$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: WLlojtooXID+NXCCGeuA0M8V5nMX9mfRCD5yaMAoLwg= Subject key identifier: 34:39:94:2C:CE:57:26:12:9F:0D:A9:EE:0F:BA:68:6F:C6:2E:77:8A Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019DBD6EDE6202475AE5374D4F8088326A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 126A Signing time: Fri 24 Apr 2026 03:00:52 +0000 Manifest this update: Fri 24 Apr 2026 03:00:52 +0000 Manifest next update: Sat 25 Apr 2026 03:00:52 +0000 Files and hashes: 1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 4: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=) 5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=) 6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 7: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 8: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 9: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: yldRX+859uyRLl1e2ox2Fi5QFlBSMoYWxtCXfQVvB3A=) 11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) 12: uaZQDhIwfSYmxyJRtqIy_L_zHso.roa (hash: N+ZzHwJkmYGK/5t3l5o1KIYLDvFM99cPQu6Ca7RAknE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:bd:6e:de:62:02:47:5a:e5:37:4d:4f:80:88:32:6a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Apr 24 03:00:52 2026 GMT Not After : Apr 25 03:00:52 2026 GMT Subject: CN=3439942cce5726129f0da9ee0fba686fc62e778a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:af:b8:e1:fb:03:f0:04:6f:31:7a:4b:bd: ec:cc:e7:0f:5b:b8:ac:cd:0d:7b:9e:7a:3a:cb:62: bf:93:62:7d:1d:78:3f:8d:e8:a7:bd:fa:f0:79:70: 6d:d4:6e:f9:76:28:ee:d2:20:6c:04:8b:ce:24:ee: c3:ef:44:3f:90:76:c6:49:a1:1f:3f:d8:f5:f0:fd: c8:52:29:e1:26:fa:d7:e4:dd:cc:38:5c:20:87:62: b0:40:94:44:c0:a3:6a:13:bd:77:dd:85:ea:f7:6e: 9c:e7:e1:9f:ec:16:54:8f:3c:24:48:6b:b4:54:e2: 18:f4:f6:28:21:6e:46:4a:17:a7:15:61:de:05:98: 6c:b6:9a:0c:2f:56:38:0b:bf:5d:f6:21:52:93:94: 1d:4a:a7:d7:ad:af:c4:05:94:03:6e:60:2b:1b:cd: 32:03:fc:2d:35:9b:2e:c3:75:39:54:32:e5:d5:1b: 2f:5f:79:4e:37:a5:e3:9d:3d:b0:ab:a4:8e:0e:41: 71:ad:dc:4c:c3:5e:d2:5b:fc:4f:12:19:9c:d0:0c: 82:06:c2:f0:ad:43:d4:a1:51:94:70:42:30:60:19: 2f:e2:87:2b:18:b0:24:5e:ba:48:25:92:a8:24:81: c1:4c:bf:4d:f0:0f:1a:a4:c4:52:73:cb:04:2b:00: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:94:2C:CE:57:26:12:9F:0D:A9:EE:0F:BA:68:6F:C6:2E:77:8A X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a5:85:7f:d0:d3:79:6f:4a:75:a7:1d:14:17:bd:28:19:32: a4:e7:25:f1:5e:e0:26:e7:a5:9c:70:a0:8d:04:cc:8f:1e:fc: 3b:de:ae:74:d0:2f:55:0c:e5:26:cc:dc:3a:1e:0b:26:05:77: 34:19:7c:8b:05:a7:2e:6c:4e:39:ef:59:ea:32:9f:bd:d1:91: 90:d2:99:ae:c7:21:8b:30:80:8a:0e:32:f8:03:59:05:2e:9e: 86:2d:b2:cd:0e:a6:0c:20:44:61:bf:53:0b:ea:a0:7c:d3:31: f7:ae:3c:3f:bd:8e:b2:f5:a4:85:3e:2a:1e:62:78:fa:0e:4a: 59:d5:b5:ea:7f:86:14:8a:4f:2d:75:fb:71:e4:ff:6e:ce:e5: 0d:53:85:b6:02:d5:79:d6:d2:44:ff:d3:ba:f0:b1:3c:5d:de: 57:18:06:c9:26:53:24:21:64:91:c3:b8:26:ad:6c:86:2a:03: d3:0e:98:96:47:4f:72:16:fd:bb:09:22:44:40:ea:b4:6d:3a: 4e:15:d1:46:f4:ed:d5:0e:a4:9d:f4:d7:a6:ac:2c:b2:46:60: 5a:74:c0:cc:8f:8a:9f:1a:3d:9d:1f:bd:f6:bd:07:8d:66:09: 93:33:ad:aa:c6:fa:52:11:69:db:53:f7:94:bc:f5:33:7e:58: b3:a5:43:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ29bt5iAkda5TdNT4CIMmoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwNDI0MDMwMDUyWhcNMjYwNDI1MDMwMDUyWjAzMTEwLwYDVQQD EygzNDM5OTQyY2NlNTcyNjEyOWYwZGE5ZWUwZmJhNjg2ZmM2MmU3NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPGvuOH7A/AEbzF6S73szOcPW7is zQ17nno6y2K/k2J9HXg/jeinvfrweXBt1G75diju0iBsBIvOJO7D70Q/kHbGSaEf P9j18P3IUinhJvrX5N3MOFwgh2KwQJREwKNqE7133YXq926c5+Gf7BZUjzwkSGu0 VOIY9PYoIW5GShenFWHeBZhstpoML1Y4C79d9iFSk5QdSqfXra/EBZQDbmArG80y A/wtNZsuw3U5VDLl1RsvX3lON6XjnT2wq6SODkFxrdxMw17SW/xPEhmc0AyCBsLw rUPUoVGUcEIwYBkv4ocrGLAkXrpIJZKoJIHBTL9N8A8apMRSc8sEKwDnPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ5lCzOVyYSnw2p7g+6aG/GLneKMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6WFf9DT eW9KdacdFBe9KBkypOcl8V7gJuelnHCgjQTMjx78O96udNAvVQzlJszcOh4LJgV3 NBl8iwWnLmxOOe9Z6jKfvdGRkNKZrschizCAig4y+ANZBS6ehi2yzQ6mDCBEYb9T C+qgfNMx9648P72OsvWkhT4qHmJ4+g5KWdW16n+GFIpPLXX7ceT/bs7lDVOFtgLV edbSRP/TuvCxPF3eVxgGySZTJCFkkcO4Jq1shioD0w6YlkdPchb9uwkiREDqtG06 ThXRRvTt1Q6knfTXpqwsskZgWnTAzI+Knxo9nR+99r0HjWYJkzOtqsb6UhFp21P3 lLz1M35Ys6VDHw== -----END CERTIFICATE-----Generated at Fri Apr 24 08:18:47 2026 by rpki-client