$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: 6+vCpH8qCnUp/CVFBm7xrfPpIvotVLbeWuqVkITlqss= Subject key identifier: 8A:C6:08:2E:70:D4:40:03:7B:8D:19:1D:A7:03:9A:B5:7F:50:30:59 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019E60830004A5E82CEA32E10A2095E42136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 1929 Signing time: Mon 25 May 2026 19:00:58 +0000 Manifest this update: Mon 25 May 2026 19:00:58 +0000 Manifest next update: Tue 26 May 2026 19:00:58 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: Y4T85+2YCEqKbe603Goy1YX8offu1KL5OBdfYYu82Wg=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 14:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:60:83:00:04:a5:e8:2c:ea:32:e1:0a:20:95:e4:21:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: May 25 19:00:58 2026 GMT Not After : May 26 19:00:58 2026 GMT Subject: CN=8ac6082e70d440037b8d191da7039ab57f503059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:dd:2c:d8:2c:ca:8d:2e:27:6b:94:ad:50: 29:ed:39:51:89:55:0e:08:9a:61:2d:59:ff:e2:1e: 76:a3:25:63:92:8a:a7:be:59:c6:c8:ac:fa:c0:fc: b3:4e:b7:6c:74:ff:f8:69:44:43:14:00:bc:b8:2a: 0e:20:25:4f:17:b4:46:ab:a4:bb:cf:b0:ba:24:c7: e2:0c:dd:56:99:38:eb:64:e7:c2:a1:a6:86:be:5b: ca:6f:42:ee:08:7b:6c:e4:68:e8:bf:ca:13:e1:d2: 00:67:f4:a4:4c:9f:98:24:9f:0b:03:93:f8:e5:f0: 3a:70:30:b2:ff:5b:2b:a6:74:75:df:42:43:44:79: 0f:35:9c:94:9c:42:9a:31:54:64:51:26:25:65:99: c6:f9:67:f8:12:a3:9b:cf:85:46:7f:38:50:0e:44: 8d:36:cd:4f:a2:85:b8:68:8d:36:5f:50:5d:99:14: 7f:58:f8:92:24:96:ae:1a:7c:35:93:05:86:4b:3d: a3:d0:d5:82:8c:4b:cf:4f:8d:9f:31:ef:63:fa:22: e0:cf:19:22:fd:f4:fc:2d:0a:f9:b5:79:dd:10:a3: e2:66:11:1d:ce:f4:0e:55:aa:26:8a:a1:19:10:42: 55:ca:d2:c1:ec:59:a8:69:30:67:84:62:62:84:b8: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C6:08:2E:70:D4:40:03:7B:8D:19:1D:A7:03:9A:B5:7F:50:30:59 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:92:2b:04:de:58:f2:a1:e2:b5:9f:e7:84:07:73:74:42:b5: 22:af:54:eb:c6:86:6a:71:6a:9d:81:ff:a7:e5:85:c3:98:2c: 22:d6:4d:4f:34:ff:13:7b:ed:00:56:c0:d9:ac:39:8b:7e:60: e2:64:7f:bc:2f:d5:0f:7b:7d:4e:fc:4e:dd:08:05:1d:ce:e7: 4b:ef:d2:cb:3b:80:db:8d:db:f3:f8:83:4e:f1:17:7c:48:d0: c2:9a:88:ed:31:5e:48:19:d2:00:3c:54:5c:b4:fd:b4:db:63: 01:78:ca:ce:d3:7d:11:5a:be:7e:77:83:58:94:05:80:c1:be: d6:ae:3d:0e:1c:90:ae:3f:85:ac:12:8a:25:ce:9c:15:38:bd: d2:2e:76:08:9b:b1:85:d6:bb:fe:03:91:0e:f5:45:7e:4f:9c: 6b:60:16:cf:d8:86:4d:50:b0:67:0c:d7:ec:c6:d7:41:ee:23: 0b:0f:93:20:38:d5:5a:ce:d1:f3:e5:84:b2:bd:09:43:c7:ed: 9f:d0:fd:cb:22:ee:7c:1f:d4:24:e7:6c:0e:ec:41:2d:e9:4f: 05:5a:13:f7:a1:69:63:74:3b:74:bd:ac:8e:ff:21:a5:33:6d: 92:c1:a7:9a:8c:3b:16:21:7d:b6:bf:50:10:b9:c6:f2:9e:43: 3f:70:72:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5ggwAEpegs6jLhCiCV5CE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwNTI1MTkwMDU4WhcNMjYwNTI2MTkwMDU4WjAzMTEwLwYDVQQD Eyg4YWM2MDgyZTcwZDQ0MDAzN2I4ZDE5MWRhNzAzOWFiNTdmNTAzMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgDdLNgsyo0uJ2uUrVAp7TlRiVUO CJphLVn/4h52oyVjkoqnvlnGyKz6wPyzTrdsdP/4aURDFAC8uCoOICVPF7RGq6S7 z7C6JMfiDN1WmTjrZOfCoaaGvlvKb0LuCHts5Gjov8oT4dIAZ/SkTJ+YJJ8LA5P4 5fA6cDCy/1srpnR130JDRHkPNZyUnEKaMVRkUSYlZZnG+Wf4EqObz4VGfzhQDkSN Ns1PooW4aI02X1BdmRR/WPiSJJauGnw1kwWGSz2j0NWCjEvPT42fMe9j+iLgzxki /fT8LQr5tXndEKPiZhEdzvQOVaomiqEZEEJVytLB7FmoaTBnhGJihLillQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrGCC5w1EADe40ZHacDmrV/UDBZMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJIrBN5Y 8qHitZ/nhAdzdEK1Iq9U68aGanFqnYH/p+WFw5gsItZNTzT/E3vtAFbA2aw5i35g 4mR/vC/VD3t9TvxO3QgFHc7nS+/SyzuA243b8/iDTvEXfEjQwpqI7TFeSBnSADxU XLT9tNtjAXjKztN9EVq+fneDWJQFgMG+1q49DhyQrj+FrBKKJc6cFTi90i52CJux hda7/gORDvVFfk+ca2AWz9iGTVCwZwzX7MbXQe4jCw+TIDjVWs7R8+WEsr0JQ8ft n9D9yyLufB/UJOdsDuxBLelPBVoT96FpY3Q7dL2sjv8hpTNtksGnmow7FiF9tr9Q ELnG8p5DP3BybA== -----END CERTIFICATE-----Generated at Mon May 25 20:49:46 2026 by rpki-client