$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: r0+m7Xyr0SywqQ/ta/bFwZ1ETmJk4dc8Pv8lKWdRw+o= Subject key identifier: 23:D9:BB:6B:23:10:21:48:68:5B:87:B8:76:A2:04:93:B2:A5:F9:85 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019E74AE6C8877A2CC1180424B4D555E3C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 193E Signing time: Fri 29 May 2026 17:00:48 +0000 Manifest this update: Fri 29 May 2026 17:00:48 +0000 Manifest next update: Sat 30 May 2026 17:00:48 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: pfCoRGzkAWN6fA7bGIcNMaHp9QFj50WYNxC3qd/rBkI=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 May 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:74:ae:6c:88:77:a2:cc:11:80:42:4b:4d:55:5e:3c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: May 29 17:00:48 2026 GMT Not After : May 30 17:00:48 2026 GMT Subject: CN=23d9bb6b23102148685b87b876a20493b2a5f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3a:47:ff:4e:85:0a:58:dd:f8:af:88:b4:dc: 1c:01:55:98:63:15:66:61:e6:0c:b6:1e:e8:17:3b: 97:a4:25:a2:8a:04:33:15:4c:ee:9f:d1:37:d1:7b: fe:2e:f6:35:cb:e9:4f:26:7e:b1:63:06:b9:f4:12: ca:7d:45:0f:7e:b6:d5:f9:20:f0:a3:82:97:b9:57: 91:18:16:e6:ef:cc:de:75:83:e8:91:0d:41:26:72: 30:62:26:69:7e:bc:57:94:94:47:62:11:0e:3b:49: 38:83:ab:94:54:91:e4:43:0d:6d:3b:f5:4a:bc:bb: 8b:61:ac:25:42:24:75:8c:91:33:92:85:fc:92:dd: ba:bc:0b:a6:8b:34:f6:63:76:f9:c3:35:52:3b:e1: 3a:b4:6b:c4:06:37:03:7c:e6:af:57:fd:7c:c4:20: e1:38:95:e2:0e:12:f4:be:11:15:d3:d3:41:5f:58: cd:0a:27:38:84:2e:90:12:da:4f:f8:5e:cd:ff:0b: df:2f:99:44:22:ed:7d:e8:42:5f:6a:d9:5f:f0:24: bb:4d:78:c3:17:97:2f:59:4e:3e:b3:ac:84:e8:18: 86:bc:2d:50:64:83:16:09:03:14:b0:fb:87:f0:45: c0:06:58:33:d2:66:b6:53:d9:87:d8:a7:5b:89:63: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D9:BB:6B:23:10:21:48:68:5B:87:B8:76:A2:04:93:B2:A5:F9:85 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cf:58:ee:38:0c:a9:75:89:03:da:21:45:04:0a:71:7e:02: 93:a2:a7:e4:f3:c6:49:e9:28:5d:7e:f4:54:20:d5:46:0d:d7: 25:94:72:c2:9d:66:c2:59:e6:6f:d6:9f:bf:76:5d:a1:fb:ee: 4e:5c:88:a0:80:4c:22:d0:48:83:73:25:8b:a2:c1:51:ee:cb: 0a:68:c1:14:da:ec:46:f6:4e:2d:73:7f:49:75:23:8b:c2:dc: 00:39:97:29:e0:95:96:b6:6b:b3:0b:4e:ba:ef:de:47:e3:ab: b8:ea:e8:2a:d4:0d:5f:45:9b:92:e0:a2:08:58:7a:dd:d2:65: c8:86:82:40:8f:f3:32:c6:3f:f3:02:ce:55:b6:a0:5b:b8:ae: 36:c2:b3:b0:81:72:27:fd:a7:c7:50:03:cb:57:38:93:70:b4: ce:1c:0f:36:a8:00:d0:8d:30:8a:de:a2:37:75:9a:0d:d7:07: 9b:66:94:41:14:5a:0e:80:44:a2:5f:da:5e:40:cb:44:c3:d4: 13:72:64:2e:fb:54:0c:8a:02:80:65:1e:c1:ae:01:4a:53:7f: a3:00:7b:09:31:f2:16:f6:4e:4b:2c:fe:ed:29:ba:13:85:35: 7a:53:af:44:8e:d9:e6:fc:9c:71:3f:04:d6:d2:18:84:9e:2e: 22:d3:35:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ50rmyId6LMEYBCS01VXjxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNTI5MTcwMDQ4WhcNMjYwNTMwMTcwMDQ4WjAzMTEwLwYDVQQD EygyM2Q5YmI2YjIzMTAyMTQ4Njg1Yjg3Yjg3NmEyMDQ5M2IyYTVmOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zpH/06FCljd+K+ItNwcAVWYYxVm YeYMth7oFzuXpCWiigQzFUzun9E30Xv+LvY1y+lPJn6xYwa59BLKfUUPfrbV+SDw o4KXuVeRGBbm78zedYPokQ1BJnIwYiZpfrxXlJRHYhEOO0k4g6uUVJHkQw1tO/VK vLuLYawlQiR1jJEzkoX8kt26vAumizT2Y3b5wzVSO+E6tGvEBjcDfOavV/18xCDh OJXiDhL0vhEV09NBX1jNCic4hC6QEtpP+F7N/wvfL5lEIu196EJfatlf8CS7TXjD F5cvWU4+s6yE6BiGvC1QZIMWCQMUsPuH8EXABlgz0ma2U9mH2KdbiWNnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPZu2sjECFIaFuHuHaiBJOypfmFMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj89Y7jgM qXWJA9ohRQQKcX4Ck6Kn5PPGSekoXX70VCDVRg3XJZRywp1mwlnmb9afv3Zdofvu TlyIoIBMItBIg3Mli6LBUe7LCmjBFNrsRvZOLXN/SXUji8LcADmXKeCVlrZrswtO uu/eR+OruOroKtQNX0WbkuCiCFh63dJlyIaCQI/zMsY/8wLOVbagW7iuNsKzsIFy J/2nx1ADy1c4k3C0zhwPNqgA0I0wit6iN3WaDdcHm2aUQRRaDoBEol/aXkDLRMPU E3JkLvtUDIoCgGUewa4BSlN/owB7CTHyFvZOSyz+7Sm6E4U1elOvRI7Z5vyccT8E 1tIYhJ4uItM1Ng== -----END CERTIFICATE-----Generated at Fri May 29 21:43:19 2026 by rpki-client