$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: ghi3oeu2iASkGJ/MjaftTk7dJqtFAdEo5fBu2J4D18w= Subject key identifier: 08:EB:CA:CB:28:BE:2C:F4:31:AD:75:64:1C:16:55:20:73:E6:1F:F2 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019D826CCAE78400F4712BAD15DC26127E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: A3 Signing time: Sun 12 Apr 2026 16:01:01 +0000 Manifest this update: Sun 12 Apr 2026 16:01:01 +0000 Manifest next update: Mon 13 Apr 2026 16:01:01 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: MtTqCbB1m0zpGkKGaN7gRFE+Pg+V2RR6/aQB6ukKgog=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:82:6c:ca:e7:84:00:f4:71:2b:ad:15:dc:26:12:7e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Apr 12 16:01:01 2026 GMT Not After : Apr 13 16:01:01 2026 GMT Subject: CN=08ebcacb28be2cf431ad75641c16552073e61ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:3c:ff:07:ef:5a:45:1c:f6:f4:d7:c4:c1: 4b:f5:27:3a:ed:81:a8:3d:fb:7d:06:da:94:f9:1f: 68:22:13:18:9e:01:f7:6e:9c:d1:1f:b9:0e:58:21: da:96:a1:72:dd:29:a7:8e:3d:46:b0:d0:f2:b5:34: 74:28:32:a7:ff:ad:48:8d:00:63:c3:6a:f8:59:04: 81:84:4c:69:9a:07:3d:7d:11:7f:c1:89:6c:85:f3: db:ad:34:03:a4:5b:c5:e7:51:d1:fc:b3:32:67:1e: 23:2d:f4:c9:64:d7:5a:4c:9d:04:4c:17:86:b2:69: 1d:45:59:11:e8:78:3c:8d:77:ab:9c:9a:12:44:b1: 51:16:be:76:7a:ad:82:9b:23:b0:ec:1a:3a:d0:2a: 25:1f:17:c4:a9:d2:8f:c3:05:c0:f7:65:02:31:26: 4c:dc:5c:c8:29:12:71:37:d6:51:8c:75:81:4a:bc: 66:00:df:e2:d9:e6:e7:77:cb:36:b4:98:06:f4:13: c2:54:af:75:d6:93:32:9b:da:53:2f:88:a9:a8:90: 65:0e:34:58:b8:10:b7:6d:5c:12:d0:64:7d:2d:ec: 1c:37:e4:33:1b:aa:0e:8f:db:a1:14:83:b0:50:49: 77:ad:c3:a5:c0:7f:af:f9:f1:25:cb:ab:a6:17:ec: ee:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:CA:CB:28:BE:2C:F4:31:AD:75:64:1C:16:55:20:73:E6:1F:F2 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:d1:ce:56:6d:59:b5:68:31:1e:e0:9c:0a:50:11:31:a0:d8: 0c:0f:1f:42:1e:7d:4d:d5:ed:ed:20:d8:1f:0a:47:8e:cc:06: 30:fe:5c:ed:82:39:c9:49:58:59:1c:e3:13:d9:02:ea:47:1f: c1:d5:68:73:6a:da:75:ce:f6:e0:18:08:c2:ee:4b:7d:d2:7e: 14:54:6a:56:89:39:1d:ae:f5:d3:ac:48:a0:24:77:25:77:06: 31:45:0f:50:36:72:bf:fb:0a:03:03:37:a0:d5:d4:dc:70:32: 88:34:14:20:40:20:a9:7a:dd:eb:ee:3e:3b:ca:c1:02:6f:93: e2:57:0e:6c:0c:dc:23:ad:93:07:0a:e7:f1:13:89:dd:13:30: 79:84:18:3c:32:a6:b3:c5:57:f1:9f:ec:1c:99:c7:44:47:ba: 80:e2:08:ef:0a:7e:ae:3e:e9:11:cf:72:f1:25:4b:f9:0c:9a: b2:bf:30:5d:49:18:89:f0:b3:b2:0b:27:68:97:f3:96:33:53: 26:67:75:60:e9:90:7c:10:5c:24:3f:4d:3f:94:df:10:a5:19: 90:e0:cc:f3:e6:43:bb:5c:f5:2a:44:a1:58:43:d4:1d:8c:95: 84:8b:c4:6a:b8:31:8f:f1:a5:01:c8:14:7f:5a:65:cd:a5:11: 11:36:30:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2CbMrnhAD0cSutFdwmEn4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNDEyMTYwMTAxWhcNMjYwNDEzMTYwMTAxWjAzMTEwLwYDVQQD EygwOGViY2FjYjI4YmUyY2Y0MzFhZDc1NjQxYzE2NTUyMDczZTYxZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgw8/wfvWkUc9vTXxMFL9Sc67YGo Pft9BtqU+R9oIhMYngH3bpzRH7kOWCHalqFy3Smnjj1GsNDytTR0KDKn/61IjQBj w2r4WQSBhExpmgc9fRF/wYlshfPbrTQDpFvF51HR/LMyZx4jLfTJZNdaTJ0ETBeG smkdRVkR6Hg8jXernJoSRLFRFr52eq2CmyOw7Bo60ColHxfEqdKPwwXA92UCMSZM 3FzIKRJxN9ZRjHWBSrxmAN/i2ebnd8s2tJgG9BPCVK911pMym9pTL4ipqJBlDjRY uBC3bVwS0GR9LewcN+QzG6oOj9uhFIOwUEl3rcOlwH+v+fEly6umF+zuHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjryssoviz0Ma11ZBwWVSBz5h/yMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2dHOVm1Z tWgxHuCcClARMaDYDA8fQh59TdXt7SDYHwpHjswGMP5c7YI5yUlYWRzjE9kC6kcf wdVoc2radc724BgIwu5LfdJ+FFRqVok5Ha7106xIoCR3JXcGMUUPUDZyv/sKAwM3 oNXU3HAyiDQUIEAgqXrd6+4+O8rBAm+T4lcObAzcI62TBwrn8ROJ3RMweYQYPDKm s8VX8Z/sHJnHREe6gOII7wp+rj7pEc9y8SVL+Qyasr8wXUkYifCzsgsnaJfzljNT Jmd1YOmQfBBcJD9NP5TfEKUZkODM8+ZDu1z1KkShWEPUHYyVhIvEargxj/GlAcgU f1plzaURETYwOQ== -----END CERTIFICATE-----Generated at Mon Apr 13 02:20:44 2026 by rpki-client