$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: cTkJpefkq1vyY33WbCcgehWYFD3SB3+NthvLsiPFFiE= Subject key identifier: 16:92:53:85:D0:45:5E:C1:4B:4E:9F:95:B1:FC:DE:D4:C8:7E:0D:15 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019E96CC22CE67A09C73DE0DB14E86D04041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 188D Signing time: Fri 05 Jun 2026 08:00:21 +0000 Manifest this update: Fri 05 Jun 2026 08:00:21 +0000 Manifest next update: Sat 06 Jun 2026 08:00:21 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 3: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 4: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: S4fQra7FyBw6bk4R_f3Q2_hJKXI.roa (hash: RRFhdOKlXoVTT56pkyBH3PAGnDc0y17VQSEe9gDkJk4=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: DsM5eIbJhw1d6v4W89jEF4g6Hco7WSIkb06LJvvU2AI=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:96:cc:22:ce:67:a0:9c:73:de:0d:b1:4e:86:d0:40:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jun 5 08:00:21 2026 GMT Not After : Jun 6 08:00:21 2026 GMT Subject: CN=16925385d0455ec14b4e9f95b1fcded4c87e0d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:1b:0e:1d:21:79:01:80:45:2b:7e:3c:d3:b9: 65:95:4d:5a:14:7c:d5:79:35:78:c7:3d:be:d7:b8: 8a:4a:1c:90:60:b7:4f:f7:9e:17:87:54:5b:34:12: db:f8:74:db:4a:de:c8:2e:31:72:e6:65:7e:25:8f: 56:52:c5:3e:92:c2:ec:11:0a:0a:69:bb:a8:b2:bf: f0:4a:f0:5f:6e:d4:64:01:28:60:42:70:7a:69:61: 7a:b3:28:8e:a1:9f:1b:b6:d7:c3:7b:cd:c1:1c:c9: 38:ec:80:37:17:cc:f0:97:d2:fb:7b:de:19:0d:ba: 05:0a:77:74:3c:4a:5f:33:f5:89:2f:45:06:d3:1c: 7b:3f:48:39:ba:bd:9c:87:f1:ba:e6:67:71:99:ff: fa:8f:34:12:ff:22:b9:03:17:66:bf:84:89:a8:04: 56:0c:81:ae:c4:d8:29:70:c9:ee:fe:4b:c0:45:4c: 10:b3:25:4e:a9:8b:80:31:aa:77:37:ea:5e:43:27: c2:55:91:61:bb:5e:dc:a0:ba:e2:ce:2e:fe:d7:3f: 5e:2a:83:23:db:68:47:2f:4b:bc:58:75:54:64:71: a1:d8:10:8f:0a:00:14:09:76:51:af:50:ea:35:53: f6:0d:2c:4f:68:33:43:d9:b4:28:89:5c:ae:c4:2c: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:53:85:D0:45:5E:C1:4B:4E:9F:95:B1:FC:DE:D4:C8:7E:0D:15 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f7:d3:56:5f:c8:df:c0:97:4e:f6:64:9b:1a:4a:f4:09:7e: 68:d9:97:7f:58:6e:4b:ae:37:5f:13:38:b6:9c:bf:a9:bd:c8: 8c:ff:07:c5:61:1f:27:d8:a1:8d:de:63:38:74:08:88:df:07: 04:ca:f4:8d:35:df:b3:79:f1:0e:a1:b5:0e:5e:37:1a:2c:2b: 82:2d:29:63:6d:07:fc:1b:a7:bd:94:a3:82:92:ee:40:c7:c3: 1b:50:7a:e5:36:09:b7:24:b9:ee:a0:4a:77:22:78:1c:10:57: ec:c1:0a:cc:18:b6:57:41:5b:10:67:66:a7:19:1c:f2:08:38: d8:bb:e4:75:18:3b:b5:cf:ab:ed:ca:8b:10:61:1e:4b:54:db: 4e:dd:34:65:0b:94:24:f2:80:47:e2:f2:f5:61:19:e9:c4:d6: cd:cc:c2:14:b5:e7:83:ed:51:b5:fb:dd:55:c2:ed:c7:d6:9c: 67:f3:ad:cb:78:fd:7a:d9:a9:2f:d1:df:92:d4:54:98:3d:32: ad:0c:bb:59:69:e6:d1:94:19:6a:53:7e:1e:db:2d:bc:06:07: 78:5d:99:00:ef:5c:59:c3:c2:6d:b9:ca:7f:f1:90:9f:36:1d: a0:f4:00:0c:cd:d9:eb:59:b0:f8:ee:bd:ec:57:f7:6e:85:f8: 5f:03:43:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6WzCLOZ6Ccc94NsU6G0EBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNjA1MDgwMDIxWhcNMjYwNjA2MDgwMDIxWjAzMTEwLwYDVQQD EygxNjkyNTM4NWQwNDU1ZWMxNGI0ZTlmOTViMWZjZGVkNGM4N2UwZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/xsOHSF5AYBFK34807lllU1aFHzV eTV4xz2+17iKShyQYLdP954Xh1RbNBLb+HTbSt7ILjFy5mV+JY9WUsU+ksLsEQoK abuosr/wSvBfbtRkAShgQnB6aWF6syiOoZ8bttfDe83BHMk47IA3F8zwl9L7e94Z DboFCnd0PEpfM/WJL0UG0xx7P0g5ur2ch/G65mdxmf/6jzQS/yK5Axdmv4SJqARW DIGuxNgpcMnu/kvARUwQsyVOqYuAMap3N+peQyfCVZFhu17coLrizi7+1z9eKoMj 22hHL0u8WHVUZHGh2BCPCgAUCXZRr1DqNVP2DSxPaDND2bQoiVyuxCz7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaSU4XQRV7BS06flbH83tTIfg0VMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/fTVl/I 38CXTvZkmxpK9Al+aNmXf1huS643XxM4tpy/qb3IjP8HxWEfJ9ihjd5jOHQIiN8H BMr0jTXfs3nxDqG1Dl43Giwrgi0pY20H/BunvZSjgpLuQMfDG1B65TYJtyS57qBK dyJ4HBBX7MEKzBi2V0FbEGdmpxkc8gg42LvkdRg7tc+r7cqLEGEeS1TbTt00ZQuU JPKAR+Ly9WEZ6cTWzczCFLXng+1RtfvdVcLtx9acZ/Oty3j9etmpL9HfktRUmD0y rQy7WWnm0ZQZalN+HtstvAYHeF2ZAO9cWcPCbbnKf/GQnzYdoPQADM3Z61mw+O69 7Ff3boX4XwNDcA== -----END CERTIFICATE-----Generated at Fri Jun 5 15:16:01 2026 by rpki-client