$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: B9DLOS5mtMGc7eNEnjCQ1os/tTQv94g7sYAF0z9xzng= Subject key identifier: 5B:37:14:87:BD:7E:1C:5E:F2:5C:CF:72:88:EF:C4:F8:0D:79:DF:AF Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019DFF85FE7A328BC471C0ACAB27482915CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 0485 Signing time: Wed 06 May 2026 23:01:04 +0000 Manifest this update: Wed 06 May 2026 23:01:04 +0000 Manifest next update: Thu 07 May 2026 23:01:04 +0000 Files and hashes: 1: 0Oic1IcERTEb5DlaPzbn0th6N50.roa (hash: bDlBbgczPM559YYoDu7tlNakooG/ffcXd8tnjCuBkcE=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3p_wd6vJjZUyWJtHMCK8ESOv_AE.roa (hash: PxepYwEvTDnK7OgAV3Azq1CJ9rgZFmA7S3U2X7fVhUI=) 4: 4IdsjnThncy8CG7B4TEdC8OXYTg.roa (hash: qFz8bZzW9j+BuaK9Mq/+zPbN9lxrJMGuuYqn1jNVi7U=) 5: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=) 6: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 7: ITp4Lu_JhDqXqNns4N0BFezyH2s.roa (hash: u+ylQQKU2zMSBYliF/K/naeeubiOd3Oqig4YiCJdHxg=) 8: JmZyr_HiGWhXrQT4G35RdzY5FBo.roa (hash: 7gA8L5P9/nr9jLYxlFbsO9wNhD1sAVMuCpL277mztEA=) 9: PoQtev16fJQLT3dnRAKVV5qiNec.roa (hash: 9CBcAgTyt/fW+093wUg2FiWuZ3yNFJB3tFLfYn9rVOA=) 10: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 11: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=) 12: UiRIOFkRgvabFdVCAz-FrcovEjw.roa (hash: +1uBi+0I8q7iwlz/Y/VRhlkVw4+oWOkdSjW4jigeH+o=) 13: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 14: YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa (hash: zD4f/kaHp2DURR07uKQMW1jZdmkie967aQyuFRXFV34=) 15: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 16: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 17: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=) 18: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 19: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=) 20: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=) 21: pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa (hash: DDiufBot2z3oX+2RZxG2JEHDnkreGqKnf5XhZxIEUqQ=) 22: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 23: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=) 24: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (hash: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=) 25: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=) 26: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: tFMb93lKxMLwbz73D8SCWNSuH2R9nEu0afSZaseA4oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 21:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ff:85:fe:7a:32:8b:c4:71:c0:ac:ab:27:48:29:15:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: May 6 23:01:04 2026 GMT Not After : May 7 23:01:04 2026 GMT Subject: CN=5b371487bd7e1c5ef25ccf7288efc4f80d79dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:87:31:4a:eb:9d:53:1c:17:7a:5a:35:2c: 20:05:0b:17:9b:42:33:8e:95:91:38:95:10:5e:7d: 4a:b0:e8:45:ca:ba:d3:5d:88:9f:65:30:e0:b9:7a: 22:b2:44:31:8b:64:42:09:c2:70:8a:f8:1f:8c:da: a7:6e:7b:93:f7:6c:7f:29:aa:c3:ba:0e:b2:be:d1: c6:22:d6:b6:77:28:75:ab:23:f4:ef:ed:c5:99:7f: 40:56:4e:48:23:86:6e:19:91:97:3e:ea:ad:95:31: 3e:87:68:15:02:53:1a:7b:09:24:40:ad:e7:72:fe: 04:85:56:42:52:d9:db:80:d5:1a:48:34:d5:9e:b0: 50:3e:ab:ac:47:3b:32:1c:00:d8:91:92:1e:1a:df: ea:50:28:f0:bf:29:61:fa:0c:71:ef:25:2e:fd:36: fb:6d:a4:7b:8f:8b:e5:23:f0:d4:82:32:d4:cb:db: 3a:d4:a0:cc:a1:d0:e6:72:a2:f0:51:82:eb:a5:08: 62:13:b0:19:a1:a9:7e:28:38:b9:93:da:45:7e:0f: cd:8d:d4:41:47:cc:9e:ed:cb:eb:01:47:31:e6:89: 7d:d2:0d:09:b6:ba:e7:8e:7d:22:c4:33:30:c5:1a: 3e:9f:d4:4e:e9:7a:8a:40:61:3c:79:fe:93:e3:a3: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:14:87:BD:7E:1C:5E:F2:5C:CF:72:88:EF:C4:F8:0D:79:DF:AF X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7d:44:a2:2d:e9:56:f6:09:2e:85:b7:35:5f:e9:cd:1d:35: 62:c2:ad:7a:99:85:b4:64:18:03:c3:de:dc:78:ce:6b:bc:91: 54:fa:14:a2:e8:08:a9:dd:f9:4f:4f:1c:61:4b:2c:31:b1:af: 26:fe:bd:61:d8:fe:07:d7:b6:18:56:a4:fa:74:25:c2:3f:cc: df:5c:94:e6:d5:f7:6d:7b:f7:c8:c6:5e:2a:c2:d4:40:d4:8b: fd:d8:11:54:aa:aa:2d:93:11:b4:92:35:26:8d:88:65:70:9f: 32:d4:5b:7e:5d:28:21:eb:4d:fc:41:89:ce:c9:c7:f1:b5:b3: 00:df:de:30:eb:26:a4:79:91:84:2b:36:d8:20:5a:be:5d:5c: d7:49:e2:04:bd:e5:13:dc:08:a1:a2:57:02:e8:07:6c:6b:6f: a6:44:14:cd:28:ef:ab:10:d5:7e:40:96:c0:6a:4b:61:a0:bc: 82:23:71:44:33:9e:fe:1d:79:1f:b0:76:0d:34:60:2b:ca:09: c4:e3:2c:94:1b:d8:ab:d8:4c:fe:da:a6:0a:ff:d6:56:da:a0: 99:bd:29:1c:18:49:f4:3d:1b:28:98:48:08:72:02:37:10:79: 21:c7:4f:22:fb:86:a2:b8:cd:44:40:c1:29:82:7d:95:83:48: 95:55:6f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3/hf56MovEccCsqydIKRXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwNTA2MjMwMTA0WhcNMjYwNTA3MjMwMTA0WjAzMTEwLwYDVQQD Eyg1YjM3MTQ4N2JkN2UxYzVlZjI1Y2NmNzI4OGVmYzRmODBkNzlkZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYSHMUrrnVMcF3paNSwgBQsXm0Iz jpWROJUQXn1KsOhFyrrTXYifZTDguXoiskQxi2RCCcJwivgfjNqnbnuT92x/KarD ug6yvtHGIta2dyh1qyP07+3FmX9AVk5II4ZuGZGXPuqtlTE+h2gVAlMaewkkQK3n cv4EhVZCUtnbgNUaSDTVnrBQPqusRzsyHADYkZIeGt/qUCjwvylh+gxx7yUu/Tb7 baR7j4vlI/DUgjLUy9s61KDModDmcqLwUYLrpQhiE7AZoal+KDi5k9pFfg/NjdRB R8ye7cvrAUcx5ol90g0Jtrrnjn0ixDMwxRo+n9RO6XqKQGE8ef6T46MpQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs3FIe9fhxe8lzPcojvxPgNed+vMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcn1Eoi3p VvYJLoW3NV/pzR01YsKtepmFtGQYA8Pe3HjOa7yRVPoUougIqd35T08cYUssMbGv Jv69Ydj+B9e2GFak+nQlwj/M31yU5tX3bXv3yMZeKsLUQNSL/dgRVKqqLZMRtJI1 Jo2IZXCfMtRbfl0oIetN/EGJzsnH8bWzAN/eMOsmpHmRhCs22CBavl1c10niBL3l E9wIoaJXAugHbGtvpkQUzSjvqxDVfkCWwGpLYaC8giNxRDOe/h15H7B2DTRgK8oJ xOMslBvYq9hM/tqmCv/WVtqgmb0pHBhJ9D0bKJhICHICNxB5IcdPIvuGorjNREDB KYJ9lYNIlVVvuA== -----END CERTIFICATE-----Generated at Thu May 7 03:56:46 2026 by rpki-client