$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: iMBDtzBXwomO0X+bRmv8C9Cb3m7RKhdkH5cQd/X9Hg8= Subject key identifier: EB:13:83:F9:82:C8:34:EC:A3:16:00:C6:07:AA:DF:D1:EF:8F:94:B1 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019D826C4986265EA258BB32F5F768AB9382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: A2 Signing time: Sun 12 Apr 2026 16:00:27 +0000 Manifest this update: Sun 12 Apr 2026 16:00:27 +0000 Manifest next update: Mon 13 Apr 2026 16:00:27 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: 4Gbt/+j200XDm95B7Nt0K1J+wZDQtz0UzCt9Pr11hQY=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:82:6c:49:86:26:5e:a2:58:bb:32:f5:f7:68:ab:93:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Apr 12 16:00:27 2026 GMT Not After : Apr 13 16:00:27 2026 GMT Subject: CN=eb1383f982c834eca31600c607aadfd1ef8f94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:68:e0:76:22:1a:94:23:01:86:b0:ea:9a: 49:4e:bb:bd:17:b5:97:25:4d:7d:30:77:94:37:b5: dd:b5:c7:62:ae:40:91:8a:13:37:fd:2c:bf:f6:6e: b6:48:1a:78:4d:67:46:c1:86:ca:10:5a:42:ff:eb: 1d:17:50:08:a3:da:ce:ef:77:c2:97:66:87:31:32: 43:a0:56:4f:d1:3c:11:0a:a9:d4:61:2d:83:42:a9: 9c:47:4a:e0:4f:91:6b:66:4b:98:8a:64:20:8a:3b: 58:b9:67:8c:ee:b0:f7:33:53:59:6b:54:83:e1:1e: 8e:31:4d:a3:19:d3:1f:ef:80:31:62:74:64:34:22: 5e:5b:4a:4a:30:cc:9f:23:39:08:c0:68:5e:17:f7: 72:cd:95:08:81:67:5f:f9:90:48:35:81:07:bd:c1: bf:20:4f:1c:8e:3c:a0:4b:86:f1:70:4b:14:e0:e1: 50:dd:17:bd:fb:ce:eb:6d:0d:2e:00:e1:9e:08:d4: f7:02:cb:2c:4c:b0:35:b1:dd:30:3f:e5:93:2b:53: b5:ff:89:e8:c0:a7:91:a3:64:71:75:13:83:29:14: 22:33:e3:a5:32:b1:dd:f4:6f:3d:86:f8:41:91:fa: 45:45:c8:a7:66:e0:01:46:e4:fc:8d:78:ac:e1:55: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:13:83:F9:82:C8:34:EC:A3:16:00:C6:07:AA:DF:D1:EF:8F:94:B1 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:fb:18:4a:b5:ac:5d:f3:59:3f:03:83:1b:3f:b9:7b:b7: 7c:41:2a:84:58:ba:39:e9:4c:49:dd:fa:69:6d:8b:fd:4a:19: 31:20:cc:ef:ce:1f:30:e0:1b:ff:c5:f9:a4:5e:c6:3e:03:55: 42:a7:02:c4:d6:28:f3:58:a1:f2:52:20:5a:ae:91:9a:38:64: 4d:95:d8:33:2b:1d:11:06:0e:9d:af:0e:a0:3e:9b:0e:f0:f3: 73:e1:1e:dd:e0:85:37:20:82:37:d8:4d:cc:2b:49:16:c2:d2: e2:4f:5d:51:98:ee:c4:49:6d:86:0c:c3:3e:8a:2c:32:98:0d: 0d:cc:e2:5e:0e:f0:01:95:fb:6b:a6:2e:26:a1:b9:08:90:f0: 94:9d:46:ae:55:84:c2:e1:cd:aa:8b:99:8f:72:e5:87:d4:92: 11:30:83:24:73:97:d3:18:36:e1:d3:bb:68:e9:9e:93:17:2b: 01:b3:ce:e7:51:eb:2a:9b:46:ba:3f:fd:ef:8d:4f:7e:54:24: 9c:d2:f1:22:41:0c:aa:61:bb:85:d4:6e:ea:04:49:37:5e:70: 3d:8d:a9:70:00:2b:24:54:fe:4e:32:41:50:59:4e:5d:5a:ce: 03:4f:13:95:10:4d:b8:fc:fd:67:3b:d2:e0:5d:1a:c8:b6:9f: 39:38:83:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2CbEmGJl6iWLsy9fdoq5OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwNDEyMTYwMDI3WhcNMjYwNDEzMTYwMDI3WjAzMTEwLwYDVQQD EyhlYjEzODNmOTgyYzgzNGVjYTMxNjAwYzYwN2FhZGZkMWVmOGY5NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFo4HYiGpQjAYaw6ppJTru9F7WX JU19MHeUN7XdtcdirkCRihM3/Sy/9m62SBp4TWdGwYbKEFpC/+sdF1AIo9rO73fC l2aHMTJDoFZP0TwRCqnUYS2DQqmcR0rgT5FrZkuYimQgijtYuWeM7rD3M1NZa1SD 4R6OMU2jGdMf74AxYnRkNCJeW0pKMMyfIzkIwGheF/dyzZUIgWdf+ZBINYEHvcG/ IE8cjjygS4bxcEsU4OFQ3Re9+87rbQ0uAOGeCNT3AsssTLA1sd0wP+WTK1O1/4no wKeRo2RxdRODKRQiM+OlMrHd9G89hvhBkfpFRcinZuABRuT8jXis4VXjwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsTg/mCyDTsoxYAxgeq39Hvj5SxMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1f7GEq1 rF3zWT8Dgxs/uXu3fEEqhFi6OelMSd36aW2L/UoZMSDM784fMOAb/8X5pF7GPgNV QqcCxNYo81ih8lIgWq6RmjhkTZXYMysdEQYOna8OoD6bDvDzc+Ee3eCFNyCCN9hN zCtJFsLS4k9dUZjuxElthgzDPoosMpgNDcziXg7wAZX7a6YuJqG5CJDwlJ1GrlWE wuHNqouZj3Llh9SSETCDJHOX0xg24dO7aOmekxcrAbPO51HrKptGuj/9741PflQk nNLxIkEMqmG7hdRu6gRJN15wPY2pcAArJFT+TjJBUFlOXVrOA08TlRBNuPz9ZzvS 4F0ayLafOTiDKw== -----END CERTIFICATE-----Generated at Mon Apr 13 02:31:14 2026 by rpki-client