$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: 3es9w8evUhxiOeEDWJR2Zuh926XkHZ72zL3TAkMWfiU= Subject key identifier: BF:63:19:4E:A1:ED:68:FC:28:B5:35:EE:7C:24:64:08:7E:75:14:C1 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019E6C5067E1646666EC0018FA5A7832B9C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0DE4 Signing time: Thu 28 May 2026 02:01:09 +0000 Manifest this update: Thu 28 May 2026 02:01:09 +0000 Manifest next update: Fri 29 May 2026 02:01:09 +0000 Files and hashes: 1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=) 2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=) 3: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=) 4: 8lPw_ga_FoSSpmboRwfajYdx-go.roa (hash: JloEp5W3jYXSF6n1lKX3TTBhUm7QwMzhp+1X0sR8wMg=) 5: 9RXrdD1qJMf_8xNn3HnZaLopyak.roa (hash: KfZruuWMflD9yqrnDRJtXO3IL4kig+hFeQaQ1JiQO/w=) 6: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=) 7: M1q9NGALl_5zWyIsBUUB6ElwUw0.roa (hash: P6viUgEvhrKdeTf5i8KPv7U8+f6vJ2sUgXvC3nzTpOU=) 8: QzMyegFOkVY4VnXHpYFz61drfjg.roa (hash: mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=) 9: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=) 10: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=) 11: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=) 12: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=) 13: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=) 14: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=) 15: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: K6RNEt3ZZb75NNW5c2W4X1vpDm3Nt9cAHWTmlJbY3go=) 16: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 May 2026 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:6c:50:67:e1:64:66:66:ec:00:18:fa:5a:78:32:b9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: May 28 02:01:09 2026 GMT Not After : May 29 02:01:09 2026 GMT Subject: CN=bf63194ea1ed68fc28b535ee7c2464087e7514c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:96:a2:f7:c0:a5:dc:91:cd:6d:46:65:54: 60:14:dc:2f:50:da:18:9f:c3:6f:fa:eb:3e:d3:5b: d1:d2:4e:80:0e:76:5f:3e:4f:10:9f:99:e6:a7:63: 42:29:2a:2e:f6:90:82:cd:31:bc:66:76:af:4f:fc: 3e:69:d4:1d:42:2e:0d:ac:2e:f4:26:02:ed:04:a1: c3:de:d0:41:3b:1b:4c:ad:08:7a:46:8a:37:8c:29: 02:ce:03:68:db:7c:73:1d:e8:7f:6e:74:a8:c5:87: 6f:8e:d7:30:0a:af:28:98:83:0a:dd:ba:9c:cc:15: 31:8d:6f:b5:74:d3:41:b3:ba:ec:de:ff:3f:f1:4a: fa:07:7c:7f:0f:66:62:eb:7e:d9:81:05:8a:a8:85: 60:ee:36:01:9c:02:c8:e3:92:d5:82:0e:9c:1b:89: 12:b9:fc:e3:f0:e3:fc:b8:6d:bb:53:57:10:31:cc: 57:a5:55:73:86:2a:b5:ba:8c:3d:12:5f:96:c2:b9: a9:0d:d6:db:33:ff:ae:08:ad:f0:0a:8d:5c:b0:ce: a0:b6:da:83:5f:1a:e1:b2:a5:ca:16:ba:a8:8d:4c: b5:a9:cf:69:b6:f3:28:e1:0c:23:38:2d:a9:be:46: b8:c3:23:2f:ed:ec:09:09:9b:fe:f3:41:d7:aa:18: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:63:19:4E:A1:ED:68:FC:28:B5:35:EE:7C:24:64:08:7E:75:14:C1 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5f:67:4c:2b:da:2a:53:62:71:81:bf:fc:4e:a1:d8:f4:da: 6d:e9:be:a4:32:31:5f:08:6d:c2:d8:01:6e:0a:45:7c:0c:32: 5a:be:c9:29:ce:9d:4a:7f:e8:23:2a:03:5f:51:02:e7:64:ac: 9b:2f:7f:00:d8:07:b7:44:1f:fa:9c:89:ef:f3:88:d8:07:c4: af:65:fd:5b:42:00:45:a6:c1:17:37:fd:23:99:96:66:51:14: 3f:0d:92:1b:07:29:75:60:a0:53:74:d6:57:b2:74:00:4b:c2: 97:9a:73:fd:f9:f4:2e:62:4e:2b:af:91:22:d1:d5:83:5c:28: 41:f8:14:7c:7b:66:4d:8d:68:54:a8:9e:2f:66:10:5a:98:77: 25:d2:9f:6e:b8:a8:aa:30:b3:55:02:e9:8f:53:66:26:e0:23: 96:17:c2:0f:13:07:90:fa:b7:42:34:26:11:57:e4:82:38:fe: cf:1d:40:0f:47:4d:24:84:1d:f6:fe:2c:35:82:ef:97:ba:4b: 79:e3:23:a0:12:71:aa:18:fb:75:d4:f9:66:59:f6:0b:0c:22: 31:92:86:1a:de:8d:8b:35:0a:8e:70:df:97:0c:cb:01:c2:43: 13:96:27:fc:ba:d6:b6:53:dc:a3:6f:90:4c:8f:07:19:9b:1b: 0b:5f:dd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5sUGfhZGZm7AAY+lp4MrnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwNTI4MDIwMTA5WhcNMjYwNTI5MDIwMTA5WjAzMTEwLwYDVQQD EyhiZjYzMTk0ZWExZWQ2OGZjMjhiNTM1ZWU3YzI0NjQwODdlNzUxNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfmWovfApdyRzW1GZVRgFNwvUNoY n8Nv+us+01vR0k6ADnZfPk8Qn5nmp2NCKSou9pCCzTG8ZnavT/w+adQdQi4NrC70 JgLtBKHD3tBBOxtMrQh6Roo3jCkCzgNo23xzHeh/bnSoxYdvjtcwCq8omIMK3bqc zBUxjW+1dNNBs7rs3v8/8Ur6B3x/D2Zi637ZgQWKqIVg7jYBnALI45LVgg6cG4kS ufzj8OP8uG27U1cQMcxXpVVzhiq1uow9El+WwrmpDdbbM/+uCK3wCo1csM6gttqD XxrhsqXKFrqojUy1qc9ptvMo4QwjOC2pvka4wyMv7ewJCZv+80HXqhhPYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9jGU6h7Wj8KLU17nwkZAh+dRTBMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF9nTCva KlNicYG//E6h2PTabem+pDIxXwhtwtgBbgpFfAwyWr7JKc6dSn/oIyoDX1EC52Ss my9/ANgHt0Qf+pyJ7/OI2AfEr2X9W0IARabBFzf9I5mWZlEUPw2SGwcpdWCgU3TW V7J0AEvCl5pz/fn0LmJOK6+RItHVg1woQfgUfHtmTY1oVKieL2YQWph3JdKfbrio qjCzVQLpj1NmJuAjlhfCDxMHkPq3QjQmEVfkgjj+zx1AD0dNJIQd9v4sNYLvl7pL eeMjoBJxqhj7ddT5Zln2CwwiMZKGGt6NizUKjnDflwzLAcJDE5Yn/LrWtlPco2+Q TI8HGZsbC1/dNg== -----END CERTIFICATE-----Generated at Thu May 28 10:59:38 2026 by rpki-client