$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: mI5YWH1pKlKlOSCekpkoK2D3dUKswU8pEUaZHVCUud4= Subject key identifier: 79:32:35:9B:9E:8A:C0:23:00:87:32:F2:63:B0:EF:6C:DD:4F:6C:EF Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019E50D9CA1A012E8FD0A1E6845ACA61BB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0D43 Signing time: Fri 22 May 2026 18:01:50 +0000 Manifest this update: Fri 22 May 2026 18:01:50 +0000 Manifest next update: Sat 23 May 2026 18:01:50 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: 9HCxugkvVleksBXX929VzRrp/9h+yMveoRrAUTxAHfE=) 3: I282anzuqDNnfUXZQwC7438bDro.roa (hash: AyYFkSKEVTPhYSL98MtWNGzVahEdTLNrPzpWGukk9EI=) 4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 5: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 6: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 7: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 8: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 14: fOoxnzASXzopslTz2k2wiJL3x5M.roa (hash: D1BQFLMSMw0KzyyXwQEu8OixU3Lr8v2KEMxHdqrQGxI=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) 16: xHeW6hanIuUj6uUE4gfLE62ik_E.roa (hash: s8Vjq9HDlOU0cOKYgu76uft1EVcTgBUurUnTdZ01l/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:50:d9:ca:1a:01:2e:8f:d0:a1:e6:84:5a:ca:61:bb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: May 22 18:01:50 2026 GMT Not After : May 23 18:01:50 2026 GMT Subject: CN=7932359b9e8ac023008732f263b0ef6cdd4f6cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:82:a3:ab:50:7a:8d:89:31:d0:e7:b1:5c: fd:35:38:5f:0a:6c:b2:e0:7f:d5:6a:25:e0:d7:c5: e8:f8:25:ec:48:9f:fb:f3:68:77:5f:c7:c8:fe:ee: 34:33:06:16:5b:27:39:90:f6:6f:ca:3b:86:6d:d9: 7c:c8:14:fb:74:b3:ab:35:98:f9:b5:6e:c3:6f:fe: ed:6e:6d:5c:58:f2:23:4e:10:b2:6c:3c:de:6b:5b: 7e:c6:17:51:c8:17:a6:ed:bd:06:1f:0b:3e:64:fb: e7:fc:c9:84:89:7a:e4:29:bb:b4:64:d7:a9:87:9c: 4a:4a:73:90:e0:c1:ef:3d:fc:66:3a:ad:57:20:ce: 86:71:ef:3f:a4:80:7c:42:cb:6c:15:d5:68:35:b2: fb:2d:8c:d3:b1:7d:ac:b6:ff:f1:57:ed:df:30:03: 43:c2:53:84:50:d5:e9:ad:20:93:d4:e7:9f:9e:6c: 4f:df:a2:02:f3:1b:cb:7c:3e:1f:a9:f8:38:ea:ba: ed:b2:80:9c:2e:c0:72:20:86:4d:58:06:d5:e6:b7: b7:3a:79:83:6c:75:9e:4d:98:d9:b4:c2:ae:62:66: ca:44:8d:c1:03:d0:f9:17:d4:61:a7:09:53:fc:9a: 50:80:9d:40:e9:39:fd:97:50:9f:44:a1:55:ec:ce: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:32:35:9B:9E:8A:C0:23:00:87:32:F2:63:B0:EF:6C:DD:4F:6C:EF X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1f:6b:fc:8d:f2:fc:c7:67:4b:51:78:8f:26:de:d5:84:ea: b2:06:e9:a8:e9:76:7a:70:ee:86:a1:62:04:bf:eb:d7:b0:26: d9:eb:f8:3a:97:a3:ab:9a:c4:77:3d:b2:53:c9:81:08:4c:e1: 9c:1e:df:23:21:68:51:bf:7a:1c:0f:f7:7e:cf:d9:a2:46:5c: b2:38:56:53:c5:c3:69:7c:51:6e:09:26:ad:03:1e:7d:00:ea: ec:71:69:38:1f:4d:33:39:da:90:d6:66:72:d9:24:93:4c:50: a6:42:fd:54:97:3c:5d:d1:8f:7e:f4:0b:7a:b8:c8:bf:35:82: 68:69:64:a5:e8:15:18:75:12:6f:b5:bf:63:a0:38:98:1b:43: 1b:62:9f:4b:cc:01:96:6b:62:1c:c0:5c:f1:8f:c7:35:fc:8c: 08:9a:e5:54:ea:67:ad:5d:31:25:95:17:de:80:27:7e:e1:81: e5:19:dd:05:aa:bd:d3:68:95:b6:62:b5:ff:d8:f7:e4:1c:9d: c6:4c:26:f1:78:e1:64:df:6d:16:24:f7:93:c9:cf:df:e0:59: 72:d3:7c:c2:f1:c4:2e:ef:b8:c2:41:67:3a:f3:0f:43:5a:24: 5a:a6:c6:81:bc:54:b7:b9:b8:36:80:30:43:bf:b7:04:ba:1b: e6:90:99:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5Q2coaAS6P0KHmhFrKYbuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwNTIyMTgwMTUwWhcNMjYwNTIzMTgwMTUwWjAzMTEwLwYDVQQD Eyg3OTMyMzU5YjllOGFjMDIzMDA4NzMyZjI2M2IwZWY2Y2RkNGY2Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG6Co6tQeo2JMdDnsVz9NThfCmyy 4H/VaiXg18Xo+CXsSJ/782h3X8fI/u40MwYWWyc5kPZvyjuGbdl8yBT7dLOrNZj5 tW7Db/7tbm1cWPIjThCybDzea1t+xhdRyBem7b0GHws+ZPvn/MmEiXrkKbu0ZNep h5xKSnOQ4MHvPfxmOq1XIM6Gce8/pIB8QstsFdVoNbL7LYzTsX2stv/xV+3fMAND wlOEUNXprSCT1OefnmxP36IC8xvLfD4fqfg46rrtsoCcLsByIIZNWAbV5re3OnmD bHWeTZjZtMKuYmbKRI3BA9D5F9RhpwlT/JpQgJ1A6Tn9l1CfRKFV7M4ckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkyNZueisAjAIcy8mOw72zdT2zvMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex9r/I3y /MdnS1F4jybe1YTqsgbpqOl2enDuhqFiBL/r17Am2ev4Opejq5rEdz2yU8mBCEzh nB7fIyFoUb96HA/3fs/ZokZcsjhWU8XDaXxRbgkmrQMefQDq7HFpOB9NMznakNZm ctkkk0xQpkL9VJc8XdGPfvQLerjIvzWCaGlkpegVGHUSb7W/Y6A4mBtDG2KfS8wB lmtiHMBc8Y/HNfyMCJrlVOpnrV0xJZUX3oAnfuGB5RndBaq902iVtmK1/9j35Byd xkwm8XjhZN9tFiT3k8nP3+BZctN8wvHELu+4wkFnOvMPQ1okWqbGgbxUt7m4NoAw Q7+3BLob5pCZYA== -----END CERTIFICATE-----Generated at Sat May 23 03:47:06 2026 by rpki-client