$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: kNNOHe2bgeAuYWleUGBS0mw/qRNBtAvFoPu0ZK13KJE= Subject key identifier: 88:FD:C5:81:F0:DF:D0:3F:61:C8:CD:8B:EA:05:5E:51:F9:F0:FB:8E Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019DFA28EB7552F89D30DF4FC34E1260F721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1941 Signing time: Tue 05 May 2026 22:01:18 +0000 Manifest this update: Tue 05 May 2026 22:01:18 +0000 Manifest next update: Wed 06 May 2026 22:01:18 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=) 3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: 42h+t+7MHD8EV0R/GHD/Wo8wdCXJk/KHGaVw5/OnBaU=) 6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=) 7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=) 8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=) 11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=) 12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=) 13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=) 14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:fa:28:eb:75:52:f8:9d:30:df:4f:c3:4e:12:60:f7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: May 5 22:01:18 2026 GMT Not After : May 6 22:01:18 2026 GMT Subject: CN=88fdc581f0dfd03f61c8cd8bea055e51f9f0fb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:a3:b2:99:5f:3e:f1:e2:53:c7:41:9c:91: 97:1c:09:2c:95:64:1d:46:19:f1:63:82:8d:20:5e: e6:47:0b:e8:af:10:bd:98:86:40:39:b7:99:56:28: c5:f7:40:a8:8a:35:d4:af:ac:84:b3:95:55:a8:72: 4e:c7:83:28:18:f8:06:a3:8b:55:89:8f:d2:c9:25: 68:1d:26:f8:43:94:27:8f:33:5c:fc:5f:d9:32:47: 6a:4e:e1:c6:b9:c7:90:2c:aa:0a:86:42:10:dd:a6: ee:b2:bf:bf:96:15:cf:17:a1:c9:80:3a:b7:d9:a0: 95:dc:56:b0:e9:94:ee:ef:f9:8f:2d:97:98:87:42: 5e:5f:7f:70:8c:af:7c:3c:5d:18:b7:ca:9f:09:96: 3b:45:3c:8e:d2:8d:92:0e:39:14:c8:31:4b:9e:34: 1d:79:fc:5d:04:c0:50:6d:75:19:58:34:39:ab:f2: 47:b3:03:e2:3a:c9:ae:48:c8:57:eb:a3:58:d6:12: e5:f3:56:2f:41:bb:47:45:25:f1:d4:5b:bb:94:f8: 30:88:21:10:f7:05:30:b9:0e:37:17:8d:ad:34:cf: 5f:13:4d:d6:b6:15:33:34:35:76:c7:31:a6:e8:e1: b5:65:f6:4d:c5:fc:8f:ba:6f:4f:29:b2:b8:1b:e4: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FD:C5:81:F0:DF:D0:3F:61:C8:CD:8B:EA:05:5E:51:F9:F0:FB:8E X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:66:e5:f6:90:2e:93:3b:9c:6b:94:a0:1f:b1:e5:f9:b6:9f: 77:e1:07:e5:4b:e4:fe:c3:64:05:99:38:a5:25:ad:40:13:f5: 01:2d:17:60:05:d7:cc:eb:be:c9:29:82:7b:3a:75:1e:2e:fd: 02:67:76:77:99:47:3d:97:7a:a7:e4:c5:21:20:8f:3f:d2:65: b9:de:ea:a8:fd:64:3a:5e:99:e6:2e:79:0d:b8:36:fb:c3:ee: ce:b2:b2:c1:d5:1f:85:de:7c:d3:9c:e3:d0:d0:c5:94:0b:e1: 53:24:50:eb:44:9b:06:25:6c:74:8a:3c:08:e7:e0:fa:1e:cb: 0c:56:e0:1c:58:a0:bc:f2:9a:02:1f:a6:26:f9:06:82:4d:15: ee:ec:90:27:2b:82:62:e6:a0:6c:6f:80:bc:b0:71:88:2c:1e: ab:72:fe:e5:38:87:ac:c6:6c:18:4d:a3:18:22:18:9f:eb:34: 4c:c8:f7:3b:1b:4a:90:c4:4b:11:44:23:73:c5:c2:fe:4e:f1: e1:8e:db:75:74:a2:14:2c:d1:4f:7c:e8:b1:c8:7e:b6:d4:bf: 95:2a:2c:50:cf:3d:99:a0:dc:82:d4:ba:d5:aa:9b:f1:6c:70: 05:f0:e6:2d:6e:91:9b:a5:bb:21:ab:c9:5d:42:60:b8:1a:af: 4a:d1:9a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ36KOt1UvidMN9Pw04SYPchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwNTA1MjIwMTE4WhcNMjYwNTA2MjIwMTE4WjAzMTEwLwYDVQQD Eyg4OGZkYzU4MWYwZGZkMDNmNjFjOGNkOGJlYTA1NWU1MWY5ZjBmYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO6jsplfPvHiU8dBnJGXHAkslWQd RhnxY4KNIF7mRwvorxC9mIZAObeZVijF90CoijXUr6yEs5VVqHJOx4MoGPgGo4tV iY/SySVoHSb4Q5QnjzNc/F/ZMkdqTuHGuceQLKoKhkIQ3abusr+/lhXPF6HJgDq3 2aCV3Faw6ZTu7/mPLZeYh0JeX39wjK98PF0Yt8qfCZY7RTyO0o2SDjkUyDFLnjQd efxdBMBQbXUZWDQ5q/JHswPiOsmuSMhX66NY1hLl81YvQbtHRSXx1Fu7lPgwiCEQ 9wUwuQ43F42tNM9fE03WthUzNDV2xzGm6OG1ZfZNxfyPum9PKbK4G+RWRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj9xYHw39A/YcjNi+oFXlH58PuOMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGbl9pAu kzuca5SgH7Hl+bafd+EH5Uvk/sNkBZk4pSWtQBP1AS0XYAXXzOu+ySmCezp1Hi79 Amd2d5lHPZd6p+TFISCPP9Jlud7qqP1kOl6Z5i55Dbg2+8PuzrKywdUfhd5805zj 0NDFlAvhUyRQ60SbBiVsdIo8COfg+h7LDFbgHFigvPKaAh+mJvkGgk0V7uyQJyuC YuagbG+AvLBxiCweq3L+5TiHrMZsGE2jGCIYn+s0TMj3OxtKkMRLEUQjc8XC/k7x 4Y7bdXSiFCzRT3zosch+ttS/lSosUM89maDcgtS61aqb8WxwBfDmLW6Rm6W7IavJ XUJguBqvStGaCA== -----END CERTIFICATE-----Generated at Wed May 6 00:20:07 2026 by rpki-client