$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: b9p+ND3DN9HZwl/z3GOZC0bHttrzuCMmNPVlvz9yYeM= Subject key identifier: 99:50:97:E3:CF:E4:FA:E5:B3:F4:0D:E8:98:C3:51:FA:FC:D9:22:C7 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019DCCE1BC20EF1ACD56D492EBF8E13E1F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 14BA Signing time: Mon 27 Apr 2026 03:00:38 +0000 Manifest this update: Mon 27 Apr 2026 03:00:38 +0000 Manifest next update: Tue 28 Apr 2026 03:00:38 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=) 4: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: 3+SZ1oq3hZd7jFO6ssflUcFpqZhys8c47/TZx4eNYhs=) 7: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:e1:bc:20:ef:1a:cd:56:d4:92:eb:f8:e1:3e:1f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Apr 27 03:00:38 2026 GMT Not After : Apr 28 03:00:38 2026 GMT Subject: CN=995097e3cfe4fae5b3f40de898c351fafcd922c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:e3:47:6a:71:1e:63:fb:61:90:61:e0:8e: e1:f8:73:30:6b:4a:b8:99:0f:ff:ab:10:6a:b3:b5: b8:99:e0:ec:e1:fa:66:54:83:fd:b9:0b:ca:33:a6: e9:df:7e:82:f2:9b:ef:67:d0:24:de:36:c1:16:42: 18:27:12:af:ff:03:5a:61:93:28:38:e0:3e:da:09: dc:a8:1e:4f:11:47:8c:31:ec:fa:8e:f6:02:94:99: bb:bc:be:b2:b6:58:48:c9:16:ed:b3:28:5a:cc:5e: 46:f2:00:f9:be:a2:5d:a9:23:3d:b8:f6:21:99:9c: 19:f3:46:eb:ae:32:5a:03:30:ed:b5:21:d1:a3:9d: 15:ce:43:f0:13:2a:9a:75:3a:03:23:f8:d9:fa:e3: 4e:02:3c:8f:fa:50:c4:dc:01:26:3d:53:a9:2e:42: bb:d3:a1:70:00:fd:5a:3f:47:f3:9d:8c:84:f3:89: f9:61:1d:ec:68:3b:26:d0:45:6f:f4:28:26:31:1f: f4:fb:95:3b:2c:cc:14:0f:5b:13:8b:86:66:2d:78: 33:eb:57:50:70:03:40:fe:dd:ac:a9:d0:96:a8:e6: f1:1e:9d:e8:9a:81:98:f8:f6:38:6e:3f:57:51:b8: ee:c3:aa:12:40:79:e7:41:ea:43:c4:df:5a:3f:3a: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:97:E3:CF:E4:FA:E5:B3:F4:0D:E8:98:C3:51:FA:FC:D9:22:C7 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:23:6d:4e:54:51:d2:8b:bd:ab:65:92:5b:99:9d:4a:23: e9:db:df:98:23:fa:ad:0d:2b:77:dc:a2:95:ad:53:df:e4:82: 34:65:2d:86:7c:7f:a7:b9:97:59:9e:68:a0:54:13:3e:d0:54: 14:b5:47:5e:9c:a8:5f:a8:34:a7:7c:5c:fa:55:32:30:56:52: 40:59:d3:a7:64:9a:83:2d:7d:93:23:c8:a8:c8:1c:4e:81:08: e5:79:3b:1a:48:8b:80:c2:41:99:14:1a:7f:c1:d2:83:a6:2b: 8a:f3:3f:ee:d2:19:c7:85:24:f5:03:b8:61:65:9a:33:2b:20: eb:ab:5f:6e:1e:bc:ee:9c:01:2c:09:44:8b:2b:62:5b:5a:49: 82:e8:1b:cc:6f:b6:b6:46:74:28:d9:d3:5a:04:69:fe:5e:d0: fa:73:5e:76:20:24:c2:6f:c9:8b:8e:b3:fc:00:62:0b:c1:97: 37:ce:79:95:4b:f5:e0:55:c2:bc:b9:a2:ee:0b:9c:0e:36:3c: 8d:f7:b9:78:07:d2:8f:d6:59:51:8c:b0:44:83:f6:67:ce:4f: 87:e8:be:77:22:44:e6:fb:d8:74:2a:8c:67:06:20:49:bb:c8: 47:5c:34:4a:23:7a:2a:51:64:39:3a:de:4b:4e:76:19:5f:a2: 5c:e2:f7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3M4bwg7xrNVtSS6/jhPh+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwNDI3MDMwMDM4WhcNMjYwNDI4MDMwMDM4WjAzMTEwLwYDVQQD Eyg5OTUwOTdlM2NmZTRmYWU1YjNmNDBkZTg5OGMzNTFmYWZjZDkyMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bLjR2pxHmP7YZBh4I7h+HMwa0q4 mQ//qxBqs7W4meDs4fpmVIP9uQvKM6bp336C8pvvZ9Ak3jbBFkIYJxKv/wNaYZMo OOA+2gncqB5PEUeMMez6jvYClJm7vL6ytlhIyRbtsyhazF5G8gD5vqJdqSM9uPYh mZwZ80brrjJaAzDttSHRo50VzkPwEyqadToDI/jZ+uNOAjyP+lDE3AEmPVOpLkK7 06FwAP1aP0fznYyE84n5YR3saDsm0EVv9CgmMR/0+5U7LMwUD1sTi4ZmLXgz61dQ cANA/t2sqdCWqObxHp3omoGY+PY4bj9XUbjuw6oSQHnnQepDxN9aPzovdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlQl+PP5Prls/QN6JjDUfr82SLHMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg0jbU5U UdKLvatlkluZnUoj6dvfmCP6rQ0rd9yila1T3+SCNGUthnx/p7mXWZ5ooFQTPtBU FLVHXpyoX6g0p3xc+lUyMFZSQFnTp2Sagy19kyPIqMgcToEI5Xk7GkiLgMJBmRQa f8HSg6YrivM/7tIZx4Uk9QO4YWWaMysg66tfbh687pwBLAlEiytiW1pJgugbzG+2 tkZ0KNnTWgRp/l7Q+nNediAkwm/Ji46z/ABiC8GXN855lUv14FXCvLmi7gucDjY8 jfe5eAfSj9ZZUYywRIP2Z85Ph+i+dyJE5vvYdCqMZwYgSbvIR1w0SiN6KlFkOTre S052GV+iXOL3NQ== -----END CERTIFICATE-----Generated at Mon Apr 27 12:41:44 2026 by rpki-client