$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: HFeA5VYUe66v14A6GK5+DqsNwvODSpro3uj1jiztML8= Subject key identifier: D3:39:AB:57:6C:DC:FA:AE:66:04:F2:E7:04:D7:DA:2A:19:E2:98:E4 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019DCD4FC746003B05C7FD9D9338CBB37BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 1734 Signing time: Mon 27 Apr 2026 05:00:50 +0000 Manifest this update: Mon 27 Apr 2026 05:00:50 +0000 Manifest next update: Tue 28 Apr 2026 05:00:50 +0000 Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 7: 7IDWuY26T4UCJ4M5vwbNefIa4Ds.roa (hash: 2aXs1iZiP1C/zRertFgP1ov5IhcFnyEWbQzgQUvTZx0=) 8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: uC1hyFPpYXWZspwK6X+QMSPGqDbIrROzbRXhLq+agYw=) 11: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 12: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 13: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 14: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=) 15: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=) 16: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 17: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 18: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 19: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 20: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 21: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=) 22: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=) 23: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=) 24: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 25: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 26: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 27: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 28: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 29: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 30: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 31: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 32: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=) 33: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:4f:c7:46:00:3b:05:c7:fd:9d:93:38:cb:b3:7b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Apr 27 05:00:50 2026 GMT Not After : Apr 28 05:00:50 2026 GMT Subject: CN=d339ab576cdcfaae6604f2e704d7da2a19e298e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:78:09:db:45:96:30:9e:24:e2:6e:78:85: 85:0a:6c:37:1a:f4:55:a9:ad:a2:e0:9c:89:2d:68: 7e:98:d4:fd:30:7e:b1:3f:ab:aa:5f:c4:31:97:16: 65:d8:b4:a0:01:8e:a2:18:02:a1:9d:46:05:c4:8d: e9:f7:18:9f:3d:b8:2e:3f:81:72:5e:a5:4e:9b:53: 23:48:6a:b1:9e:2f:2d:e4:12:78:7e:33:ce:50:07: 83:9f:c0:87:7c:a1:8a:dc:69:9d:9c:4b:ab:f4:c3: bf:0c:90:a7:39:8b:cb:a1:ee:5f:10:d6:8c:9d:fc: 5e:ce:eb:f5:61:e1:82:25:7f:ff:31:e0:14:45:95: 6a:50:cd:86:b1:71:3b:b2:d9:be:e4:fa:0c:c9:ee: d8:70:03:01:cf:6f:55:b0:78:1d:a7:76:85:c9:14: 95:a3:c8:22:e7:2f:b1:23:38:ef:c6:2d:d4:ea:1f: f8:a4:c3:2a:1e:56:a6:65:66:b1:79:28:d6:72:ef: ba:60:0f:8d:d5:c0:7e:aa:45:38:14:f1:24:21:b9: 7d:3c:c9:64:0f:ad:f5:05:4d:e7:bb:a6:a8:20:2f: e4:62:17:34:f7:71:51:b2:68:cb:5e:d1:d9:b7:be: 3a:2f:e6:3f:1b:9b:f1:a8:7f:18:ae:e6:86:ec:fb: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:39:AB:57:6C:DC:FA:AE:66:04:F2:E7:04:D7:DA:2A:19:E2:98:E4 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d3:df:4a:27:48:9b:72:c8:f9:ee:80:44:8f:b4:03:c4:b5: b0:56:52:1c:f1:06:ed:e7:39:a3:4c:d6:3b:0a:0e:b1:30:8e: 3c:c7:5a:3b:3e:04:b5:39:e3:75:f9:fd:8f:7a:e5:57:d0:7a: 31:2a:50:4e:db:4b:00:c7:a7:6a:ed:17:fa:b4:79:ef:10:f9: 5f:de:9f:51:e7:4a:80:1e:44:08:e2:3a:de:e1:93:32:0d:a4: f7:17:59:70:7d:de:76:bc:6d:55:91:9c:4e:67:1b:a9:a5:1c: fc:62:b4:6b:96:5e:97:e5:73:b9:2f:7c:14:6b:cb:fa:51:31: 74:ef:b2:63:07:93:67:31:49:49:5f:81:a6:38:9e:f6:cc:47: 9b:f1:dd:c2:8e:83:46:8a:8b:31:6f:1e:66:61:b4:df:99:da: 7d:ba:fd:1d:e6:79:2f:e8:da:f1:01:0d:f7:ad:b7:ec:a7:69: 40:70:f8:7e:c7:5c:6e:15:cd:0f:d3:a0:d5:33:1e:72:e7:f8: 16:12:48:81:f9:fd:9f:1f:8a:65:a6:75:03:6c:af:d8:01:9a: 9a:93:14:ff:dd:5f:be:b9:73:28:ea:03:0f:5e:c0:36:e6:aa: 95:28:e3:1c:43:a3:49:42:69:a7:64:8e:a8:f3:c9:e7:75:dd: 2d:4c:18:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NT8dGADsFx/2dkzjLs3vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwNDI3MDUwMDUwWhcNMjYwNDI4MDUwMDUwWjAzMTEwLwYDVQQD EyhkMzM5YWI1NzZjZGNmYWFlNjYwNGYyZTcwNGQ3ZGEyYTE5ZTI5OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOh4CdtFljCeJOJueIWFCmw3GvRV qa2i4JyJLWh+mNT9MH6xP6uqX8QxlxZl2LSgAY6iGAKhnUYFxI3p9xifPbguP4Fy XqVOm1MjSGqxni8t5BJ4fjPOUAeDn8CHfKGK3GmdnEur9MO/DJCnOYvLoe5fENaM nfxezuv1YeGCJX//MeAURZVqUM2GsXE7stm+5PoMye7YcAMBz29VsHgdp3aFyRSV o8gi5y+xIzjvxi3U6h/4pMMqHlamZWaxeSjWcu+6YA+N1cB+qkU4FPEkIbl9PMlk D631BU3nu6aoIC/kYhc093FRsmjLXtHZt746L+Y/G5vxqH8YruaG7PvWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM5q1ds3PquZgTy5wTX2ioZ4pjkMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtPfSidI m3LI+e6ARI+0A8S1sFZSHPEG7ec5o0zWOwoOsTCOPMdaOz4EtTnjdfn9j3rlV9B6 MSpQTttLAMenau0X+rR57xD5X96fUedKgB5ECOI63uGTMg2k9xdZcH3edrxtVZGc TmcbqaUc/GK0a5Zel+VzuS98FGvL+lExdO+yYweTZzFJSV+Bpjie9sxHm/Hdwo6D RoqLMW8eZmG035nafbr9HeZ5L+ja8QEN96237KdpQHD4fsdcbhXND9Og1TMecuf4 FhJIgfn9nx+KZaZ1A2yv2AGampMU/91fvrlzKOoDD17ANuaqlSjjHEOjSUJpp2SO qPPJ53XdLUwY/g== -----END CERTIFICATE-----Generated at Mon Apr 27 13:56:41 2026 by rpki-client