$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: aw56KJ4bTXcwRFjgBrxanz9ol+nk//bzoLkCxu9nvrU= Subject key identifier: 70:69:F8:5D:9D:F4:87:12:72:E6:D0:D2:74:E8:98:C4:66:84:E9:40 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019D988636A24622EB6DE7877EE87FCB2ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1863 Signing time: Thu 16 Apr 2026 23:00:25 +0000 Manifest this update: Thu 16 Apr 2026 23:00:25 +0000 Manifest next update: Fri 17 Apr 2026 23:00:25 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: M9qI5wq4D1NhEjlX7fD6UYOn4tr25jjJxQyjTJrFO2M=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:36:a2:46:22:eb:6d:e7:87:7e:e8:7f:cb:2e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Apr 16 23:00:25 2026 GMT Not After : Apr 17 23:00:25 2026 GMT Subject: CN=7069f85d9df4871272e6d0d274e898c46684e940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:5b:32:de:30:02:3e:9c:68:0a:f6:ae:3d: d3:c5:67:a0:9c:08:48:75:17:e2:a6:76:ec:5a:4e: df:b1:e6:df:a9:50:92:6d:17:86:25:4c:93:f7:60: db:94:ce:60:49:35:66:1c:29:5d:e4:96:3f:ed:25: 64:0e:86:4f:bb:b2:9b:83:f6:b6:a3:62:54:b7:eb: 5f:a0:4c:0f:c4:83:4e:e4:7d:5d:47:c2:c9:9f:06: e6:35:e7:7f:cd:6c:ed:96:2a:5c:fd:d1:80:28:5b: 78:f4:c4:14:44:4e:9e:29:f2:b6:99:93:e9:06:7a: e9:de:5b:06:e7:34:2c:7e:4c:a1:a1:74:c4:36:d1: 68:27:b7:16:ee:07:81:7e:32:3f:6d:48:2a:76:e8: 58:68:ee:e3:20:63:c6:ee:2c:2d:2b:9f:aa:6a:26: 7f:bc:b0:62:64:86:20:5c:19:02:23:b1:56:55:5a: 82:1d:19:96:1e:62:37:53:f3:78:f0:0c:63:ff:83: 24:37:11:0f:a5:89:23:2f:50:70:14:32:bd:b4:90: d4:e1:76:89:e3:79:1c:66:f1:4f:50:1a:39:91:22: 6b:98:52:21:93:f2:40:3e:d8:a8:cf:54:64:d8:12: 45:ad:48:88:9b:ba:22:18:db:86:fe:f3:c2:4a:ba: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:69:F8:5D:9D:F4:87:12:72:E6:D0:D2:74:E8:98:C4:66:84:E9:40 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:bd:04:c4:e8:e1:b2:cb:48:fe:98:c6:88:09:df:7b:c9: 94:21:57:43:d1:39:3a:e7:51:bf:40:49:18:24:8c:b7:f2:71: 1c:06:60:b9:65:79:57:bf:4e:a3:b7:42:47:38:07:30:e7:95: 40:1e:85:45:f3:35:82:0c:6f:5b:38:9d:a4:5f:6a:2b:59:c3: 36:63:3f:e1:f4:56:ad:f3:54:92:80:aa:ca:6b:06:1a:77:47: 8b:d2:4a:83:a9:0a:17:9d:80:f4:23:51:43:cc:d0:0c:9a:b2: c4:3e:06:69:67:40:4e:a4:8a:f1:e9:15:98:4a:9c:00:02:ce: f4:1f:22:6f:e3:00:17:0e:70:be:ce:38:5f:60:36:2a:ca:72: 2d:39:f9:33:7b:55:ea:18:ee:91:8e:7d:08:9e:f4:6e:9e:e8: de:dd:ef:32:e5:05:88:2f:ed:5d:00:97:df:22:c0:5a:f9:58: 34:eb:d1:5c:5a:db:69:4c:a5:a3:c4:7f:a5:20:cd:57:13:f3: 38:98:b7:b1:56:2e:dd:43:4c:12:50:32:16:0b:ae:0e:a6:54: a3:be:37:26:d4:ab:4f:bf:09:35:2d:07:e2:1c:4a:25:eb:f8: 1d:6e:c5:be:af:ab:b3:11:2a:29:77:5c:97:5f:f2:f3:88:14: b1:fa:dc:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhjaiRiLrbeeHfuh/yy7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNDE2MjMwMDI1WhcNMjYwNDE3MjMwMDI1WjAzMTEwLwYDVQQD Eyg3MDY5Zjg1ZDlkZjQ4NzEyNzJlNmQwZDI3NGU4OThjNDY2ODRlOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPJbMt4wAj6caAr2rj3TxWegnAhI dRfipnbsWk7fsebfqVCSbReGJUyT92DblM5gSTVmHCld5JY/7SVkDoZPu7Kbg/a2 o2JUt+tfoEwPxINO5H1dR8LJnwbmNed/zWztlipc/dGAKFt49MQURE6eKfK2mZPp Bnrp3lsG5zQsfkyhoXTENtFoJ7cW7geBfjI/bUgqduhYaO7jIGPG7iwtK5+qaiZ/ vLBiZIYgXBkCI7FWVVqCHRmWHmI3U/N48Axj/4MkNxEPpYkjL1BwFDK9tJDU4XaJ 43kcZvFPUBo5kSJrmFIhk/JAPtioz1Rk2BJFrUiIm7oiGNuG/vPCSrqAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBp+F2d9IcScubQ0nTomMRmhOlAMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYq9BMTo 4bLLSP6YxogJ33vJlCFXQ9E5OudRv0BJGCSMt/JxHAZguWV5V79Oo7dCRzgHMOeV QB6FRfM1ggxvWzidpF9qK1nDNmM/4fRWrfNUkoCqymsGGndHi9JKg6kKF52A9CNR Q8zQDJqyxD4GaWdATqSK8ekVmEqcAALO9B8ib+MAFw5wvs44X2A2KspyLTn5M3tV 6hjukY59CJ70bp7o3t3vMuUFiC/tXQCX3yLAWvlYNOvRXFrbaUylo8R/pSDNVxPz OJi3sVYu3UNMElAyFguuDqZUo743JtSrT78JNS0H4hxKJev4HW7Fvq+rsxEqKXdc l1/y84gUsfrc8A== -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:09 2026 by rpki-client