$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: FkNBK2xSWPbygvNK+t8rKduN+LcOQqJBrFLVJzWDM8o= Subject key identifier: 41:C7:19:CA:1A:4F:73:2D:4C:41:D3:3B:2C:6A:67:8F:82:51:9F:5E Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019D9886485263C83E13FD29D4E95C9791CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 0597 Signing time: Thu 16 Apr 2026 23:00:30 +0000 Manifest this update: Thu 16 Apr 2026 23:00:30 +0000 Manifest next update: Fri 17 Apr 2026 23:00:30 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: 2d4Wn3yW3h+p5PJVmdxc5jhUHnh7Ew3p2N35Z768l8g=) 7: RlmY2epIKRhq-2nW5GPMGi-42ho.roa (hash: P+PIwilqQ8xdGydeEaJcPqihgDM4ZC5j7iY8+NEd9i0=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 14: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:48:52:63:c8:3e:13:fd:29:d4:e9:5c:97:91:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Apr 16 23:00:30 2026 GMT Not After : Apr 17 23:00:30 2026 GMT Subject: CN=41c719ca1a4f732d4c41d33b2c6a678f82519f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:ae:d0:30:4e:be:06:a4:09:a8:db:ab:bd: 60:a9:86:9e:aa:48:be:8f:4e:a8:ce:b8:9c:e5:41: 6b:cc:c8:ae:22:3a:35:e4:53:9d:3e:f7:f2:33:ea: c3:a2:a3:fc:89:0b:58:64:10:56:ae:20:c4:b8:f2: 47:91:b9:17:30:1c:c9:cd:e1:b8:31:61:56:0b:b9: 8c:d1:09:01:e8:6b:30:f7:1d:56:c0:43:5f:f8:c8: a2:db:b2:7a:2a:38:f0:0f:96:1a:89:e0:7b:1b:c5: 10:35:22:23:e2:d4:4b:ef:1d:66:3a:04:1d:4b:5a: 31:59:c1:a3:56:a8:9d:e5:14:73:3f:0f:28:76:9e: 49:c4:87:10:97:a2:00:48:e6:7e:f3:e0:23:e9:87: d5:f9:6d:75:9e:23:99:a9:d6:c4:96:27:24:f8:84: 3d:58:79:84:02:92:82:19:a1:ac:f9:8e:2b:26:44: cb:c7:70:86:31:0a:e5:ae:e0:27:bd:8c:32:e4:bf: bb:f9:5c:31:57:97:6c:b6:c4:d2:1a:a3:c8:6e:0a: 53:30:28:30:e7:54:e9:21:85:63:e6:21:8a:a3:10: 0a:87:cb:f5:f0:b9:fd:77:df:9f:14:79:6f:2d:1b: e1:14:7b:2b:83:aa:7c:c7:b4:84:e6:4d:b1:7f:2a: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:19:CA:1A:4F:73:2D:4C:41:D3:3B:2C:6A:67:8F:82:51:9F:5E X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:bf:0f:57:66:8a:b1:92:05:f0:66:fe:3f:1a:1f:0a:de: ae:56:20:ff:d6:18:b7:c3:71:7e:e4:16:65:5d:46:ff:5b:7a: df:c0:d0:17:79:a0:dc:0d:f5:e6:bb:7b:d6:75:52:af:4e:b4: f9:c5:77:ce:51:4d:a1:ce:94:12:6e:e7:0d:18:d4:3b:3a:7f: 9b:4f:96:27:2c:58:5d:73:ef:b0:d6:9a:ef:24:86:6a:97:42: 2c:2a:29:bd:35:35:5b:01:31:8d:4d:60:0a:58:4f:22:76:4e: 23:29:26:da:02:a1:59:31:52:31:82:20:f5:1e:f4:d1:21:54: 00:df:67:1d:ad:ce:6c:90:37:fa:a5:91:bc:c9:7c:f5:d1:4c: 2b:7c:39:b8:96:ec:71:a8:8b:ab:60:db:72:09:a1:bc:25:d3: 1f:bb:c6:a2:50:9f:2c:1f:b7:4b:4b:37:61:52:69:f5:5a:25: 6d:88:3d:ba:56:6f:bb:e1:c9:00:24:41:fd:97:74:01:63:c6: d6:ee:79:0f:0a:7a:20:00:ff:3a:87:7a:c3:4f:43:f7:c3:68: b0:50:eb:00:7d:0c:f6:45:42:94:be:1f:bd:dd:2d:c3:45:f1: cf:d6:55:a2:75:6a:99:2b:55:5a:49:80:ad:57:52:e3:cd:f2: d9:1f:d6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhkhSY8g+E/0p1Olcl5HOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwNDE2MjMwMDMwWhcNMjYwNDE3MjMwMDMwWjAzMTEwLwYDVQQD Eyg0MWM3MTljYTFhNGY3MzJkNGM0MWQzM2IyYzZhNjc4ZjgyNTE5ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYKu0DBOvgakCajbq71gqYaeqki+ j06ozric5UFrzMiuIjo15FOdPvfyM+rDoqP8iQtYZBBWriDEuPJHkbkXMBzJzeG4 MWFWC7mM0QkB6Gsw9x1WwENf+Mii27J6KjjwD5YaieB7G8UQNSIj4tRL7x1mOgQd S1oxWcGjVqid5RRzPw8odp5JxIcQl6IASOZ+8+Aj6YfV+W11niOZqdbElick+IQ9 WHmEApKCGaGs+Y4rJkTLx3CGMQrlruAnvYwy5L+7+VwxV5dstsTSGqPIbgpTMCgw 51TpIYVj5iGKoxAKh8v18Ln9d9+fFHlvLRvhFHsrg6p8x7SE5k2xfypwFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHHGcoaT3MtTEHTOyxqZ4+CUZ9eMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoW/D1dm irGSBfBm/j8aHwrerlYg/9YYt8NxfuQWZV1G/1t638DQF3mg3A315rt71nVSr060 +cV3zlFNoc6UEm7nDRjUOzp/m0+WJyxYXXPvsNaa7ySGapdCLCopvTU1WwExjU1g ClhPInZOIykm2gKhWTFSMYIg9R700SFUAN9nHa3ObJA3+qWRvMl89dFMK3w5uJbs caiLq2DbcgmhvCXTH7vGolCfLB+3S0s3YVJp9VolbYg9ulZvu+HJACRB/Zd0AWPG 1u55Dwp6IAD/Ood6w09D98NosFDrAH0M9kVClL4fvd0tw0Xxz9ZVonVqmStVWkmA rVdS483y2R/Wlg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:06 2026 by rpki-client