$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: n0+4kQdEQpCe1x/k8aja/uETkXLzwj9gpN4LxlydSUo= Subject key identifier: F0:41:0E:E5:53:2C:13:F3:C1:64:6E:37:B4:2A:D9:22:3C:B4:89:C3 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019DAED785AA0D184FD49307620BA12E49AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1813 Signing time: Tue 21 Apr 2026 07:00:53 +0000 Manifest this update: Tue 21 Apr 2026 07:00:53 +0000 Manifest next update: Wed 22 Apr 2026 07:00:53 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: PuwyZz4OSPaxQ803cjYFiqFTNWCm//nW0bp2EvH2i1o=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ae:d7:85:aa:0d:18:4f:d4:93:07:62:0b:a1:2e:49:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Apr 21 07:00:53 2026 GMT Not After : Apr 22 07:00:53 2026 GMT Subject: CN=f0410ee5532c13f3c1646e37b42ad9223cb489c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:a1:1e:58:b7:db:b9:45:93:57:db:09:6f: 1c:dc:83:15:bc:8e:90:44:00:3d:76:64:9d:5f:8a: 3e:95:33:88:8f:59:d5:05:a5:fb:5a:c8:b8:cc:f1: aa:e2:bb:9f:d5:4e:56:98:ec:84:20:2d:26:91:e2: 21:63:18:03:c8:64:2f:be:5d:71:9c:66:bf:23:c8: c9:0c:33:91:cc:8f:02:7e:6e:78:bb:ed:5f:12:29: dd:39:87:dc:85:a5:61:fe:c1:56:4e:a1:c9:70:2d: ce:f3:14:36:20:f7:88:82:87:bd:68:ec:d3:9e:c2: 2d:a2:57:15:cb:10:79:53:d5:42:78:8f:fc:a9:c5: 6e:ea:f9:a1:12:db:b5:be:74:b6:9a:6c:46:d0:3e: 5a:89:be:33:bb:eb:db:84:54:36:3e:80:9d:e4:e3: d4:85:08:5d:60:4c:ce:fa:10:e2:eb:dc:04:3a:69: b4:82:42:a5:17:6b:f9:e7:a4:ec:03:3b:8d:19:7e: 5c:f7:2f:3b:07:9e:52:ba:d3:5f:87:47:42:96:82: b0:90:3d:d9:d6:7b:ca:0d:45:b1:99:43:f5:36:d1: 5e:98:1f:f3:50:1c:14:21:a3:ef:06:1b:9b:c2:01: 1d:50:87:7f:83:df:37:aa:d9:25:3e:92:6f:8c:6c: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:0E:E5:53:2C:13:F3:C1:64:6E:37:B4:2A:D9:22:3C:B4:89:C3 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:46:ec:36:fd:81:a6:05:c0:a0:f4:63:de:a6:78:8b:12:99: f4:b9:84:b2:c9:00:02:2d:38:9a:95:a3:61:50:fa:54:6d:bd: 6c:9c:ad:7c:1e:9d:17:86:97:23:59:cf:26:13:55:2c:a7:82: 76:ea:38:66:d3:19:1c:55:e7:21:34:5f:8e:66:28:a1:40:cb: 5c:c7:65:56:fd:07:8f:d5:6c:36:37:90:e7:8b:2f:d4:8c:f8: 61:3a:e3:71:42:24:27:8c:ec:c0:a2:a6:2c:b3:b6:3a:f3:38: 21:d6:40:72:5f:65:cc:57:68:a4:f5:a4:b0:ff:92:09:c7:ea: b8:4c:0b:9c:36:35:73:92:08:c4:d9:23:81:bf:8e:83:44:dd: 77:35:cb:bf:d7:d1:56:15:4c:27:d2:89:37:cd:7e:16:84:bb: 9a:1b:37:73:f4:05:f8:52:92:51:65:b8:63:80:a5:70:00:27: 8b:56:31:60:05:9f:82:a6:da:7d:f2:66:e9:92:46:b5:b7:24: ed:d9:11:86:85:40:75:75:49:dc:c1:e7:a1:b2:f8:33:d4:9b: dd:bd:49:6b:3a:85:f9:a3:3d:60:e9:00:88:67:9e:b5:c0:6d: b4:1e:f3:90:9e:15:bf:c5:fe:fb:e1:8d:56:a9:41:75:cf:90: 45:e2:c4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2u14WqDRhP1JMHYguhLkmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNDIxMDcwMDUzWhcNMjYwNDIyMDcwMDUzWjAzMTEwLwYDVQQD EyhmMDQxMGVlNTUzMmMxM2YzYzE2NDZlMzdiNDJhZDkyMjNjYjQ4OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDKhHli327lFk1fbCW8c3IMVvI6Q RAA9dmSdX4o+lTOIj1nVBaX7Wsi4zPGq4ruf1U5WmOyEIC0mkeIhYxgDyGQvvl1x nGa/I8jJDDORzI8Cfm54u+1fEindOYfchaVh/sFWTqHJcC3O8xQ2IPeIgoe9aOzT nsItolcVyxB5U9VCeI/8qcVu6vmhEtu1vnS2mmxG0D5aib4zu+vbhFQ2PoCd5OPU hQhdYEzO+hDi69wEOmm0gkKlF2v556TsAzuNGX5c9y87B55SutNfh0dCloKwkD3Z 1nvKDUWxmUP1NtFemB/zUBwUIaPvBhubwgEdUId/g983qtklPpJvjGwqLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBBDuVTLBPzwWRuN7Qq2SI8tInDMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEbsNv2B pgXAoPRj3qZ4ixKZ9LmEsskAAi04mpWjYVD6VG29bJytfB6dF4aXI1nPJhNVLKeC duo4ZtMZHFXnITRfjmYooUDLXMdlVv0Hj9VsNjeQ54sv1Iz4YTrjcUIkJ4zswKKm LLO2OvM4IdZAcl9lzFdopPWksP+SCcfquEwLnDY1c5IIxNkjgb+Og0TddzXLv9fR VhVMJ9KJN81+FoS7mhs3c/QF+FKSUWW4Y4ClcAAni1YxYAWfgqbaffJm6ZJGtbck 7dkRhoVAdXVJ3MHnobL4M9Sb3b1JazqF+aM9YOkAiGeetcBttB7zkJ4Vv8X+++GN VqlBdc+QReLEJA== -----END CERTIFICATE-----Generated at Tue Apr 21 12:53:13 2026 by rpki-client