$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: uBdMMkPdybmOS60PJVhqgfykHgcaHoHitrIrJbEtWSc= Subject key identifier: B4:7D:96:69:B9:91:2E:38:03:72:4E:A1:8A:98:33:60:F7:2F:C9:10 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019DCDF500728EF058F0ADAAB1112D8F7626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 0B97 Signing time: Mon 27 Apr 2026 08:01:18 +0000 Manifest this update: Mon 27 Apr 2026 08:01:18 +0000 Manifest next update: Tue 28 Apr 2026 08:01:18 +0000 Files and hashes: 1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=) 2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=) 3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=) 4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: 7qXtazGaUwjEn38BS19quBT0J8KbyX6y44uc9YlhOA0=) 6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=) 7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=) 8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=) 9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=) 10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=) 11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=) 12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=) 13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=) 14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f5:00:72:8e:f0:58:f0:ad:aa:b1:11:2d:8f:76:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Apr 27 08:01:18 2026 GMT Not After : Apr 28 08:01:18 2026 GMT Subject: CN=b47d9669b9912e3803724ea18a983360f72fc910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:95:2d:fe:1b:98:74:37:4f:41:03:06:d7: 7e:5e:9b:4b:72:25:98:c7:16:48:2b:a8:02:fd:fb: 78:77:66:91:83:c2:3c:c2:6c:88:21:58:f9:19:24: 1e:19:20:bd:37:69:50:56:4e:f1:a7:dc:ce:9e:6a: d6:de:b6:67:07:bf:33:5e:a4:c6:b6:77:a0:29:42: 52:18:a1:b0:fa:63:21:81:1c:c7:e4:5a:d8:3e:13: 93:ea:20:c7:ae:fa:8f:27:69:ed:16:20:70:95:32: 6d:15:44:3b:31:76:d9:f8:6f:0a:57:20:32:70:43: a9:ff:6f:ad:df:6b:8a:58:03:70:cd:be:d5:d6:c4: cc:d9:62:78:54:58:73:6b:ab:bf:da:10:2f:1f:75: a9:9c:ce:d8:20:62:3d:a5:59:fe:dd:86:9b:ad:92: e8:14:34:85:ee:20:c9:e1:92:63:99:d1:1f:b2:da: c9:1d:da:5c:0d:a6:53:73:ff:fb:95:ae:12:51:c4: da:28:96:b6:09:5b:a2:cd:4d:4d:6c:64:1d:8b:b9: 0e:2d:07:02:0a:24:3a:2f:66:3b:68:9c:36:cd:f1: ed:b3:9d:4a:7d:44:52:71:ae:ca:cd:5a:e4:d5:cf: 28:93:6a:b7:c5:3c:7c:4f:a3:16:a8:66:ca:03:20: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7D:96:69:B9:91:2E:38:03:72:4E:A1:8A:98:33:60:F7:2F:C9:10 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1b:d0:f1:86:cd:cf:c7:b2:19:d6:9b:3f:0a:c7:d5:a1:2d: 99:d9:e7:ce:78:a8:9e:00:a1:39:e9:af:10:f1:cf:71:d7:17: 36:39:c0:78:5b:d1:bb:75:be:47:c2:65:5f:81:27:29:c8:68: a7:e6:d8:d3:50:a4:02:c5:1f:bc:5e:6b:36:88:2d:b4:ac:0b: b5:c3:b2:08:4b:d9:d3:48:a2:a3:53:ed:bb:e4:23:fd:28:46: ee:be:42:79:af:f0:42:84:f1:66:5b:67:04:f1:87:6a:86:ef: da:c8:6b:ad:90:75:c3:d0:5a:87:54:39:e5:68:9c:74:b9:65: 58:77:c2:5c:83:06:c0:22:b4:7f:57:63:fd:a7:ba:4c:0b:c8: 30:34:99:dd:f7:80:06:3a:73:5a:36:61:76:ee:a1:ff:07:c1: 96:01:bf:e8:b4:69:11:f6:ae:4e:07:86:6c:82:31:56:a6:10: c7:4a:cb:92:2f:b1:5b:9c:78:d7:85:4d:a3:30:d1:d8:86:1d: 09:3c:ac:e2:3f:b4:12:2e:f8:b1:2e:39:32:27:e9:60:23:d5: 8e:b4:e8:2e:09:9d:01:68:98:3e:65:95:15:0d:cb:09:c4:dd: 3f:97:0c:f6:f6:40:6b:3b:40:06:cd:01:97:17:46:dc:59:cf: e0:e2:c1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9QByjvBY8K2qsREtj3YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwNDI3MDgwMTE4WhcNMjYwNDI4MDgwMTE4WjAzMTEwLwYDVQQD EyhiNDdkOTY2OWI5OTEyZTM4MDM3MjRlYTE4YTk4MzM2MGY3MmZjOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6OVLf4bmHQ3T0EDBtd+XptLciWY xxZIK6gC/ft4d2aRg8I8wmyIIVj5GSQeGSC9N2lQVk7xp9zOnmrW3rZnB78zXqTG tnegKUJSGKGw+mMhgRzH5FrYPhOT6iDHrvqPJ2ntFiBwlTJtFUQ7MXbZ+G8KVyAy cEOp/2+t32uKWANwzb7V1sTM2WJ4VFhza6u/2hAvH3WpnM7YIGI9pVn+3YabrZLo FDSF7iDJ4ZJjmdEfstrJHdpcDaZTc//7la4SUcTaKJa2CVuizU1NbGQdi7kOLQcC CiQ6L2Y7aJw2zfHts51KfURSca7KzVrk1c8ok2q3xTx8T6MWqGbKAyD0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR9lmm5kS44A3JOoYqYM2D3L8kQMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBvQ8YbN z8eyGdabPwrH1aEtmdnnzniongChOemvEPHPcdcXNjnAeFvRu3W+R8JlX4EnKcho p+bY01CkAsUfvF5rNogttKwLtcOyCEvZ00iio1Ptu+Qj/ShG7r5Cea/wQoTxZltn BPGHaobv2shrrZB1w9Bah1Q55WicdLllWHfCXIMGwCK0f1dj/ae6TAvIMDSZ3feA BjpzWjZhdu6h/wfBlgG/6LRpEfauTgeGbIIxVqYQx0rLki+xW5x414VNozDR2IYd CTys4j+0Ei74sS45MifpYCPVjrToLgmdAWiYPmWVFQ3LCcTdP5cM9vZAaztABs0B lxdG3FnP4OLBVA== -----END CERTIFICATE-----Generated at Mon Apr 27 12:38:57 2026 by rpki-client