$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: PZjAsNJS/lbmIuPlTS7ab7jC0vfgDPqxbJpi5oN3ot0= Subject key identifier: 70:97:1B:8B:3B:6A:A3:56:83:E2:B8:87:BB:8A:8E:FB:E4:AD:53:0A Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019DA34154FE1E6EB99A375281337A0E9080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1906 Signing time: Sun 19 Apr 2026 01:01:00 +0000 Manifest this update: Sun 19 Apr 2026 01:01:00 +0000 Manifest next update: Mon 20 Apr 2026 01:01:00 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: AU4pJEgj6WCviZ2QJJdCQH2gbpw.roa (hash: TC1IhDPtH+BGNVruTwqyE+T+g7XpQfKzSMZ9r7v5voI=) 9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 10: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 11: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 12: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 13: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 14: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 15: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 16: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 17: LW-5clw67EFsnBjcAb7ZCZ1ciqI.roa (hash: e8fixB5X0C/SORa/tFJebK0n/Ac594LhZDRQ+zVtE8I=) 18: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 19: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 20: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 21: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 22: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 23: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 24: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 25: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 26: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 27: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 28: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 29: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 30: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 5SCKQMbSNpOlsA7Oomw0Hq7oJpqYD2IG64ceWlVHldc=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 33: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 34: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 35: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 36: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 37: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:41:54:fe:1e:6e:b9:9a:37:52:81:33:7a:0e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Apr 19 01:01:00 2026 GMT Not After : Apr 20 01:01:00 2026 GMT Subject: CN=70971b8b3b6aa35683e2b887bb8a8efbe4ad530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:7e:ed:c3:ab:28:30:a5:88:eb:41:74:76: 3b:42:2c:ce:e8:e7:ef:0b:c0:2e:1e:87:2b:bb:b5: 0c:c5:a8:ad:7a:78:84:c4:aa:d3:14:f7:5d:d8:ab: bc:c3:12:03:33:25:4e:f7:9b:82:10:13:18:31:14: 82:bb:aa:e5:a2:30:0b:f6:b6:8c:21:ca:08:44:ce: 38:6b:38:da:60:94:16:93:41:7f:d4:fb:8e:b3:b9: 7d:50:22:e8:17:81:68:83:5b:a2:6c:8e:52:3b:9e: 75:f6:67:ad:10:cd:f9:11:f3:60:1b:2f:be:cf:a5: bc:3a:44:c7:ca:14:87:c5:e6:7f:4f:96:4e:75:b2: 84:34:a5:3c:eb:a8:a0:01:6e:08:cc:9d:24:a2:32: 67:02:b7:7d:3b:b6:23:ab:e1:37:3b:71:10:30:db: 80:f7:8d:18:3c:b6:b1:32:cf:d4:fd:9f:67:e1:5e: d1:7c:e2:17:17:d1:0b:d1:9a:1f:74:7b:d7:0f:06: c4:39:83:bb:40:54:76:8e:75:a5:be:fc:98:fd:8f: 4f:16:2a:85:af:f3:d5:81:34:c7:f4:dc:8f:48:7f: 7f:ad:08:20:98:92:be:18:d3:c2:76:d7:41:e0:56: 43:09:b3:59:85:71:46:a7:1c:d3:1d:3c:31:40:8f: e1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:1B:8B:3B:6A:A3:56:83:E2:B8:87:BB:8A:8E:FB:E4:AD:53:0A X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:29:c8:69:da:c7:ad:cc:9b:e5:73:91:a5:bf:ec:1a:0b: 66:69:ae:03:19:4c:54:bc:27:16:59:a0:f0:59:c8:98:d2:10: 30:14:49:7e:9d:b3:64:d0:e7:f7:3d:bd:10:3d:7d:49:35:f7: ab:37:20:9c:e9:d3:25:f7:77:9f:fe:5f:10:11:7a:48:a0:9a: d3:4f:83:31:6c:c9:ba:d1:7a:8c:17:52:61:4a:94:85:e3:e5: 1a:59:d8:95:53:a1:c2:a5:a0:b2:88:3c:87:cf:98:1b:55:a8: c8:03:93:8d:cb:4d:a5:10:67:e5:03:74:84:2d:ce:fa:79:ac: 79:90:0a:8c:a6:4b:76:b4:d5:53:c8:e0:25:1d:f4:91:1a:f8: 57:5f:bc:29:0a:fe:61:da:6d:95:2a:29:3f:0a:cb:9a:4e:c3: 47:57:e8:37:2e:e2:e3:cf:1d:83:8a:c1:3f:8c:27:86:6b:52: 21:4e:a2:75:d2:79:c3:a4:7b:9e:0f:2d:43:cf:95:00:51:7c: 79:80:5e:fe:3d:9f:ca:93:92:85:f6:87:e1:98:e4:c1:53:e9: 26:a9:97:a8:f7:a0:7d:dd:a5:35:c6:db:ee:1d:6f:c8:38:ad: ad:4e:8a:61:e5:5f:10:36:37:78:ff:1f:a4:af:d4:bc:52:89: 9b:23:49:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jQVT+Hm65mjdSgTN6DpCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNDE5MDEwMTAwWhcNMjYwNDIwMDEwMTAwWjAzMTEwLwYDVQQD Eyg3MDk3MWI4YjNiNmFhMzU2ODNlMmI4ODdiYjhhOGVmYmU0YWQ1MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIB+7cOrKDCliOtBdHY7QizO6Ofv C8AuHocru7UMxaiteniExKrTFPdd2Ku8wxIDMyVO95uCEBMYMRSCu6rlojAL9raM IcoIRM44azjaYJQWk0F/1PuOs7l9UCLoF4Fog1uibI5SO5519metEM35EfNgGy++ z6W8OkTHyhSHxeZ/T5ZOdbKENKU866igAW4IzJ0kojJnArd9O7Yjq+E3O3EQMNuA 940YPLaxMs/U/Z9n4V7RfOIXF9EL0ZofdHvXDwbEOYO7QFR2jnWlvvyY/Y9PFiqF r/PVgTTH9NyPSH9/rQggmJK+GNPCdtdB4FZDCbNZhXFGpxzTHTwxQI/hOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCXG4s7aqNWg+K4h7uKjvvkrVMKMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVspyGna x63Mm+VzkaW/7BoLZmmuAxlMVLwnFlmg8FnImNIQMBRJfp2zZNDn9z29ED19STX3 qzcgnOnTJfd3n/5fEBF6SKCa00+DMWzJutF6jBdSYUqUhePlGlnYlVOhwqWgsog8 h8+YG1WoyAOTjctNpRBn5QN0hC3O+nmseZAKjKZLdrTVU8jgJR30kRr4V1+8KQr+ YdptlSopPwrLmk7DR1foNy7i488dg4rBP4wnhmtSIU6iddJ5w6R7ng8tQ8+VAFF8 eYBe/j2fypOShfaH4ZjkwVPpJqmXqPegfd2lNcbb7h1vyDitrU6KYeVfEDY3eP8f pK/UvFKJmyNJOA== -----END CERTIFICATE-----Generated at Sun Apr 19 10:37:30 2026 by rpki-client