$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: OJfG+BTr8nE/8jpLA3qlxwVyGofTt9nhqYIXeI4f1Pk= Subject key identifier: CC:1D:48:41:88:74:0D:72:06:F3:1A:75:C1:A4:F2:9E:17:5C:69:BB Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019E30722F4DD064B184EFBFCDB6A686BEE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1921 Signing time: Sat 16 May 2026 11:00:49 +0000 Manifest this update: Sat 16 May 2026 11:00:49 +0000 Manifest next update: Sun 17 May 2026 11:00:49 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: kSRi231dWKs7vGULtuBsZv0sWa1dTEsOzNSexpf5SkU=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:30:72:2f:4d:d0:64:b1:84:ef:bf:cd:b6:a6:86:be:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: May 16 11:00:49 2026 GMT Not After : May 17 11:00:49 2026 GMT Subject: CN=cc1d484188740d7206f31a75c1a4f29e175c69bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:0e:ec:b5:2c:d7:dd:9c:47:f4:a1:5a:50: 0d:d5:07:31:72:19:e4:b1:75:08:6b:ed:e5:f9:94: 35:af:1a:8f:4b:4b:a5:86:b9:92:ef:56:ab:55:53: 9d:ce:41:1d:6d:b2:98:9c:94:1c:9b:1a:83:b1:32: 4f:2c:17:9f:74:a8:0c:9c:08:c5:2e:42:62:c9:28: 1a:18:4a:86:c1:ce:c6:32:8b:d1:1f:02:9e:07:9a: b4:5c:62:6b:33:43:fe:dd:66:92:46:19:24:6f:dd: 2f:d5:d0:f3:cd:23:b9:3d:3f:77:aa:85:50:53:13: cc:a5:b4:70:e2:02:fa:f3:0b:4f:eb:ef:47:66:00: 78:31:73:41:3b:b2:a6:9a:d8:08:08:7e:2c:6c:1d: 94:e0:15:7f:00:f6:91:ca:db:ca:46:63:85:45:cf: 68:60:ea:02:17:80:c0:15:e3:e0:bb:bc:cd:da:1b: 90:f9:3e:98:51:3b:76:be:6f:53:57:c6:9a:83:40: 0b:e0:f4:b0:ed:06:64:5e:cd:1e:3e:a3:4a:30:ae: 42:85:f6:ac:61:ef:36:b3:d0:4c:fe:1b:95:d8:a0: 41:8e:78:ac:5b:41:97:3d:a8:54:ad:ac:33:fc:e4: 25:fb:0d:06:2f:63:f1:95:ba:ff:ec:41:6f:68:d7: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:48:41:88:74:0D:72:06:F3:1A:75:C1:A4:F2:9E:17:5C:69:BB X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6c:83:81:07:75:1a:8c:26:3f:15:16:ee:86:3e:78:4b:b4: ef:74:31:0e:53:0f:45:f5:25:3e:0c:ce:ff:1c:8f:88:f0:66: 12:42:29:d5:db:9c:bd:ff:d7:8b:79:3e:d1:79:b7:54:29:48: 48:0f:f0:41:6b:39:a6:53:93:23:e5:42:20:fd:00:be:f9:cd: 20:19:a8:de:e5:41:e4:5d:5b:1c:b6:d6:2b:14:d7:ba:ba:5a: d3:2c:c8:5d:26:20:41:d2:5c:48:16:33:df:24:eb:47:a0:bf: 1f:71:63:ae:4d:ba:ca:2f:7d:ee:79:3e:cb:58:7f:04:3a:f5: 62:c4:3c:47:02:b1:50:29:b4:95:7f:89:58:01:d2:5a:78:42: 90:57:8c:86:59:0c:b1:ed:a5:11:bf:8c:f9:66:3a:8e:d5:9d: 72:ad:ad:54:93:57:a1:c5:ee:41:87:7b:16:03:93:3e:ff:f5: 5f:20:44:88:f3:c7:e4:7b:b2:f8:65:e7:07:3f:93:e8:f5:ca: aa:67:bf:45:99:5d:7e:4a:66:65:e0:7b:17:fd:86:27:6d:9f: e5:2c:06:35:78:8c:c1:e7:e0:9d:12:2f:f2:cc:ad:31:3b:69: d6:df:6a:eb:09:e4:23:2a:21:65:78:1a:b3:0c:1c:1e:b2:3e: b6:5d:41:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4wci9N0GSxhO+/zbamhr7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNTE2MTEwMDQ5WhcNMjYwNTE3MTEwMDQ5WjAzMTEwLwYDVQQD EyhjYzFkNDg0MTg4NzQwZDcyMDZmMzFhNzVjMWE0ZjI5ZTE3NWM2OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoO7LUs192cR/ShWlAN1Qcxchnk sXUIa+3l+ZQ1rxqPS0ulhrmS71arVVOdzkEdbbKYnJQcmxqDsTJPLBefdKgMnAjF LkJiySgaGEqGwc7GMovRHwKeB5q0XGJrM0P+3WaSRhkkb90v1dDzzSO5PT93qoVQ UxPMpbRw4gL68wtP6+9HZgB4MXNBO7KmmtgICH4sbB2U4BV/APaRytvKRmOFRc9o YOoCF4DAFePgu7zN2huQ+T6YUTt2vm9TV8aag0AL4PSw7QZkXs0ePqNKMK5Chfas Ye82s9BM/huV2KBBjnisW0GXPahUrawz/OQl+w0GL2Pxlbr/7EFvaNfAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwdSEGIdA1yBvMadcGk8p4XXGm7MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmyDgQd1 GowmPxUW7oY+eEu073QxDlMPRfUlPgzO/xyPiPBmEkIp1ducvf/Xi3k+0Xm3VClI SA/wQWs5plOTI+VCIP0AvvnNIBmo3uVB5F1bHLbWKxTXurpa0yzIXSYgQdJcSBYz 3yTrR6C/H3Fjrk26yi997nk+y1h/BDr1YsQ8RwKxUCm0lX+JWAHSWnhCkFeMhlkM se2lEb+M+WY6jtWdcq2tVJNXocXuQYd7FgOTPv/1XyBEiPPH5Huy+GXnBz+T6PXK qme/RZldfkpmZeB7F/2GJ22f5SwGNXiMwefgnRIv8sytMTtp1t9q6wnkIyohZXga swwcHrI+tl1Byg== -----END CERTIFICATE-----Generated at Sat May 16 20:19:13 2026 by rpki-client