$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: I9Rz9aAxgmK0+ji6XMcUDZ1pOz2XglpSN32dXz/klD8= Subject key identifier: 47:98:29:FD:61:C4:50:B0:17:47:6D:FC:11:2A:6C:F3:62:0F:09:6E Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019E6C1947B12AE85C49225758EC6E776589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 011C Signing time: Thu 28 May 2026 01:00:56 +0000 Manifest this update: Thu 28 May 2026 01:00:56 +0000 Manifest next update: Fri 29 May 2026 01:00:56 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: yMvyPqppMnTFs14VCTOc3CktbF94DQoDTiFkR4ZiZYA=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:6c:19:47:b1:2a:e8:5c:49:22:57:58:ec:6e:77:65:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: May 28 01:00:56 2026 GMT Not After : May 29 01:00:56 2026 GMT Subject: CN=479829fd61c450b017476dfc112a6cf3620f096e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:91:e3:c4:08:4c:d8:21:93:0f:5d:fc:db: 5f:5b:6f:1e:4e:22:c4:bd:26:f3:46:3d:5d:55:c3: 68:f8:4f:0d:e5:78:c0:98:c5:d1:0f:90:64:6b:76: bf:78:ba:9c:a6:10:e6:f3:29:25:39:a8:1c:61:d9: 8b:ea:c6:23:01:85:bf:4b:2c:39:cd:08:f8:9e:f4: 23:62:95:9e:bc:ec:06:7d:9f:68:f3:55:f2:fc:16: 16:56:ec:78:a7:2c:ae:1e:24:c1:2e:36:97:45:bb: d8:42:4b:07:4a:00:c4:ae:89:d8:bc:be:2d:a5:7c: e5:a3:34:31:21:7b:66:62:ab:39:a0:54:03:c0:e5: f1:9a:48:b3:f8:ba:75:6e:6e:e8:24:d9:1a:bb:32: 4f:54:ce:3b:ff:41:ce:96:b0:b9:1d:5b:f1:d2:ad: 5a:0d:bf:1b:6c:41:81:3d:59:42:df:7e:66:68:3a: d1:70:55:5d:02:57:bb:8c:b1:35:17:4c:20:0d:d5: 79:d4:a8:40:74:66:7d:60:2b:d0:4d:66:0c:db:7b: 1c:85:dc:c6:e2:51:4b:67:71:fd:a7:f0:88:20:54: d2:a0:32:14:c0:7c:1f:2e:fc:a2:d6:e3:53:d3:bc: be:a5:37:ac:13:d2:cb:a1:32:6a:44:d9:dc:ce:55: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:29:FD:61:C4:50:B0:17:47:6D:FC:11:2A:6C:F3:62:0F:09:6E X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:df:47:22:6d:ef:67:d6:c1:44:05:12:1b:73:c4:99:d6:1d: 3e:ec:9a:2a:7a:48:51:c4:27:a1:06:d1:22:56:30:7f:d4:9e: 62:06:d2:3a:c0:66:98:b0:db:d2:a7:95:66:a1:32:1a:83:b9: 61:3f:b3:d4:33:5a:41:7e:4f:48:74:fd:5f:ae:5b:cb:33:8d: 87:53:6c:4b:2e:e6:78:c5:2c:b4:3a:fa:f5:86:40:2d:57:16: f1:db:93:6b:53:c0:be:e1:7a:ba:63:02:ba:73:34:45:14:89: ea:4a:4e:5a:8c:be:9b:84:82:34:e7:c4:08:66:3d:81:cd:9e: 9d:8c:3d:5e:6f:c8:ac:1c:cb:8c:3d:8b:2f:8b:33:65:52:e2: f2:5c:a4:cf:ed:07:0b:f0:4e:f1:41:09:66:cd:fc:d0:4c:e1: 0f:f4:ef:6f:76:b9:55:c2:1d:75:6f:c7:2c:d7:d6:e4:85:0f: 59:1b:e1:4a:09:64:cc:57:c5:cd:47:79:b6:1a:6a:81:ec:f7: 66:b9:19:6a:78:75:b2:50:58:ff:c1:a5:6f:51:70:36:ba:87: 4d:cb:c3:2c:4e:f3:75:de:2c:b7:15:18:70:8f:89:3b:d4:da: e3:8d:79:50:20:44:c6:d1:06:46:fc:3b:01:24:af:f9:c9:64: cb:c8:43:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5sGUexKuhcSSJXWOxud2WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNTI4MDEwMDU2WhcNMjYwNTI5MDEwMDU2WjAzMTEwLwYDVQQD Eyg0Nzk4MjlmZDYxYzQ1MGIwMTc0NzZkZmMxMTJhNmNmMzYyMGYwOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSR48QITNghkw9d/NtfW28eTiLE vSbzRj1dVcNo+E8N5XjAmMXRD5Bka3a/eLqcphDm8yklOagcYdmL6sYjAYW/Syw5 zQj4nvQjYpWevOwGfZ9o81Xy/BYWVux4pyyuHiTBLjaXRbvYQksHSgDEronYvL4t pXzlozQxIXtmYqs5oFQDwOXxmkiz+Lp1bm7oJNkauzJPVM47/0HOlrC5HVvx0q1a Db8bbEGBPVlC335maDrRcFVdAle7jLE1F0wgDdV51KhAdGZ9YCvQTWYM23schdzG 4lFLZ3H9p/CIIFTSoDIUwHwfLvyi1uNT07y+pTesE9LLoTJqRNnczlU6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeYKf1hxFCwF0dt/BEqbPNiDwluMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj99HIm3v Z9bBRAUSG3PEmdYdPuyaKnpIUcQnoQbRIlYwf9SeYgbSOsBmmLDb0qeVZqEyGoO5 YT+z1DNaQX5PSHT9X65byzONh1NsSy7meMUstDr69YZALVcW8duTa1PAvuF6umMC unM0RRSJ6kpOWoy+m4SCNOfECGY9gc2enYw9Xm/IrBzLjD2LL4szZVLi8lykz+0H C/BO8UEJZs380EzhD/Tvb3a5VcIddW/HLNfW5IUPWRvhSglkzFfFzUd5thpqgez3 ZrkZanh1slBY/8Glb1FwNrqHTcvDLE7zdd4stxUYcI+JO9Ta4415UCBExtEGRvw7 ASSv+clky8hDBg== -----END CERTIFICATE-----Generated at Thu May 28 05:51:04 2026 by rpki-client