$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: cOMAgO1tPdb8coKnd+eOKW21UjfeeQq8638XIl23rKs= Subject key identifier: 7E:21:64:45:63:35:69:63:3F:60:7E:8A:8A:44:D9:D4:25:FC:6F:E5 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019DCC065C698E66FEE372EAB2B37BF55C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 14C5 Signing time: Sun 26 Apr 2026 23:01:02 +0000 Manifest this update: Sun 26 Apr 2026 23:01:02 +0000 Manifest next update: Mon 27 Apr 2026 23:01:02 +0000 Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=) 2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: dkuQUFg6g5+Fo0XqRJoOdFygSvDq+CFxeUZwSTdWvZw=) 4: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=) 5: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=) 6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=) 7: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=) 8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=) 9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=) 10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=) 11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=) 12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=) 13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=) 14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:06:5c:69:8e:66:fe:e3:72:ea:b2:b3:7b:f5:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Apr 26 23:01:02 2026 GMT Not After : Apr 27 23:01:02 2026 GMT Subject: CN=7e216445633569633f607e8a8a44d9d425fc6fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:01:32:58:f3:0b:a9:44:0d:a8:16:29:99: 6d:41:15:6d:75:58:84:c1:f1:cb:26:0f:c2:3b:72: d6:37:90:0e:76:e0:19:a5:b5:57:1d:5a:8b:4e:8e: 38:e3:3b:fd:46:37:3b:4d:f7:e0:6e:a7:90:d3:78: ad:49:6e:76:bb:a2:ce:10:ef:5a:f6:0a:d1:25:b6: 87:68:94:a9:79:1f:c3:f6:ff:d2:e2:30:d0:2e:80: 40:94:99:e7:90:6b:10:03:bf:4c:63:6d:6d:cf:9a: 0e:61:f0:29:69:50:ab:b4:5e:b0:b4:98:6b:a7:69: 7d:b5:1a:01:5f:63:0c:62:03:fb:76:ed:65:f2:4e: 95:47:80:b3:0e:2b:e2:ed:50:76:fb:ea:ad:b9:c5: 74:04:23:ef:e1:07:51:d5:7c:86:6e:52:9f:90:e3: fe:8c:49:df:53:66:8f:58:7d:e1:0b:5d:b5:0d:4e: d9:41:30:0b:f5:fc:ea:74:bd:d1:21:47:c4:60:3c: 03:f5:28:4b:5d:ef:b8:72:ad:79:3c:c5:a2:2d:0f: fc:ff:55:58:c9:89:bc:4e:e8:49:89:e2:d7:fa:cb: b0:d9:1f:29:90:ff:12:6e:8a:39:e6:39:b6:e6:06: bb:6b:45:a9:ab:28:f1:ca:09:46:e3:58:19:55:75: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:21:64:45:63:35:69:63:3F:60:7E:8A:8A:44:D9:D4:25:FC:6F:E5 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:22:70:29:cb:3f:79:ac:bb:3a:95:69:ee:c4:95:ff:1f:17: 33:85:58:8a:f0:13:26:46:f2:20:86:78:b0:ba:1a:a5:d6:94: bd:58:43:67:f3:34:a4:b8:e5:b9:c8:d1:de:f0:fc:f7:93:52: 13:d3:7c:31:96:47:80:90:1e:c8:ba:08:00:cb:c3:29:a8:a2: a1:b3:40:b1:9e:ea:9b:14:9e:49:d1:ca:bf:39:22:07:d8:8c: 79:b6:bb:14:3b:be:69:c7:81:ea:7e:15:09:50:60:33:a1:9f: 8b:b0:c5:2b:16:76:44:ea:6d:8f:2a:f0:4d:56:e0:70:1d:67: a8:98:a0:3d:5f:86:ff:83:10:2a:fa:81:de:4a:db:da:a6:e7: fd:e3:1f:9c:7f:4d:9b:ce:ee:5f:b7:c0:4a:27:58:bb:82:eb: 41:53:ca:14:39:7c:43:9b:39:5b:a7:1d:3c:07:7d:0c:4a:34: d4:f9:46:ec:c5:ea:ea:35:5c:f4:a0:a5:98:ec:0b:c4:f0:97: 36:10:0e:72:e7:c3:21:ae:e4:d9:5b:07:eb:53:58:6e:28:29: 64:d3:6c:ab:c0:43:1c:16:3f:f5:4c:2d:ad:f9:e2:9b:4e:24: 77:f7:0b:87:8c:ff:0a:ef:ae:0a:71:f3:e2:bd:9a:a7:74:f1: 42:cb:ae:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MBlxpjmb+43LqsrN79VwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYwNDI2MjMwMTAyWhcNMjYwNDI3MjMwMTAyWjAzMTEwLwYDVQQD Eyg3ZTIxNjQ0NTYzMzU2OTYzM2Y2MDdlOGE4YTQ0ZDlkNDI1ZmM2ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ0BMljzC6lEDagWKZltQRVtdViE wfHLJg/CO3LWN5AOduAZpbVXHVqLTo444zv9Rjc7TffgbqeQ03itSW52u6LOEO9a 9grRJbaHaJSpeR/D9v/S4jDQLoBAlJnnkGsQA79MY21tz5oOYfApaVCrtF6wtJhr p2l9tRoBX2MMYgP7du1l8k6VR4CzDivi7VB2++qtucV0BCPv4QdR1XyGblKfkOP+ jEnfU2aPWH3hC121DU7ZQTAL9fzqdL3RIUfEYDwD9ShLXe+4cq15PMWiLQ/8/1VY yYm8TuhJieLX+suw2R8pkP8Sboo55jm25ga7a0WpqyjxyglG41gZVXUYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4hZEVjNWljP2B+iopE2dQl/G/lMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCJwKcs/ eay7OpVp7sSV/x8XM4VYivATJkbyIIZ4sLoapdaUvVhDZ/M0pLjlucjR3vD895NS E9N8MZZHgJAeyLoIAMvDKaiiobNAsZ7qmxSeSdHKvzkiB9iMeba7FDu+aceB6n4V CVBgM6Gfi7DFKxZ2ROptjyrwTVbgcB1nqJigPV+G/4MQKvqB3krb2qbn/eMfnH9N m87uX7fASidYu4LrQVPKFDl8Q5s5W6cdPAd9DEo01PlG7MXq6jVc9KClmOwLxPCX NhAOcufDIa7k2VsH61NYbigpZNNsq8BDHBY/9Uwtrfnim04kd/cLh4z/Cu+uCnHz 4r2ap3TxQsuuFw== -----END CERTIFICATE-----Generated at Mon Apr 27 09:32:01 2026 by rpki-client