$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: EOl9ON57YN52sFwpqlziTwApLYho1Hf5ZaQcR8gLETE= Subject key identifier: FD:0A:01:BB:7A:4D:BA:95:72:53:17:9D:45:52:01:54:A2:E6:36:58 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019DDEE928887A9EA69992D60D75BE989963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 1258 Signing time: Thu 30 Apr 2026 15:01:55 +0000 Manifest this update: Thu 30 Apr 2026 15:01:55 +0000 Manifest next update: Fri 01 May 2026 15:01:55 +0000 Files and hashes: 1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=) 2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: BQgwZcd+GEc8hByQKywV+R1daZhoPM1zfvEzJrzrRIc=) 3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=) 4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=) 5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=) 6: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=) 7: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=) 8: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=) 9: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=) 10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=) 11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=) 12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 14:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:de:e9:28:88:7a:9e:a6:99:92:d6:0d:75:be:98:99:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Apr 30 15:01:55 2026 GMT Not After : May 1 15:01:55 2026 GMT Subject: CN=fd0a01bb7a4dba957253179d45520154a2e63658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:f9:8d:26:e3:a0:d8:32:7b:43:c3:cf:a8: c9:9e:36:a8:1a:83:5a:ef:7c:47:73:86:e7:e5:b3: fa:97:b6:00:46:eb:e5:29:18:76:56:a2:0b:45:1e: df:b2:5a:1a:c3:e3:ee:6b:05:de:3b:84:d2:1a:b3: e6:d8:b8:fe:c9:0c:f7:d9:4e:2b:6a:35:a6:ff:99: 8e:98:73:92:74:3a:68:f6:c8:72:94:70:67:05:bb: dd:9b:cc:6e:db:79:f7:18:f4:2d:bb:99:b0:2d:ba: 91:66:e3:a3:24:bd:62:55:5a:7e:50:9d:3f:74:3c: a0:d4:3e:88:d6:f8:f0:92:66:79:1e:1f:9b:1b:2d: 8e:6f:40:b5:45:e6:de:c9:8e:52:55:9f:a7:9c:02: f4:03:6a:c7:88:8b:18:7c:92:39:bb:39:61:8c:fd: 36:95:ee:09:86:ed:86:3d:76:cd:00:00:67:0a:d9: 67:4f:ac:7e:7b:6f:f0:a7:c2:a3:b2:67:df:06:61: 81:74:62:30:b8:52:66:ee:46:34:88:3f:e2:42:3d: d3:06:5c:bf:05:81:59:31:a7:8c:9f:f6:db:91:da: ea:1b:b0:51:65:08:d4:03:04:82:87:7c:32:0b:fb: 82:2b:a9:78:ec:c8:26:22:a5:53:51:e8:b1:8d:c3: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0A:01:BB:7A:4D:BA:95:72:53:17:9D:45:52:01:54:A2:E6:36:58 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:59:c7:98:2b:d4:bd:5d:1b:4a:22:ca:dc:68:25:e5:dd:31: 75:ee:84:1f:d3:29:9d:b0:3d:94:a5:69:ab:51:20:95:97:ae: ae:99:a6:74:d7:7f:d9:6c:99:eb:39:52:6b:a7:a6:f1:ce:26: 56:0a:30:da:88:71:3c:03:2f:de:a8:c2:b5:d4:94:e8:bc:2d: 0c:b6:44:76:4e:7d:e0:1b:fa:4b:8e:12:b1:e8:9e:97:46:e8: d6:da:d2:8c:09:9a:0f:da:b3:e5:7e:b3:11:38:24:a5:f6:5f: ae:98:7a:d1:de:2a:d6:4c:68:45:c9:5c:3a:8b:f2:86:61:2d: c5:ad:3d:eb:ab:2f:b2:7c:a5:d6:79:dd:12:3e:0b:2e:7f:a3: d3:ae:91:68:74:ad:23:9d:33:f4:8c:23:c5:9b:bd:34:49:8c: be:00:f4:46:1f:6c:0b:84:87:7b:c5:62:96:6c:96:e2:4f:cb: a3:a7:10:9e:3b:8a:2a:a0:5e:6a:04:7e:34:11:3a:4d:42:af: d4:49:9b:24:11:46:9e:0e:d2:b7:0a:77:64:83:d9:b7:87:a3: 09:21:7a:e5:d2:fe:01:b8:77:4c:cf:58:21:80:61:1c:e5:d5: 87:97:d2:0c:6b:43:8e:05:10:b1:36:7c:fb:31:f7:1d:80:82: a4:5d:40:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3e6SiIep6mmZLWDXW+mJljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwNDMwMTUwMTU1WhcNMjYwNTAxMTUwMTU1WjAzMTEwLwYDVQQD EyhmZDBhMDFiYjdhNGRiYTk1NzI1MzE3OWQ0NTUyMDE1NGEyZTYzNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1X5jSbjoNgye0PDz6jJnjaoGoNa 73xHc4bn5bP6l7YARuvlKRh2VqILRR7fsloaw+PuawXeO4TSGrPm2Lj+yQz32U4r ajWm/5mOmHOSdDpo9shylHBnBbvdm8xu23n3GPQtu5mwLbqRZuOjJL1iVVp+UJ0/ dDyg1D6I1vjwkmZ5Hh+bGy2Ob0C1RebeyY5SVZ+nnAL0A2rHiIsYfJI5uzlhjP02 le4Jhu2GPXbNAABnCtlnT6x+e2/wp8KjsmffBmGBdGIwuFJm7kY0iD/iQj3TBly/ BYFZMaeMn/bbkdrqG7BRZQjUAwSCh3wyC/uCK6l47MgmIqVTUeixjcMW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0KAbt6TbqVclMXnUVSAVSi5jZYMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1nHmCvU vV0bSiLK3Ggl5d0xde6EH9MpnbA9lKVpq1EglZeurpmmdNd/2WyZ6zlSa6em8c4m Vgow2ohxPAMv3qjCtdSU6LwtDLZEdk594Bv6S44Sseiel0bo1trSjAmaD9qz5X6z ETgkpfZfrph60d4q1kxoRclcOovyhmEtxa0966svsnyl1nndEj4LLn+j066RaHSt I50z9IwjxZu9NEmMvgD0Rh9sC4SHe8VilmyW4k/Lo6cQnjuKKqBeagR+NBE6TUKv 1EmbJBFGng7Stwp3ZIPZt4ejCSF65dL+Abh3TM9YIYBhHOXVh5fSDGtDjgUQsTZ8 +zH3HYCCpF1Aiw== -----END CERTIFICATE-----Generated at Thu Apr 30 20:25:46 2026 by rpki-client