$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: fjzFju3M8zV39b8f1aNb1+ZH+R49wRUCmupBmcdT19Q= Subject key identifier: 6F:BB:47:23:CC:11:47:05:2D:10:30:B0:CC:59:24:05:D7:F6:A8:67 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019DCF07A559F8AD0915B735B4AEFA396658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 1622 Signing time: Mon 27 Apr 2026 13:01:17 +0000 Manifest this update: Mon 27 Apr 2026 13:01:17 +0000 Manifest next update: Tue 28 Apr 2026 13:01:17 +0000 Files and hashes: 1: 5aiykt3mjvJP4kKO_vI52BZHgow.roa (hash: iWxQUr7yp7vrCgfoSZihkj/CF4SKzIJOhHhfLwotcEE=) 2: 6R3hYH4nng5n1ghJI5Wsn7rgU70.roa (hash: tKmCA2VGu6pMRqdgLGwiEGxhCkj7+kJ1MpdL9zoZeLg=) 3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: Vqlp44NRKQfB4qz8uvhY+T0DlfBH1qs7UEKvaeT0GYk=) 4: GEH0KcgFtkEgfOjHGAYLpjaTGlM.roa (hash: pDgheK9VVM6MnVLVYSFwhImHJu+EPJ0spm4cHHYyxB4=) 5: JzOppLz49d2UWrVc3_ozRSf9kTs.roa (hash: ldBSJ9nX6LcXWYtAXHd0sUG1NRIH+C7iBArXGAv52zU=) 6: Pyk_bRJ7ejk8_Fumq-HLryuJP9M.roa (hash: LaJyZ9csQEU1luirKy+kAgu3mEKujZJxSTQyIvGuEr4=) 7: Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa (hash: xl3H7Ui7pyYxDCWSICK+n2RNpa4LQr31FnkPCNajMaE=) 8: SRIEH_ip-JAC8FRBxZOXC-V6_Rc.roa (hash: P09SRGvyFJXlrrkyat3yhBb/KjpwODT4F8eDAR8AnFI=) 9: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (hash: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q=) 10: WtWfOSH1xg4tDfqcdTAxqRpWFVA.roa (hash: AIFk01h0tMQIOg1R1VI1vZ9Z/E9vbhpIO7oshPhdH9Q=) 11: idDB5SsOi3M4d5YPdc4kaYpnsfY.roa (hash: VzSr4liY8PEx5fC0RMBBlkwvYxH1Ole1oxoZXE3bNBo=) 12: kelA1bjmusiDmCW1K47dqweiIW8.roa (hash: bPpEpCtGqf74OwrxtLTkdNIJWgNMPzrtzZREOLihZ2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:a5:59:f8:ad:09:15:b7:35:b4:ae:fa:39:66:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Apr 27 13:01:17 2026 GMT Not After : Apr 28 13:01:17 2026 GMT Subject: CN=6fbb4723cc1147052d1030b0cc592405d7f6a867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:7e:59:85:9e:3d:72:b4:2d:8a:7c:2d:d1: 32:a9:a0:71:9a:9b:9b:9e:5b:e0:2f:da:80:b8:5c: 8b:08:08:ce:42:b2:f4:a6:fe:40:4f:c0:19:71:b6: da:71:41:f0:fb:86:46:76:93:aa:fa:b8:f3:1d:6d: bf:76:64:ee:e6:da:13:9b:af:3f:46:55:68:d2:90: b0:1f:cd:c2:71:a4:f6:93:0f:54:57:ad:d5:e9:17: 78:4c:ae:b7:86:5f:e1:5a:1b:cc:92:4d:75:97:31: 37:29:49:3a:27:f9:c2:cb:e2:4a:be:45:85:12:f7: d4:fc:9d:87:16:60:93:97:62:2c:b4:fc:b9:b9:e7: b8:6e:06:60:4a:33:c8:42:16:f1:ff:56:cd:93:5c: 1f:e9:85:9e:7b:0a:96:72:63:62:89:4c:ba:23:30: 4f:97:93:3d:89:94:b9:27:82:45:ee:35:43:3d:aa: 4e:8a:b8:98:b4:56:b4:aa:4b:6b:1d:f2:56:8d:83: 9c:89:1e:ec:c4:0a:ee:7d:b9:f5:47:75:85:4d:be: 65:34:e0:ea:84:2b:e1:66:b7:86:b4:7d:4b:42:ea: 13:09:23:37:9f:73:6c:21:dc:ff:23:84:8c:29:6d: 6a:a8:b2:9c:63:4e:d2:a6:91:3c:03:9f:47:41:c0: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BB:47:23:CC:11:47:05:2D:10:30:B0:CC:59:24:05:D7:F6:A8:67 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dc:1a:e3:c3:38:c5:fb:6c:6d:ac:d1:f5:d5:42:06:a9:0c: f7:f1:95:a7:f3:7f:84:86:e9:96:6e:c6:9e:39:7c:97:e2:f6: fb:46:31:2d:21:56:24:41:12:ea:80:81:38:1d:0c:3a:45:70: 01:43:90:08:50:ca:c7:ba:6a:ac:9f:8a:c5:6f:68:ce:24:35: 83:34:5f:38:c6:35:0d:ef:f0:c0:c7:09:e4:de:41:24:21:c7: bc:d9:45:5f:b3:08:fe:34:0c:7b:1c:5c:62:1e:c7:96:84:e9: f3:3a:af:e5:6f:91:19:a1:70:a8:67:48:1a:ad:ca:af:c6:f2: 9b:b5:19:ed:22:6b:dd:0b:5d:48:ec:0f:b0:46:9c:79:1d:b9: 63:2f:51:77:a6:36:81:52:a6:35:d3:dd:1f:68:a2:44:e3:09: 09:bb:10:a7:d7:c0:fe:03:6b:91:61:61:00:a8:60:45:60:e1: 5c:af:23:85:0e:e1:85:a4:9b:f5:45:7d:ab:59:08:a5:89:9e: 44:be:77:0f:34:0e:9f:ea:ee:73:b9:19:ef:87:06:cb:90:c5: d3:88:a8:f3:84:c7:a5:fe:8f:b4:5f:f8:c4:a3:81:a8:22:50: 43:29:78:42:dc:f6:f6:c0:90:75:73:67:79:50:30:ac:e8:d3: b5:1b:1c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PB6VZ+K0JFbc1tK76OWZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwNDI3MTMwMTE3WhcNMjYwNDI4MTMwMTE3WjAzMTEwLwYDVQQD Eyg2ZmJiNDcyM2NjMTE0NzA1MmQxMDMwYjBjYzU5MjQwNWQ3ZjZhODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmV+WYWePXK0LYp8LdEyqaBxmpub nlvgL9qAuFyLCAjOQrL0pv5AT8AZcbbacUHw+4ZGdpOq+rjzHW2/dmTu5toTm68/ RlVo0pCwH83CcaT2kw9UV63V6Rd4TK63hl/hWhvMkk11lzE3KUk6J/nCy+JKvkWF EvfU/J2HFmCTl2IstPy5uee4bgZgSjPIQhbx/1bNk1wf6YWeewqWcmNiiUy6IzBP l5M9iZS5J4JF7jVDPapOiriYtFa0qktrHfJWjYOciR7sxArufbn1R3WFTb5lNODq hCvhZreGtH1LQuoTCSM3n3NsIdz/I4SMKW1qqLKcY07SppE8A59HQcCsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+7RyPMEUcFLRAwsMxZJAXX9qhnMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtwa48M4 xftsbazR9dVCBqkM9/GVp/N/hIbplm7Gnjl8l+L2+0YxLSFWJEES6oCBOB0MOkVw AUOQCFDKx7pqrJ+KxW9oziQ1gzRfOMY1De/wwMcJ5N5BJCHHvNlFX7MI/jQMexxc Yh7HloTp8zqv5W+RGaFwqGdIGq3Kr8bym7UZ7SJr3QtdSOwPsEaceR25Yy9Rd6Y2 gVKmNdPdH2iiROMJCbsQp9fA/gNrkWFhAKhgRWDhXK8jhQ7hhaSb9UV9q1kIpYme RL53DzQOn+ruc7kZ74cGy5DF04io84THpf6PtF/4xKOBqCJQQyl4Qtz29sCQdXNn eVAwrOjTtRscoA== -----END CERTIFICATE-----Generated at Mon Apr 27 23:13:27 2026 by rpki-client