$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: W+fQs8wEW8Ulkag5ZBKzsoFaZNPacBnMFS50byFtXCw= Subject key identifier: 84:71:BD:5E:A3:FB:93:C6:07:3E:87:71:E9:55:4A:B3:9B:9C:A2:AD Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019DA78C5AB196F1B8F45F6594353C3361E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0189 Signing time: Sun 19 Apr 2026 21:01:26 +0000 Manifest this update: Sun 19 Apr 2026 21:01:26 +0000 Manifest next update: Mon 20 Apr 2026 21:01:26 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: 4H0hP2bxMJtAACzTJvBQgY5LXnSbuoCigWEUtmUheZw=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:8c:5a:b1:96:f1:b8:f4:5f:65:94:35:3c:33:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Apr 19 21:01:26 2026 GMT Not After : Apr 20 21:01:26 2026 GMT Subject: CN=8471bd5ea3fb93c6073e8771e9554ab39b9ca2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:bf:85:97:94:c6:0b:25:2b:a6:da:ae:82: 39:23:41:dc:c9:4e:41:91:08:4f:a1:62:23:e0:09: 68:93:71:54:f4:34:da:a9:2a:09:a4:ac:98:d2:78: d1:62:00:6f:7e:fe:90:2a:ff:10:b8:82:37:ff:e1: 85:d3:a0:ea:69:55:24:c8:cc:5d:8f:5e:bd:37:c7: 4c:2e:97:cd:83:ac:87:9e:0d:a9:34:a9:35:4a:49: ef:d4:eb:01:e8:2f:40:16:0c:76:2a:8a:9e:b0:99: ed:b5:0d:f7:7f:ca:94:ab:49:51:bd:da:8c:14:2f: 79:ce:a8:f4:30:05:3e:de:fa:4d:2e:92:d7:12:14: 3e:0e:88:96:f3:01:93:97:e7:cd:4c:96:2b:4e:9f: 7a:a9:eb:af:28:ec:3f:e8:31:16:72:80:8b:fa:88: 1d:0b:e2:72:61:46:c3:ce:8d:53:f1:b3:04:2f:ee: 36:f9:eb:14:af:10:bc:ea:94:99:3f:eb:a4:2f:e5: 43:57:30:21:f6:b3:be:42:22:65:d2:4c:9d:4d:68: e1:80:2d:e3:18:22:10:8c:4b:a3:bf:a6:c3:d5:8c: 98:70:a4:40:62:6a:e8:87:bc:a3:2a:b1:b4:25:f9: 8e:8d:03:2e:5e:24:a7:df:80:07:9d:e7:01:5a:53: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:71:BD:5E:A3:FB:93:C6:07:3E:87:71:E9:55:4A:B3:9B:9C:A2:AD X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:6f:ad:4a:15:9f:1a:47:f7:8d:48:67:94:cc:9f:9d:d9: b8:f7:70:7b:72:80:a7:d7:fe:e7:b2:b5:d9:74:d0:52:2b:f3: c1:fa:80:8d:ed:21:f4:d2:7d:32:cd:df:41:0b:c0:ad:d9:87: 0f:02:8f:31:94:57:d8:48:7c:d9:ed:32:1f:2a:3a:4b:6c:e5: 10:8c:2d:55:76:1b:29:b2:3f:45:67:99:5e:60:68:ee:42:4b: e6:4d:08:75:1e:62:d3:66:e8:1e:9c:68:17:6a:f4:14:50:e8: 28:88:9a:1d:b2:1f:03:22:53:57:9c:df:1e:45:85:89:56:c1: 07:e3:f9:93:06:53:e1:c2:d7:3b:5a:2b:75:7f:6c:60:ec:c6: 98:3e:de:31:f3:e9:99:e0:5c:a6:b1:52:56:49:a2:c7:b3:a0: ad:ef:1f:a5:26:ce:dc:3e:9a:2b:f0:28:46:99:c7:19:25:95: 65:75:b4:66:1b:c4:53:7b:a8:9e:d3:08:3e:97:f1:a5:11:88: 22:4b:46:31:96:0c:a5:98:e4:a3:99:f8:2b:81:90:05:5b:5c: 4b:ae:1b:c6:63:65:28:f0:19:bc:0a:82:52:5c:17:6f:47:a8: ed:4f:79:b6:23:64:94:16:dd:f1:db:02:1c:1b:d7:d7:68:c0: ab:7a:71:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2njFqxlvG49F9llDU8M2HgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNDE5MjEwMTI2WhcNMjYwNDIwMjEwMTI2WjAzMTEwLwYDVQQD Eyg4NDcxYmQ1ZWEzZmI5M2M2MDczZTg3NzFlOTU1NGFiMzliOWNhMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIy/hZeUxgslK6baroI5I0HcyU5B kQhPoWIj4Alok3FU9DTaqSoJpKyY0njRYgBvfv6QKv8QuII3/+GF06DqaVUkyMxd j169N8dMLpfNg6yHng2pNKk1Sknv1OsB6C9AFgx2KoqesJnttQ33f8qUq0lRvdqM FC95zqj0MAU+3vpNLpLXEhQ+DoiW8wGTl+fNTJYrTp96qeuvKOw/6DEWcoCL+ogd C+JyYUbDzo1T8bMEL+42+esUrxC86pSZP+ukL+VDVzAh9rO+QiJl0kydTWjhgC3j GCIQjEujv6bD1YyYcKRAYmroh7yjKrG0JfmOjQMuXiSn34AHnecBWlP1NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRxvV6j+5PGBz6HcelVSrObnKKtMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT5vrUoV nxpH941IZ5TMn53ZuPdwe3KAp9f+57K12XTQUivzwfqAje0h9NJ9Ms3fQQvArdmH DwKPMZRX2Eh82e0yHyo6S2zlEIwtVXYbKbI/RWeZXmBo7kJL5k0IdR5i02boHpxo F2r0FFDoKIiaHbIfAyJTV5zfHkWFiVbBB+P5kwZT4cLXO1ordX9sYOzGmD7eMfPp meBcprFSVkmix7Ogre8fpSbO3D6aK/AoRpnHGSWVZXW0ZhvEU3uontMIPpfxpRGI IktGMZYMpZjko5n4K4GQBVtcS64bxmNlKPAZvAqCUlwXb0eo7U95tiNklBbd8dsC HBvX12jAq3px+g== -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:48 2026 by rpki-client