:A9:83:45:14:EE:2E:74:93:2F:27 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019DB05849A41738521906F4DAF419EF18D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 1982 Signing time: Tue 21 Apr 2026 14:01:09 +0000 Manifest this update: Tue 21 Apr 2026 14:01:09 +0000 Manifest next update: Wed 22 Apr 2026 14:01:09 +0000 Files and hashes: 1: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=) 2: 3v5keHAqK4zqhQB_uQznSph1Diw.roa (hash: jCOl+4ngxgebTeflrMMZ3kTPxa3cepM3MbMRipIrhQc=) 3: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=) 4: 5B318zH8NOu9OBi_TuoXg4_JM2k.roa (hash: KdWhEJLnniiRDILznsehxHC1zHSWP6KdhnB/WWL1Hi4=) 5: 6dJJQaLsf-pJV9GESFzivPI_ry0.roa (hash: m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=) 6: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=) 7: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=) 8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: mYPiJ9KZudU22tAeJjt/tCrnLxq8+4f1N4H5sfX/Fb8=) 9: J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa (hash: fA4gjnSI4d76aMPIiYbqAlxasjqqD9PxHceAqm4716Q=) 10: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=) 11: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=) 12: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=) 13: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=) 14: SR8e0zkhLcatb9iy_5fX_nOimTE.roa (hash: hKr65ed/gpKdtS3v1EI34oZI27mlo6VgRr8DWLDyqIw=) 15: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=) 16: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=) 17: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=) 18: ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa (hash: XutBjsWzeDRqYrHe3w88udQRKf0KrHbNkeI/S0YKKn0=) 19: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=) 20: dxo24NAWy8p1m5MAZSvGymiEUY4.roa (hash: 7VqVZBdxevM4HgdNCCGnVCUjB06a91AHxuxhr9+MQqM=) 21: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=) 22: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=) 23: mrh0y_ObvDXVw_6YS_au-VzRPaA.roa (hash: doqouYnXlAtVY/2YlaJMN33MBRnapyWoXbfp5rb59mU=) 24: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=) 25: qnaDNmI6tK-FvY7Aq-vEbf0-oB4.roa (hash: Uu05nD+8ej/npLjgYpEvLHYks47vcyXe3546Ga8/O7k=) 26: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=) 27: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=) 28: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=) 29: v1HTLFJCs5Ua6altnuNbzMS6M68.roa (hash: hP6DlGZ7oCEXWze3wji21g4MSy29EOBBfOBBgyLS7UE=) 30: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=) 31: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=) 32: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=) 33: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=) 34: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:58:49:a4:17:38:52:19:06:f4:da:f4:19:ef:18:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Apr 21 14:01:09 2026 GMT Not After : Apr 22 14:01:09 2026 GMT Subject: CN=9ad1220bbede3906668ea9834514ee2e74932f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:9c:1c:ec:86:65:7d:54:1f:cb:4b:c7:17: 0b:31:f9:8b:fb:8f:a1:4f:25:13:42:ac:a7:dc:26: 5d:7f:02:35:f7:a8:e7:16:66:3e:c5:85:ad:0c:96: 06:f1:7b:57:ee:55:af:9a:bb:f8:af:9d:dc:6c:d7: c0:5e:15:4b:85:51:02:f5:09:96:ec:5c:6f:a8:41: 8e:37:4a:30:28:51:77:77:d8:cf:4d:ab:8f:5c:2f: 5c:78:24:06:03:a0:67:24:0a:91:1b:0e:fd:65:6a: 21:65:31:dc:d8:89:ae:66:15:23:c8:d2:ce:ec:33: ef:c5:3f:a1:0a:13:d3:1e:fe:4b:b7:ff:38:89:57: 9e:e4:30:30:87:0f:c9:fc:f7:a4:2b:fa:ca:9b:85: 36:a8:1f:d6:e7:f3:23:6d:4d:71:14:73:47:3a:4c: bc:22:f9:f0:14:d5:dc:f2:05:4f:68:be:b8:03:92: c1:a1:9c:91:dc:d7:88:7f:8e:a8:f6:00:2e:b4:7e: 91:3b:b3:7c:1b:79:0c:05:ad:db:58:1c:83:fb:9d: e4:62:e8:3b:c8:0b:2c:42:d2:79:b1:41:ca:ca:f7: 91:d5:53:c3:08:d8:77:b1:99:09:d7:3c:59:a5:f5: 10:81:e5:8c:16:28:be:dc:83:d3:ad:fa:6c:74:9b: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D1:22:0B:BE:DE:39:06:66:8E:A9:83:45:14:EE:2E:74:93:2F:27 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:f0:39:72:29:02:dc:97:23:d1:67:c9:3a:65:99:58:68: e3:23:f4:ff:c2:14:60:f5:e3:81:42:89:aa:a9:aa:33:52:a4: c9:58:51:09:06:5c:42:7f:cd:6f:6c:06:9f:33:d7:a6:b4:68: bc:22:48:9a:98:82:f7:38:ed:5b:ed:ba:5c:1a:ca:e1:49:54: 91:90:ad:b4:19:53:f9:8a:b5:43:18:24:d9:b7:8e:2f:f9:04: fe:4c:a2:04:f7:c2:b9:98:41:ec:9c:6b:be:42:0e:0a:ef:36: 4a:7d:18:7f:b5:91:62:25:7a:59:51:0c:81:6a:87:01:fb:0f: 39:0d:d1:0e:c8:34:b4:3e:dd:f8:58:d0:da:f6:de:d3:e9:dc: b1:68:df:78:92:e8:ab:24:d7:30:db:73:1b:f2:2e:a9:41:a3: 20:14:40:df:65:87:93:36:7e:10:63:d3:50:fb:1c:00:1a:9c: d6:54:6c:82:3b:c0:3d:7c:dd:66:bf:66:cd:2b:34:2f:b5:d5: 8c:7a:5d:e1:37:fc:df:23:87:ee:e7:27:01:85:9d:57:a4:9e: 4b:3f:d1:4a:cd:56:3d:f2:b5:d7:75:0a:54:43:43:01:06:4b: 1b:4c:8a:3c:bb:90:5c:af:6c:cc:1b:5a:cf:2b:42:52:2c:90: 41:5f:98:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2wWEmkFzhSGQb02vQZ7xjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwNDIxMTQwMTA5WhcNMjYwNDIyMTQwMTA5WjAzMTEwLwYDVQQD Eyg5YWQxMjIwYmJlZGUzOTA2NjY4ZWE5ODM0NTE0ZWUyZTc0OTMyZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuGcHOyGZX1UH8tLxxcLMfmL+4+h TyUTQqyn3CZdfwI196jnFmY+xYWtDJYG8XtX7lWvmrv4r53cbNfAXhVLhVEC9QmW 7FxvqEGON0owKFF3d9jPTauPXC9ceCQGA6BnJAqRGw79ZWohZTHc2ImuZhUjyNLO 7DPvxT+hChPTHv5Lt/84iVee5DAwhw/J/PekK/rKm4U2qB/W5/MjbU1xFHNHOky8 IvnwFNXc8gVPaL64A5LBoZyR3NeIf46o9gAutH6RO7N8G3kMBa3bWByD+53kYug7 yAssQtJ5sUHKyveR1VPDCNh3sZkJ1zxZpfUQgeWMFii+3IPTrfpsdJu/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrRIgu+3jkGZo6pg0UU7i50ky8nMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANN7wOXIp AtyXI9FnyTplmVho4yP0/8IUYPXjgUKJqqmqM1KkyVhRCQZcQn/Nb2wGnzPXprRo vCJImpiC9zjtW+26XBrK4UlUkZCttBlT+Yq1Qxgk2beOL/kE/kyiBPfCuZhB7Jxr vkIOCu82Sn0Yf7WRYiV6WVEMgWqHAfsPOQ3RDsg0tD7d+FjQ2vbe0+ncsWjfeJLo qyTXMNtzG/IuqUGjIBRA32WHkzZ+EGPTUPscABqc1lRsgjvAPXzdZr9mzSs0L7XV jHpd4Tf83yOH7ucnAYWdV6SeSz/RSs1WPfK113UKVENDAQZLG0yKPLuQXK9szBta zytCUiyQQV+YYw== -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:31 2026 by rpki-client