$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: owBMMBhNXEBqc3J2HGOuvLnmxXUSsZbFdg4ETMYeu3M= Subject key identifier: 0B:29:FA:DA:EC:01:8E:1D:3B:F4:A8:73:76:51:8C:13:D0:9D:E9:B3 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019E4956A86BEFA1ECD07100EA556A9288D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 19AB Signing time: Thu 21 May 2026 07:01:16 +0000 Manifest this update: Thu 21 May 2026 07:01:16 +0000 Manifest next update: Fri 22 May 2026 07:01:16 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (hash: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU=) 3: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 4: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 5: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 6: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 7: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 10: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (hash: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: LR2uRLxH2snnht0AMx+PyuPPteZ4ZrfH+LK9A2v33yY=) 14: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 15: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:49:56:a8:6b:ef:a1:ec:d0:71:00:ea:55:6a:92:88:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: May 21 07:01:16 2026 GMT Not After : May 22 07:01:16 2026 GMT Subject: CN=0b29fadaec018e1d3bf4a87376518c13d09de9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:d2:3d:97:48:4c:f1:60:c3:06:47:ec:b2: b0:86:b8:81:ee:02:7d:91:6c:5c:09:62:0d:8f:8e: 29:38:3f:dc:41:e9:f5:2e:3e:2e:f6:38:28:3a:7a: 03:df:3f:3b:ad:95:6b:77:58:3b:e1:1b:86:a1:62: c8:70:c2:5c:50:2f:d7:7a:0b:89:87:fa:58:36:06: c5:dd:e7:03:c9:ad:9c:ce:71:d2:5e:be:c1:e3:d6: 87:8e:c0:04:c9:48:47:5d:54:cc:99:fb:4f:d1:e4: a3:75:ac:ed:cf:7e:c0:40:b0:83:3c:45:6e:cd:af: 19:75:b1:06:9b:d9:ec:61:2d:69:61:6e:ee:c0:0b: 7c:58:30:10:45:45:cb:fb:d0:bd:b8:72:4d:f7:06: 7b:2e:5d:82:0d:2e:49:4c:82:e3:20:89:cb:59:99: 43:c5:b8:00:92:16:57:d0:d1:18:ad:90:6c:1d:5e: 78:b5:ec:63:00:f3:f0:46:51:b7:02:b1:7f:df:cc: 3e:47:ed:95:57:fa:2e:b3:b1:25:1b:ed:c7:3b:99: 4e:27:7f:d4:33:b5:30:bc:00:cf:33:e5:94:5c:64: 4f:dd:49:f5:ef:60:52:ba:bf:03:8b:2f:a5:4a:ba: be:ee:f2:d3:57:91:21:e0:e2:8c:16:1a:6e:d8:b7: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:29:FA:DA:EC:01:8E:1D:3B:F4:A8:73:76:51:8C:13:D0:9D:E9:B3 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:e4:15:3f:70:ad:d4:49:ba:75:da:5c:de:e6:d9:3f:eb: 7b:ef:07:09:39:b5:84:f7:65:74:a6:96:fb:c5:53:ab:b7:b3: cd:44:a7:d2:41:63:dd:8c:ff:ff:06:31:7c:43:f4:ea:63:8a: b6:89:5b:da:f1:83:b7:76:a6:60:fb:af:ca:c2:03:2a:b4:0d: a8:ce:70:c1:91:58:37:8a:4d:d9:49:70:dc:9e:3d:3c:76:59: f2:a5:37:03:35:94:07:20:5d:4f:84:00:93:10:c0:c1:6d:b4: a4:ae:24:e5:28:65:11:92:95:67:29:94:67:64:a3:77:c6:58: 3e:4f:14:66:11:0c:bf:56:44:f3:c8:cd:fa:b0:6b:38:50:3a: e7:a1:d9:ae:4e:ce:4b:02:df:98:d4:1d:d5:90:6e:07:34:d0: 76:d9:0b:b2:87:65:dd:c4:49:fb:a5:7c:61:15:04:cf:ca:96: 94:ea:5e:f1:20:f9:dc:3c:7f:c8:99:93:e7:f3:ce:0a:38:37: 30:07:d6:29:1c:ef:79:0b:28:e1:2e:db:c8:aa:da:7f:4f:2c: 7f:f4:be:19:d5:7d:ff:5c:0c:4d:b1:df:5e:d0:d0:c4:74:55: 12:01:11:5b:25:10:dd:38:9e:31:53:43:43:76:2b:a0:6c:9d: 00:62:a3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5JVqhr76Hs0HEA6lVqkojZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwNTIxMDcwMTE2WhcNMjYwNTIyMDcwMTE2WjAzMTEwLwYDVQQD EygwYjI5ZmFkYWVjMDE4ZTFkM2JmNGE4NzM3NjUxOGMxM2QwOWRlOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVnSPZdITPFgwwZH7LKwhriB7gJ9 kWxcCWINj44pOD/cQen1Lj4u9jgoOnoD3z87rZVrd1g74RuGoWLIcMJcUC/XeguJ h/pYNgbF3ecDya2cznHSXr7B49aHjsAEyUhHXVTMmftP0eSjdaztz37AQLCDPEVu za8ZdbEGm9nsYS1pYW7uwAt8WDAQRUXL+9C9uHJN9wZ7Ll2CDS5JTILjIInLWZlD xbgAkhZX0NEYrZBsHV54texjAPPwRlG3ArF/38w+R+2VV/ous7ElG+3HO5lOJ3/U M7UwvADPM+WUXGRP3Un172BSur8Diy+lSrq+7vLTV5Eh4OKMFhpu2LeGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsp+trsAY4dO/Soc3ZRjBPQnemzMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUzkFT9w rdRJunXaXN7m2T/re+8HCTm1hPdldKaW+8VTq7ezzUSn0kFj3Yz//wYxfEP06mOK tolb2vGDt3amYPuvysIDKrQNqM5wwZFYN4pN2Ulw3J49PHZZ8qU3AzWUByBdT4QA kxDAwW20pK4k5ShlEZKVZymUZ2Sjd8ZYPk8UZhEMv1ZE88jN+rBrOFA656HZrk7O SwLfmNQd1ZBuBzTQdtkLsodl3cRJ+6V8YRUEz8qWlOpe8SD53Dx/yJmT5/POCjg3 MAfWKRzveQso4S7byKraf08sf/S+GdV9/1wMTbHfXtDQxHRVEgERWyUQ3TieMVND Q3YroGydAGKjFw== -----END CERTIFICATE-----Generated at Thu May 21 16:32:34 2026 by rpki-client