$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: LSRpH4mxgRa9EzaoztbWl20iJzibPSDWfv5q8/F7jGA= Subject key identifier: A8:B2:98:6B:E9:53:BB:64:22:F2:46:FE:6B:56:14:A5:F1:A4:A9:23 Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019DE445BF0E2FC79F7B053FFD40C9F7ADE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 1981 Signing time: Fri 01 May 2026 16:01:09 +0000 Manifest this update: Fri 01 May 2026 16:01:09 +0000 Manifest next update: Sat 02 May 2026 16:01:09 +0000 Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=) 2: 4YrP_GMXN-9_98lTPO7BAnb9Uww.roa (hash: ZE5NJ8weEe35ei1/Z8mIitscXSDfGVCMmkz9eemXrFY=) 3: 4jDuY8VO0qUXF7q46qoMV9gLKuM.roa (hash: viGMatLEXcz0cMUCHgF1aDM1PbJJdZT8heBBxrGwjjQ=) 4: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=) 5: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=) 6: CF8v_7CP69NrOln1kLcho0WvTUQ.roa (hash: qGT89sK/IEAzkkJR4Z6rBcs+Koq0fLCoBmu4JX+p5Xw=) 7: DblLYXIGEMn10bjafoE3RYpg084.roa (hash: /9cYHrgPsrPV+y83ZtewE2z9k66ot5C9ns5yRKrm9zs=) 8: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: efFGtMhYgNaZ3+O9/AFhx3hextyDKLI34blt5uhF+u0=) 9: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=) 10: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=) 11: aT_NF-3W3Lad21l-SRMcNJ4ndmA.roa (hash: /YnsUGWzI7HuX6dhQIDwbZFM15scYBxgtWzy8QmfJ0I=) 12: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e4:45:bf:0e:2f:c7:9f:7b:05:3f:fd:40:c9:f7:ad:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: May 1 16:01:09 2026 GMT Not After : May 2 16:01:09 2026 GMT Subject: CN=a8b2986be953bb6422f246fe6b5614a5f1a4a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:97:dc:95:cb:6b:38:f8:e2:83:96:95:b7: 6c:dc:07:45:fc:67:f2:ef:5f:12:d1:4b:d8:55:d2: 3a:02:77:6f:3f:8f:aa:51:7f:be:f3:b5:77:d1:34: 85:82:07:f7:8c:42:c4:63:62:0c:16:2a:62:98:d7: 51:61:e5:dc:5f:3f:31:65:9e:cc:c0:5a:8d:1c:6d: 79:8f:11:05:4f:46:6e:d5:4d:4c:c3:e6:67:69:d8: 32:35:de:ee:75:2f:56:b2:93:7e:44:b2:5f:ff:dc: 13:43:35:c6:0b:a3:fa:1a:29:14:4b:a1:43:c4:be: 55:ef:81:79:19:a5:14:b6:97:79:1e:5c:d3:88:8d: 6d:1d:db:cf:d1:bc:2d:cd:1d:e5:fc:1b:5d:e2:46: 92:93:71:7c:4f:de:1f:0e:fc:68:4a:c6:c9:cf:af: 22:4e:25:42:a9:91:25:78:56:53:52:61:84:ef:57: f5:2f:b0:12:0a:75:4b:ba:d0:33:43:b8:4d:64:86: 25:4a:0f:e4:51:80:ed:fb:a8:a6:61:e7:dc:a3:ef: 10:9f:70:95:f7:4f:26:5f:6c:0b:47:17:24:dc:02: 47:3f:a7:c7:d5:98:94:a3:5e:cd:57:de:0f:fa:25: d5:cb:09:79:51:b6:db:4f:83:96:0a:3e:17:69:91: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:98:6B:E9:53:BB:64:22:F2:46:FE:6B:56:14:A5:F1:A4:A9:23 X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a7:a9:20:41:7d:55:81:9e:7f:8c:4b:ec:4a:95:7a:4a:8c: b4:de:8d:74:61:3c:2d:30:61:b4:8a:7e:c9:93:2f:75:47:52: bd:56:32:ed:87:08:52:09:fe:4f:06:52:1e:8a:6f:d0:f0:a3: 08:92:44:2b:71:e3:9a:8e:e8:65:df:9a:29:a9:a8:ef:f8:1a: 0d:a9:ea:50:88:3e:72:1f:a9:4f:fe:53:1d:8d:04:f6:12:cf: e2:fc:9f:51:a2:fd:d4:b6:2e:93:b1:71:43:5a:72:4d:08:4e: 7f:e6:f6:e1:16:e0:36:94:85:58:05:ca:e9:7b:9c:de:d0:55: d2:0e:bc:e0:7d:c0:19:d3:b3:1f:5e:0d:48:ba:4e:d6:cc:30: e7:a6:df:63:b2:29:32:46:9b:3b:07:90:ed:8d:6d:d5:c7:4d: fc:d0:24:cf:de:59:26:35:1a:23:ab:38:66:f5:d2:78:ff:2d: 7f:f3:43:4a:23:21:f7:b7:3e:40:ef:3b:58:f2:d3:f0:30:ad: ee:3f:f8:15:fe:4f:07:dc:1c:aa:1d:e2:ce:ec:4a:9d:ae:db: 0a:45:03:6f:58:5b:f6:0d:fe:5d:66:43:9b:3f:b4:c2:a3:98: 76:9e:b5:9e:a0:a8:cc:9c:26:98:88:09:e4:0b:24:2f:c2:3f: a1:e3:c6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3kRb8OL8efewU//UDJ963oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwNTAxMTYwMTA5WhcNMjYwNTAyMTYwMTA5WjAzMTEwLwYDVQQD EyhhOGIyOTg2YmU5NTNiYjY0MjJmMjQ2ZmU2YjU2MTRhNWYxYTRhOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VmX3JXLazj44oOWlbds3AdF/Gfy 718S0UvYVdI6AndvP4+qUX++87V30TSFggf3jELEY2IMFipimNdRYeXcXz8xZZ7M wFqNHG15jxEFT0Zu1U1Mw+ZnadgyNd7udS9WspN+RLJf/9wTQzXGC6P6GikUS6FD xL5V74F5GaUUtpd5HlzTiI1tHdvP0bwtzR3l/Btd4kaSk3F8T94fDvxoSsbJz68i TiVCqZEleFZTUmGE71f1L7ASCnVLutAzQ7hNZIYlSg/kUYDt+6imYefco+8Qn3CV 908mX2wLRxck3AJHP6fH1ZiUo17NV94P+iXVywl5UbbbT4OWCj4XaZEcFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiymGvpU7tkIvJG/mtWFKXxpKkjMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaepIEF9 VYGef4xL7EqVekqMtN6NdGE8LTBhtIp+yZMvdUdSvVYy7YcIUgn+TwZSHopv0PCj CJJEK3Hjmo7oZd+aKamo7/gaDanqUIg+ch+pT/5THY0E9hLP4vyfUaL91LYuk7Fx Q1pyTQhOf+b24RbgNpSFWAXK6Xuc3tBV0g684H3AGdOzH14NSLpO1sww56bfY7Ip MkabOweQ7Y1t1cdN/NAkz95ZJjUaI6s4ZvXSeP8tf/NDSiMh97c+QO87WPLT8DCt 7j/4Ff5PB9wcqh3izuxKna7bCkUDb1hb9g3+XWZDmz+0wqOYdp61nqCozJwmmIgJ 5AskL8I/oePGCA== -----END CERTIFICATE-----Generated at Fri May 1 22:59:34 2026 by rpki-client