$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: ze5Y7vvw9lCIWKmHsANMO9wRf736OUKZkbjsHYL1KOE= Subject key identifier: BA:72:F5:7C:D3:10:09:D7:46:49:4F:FD:1F:9D:BD:9F:E9:70:8E:F8 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019E295DFF388EF79EEB478B35FA45138D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0A88 Signing time: Fri 15 May 2026 02:01:26 +0000 Manifest this update: Fri 15 May 2026 02:01:26 +0000 Manifest next update: Sat 16 May 2026 02:01:26 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: 4CT0FM9cvJG3HYZzgSfnbYpcNEDZvmTIZOf2KBm46cY=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:5d:ff:38:8e:f7:9e:eb:47:8b:35:fa:45:13:8d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: May 15 02:01:26 2026 GMT Not After : May 16 02:01:26 2026 GMT Subject: CN=ba72f57cd31009d746494ffd1f9dbd9fe9708ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:35:e9:71:0c:96:22:f1:02:ae:58:66:b1: ca:1b:57:17:44:7e:1b:83:35:04:49:12:1b:38:5f: 87:b3:b1:1f:5b:ed:84:b1:99:7d:9b:a5:fb:d7:70: ee:50:a2:e0:53:e8:7e:4c:d9:43:97:f0:78:1d:10: 29:62:ed:5c:6d:ff:5a:33:05:f7:fb:13:f9:04:08: d6:6c:f3:77:b4:cc:69:3c:5a:4e:9c:ab:81:9f:21: c3:25:7e:f6:43:9a:38:dc:c3:4a:2c:80:58:af:28: b6:3d:d2:8b:0e:b4:06:a6:18:79:29:03:33:41:c5: 21:3d:cf:a0:55:ed:63:65:1f:26:36:0c:38:20:b1: 97:80:ad:b8:5e:62:dc:09:b9:a7:5c:ec:74:e0:a5: 3a:3a:47:25:bd:63:bd:51:d8:1e:f8:ea:92:ed:e8: 1c:c3:0e:0b:70:87:51:b4:67:51:ee:ba:4f:26:e5: 45:1f:14:7c:17:5f:0b:33:0b:fb:d6:81:78:e6:8e: 97:67:43:93:73:e2:94:16:e7:a3:e1:b9:66:c3:8b: 06:16:52:e2:cb:1e:7d:50:8d:6f:52:61:66:f6:a4: d1:29:4d:a0:45:a6:d2:fe:00:d2:e2:aa:b4:08:e2: df:bf:65:fe:c8:e5:cb:61:09:b5:72:b9:46:e8:2e: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:F5:7C:D3:10:09:D7:46:49:4F:FD:1F:9D:BD:9F:E9:70:8E:F8 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:40:6e:2d:d1:10:d4:31:cb:08:cd:ba:92:9b:de:66:2b: db:72:41:d1:bc:d5:e7:3a:74:a8:72:80:81:fe:a6:eb:e2:26: d7:39:ad:5d:72:22:de:8c:90:e6:f3:88:ed:6f:20:d2:24:f4: 69:b6:51:e3:eb:86:94:b0:ca:18:c5:0b:5f:12:ce:bf:22:36: 73:a6:35:45:bc:f2:d4:f9:7a:9b:af:7b:fd:d0:44:ad:5d:67: b1:2c:d7:49:be:ae:d4:7c:e3:d0:0c:e5:b6:10:b5:9c:ef:72: 85:40:19:3f:a1:5c:67:8e:38:84:ea:46:16:13:c7:f6:ef:1c: 7a:f5:e0:4f:37:9c:4b:34:f5:53:53:4b:69:dc:24:d3:9a:db: d9:c9:19:8b:ac:14:83:cc:3b:8b:7c:8c:86:9d:32:09:ab:2d: 9c:38:3c:8d:8d:86:e9:8f:50:87:5b:15:32:60:5f:9a:c3:1d: 21:2c:59:0a:ad:c2:fe:88:14:be:0c:e1:a3:df:ef:8c:11:cd: b4:21:09:bf:1a:3b:fc:40:43:d0:26:90:4b:56:51:3a:d8:7c: 29:e5:a5:d2:d7:37:05:81:cb:7f:19:49:df:3c:0d:6c:2b:1f: 23:f3:be:57:b6:bd:49:e0:69:07:b0:e7:a2:7e:32:c4:05:b1: cf:44:61:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4pXf84jvee60eLNfpFE41/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwNTE1MDIwMTI2WhcNMjYwNTE2MDIwMTI2WjAzMTEwLwYDVQQD EyhiYTcyZjU3Y2QzMTAwOWQ3NDY0OTRmZmQxZjlkYmQ5ZmU5NzA4ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJo16XEMliLxAq5YZrHKG1cXRH4b gzUESRIbOF+Hs7EfW+2EsZl9m6X713DuUKLgU+h+TNlDl/B4HRApYu1cbf9aMwX3 +xP5BAjWbPN3tMxpPFpOnKuBnyHDJX72Q5o43MNKLIBYryi2PdKLDrQGphh5KQMz QcUhPc+gVe1jZR8mNgw4ILGXgK24XmLcCbmnXOx04KU6OkclvWO9Udge+OqS7egc ww4LcIdRtGdR7rpPJuVFHxR8F18LMwv71oF45o6XZ0OTc+KUFuej4blmw4sGFlLi yx59UI1vUmFm9qTRKU2gRabS/gDS4qq0COLfv2X+yOXLYQm1crlG6C5NdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpy9XzTEAnXRklP/R+dvZ/pcI74MB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqtAbi3R ENQxywjNupKb3mYr23JB0bzV5zp0qHKAgf6m6+Im1zmtXXIi3oyQ5vOI7W8g0iT0 abZR4+uGlLDKGMULXxLOvyI2c6Y1Rbzy1Pl6m697/dBErV1nsSzXSb6u1Hzj0Azl thC1nO9yhUAZP6FcZ444hOpGFhPH9u8cevXgTzecSzT1U1NLadwk05rb2ckZi6wU g8w7i3yMhp0yCastnDg8jY2G6Y9Qh1sVMmBfmsMdISxZCq3C/ogUvgzho9/vjBHN tCEJvxo7/EBD0CaQS1ZROth8KeWl0tc3BYHLfxlJ3zwNbCsfI/O+V7a9SeBpB7Dn on4yxAWxz0RhiQ== -----END CERTIFICATE-----Generated at Fri May 15 06:16:05 2026 by rpki-client