$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: zCP4FoItk1Nm1pPj5OB13KXVhjV56oHT9Bpk/lVFHFY= Subject key identifier: 53:22:0C:A7:EA:29:1E:CA:F2:0F:30:9F:D6:7F:42:66:61:47:0E:68 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019E6C190ED21221E1C86C75BCD140CE56E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 011B Signing time: Thu 28 May 2026 01:00:41 +0000 Manifest this update: Thu 28 May 2026 01:00:41 +0000 Manifest next update: Fri 29 May 2026 01:00:41 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: 8r9n/fOCuxpiTzQcqIkbNiFRpTquP5cPgc+PV/X+MDo=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:6c:19:0e:d2:12:21:e1:c8:6c:75:bc:d1:40:ce:56:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: May 28 01:00:41 2026 GMT Not After : May 29 01:00:41 2026 GMT Subject: CN=53220ca7ea291ecaf20f309fd67f426661470e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:4e:ea:e9:55:e6:c8:28:a6:f4:f9:a7:ec: 84:79:41:e5:4a:0d:99:3a:de:4f:8e:2a:70:b1:1b: 66:70:60:49:f6:99:08:39:7a:ab:b2:83:9e:21:d7: 65:c4:8d:24:51:b7:bd:ad:8f:46:c1:1d:cb:79:be: 68:28:be:a6:0f:08:da:5b:70:c5:1d:eb:22:2d:09: 69:48:34:02:67:ac:ca:b4:b4:3e:8b:1a:fb:f0:0b: 8f:0b:fb:10:7d:5e:5b:dd:29:63:70:8f:8b:a4:8d: 89:fc:04:77:b4:45:ff:b0:94:db:68:f3:8b:39:4c: 2a:8b:73:ab:60:45:29:2e:79:f1:9d:ec:a3:15:0f: 10:40:a6:42:aa:2e:25:0c:21:5b:78:d5:fa:b0:17: a6:21:aa:a9:b4:dd:ea:c1:50:f1:f9:f8:86:cb:aa: 72:a9:b9:fe:93:b2:b1:a6:2b:a2:07:4e:21:61:0d: 62:32:9f:00:1a:63:69:84:26:83:be:a1:d2:7f:ea: 54:cd:44:a4:aa:39:31:04:ae:96:b1:c4:3a:0c:14: ff:03:10:51:07:f5:93:88:d4:88:84:13:9f:1a:17: 6a:e7:f1:d5:d0:72:30:fc:5e:1d:a4:88:0c:8a:36: eb:4b:dd:a9:76:6b:db:1b:ea:67:ee:88:a5:10:7f: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:0C:A7:EA:29:1E:CA:F2:0F:30:9F:D6:7F:42:66:61:47:0E:68 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:2d:5c:18:e9:ea:dc:cf:6c:61:7c:90:01:98:c0:f5:79: e6:5b:c1:73:34:49:0d:9e:5d:50:df:48:20:50:b9:9a:c7:2d: ec:0d:6d:40:ca:e0:b8:dc:02:e9:70:37:a1:de:1a:36:75:d7: 1d:7d:3b:82:3e:ae:0c:33:52:20:d8:7e:7c:13:43:6d:ee:08: bb:73:02:2f:f9:65:7c:e5:b3:c3:c6:0b:cf:ad:14:ed:88:c1: 8c:37:96:dd:47:d5:17:38:0e:76:3a:98:44:d7:7e:26:f8:87: 05:85:b6:af:79:fc:fd:dd:e6:ab:d5:be:c5:b8:60:7b:28:0d: 77:a8:15:31:29:5b:8e:b3:ad:38:0a:cd:34:7b:f3:e0:ca:3b: 29:39:32:6c:28:6a:7c:b7:0a:f9:17:1c:c3:04:38:a8:4f:0a: da:25:48:70:91:72:76:17:61:4a:bf:79:2f:e7:60:a5:e1:c1: d6:65:0a:86:3d:65:71:50:f5:14:a7:60:a9:2d:f5:95:55:74: 31:a7:b5:b7:2e:2b:22:fe:f5:69:86:c2:03:34:45:92:a9:55: a1:ee:27:76:ae:36:d1:6a:4d:4b:77:3e:22:a2:eb:92:f1:f9: 83:e9:dc:37:fb:d4:8e:b4:b9:ce:e8:2f:46:42:f9:17:92:3d: b7:ad:a3:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5sGQ7SEiHhyGx1vNFAzlbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwNTI4MDEwMDQxWhcNMjYwNTI5MDEwMDQxWjAzMTEwLwYDVQQD Eyg1MzIyMGNhN2VhMjkxZWNhZjIwZjMwOWZkNjdmNDI2NjYxNDcwZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPdO6ulV5sgopvT5p+yEeUHlSg2Z Ot5PjipwsRtmcGBJ9pkIOXqrsoOeIddlxI0kUbe9rY9GwR3Leb5oKL6mDwjaW3DF HesiLQlpSDQCZ6zKtLQ+ixr78AuPC/sQfV5b3SljcI+LpI2J/AR3tEX/sJTbaPOL OUwqi3OrYEUpLnnxneyjFQ8QQKZCqi4lDCFbeNX6sBemIaqptN3qwVDx+fiGy6py qbn+k7KxpiuiB04hYQ1iMp8AGmNphCaDvqHSf+pUzUSkqjkxBK6WscQ6DBT/AxBR B/WTiNSIhBOfGhdq5/HV0HIw/F4dpIgMijbrS92pdmvbG+pn7oilEH/1hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMiDKfqKR7K8g8wn9Z/QmZhRw5oMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5MtXBjp 6tzPbGF8kAGYwPV55lvBczRJDZ5dUN9IIFC5msct7A1tQMrguNwC6XA3od4aNnXX HX07gj6uDDNSINh+fBNDbe4Iu3MCL/llfOWzw8YLz60U7YjBjDeW3UfVFzgOdjqY RNd+JviHBYW2r3n8/d3mq9W+xbhgeygNd6gVMSlbjrOtOArNNHvz4Mo7KTkybChq fLcK+RccwwQ4qE8K2iVIcJFydhdhSr95L+dgpeHB1mUKhj1lcVD1FKdgqS31lVV0 Mae1ty4rIv71aYbCAzRFkqlVoe4ndq420WpNS3c+IqLrkvH5g+ncN/vUjrS5zugv RkL5F5I9t62jLQ== -----END CERTIFICATE-----Generated at Thu May 28 05:51:49 2026 by rpki-client