$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json) Hash identifier: yOlTVH1qjpewaHx0GE7pfiBvXsj0jeh6ynDRbF4EKe0= Subject key identifier: 32:5B:DF:54:2B:E0:72:54:01:B7:EE:A9:77:1C:D0:36:96:EA:0C:8E Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019DAFEA975AF6A9951B173FF2066CDB9B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft Manifest number: 18F3 Signing time: Tue 21 Apr 2026 12:01:20 +0000 Manifest this update: Tue 21 Apr 2026 12:01:20 +0000 Manifest next update: Wed 22 Apr 2026 12:01:20 +0000 Files and hashes: 1: 1-ezGqblYU88DYGupfRZt0z0P-c.roa (hash: 3e97e1j/lafVJd2urvOUlhx4dA8czMnXPXhILFMWj/s=) 2: 1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa (hash: wdi4t6P4z0mO/iHG5igvsESlCtes6srIYLzkoTbEPEk=) 3: 35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa (hash: cO/Z6F7txV6TpV/V5lfE+W3QYDMUy+GuCUzsuf9Drjg=) 4: 3qqdfy_UnFdVQlDpIxR1zw9DOmI.roa (hash: JXo5pmi2bOioFRZlNCJNAYMl2NAvXPqzIcF0g4BSru0=) 5: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: vWaWOIoU1kk7xHLkaEqLaX1wzWswHcdxlFcctin435g=) 6: 6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa (hash: ES2CFvY9/aMMP3GdeYDhO1AlVTq0AbKmFVcT86x0bsU=) 7: AP29ZUhTpSq5v5F29RLmfRluGGg.roa (hash: Srhc1Pf/7fMSsd5MEwDg1pq9CSvUw5bMKTeun0cG0k0=) 8: BR6ncsWkhB2qv0oqp59JLRJ22t8.roa (hash: Sr6aWOFkIZvhFz7mwZ8Ee2XNqfnohzUvlNMsgOtw6Iw=) 9: JEMgZMqCppytL-XPExNRul1VH3s.roa (hash: dzjcBpIe+vXzor5NRw+072k/UWw88Cy8QHFD8Z2ohp8=) 10: RC_GkxlNqDGelGLhmGSuHpzh8YY.roa (hash: zmoFdcBbJpm89sGvucYAsXD3aYu3UDBB8FNuuO1sZ5s=) 11: dJeU2d3NWjx1lsl1DJGshHnRCGI.roa (hash: Ej+gk8v3uPhQQghNflw4x1l6EEeEieQHfKZUGqRTvJ8=) 12: fed42clRt5kmDi1C2nfhRZ3rDno.roa (hash: S/WW2Jm1todEDyUBwm1EX3hFhesOufSJcoOUAWdDFXU=) 13: oaD-F61J8uFaQOVs_EMDy2GWPFM.roa (hash: oRDRlDLCwINYWsifpUB1J8rOuM3NUJ7WcDPWCCey5hM=) 14: s_jNQyIiTuwbGKzqZChjnXQ8yXk.roa (hash: BigSrB3O/lITzhT7Tp1a0ccxKTegNHB+OKmJdIYz9ak=) 15: wInMghm11FcLBqJT2EV9FM0ZiVY.roa (hash: UusTkTJUi8H8e/4BJF3uND4xQVZ//M68retdZEwQKm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:ea:97:5a:f6:a9:95:1b:17:3f:f2:06:6c:db:9b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Apr 21 12:01:20 2026 GMT Not After : Apr 22 12:01:20 2026 GMT Subject: CN=325bdf542be0725401b7eea9771cd03696ea0c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:a3:b6:b7:ee:6e:9d:6d:09:a8:2b:40:64: ed:b0:0c:ed:12:6f:c3:e7:f6:0a:f5:7e:c2:3a:0f: cb:eb:4d:e8:77:3b:03:5f:55:14:bb:3b:87:13:01: 09:06:32:3f:71:41:0e:db:49:c7:32:ea:f6:22:3e: df:6d:92:a4:9f:2f:1c:f6:3d:f5:c0:75:51:fc:5b: 3f:5e:d9:46:2c:08:d1:29:19:e8:d1:62:75:7b:71: 6c:2c:eb:3d:9d:f3:f7:0c:b9:e7:ce:61:2d:50:13: 6c:ad:fb:2d:ed:b0:1d:0e:01:96:5a:d6:68:3a:ed: 8b:10:49:f6:76:a0:1c:aa:a5:19:9f:5e:0d:2c:6b: 6b:f2:a8:05:48:bc:80:a1:2f:81:0d:a8:17:ae:1c: 0b:92:27:43:7f:18:aa:3c:f3:58:94:56:b1:b1:82: a2:f9:86:bf:69:75:3c:be:31:c4:4d:99:8c:43:d3: 31:a9:dd:2c:ac:36:fb:80:ea:64:c6:30:6e:12:81: 88:dd:d7:29:16:a5:bf:ab:e1:d1:e3:cc:ba:56:80: d2:0c:f3:57:fd:60:86:90:d9:b2:63:c0:f6:48:75: 27:d1:0a:38:89:4a:5e:c5:f6:c7:dd:58:ca:eb:11: e5:60:ca:d3:5c:5c:b2:fc:eb:86:f1:f1:e3:46:25: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:DF:54:2B:E0:72:54:01:B7:EE:A9:77:1C:D0:36:96:EA:0C:8E X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:a0:f0:d2:61:7d:79:cc:8a:09:7c:f6:2e:2e:92:cb:5e: 96:9c:d0:9f:d3:35:63:09:f6:dc:db:12:1f:8c:f8:99:82:aa: af:ce:2d:68:b1:ab:b1:d1:05:af:98:0c:ae:0e:2d:c5:a8:43: 49:50:d7:3c:ed:73:8b:b6:7a:0f:2b:b2:c7:42:2a:fe:41:af: 6f:93:01:61:13:79:ac:80:ca:05:22:f6:07:ef:0a:18:c6:0d: 3d:c7:3a:6b:b1:93:5a:15:2f:d6:8a:d3:ad:94:40:e3:a2:52: b5:76:cb:0c:ac:c8:e5:71:fc:05:a6:23:6f:85:0f:47:0d:5f: d2:1f:ff:87:c6:2d:59:c0:45:8f:13:04:26:97:1d:43:2d:a2: c6:fa:54:2e:c0:e2:80:a4:7e:96:b1:34:6a:a8:be:cd:a3:42: fd:b0:17:d9:b8:09:1a:d8:c8:c1:0a:dc:fb:7d:ad:b1:97:b6: 7a:1b:18:67:11:5b:34:af:1a:aa:ad:5a:c2:86:c5:64:bf:02: 54:0d:48:68:fb:89:23:ae:be:1a:b8:66:b7:a4:5a:43:e9:c1: e1:a5:6b:a2:45:b7:85:32:d0:55:4b:75:b7:28:07:df:a2:dc: 3d:c0:7d:e1:eb:a5:7c:73:87:3e:39:ef:3d:be:07:67:85:5f: 2a:ef:03:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2v6pda9qmVGxc/8gZs25t1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwNDIxMTIwMTIwWhcNMjYwNDIyMTIwMTIwWjAzMTEwLwYDVQQD EygzMjViZGY1NDJiZTA3MjU0MDFiN2VlYTk3NzFjZDAzNjk2ZWEwYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoqjtrfubp1tCagrQGTtsAztEm/D 5/YK9X7COg/L603odzsDX1UUuzuHEwEJBjI/cUEO20nHMur2Ij7fbZKkny8c9j31 wHVR/Fs/XtlGLAjRKRno0WJ1e3FsLOs9nfP3DLnnzmEtUBNsrfst7bAdDgGWWtZo Ou2LEEn2dqAcqqUZn14NLGtr8qgFSLyAoS+BDagXrhwLkidDfxiqPPNYlFaxsYKi +Ya/aXU8vjHETZmMQ9Mxqd0srDb7gOpkxjBuEoGI3dcpFqW/q+HR48y6VoDSDPNX /WCGkNmyY8D2SHUn0Qo4iUpexfbH3VjK6xHlYMrTXFyy/OuG8fHjRiX4mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJb31Qr4HJUAbfuqXcc0DaW6gyOMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5ag8NJh fXnMigl89i4ukstelpzQn9M1Ywn23NsSH4z4mYKqr84taLGrsdEFr5gMrg4txahD SVDXPO1zi7Z6Dyuyx0Iq/kGvb5MBYRN5rIDKBSL2B+8KGMYNPcc6a7GTWhUv1orT rZRA46JStXbLDKzI5XH8BaYjb4UPRw1f0h//h8YtWcBFjxMEJpcdQy2ixvpULsDi gKR+lrE0aqi+zaNC/bAX2bgJGtjIwQrc+32tsZe2ehsYZxFbNK8aqq1awobFZL8C VA1IaPuJI66+Grhmt6RaQ+nB4aVrokW3hTLQVUt1tygH36LcPcB94eulfHOHPjnv Pb4HZ4VfKu8Dfg== -----END CERTIFICATE-----Generated at Tue Apr 21 18:02:40 2026 by rpki-client