$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: UFJMgzZd9M6W16UIH5tM+SDe/cIpN1qy8ywJqHPryfk= Subject key identifier: C7:17:C9:DB:04:B6:00:74:53:CE:E1:BC:BB:AE:F9:06:28:B2:0E:E1 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019DB1A1B41DAE81803C11F05BDCD773F80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 19E1 Signing time: Tue 21 Apr 2026 20:00:57 +0000 Manifest this update: Tue 21 Apr 2026 20:00:57 +0000 Manifest next update: Wed 22 Apr 2026 20:00:57 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: A5aDtPzKspB1xpatCjJ+WCCB1Q+YuN94iJZjAdq65lo=) 5: BccvOb5tz2ziFEK85ZOpWUCZhZk.roa (hash: FnA1RabC7GLAVqBqv4NkvPpvO4WhD2fmQEx4Eoys9zY=) 6: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 7: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 8: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 9: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 10: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 11: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=) 12: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 13: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 14: fuRxNjIE-qr9KmN8J_hE59ecEq4.roa (hash: 3CHRC0a/akTbPAJFu8OuUkQRKmDMyUzzK4GIXg8sWws=) 15: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 16: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b1:a1:b4:1d:ae:81:80:3c:11:f0:5b:dc:d7:73:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Apr 21 20:00:57 2026 GMT Not After : Apr 22 20:00:57 2026 GMT Subject: CN=c717c9db04b6007453cee1bcbbaef90628b20ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:72:0c:d3:dc:d0:cd:00:8b:8c:cf:2e:7e: ac:c0:89:df:ef:3d:07:36:b2:76:63:05:45:d5:4d: 55:1d:ae:bf:55:70:2e:61:ac:aa:72:11:90:5b:b2: 3f:00:e9:d0:70:82:bd:79:2a:ba:e4:89:d7:fd:46: 92:52:be:2c:6f:55:ac:b1:2a:f9:10:df:39:d7:43: a2:eb:1d:8e:4f:0f:b0:b4:26:7e:0e:66:62:f4:6f: 70:1e:b3:d0:85:7c:4a:09:05:23:d3:d4:55:4b:ce: 8a:ce:76:f6:33:ec:4c:5e:48:5c:cb:a3:2f:99:84: e3:1a:14:47:d3:31:29:b6:b4:ca:cf:27:2c:b6:d0: d4:10:4b:76:e7:e3:3a:47:4a:41:9c:38:93:90:03: 04:fe:d4:0a:8a:a7:e8:a3:1f:e0:55:e3:3c:ce:94: 12:a4:12:b2:2c:68:a7:9e:2c:f4:22:f9:15:37:f8: 51:fd:85:75:5c:92:15:a8:25:c8:10:44:c3:9d:ef: ed:4e:ca:8a:39:62:a2:99:f0:da:89:2d:23:48:56: 93:a1:e3:0c:ff:23:29:ed:39:85:17:f6:56:6e:40: d3:4d:2d:c1:56:c4:67:a1:7b:5c:a1:d0:4c:17:f3: 22:bc:50:ab:89:4e:2a:ae:8d:57:95:18:25:bf:95: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:17:C9:DB:04:B6:00:74:53:CE:E1:BC:BB:AE:F9:06:28:B2:0E:E1 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cf:a4:bc:fa:78:91:4e:d3:99:a1:48:e3:67:ff:95:c8:44: 97:86:ce:0c:61:60:df:ec:9e:6b:86:86:45:2d:48:cf:20:13: d0:77:39:75:f3:79:c6:10:2f:74:d3:ba:1d:85:5e:46:79:f7: 65:7b:ca:ff:2c:34:c6:68:4a:f0:9c:93:83:04:46:5e:7a:fd: 63:8c:8c:f3:d2:66:97:e2:c4:78:b5:b5:92:2c:b7:5c:d5:9b: fb:13:46:53:30:4b:41:d8:75:52:36:93:02:ba:ae:2c:0c:ca: cd:10:df:3e:69:5f:5d:3b:68:85:9a:a8:e2:c4:b3:4a:4c:cc: d1:0c:05:c7:36:f1:23:60:0d:47:ad:c0:04:3a:93:0d:df:b6: 26:14:cb:8b:4f:d2:91:f3:80:ee:b4:3f:21:fe:15:1b:13:8e: f6:cc:5e:de:02:25:27:31:bf:85:2b:bf:62:39:28:85:4d:c9: 74:5e:c2:91:9d:6e:34:81:de:dd:38:84:e8:5e:31:8d:ea:bd: 04:e0:f1:c6:db:d0:c0:13:54:de:ff:a6:ba:b8:f6:16:f3:35: 0e:04:e0:37:38:69:68:06:cf:8f:09:a7:4d:50:ef:e2:a0:73: b8:5e:de:59:10:37:86:24:2b:23:28:26:f2:dd:d5:25:ff:ff: 08:51:e2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2xobQdroGAPBHwW9zXc/gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNDIxMjAwMDU3WhcNMjYwNDIyMjAwMDU3WjAzMTEwLwYDVQQD EyhjNzE3YzlkYjA0YjYwMDc0NTNjZWUxYmNiYmFlZjkwNjI4YjIwZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSdyDNPc0M0Ai4zPLn6swInf7z0H NrJ2YwVF1U1VHa6/VXAuYayqchGQW7I/AOnQcIK9eSq65InX/UaSUr4sb1WssSr5 EN8510Oi6x2OTw+wtCZ+DmZi9G9wHrPQhXxKCQUj09RVS86Kznb2M+xMXkhcy6Mv mYTjGhRH0zEptrTKzycsttDUEEt25+M6R0pBnDiTkAME/tQKiqfoox/gVeM8zpQS pBKyLGinniz0IvkVN/hR/YV1XJIVqCXIEETDne/tTsqKOWKimfDaiS0jSFaToeMM /yMp7TmFF/ZWbkDTTS3BVsRnoXtcodBMF/MivFCriU4qro1XlRglv5VQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcXydsEtgB0U87hvLuu+QYosg7hMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfc+kvPp4 kU7TmaFI42f/lchEl4bODGFg3+yea4aGRS1IzyAT0Hc5dfN5xhAvdNO6HYVeRnn3 ZXvK/yw0xmhK8JyTgwRGXnr9Y4yM89Jml+LEeLW1kiy3XNWb+xNGUzBLQdh1UjaT ArquLAzKzRDfPmlfXTtohZqo4sSzSkzM0QwFxzbxI2ANR63ABDqTDd+2JhTLi0/S kfOA7rQ/If4VGxOO9sxe3gIlJzG/hSu/YjkohU3JdF7CkZ1uNIHe3TiE6F4xjeq9 BODxxtvQwBNU3v+murj2FvM1DgTgNzhpaAbPjwmnTVDv4qBzuF7eWRA3hiQrIygm 8t3VJf//CFHiWA== -----END CERTIFICATE-----Generated at Wed Apr 22 05:25:18 2026 by rpki-client