$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: 2sGJhSQohJdS3+g00vyoIEA4TGpIhRoDAG+EP4QZAIU= Subject key identifier: 5A:88:A5:4B:B8:7E:EA:03:D4:EC:30:92:7E:74:AB:A5:21:28:53:22 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019E31F3126061D4C563B17EBDACD4C532B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1936 Signing time: Sat 16 May 2026 18:01:13 +0000 Manifest this update: Sat 16 May 2026 18:01:13 +0000 Manifest next update: Sun 17 May 2026 18:01:13 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: bkMAXa1QlzYsmc+VVKyo3h9EGuzA1C5vkAHCH7w8XGk=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:f3:12:60:61:d4:c5:63:b1:7e:bd:ac:d4:c5:32:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: May 16 18:01:13 2026 GMT Not After : May 17 18:01:13 2026 GMT Subject: CN=5a88a54bb87eea03d4ec30927e74aba521285322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:e1:ec:01:e0:9c:7c:ff:f4:4b:32:c1:2a: 78:3c:e3:0b:fa:aa:e0:19:e1:90:28:36:d8:46:53: c9:24:f0:bd:97:39:e5:93:0e:ec:34:70:27:f1:ef: c8:40:43:85:31:88:ce:8f:d1:6c:11:93:d9:c6:69: 41:d1:89:1f:11:15:38:49:88:ce:38:09:85:4b:ae: 01:3c:5e:c5:d7:bb:28:a0:50:38:00:d7:95:af:64: 7b:f7:3b:78:35:96:c5:d5:c5:e1:7d:c9:bf:12:86: c8:cb:dc:86:98:c3:b8:9a:c0:5e:a4:6e:ba:db:08: f7:38:fc:5f:80:4d:5b:b0:74:88:50:38:11:19:21: ae:b1:ef:11:cf:b4:f5:82:1e:4c:aa:f6:b4:a5:ac: 75:b4:1c:d8:5d:56:b3:2a:22:62:31:81:e6:ff:ce: 52:c5:05:74:73:23:5b:3c:fd:98:2a:02:48:4e:5e: 48:4c:2e:eb:e6:fe:64:32:2e:4e:47:a6:46:3b:31: 5d:fa:77:f0:c5:8e:34:6d:ac:3f:7d:99:51:79:ea: 8f:90:8f:ab:0c:02:f4:dc:3e:11:cd:f5:46:7c:f2: cc:d9:4a:97:21:f6:6c:d3:f7:6a:2f:0c:b3:5f:36: 40:d3:d7:9f:0e:e8:9f:f2:f7:b5:62:77:62:f2:26: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:A5:4B:B8:7E:EA:03:D4:EC:30:92:7E:74:AB:A5:21:28:53:22 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:82:64:ee:18:1c:3f:22:61:80:88:2f:61:ce:f5:22:c3:4e: 93:32:05:78:21:9f:6c:15:c3:4c:90:70:67:f1:44:e1:c9:52: 1b:50:70:98:07:69:a8:62:1f:0d:6f:45:74:28:c5:71:8f:74: 1a:98:85:f1:ed:de:27:08:fa:2e:4c:3a:26:a7:c4:ee:9f:ae: c5:00:18:4b:5a:14:d8:b7:e3:ca:f4:d9:2e:a7:6b:3d:34:2b: 9f:de:04:0d:56:b3:3f:47:71:43:e5:37:41:81:38:07:0e:46: 3b:67:4b:e8:36:52:07:7f:6c:96:5c:00:3c:a4:99:5c:2a:70: 62:24:06:f6:a0:b4:01:c3:a1:0e:63:a3:0f:f3:b7:0c:f5:57: 81:94:96:7e:2a:0c:c5:5c:11:72:a4:25:1f:25:ca:5d:2d:63: 72:9d:47:2f:30:49:04:dc:82:6c:2e:c2:be:04:5f:52:4a:41: 99:26:41:dd:e2:7e:45:5f:d0:32:a5:e3:e1:e7:ff:8a:ca:7b: d2:b8:c1:03:5f:3f:e7:ba:b1:63:1b:7d:fb:49:0f:e9:38:b4: 4c:98:08:cb:9e:d9:10:a8:b4:8f:53:b4:22:a5:bf:1c:47:f5: 4d:71:70:c6:84:ab:a9:5e:2a:17:19:30:0b:aa:f5:02:82:fb: 92:8d:ed:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4x8xJgYdTFY7F+vazUxTK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwNTE2MTgwMTEzWhcNMjYwNTE3MTgwMTEzWjAzMTEwLwYDVQQD Eyg1YTg4YTU0YmI4N2VlYTAzZDRlYzMwOTI3ZTc0YWJhNTIxMjg1MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQzh7AHgnHz/9EsywSp4POML+qrg GeGQKDbYRlPJJPC9lznlkw7sNHAn8e/IQEOFMYjOj9FsEZPZxmlB0YkfERU4SYjO OAmFS64BPF7F17sooFA4ANeVr2R79zt4NZbF1cXhfcm/EobIy9yGmMO4msBepG66 2wj3OPxfgE1bsHSIUDgRGSGuse8Rz7T1gh5Mqva0pax1tBzYXVazKiJiMYHm/85S xQV0cyNbPP2YKgJITl5ITC7r5v5kMi5OR6ZGOzFd+nfwxY40baw/fZlReeqPkI+r DAL03D4RzfVGfPLM2UqXIfZs0/dqLwyzXzZA09efDuif8ve1Yndi8iYGdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqIpUu4fuoD1Owwkn50q6UhKFMiMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYJk7hgc PyJhgIgvYc71IsNOkzIFeCGfbBXDTJBwZ/FE4clSG1BwmAdpqGIfDW9FdCjFcY90 GpiF8e3eJwj6Lkw6JqfE7p+uxQAYS1oU2LfjyvTZLqdrPTQrn94EDVazP0dxQ+U3 QYE4Bw5GO2dL6DZSB39sllwAPKSZXCpwYiQG9qC0AcOhDmOjD/O3DPVXgZSWfioM xVwRcqQlHyXKXS1jcp1HLzBJBNyCbC7CvgRfUkpBmSZB3eJ+RV/QMqXj4ef/isp7 0rjBA18/57qxYxt9+0kP6Ti0TJgIy57ZEKi0j1O0IqW/HEf1TXFwxoSrqV4qFxkw C6r1AoL7ko3tCw== -----END CERTIFICATE-----Generated at Sat May 16 22:40:13 2026 by rpki-client