$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: /LxxxEEzWmo3tW6ibsvrwOE3I45WBniI97JrTCN7pZE= Subject key identifier: 57:06:14:27:74:B6:E8:A3:8F:DC:AE:2A:FD:0E:D3:88:6E:C4:2E:38 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019DA867A2C4787F4C34B3DF268D9DAF4386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 1646 Signing time: Mon 20 Apr 2026 01:00:57 +0000 Manifest this update: Mon 20 Apr 2026 01:00:57 +0000 Manifest next update: Tue 21 Apr 2026 01:00:57 +0000 Files and hashes: 1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=) 2: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=) 3: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=) 4: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=) 5: BfVNHWqEPlzaLXAUxndKGpZQISo.roa (hash: iPfjs5sAMs8Z6poczMNyYY8Bje3i0GDrHxRTpq3hZxY=) 6: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=) 7: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=) 8: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=) 9: FXAzI68zn2MhAmyLaAVs5acySp8.roa (hash: 0tRXxkEiNEXv52H1UOhctD+Lw3+UX2F5o1ZQoQd1xvE=) 10: J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa (hash: rYNYIygzVLxsYiz9/QpiUL2isg45v/iPFE29a+xdhpw=) 11: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=) 12: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=) 13: RCc63apjlRxYYVC64jleE_CWsJc.roa (hash: mjSJEm7ypZz9PgXhGjjzoNx0TMGrQIqwIHaBFwo6puM=) 14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=) 15: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: 0AKTohz6qlvzdc5TAlp/PudA918neuQ6Ayr7UibStdY=) 16: eIXa3P7-DLgvGb_upQKW0QWQEN0.roa (hash: rZZy59BZf9kQ9RiHu2DTRBT4n3jQYisJ5vFK73yoXdk=) 17: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=) 18: jdZLuGrwcV0Bz7rkdGZPvyBj9L4.roa (hash: EBuUGjICQaJYXCY6gsLdo0i6JEklwjuwZKX4alPejb4=) 19: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=) 20: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=) 21: r1Lm-dX1qz59WOfpWgSU33XPmSM.roa (hash: 6oVzYKTRmw48EXPMuELo04geZt6gGCfSZv5bRmChJw8=) 22: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a8:67:a2:c4:78:7f:4c:34:b3:df:26:8d:9d:af:43:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Apr 20 01:00:57 2026 GMT Not After : Apr 21 01:00:57 2026 GMT Subject: CN=5706142774b6e8a38fdcae2afd0ed3886ec42e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:7e:5a:e7:26:f7:80:6d:10:71:b9:c3:aa: 93:af:a4:84:df:59:81:e0:fb:05:db:8d:07:95:3f: af:f3:f1:44:58:d9:73:c7:b1:bf:61:0e:ad:ba:17: c5:d5:95:5e:16:43:f2:7d:0e:73:3e:20:d5:04:b4: dc:1e:9c:4a:fa:2c:19:34:18:27:81:4b:5b:f8:a7: 64:58:74:37:4e:f8:52:fb:de:5e:e0:ce:fc:4d:93: 39:a8:93:1d:8e:0c:9b:73:b8:35:95:07:18:d5:95: 12:c7:ab:92:6b:dd:b1:67:b0:18:51:d8:0c:b1:0a: 31:7d:0f:cf:68:cc:f1:16:c3:ee:b7:bb:6e:a7:0c: ab:63:17:6b:ed:2f:c8:85:57:4f:45:05:31:56:40: 36:46:ac:f4:e0:29:96:f7:31:2b:d4:0b:64:70:25: 2a:a0:af:4c:33:d5:cb:b5:4a:c0:a6:d3:8a:83:83: f0:c3:10:86:1e:82:7c:e0:2f:b7:9f:de:fa:49:2f: b3:ab:7f:57:e2:5a:b1:bf:65:24:e1:1b:c4:7c:56: e3:35:2f:fa:77:bb:ef:8a:c7:04:1b:a9:d1:0a:8c: da:8b:f7:fc:8d:e9:76:83:52:68:bc:88:8f:09:93: da:d8:74:bc:20:40:b7:c5:4b:ba:2b:21:a2:7a:37: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:14:27:74:B6:E8:A3:8F:DC:AE:2A:FD:0E:D3:88:6E:C4:2E:38 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:99:0e:66:47:9b:05:4e:fa:1f:0e:1a:47:54:ca:42:00:ab: af:e6:41:95:ac:71:3a:83:21:2c:f1:d9:62:9e:c8:a1:99:04: 7f:4c:2d:23:0a:3e:37:89:3a:84:73:97:37:0c:81:81:f4:76: 49:d9:21:23:ad:e8:03:89:e0:4c:cc:4c:c4:f4:13:d0:1d:9c: a0:9d:89:53:b3:ca:10:9e:6f:cf:2a:a8:c8:c4:92:71:85:0f: 4a:ed:aa:82:bb:b0:62:03:9b:be:77:93:3c:65:eb:b0:de:29: 86:f5:86:00:bb:b8:03:8d:ac:17:6d:5e:36:a1:9a:18:10:ed: 20:c5:cf:de:81:cd:14:63:ab:bf:10:ca:b2:45:71:e6:6e:08: c1:83:d5:a3:f3:ed:04:2d:f2:14:dd:99:6d:35:24:b9:49:1b: f6:c2:c8:c5:b9:fa:0e:be:02:bd:cb:94:88:b3:5e:f0:8c:4b: 35:95:72:36:7b:66:1a:44:72:08:93:6a:b0:0b:86:f0:a7:2c: 79:a7:4e:06:73:2f:c0:12:ec:04:10:37:9e:54:c9:1f:b3:49: cb:b9:a2:47:b4:25:ce:58:4a:2a:76:de:73:d2:d8:62:07:68: b1:cb:f5:79:11:47:d5:a4:ef:fc:9e:61:67:c1:ef:1d:95:fa: 65:3b:c1:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2oZ6LEeH9MNLPfJo2dr0OGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwNDIwMDEwMDU3WhcNMjYwNDIxMDEwMDU3WjAzMTEwLwYDVQQD Eyg1NzA2MTQyNzc0YjZlOGEzOGZkY2FlMmFmZDBlZDM4ODZlYzQyZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ax+Wucm94BtEHG5w6qTr6SE31mB 4PsF240HlT+v8/FEWNlzx7G/YQ6tuhfF1ZVeFkPyfQ5zPiDVBLTcHpxK+iwZNBgn gUtb+KdkWHQ3TvhS+95e4M78TZM5qJMdjgybc7g1lQcY1ZUSx6uSa92xZ7AYUdgM sQoxfQ/PaMzxFsPut7tupwyrYxdr7S/IhVdPRQUxVkA2Rqz04CmW9zEr1AtkcCUq oK9MM9XLtUrAptOKg4PwwxCGHoJ84C+3n976SS+zq39X4lqxv2Uk4RvEfFbjNS/6 d7vviscEG6nRCozai/f8jel2g1JovIiPCZPa2HS8IEC3xUu6KyGiejfkCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcGFCd0tuijj9yuKv0O04huxC44MB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapkOZkeb BU76Hw4aR1TKQgCrr+ZBlaxxOoMhLPHZYp7IoZkEf0wtIwo+N4k6hHOXNwyBgfR2 SdkhI63oA4ngTMxMxPQT0B2coJ2JU7PKEJ5vzyqoyMSScYUPSu2qgruwYgObvneT PGXrsN4phvWGALu4A42sF21eNqGaGBDtIMXP3oHNFGOrvxDKskVx5m4IwYPVo/Pt BC3yFN2ZbTUkuUkb9sLIxbn6Dr4CvcuUiLNe8IxLNZVyNntmGkRyCJNqsAuG8Kcs eadOBnMvwBLsBBA3nlTJH7NJy7miR7QlzlhKKnbec9LYYgdoscv1eRFH1aTv/J5h Z8HvHZX6ZTvBog== -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:06 2026 by rpki-client