$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: 9JSgz5rpv+9+QTqmqbH7spKfy87W8K03QlNy6NLwVpg= Subject key identifier: 0C:FE:53:04:FE:6C:B2:C3:2E:EE:85:D7:BB:E6:41:00:55:78:77:E1 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019DCE992285EBC75C8B701B6AF95220083E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 191B Signing time: Mon 27 Apr 2026 11:00:35 +0000 Manifest this update: Mon 27 Apr 2026 11:00:35 +0000 Manifest next update: Tue 28 Apr 2026 11:00:35 +0000 Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=) 2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=) 3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=) 4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=) 5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=) 6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=) 7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=) 8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: 7cAcOeRtBmcptS9TsXg0pqcXauZtGz0LGHISUFrPn+o=) 9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=) 10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=) 11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=) 12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:22:85:eb:c7:5c:8b:70:1b:6a:f9:52:20:08:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Apr 27 11:00:35 2026 GMT Not After : Apr 28 11:00:35 2026 GMT Subject: CN=0cfe5304fe6cb2c32eee85d7bbe64100557877e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:66:f8:96:39:df:ab:3e:7e:bd:32:15:8e: b6:48:f6:80:82:eb:45:63:53:be:ac:6d:6b:d4:13: 0a:df:5f:ad:6a:cf:3d:b6:be:f4:0c:fc:66:58:13: 80:08:d2:ca:f8:40:8d:43:fb:78:a5:c1:d0:e0:15: 13:01:36:2e:ce:7c:37:cf:64:69:64:2f:14:56:dd: f9:91:be:1b:9e:7f:13:4a:cb:34:59:85:ac:e4:38: 10:e9:4a:4a:5d:0b:c3:f8:c1:4c:7b:39:55:86:fa: 87:ce:c2:b1:85:94:bb:36:ad:dc:c2:e9:02:b9:09: 9d:76:29:f3:cb:9f:0c:cd:40:8f:e7:00:2b:56:1c: 05:3b:a9:77:40:ab:c4:59:ba:9c:d1:ce:aa:5b:3d: 8d:55:8c:dc:12:1f:2e:49:d0:8a:08:63:cd:12:32: 58:3b:04:d9:1b:d0:28:0a:5f:08:51:1e:7f:ae:32: a9:05:a6:25:4c:e9:5d:7d:44:fb:f9:4e:f1:c1:d4: 5d:2d:9b:12:0b:85:be:f6:ef:8b:a5:2e:b8:05:9f: db:d5:a0:b2:d3:a3:54:b2:9e:00:f2:35:d4:43:63: de:24:1f:5c:cb:02:f3:d5:02:31:25:bf:39:5a:fa: 72:0f:ad:d9:6f:99:b9:7e:68:67:08:57:22:50:24: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FE:53:04:FE:6C:B2:C3:2E:EE:85:D7:BB:E6:41:00:55:78:77:E1 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:04:ca:53:2c:d7:67:8f:2b:fa:5c:35:b1:50:87:ae:ba:d3: 63:86:89:2f:5f:6c:0d:63:ab:be:61:46:80:c3:2d:8f:af:2e: eb:8c:79:57:cc:99:78:ce:2b:d3:6a:16:aa:39:f5:02:a8:0a: 32:fb:dd:a6:fe:77:fe:61:56:d8:b3:2d:d0:78:4a:1c:1d:6a: 38:bc:13:8d:4e:bd:9e:8f:3b:c1:c9:a8:75:9d:ec:c9:06:f2: 70:08:66:10:a2:b3:e5:1f:79:9b:db:91:a8:bc:95:e2:5b:2f: 53:c9:9c:cb:1f:f1:0f:be:c7:7e:e2:d9:25:bb:2d:41:d4:59: cd:d2:db:b4:de:2a:76:79:c1:29:1e:29:75:da:55:e9:f6:f3: 20:5d:cd:32:e2:26:6b:b7:32:c3:65:ec:f5:e1:4e:3b:94:c7: 08:28:76:f3:02:94:12:ba:9e:81:1d:09:38:45:7b:fe:53:fe: ae:9a:ec:cb:2a:6f:69:39:fc:ae:8c:f3:02:04:ab:e1:cb:de: 23:88:79:6b:6e:08:13:ad:70:e2:99:e1:53:59:7f:5b:1f:7d: 86:72:74:59:ab:16:bb:22:a1:d5:ca:ad:71:91:57:b0:5d:de: 2c:35:68:d9:06:09:1f:65:8e:b0:88:12:2b:e9:5f:70:e5:74: 24:8c:58:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmSKF68dci3AbavlSIAg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwNDI3MTEwMDM1WhcNMjYwNDI4MTEwMDM1WjAzMTEwLwYDVQQD EygwY2ZlNTMwNGZlNmNiMmMzMmVlZTg1ZDdiYmU2NDEwMDU1Nzg3N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhFm+JY536s+fr0yFY62SPaAgutF Y1O+rG1r1BMK31+tas89tr70DPxmWBOACNLK+ECNQ/t4pcHQ4BUTATYuznw3z2Rp ZC8UVt35kb4bnn8TSss0WYWs5DgQ6UpKXQvD+MFMezlVhvqHzsKxhZS7Nq3cwukC uQmddinzy58MzUCP5wArVhwFO6l3QKvEWbqc0c6qWz2NVYzcEh8uSdCKCGPNEjJY OwTZG9AoCl8IUR5/rjKpBaYlTOldfUT7+U7xwdRdLZsSC4W+9u+LpS64BZ/b1aCy 06NUsp4A8jXUQ2PeJB9cywLz1QIxJb85WvpyD63Zb5m5fmhnCFciUCSdyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz+UwT+bLLDLu6F17vmQQBVeHfhMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwTKUyzX Z48r+lw1sVCHrrrTY4aJL19sDWOrvmFGgMMtj68u64x5V8yZeM4r02oWqjn1AqgK Mvvdpv53/mFW2LMt0HhKHB1qOLwTjU69no87wcmodZ3syQbycAhmEKKz5R95m9uR qLyV4lsvU8mcyx/xD77HfuLZJbstQdRZzdLbtN4qdnnBKR4pddpV6fbzIF3NMuIm a7cyw2Xs9eFOO5THCCh28wKUErqegR0JOEV7/lP+rprsyypvaTn8rozzAgSr4cve I4h5a24IE61w4pnhU1l/Wx99hnJ0WasWuyKh1cqtcZFXsF3eLDVo2QYJH2WOsIgS K+lfcOV0JIxYOQ== -----END CERTIFICATE-----Generated at Mon Apr 27 19:07:32 2026 by rpki-client