$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: OhPH/j85NJI+M2JReVXiXujbbgJEPkOrB6R8q5ceTLA= Subject key identifier: F1:09:FA:35:38:09:7E:9C:E1:F5:74:4E:FD:4C:65:6D:F9:BF:E6:A5 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019D9886920EE5D4D57E8E972028D92712A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 19A9 Signing time: Thu 16 Apr 2026 23:00:49 +0000 Manifest this update: Thu 16 Apr 2026 23:00:49 +0000 Manifest next update: Fri 17 Apr 2026 23:00:49 +0000 Files and hashes: 1: 4YYB6ffpsT4YH12UCSPN1gTEg8U.roa (hash: eczMMGPJcYoQqxyIakekiaVzhDhTpqkNdbnWoIF1bCM=) 2: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 3: BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa (hash: aXn6G6JWMLGKSkwGd9D9rKmqQqkEcgFv2BEiiTxQpl0=) 4: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 5: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 6: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 7: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 8: MloCUaQjIaff5rD0I_V7IQUgMHA.roa (hash: z4QEYPJ8c5S4F1m2QTf25snrDWXe9stPlhx7/VyKtfE=) 9: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 10: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 11: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 12: _NYoKUb2N9O5Kuha08Z6TeOlAr8.roa (hash: hBPKH/sFoPLiqzPdXoKvs5WcXNHmeMzZr7pF/u9rRGI=) 13: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: 6A8RTTc0l9cgvrIZJqDpThSApTdY5KZPh1YmGGAc8r0=) 14: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 15: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 16: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 17: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 18: wHR1rjW-GyeAykDPRv2evn14daQ.roa (hash: 8uSH9PuLMUirtdt/ZPVP4wYc8PpyHx7s2sPU4VXGS4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:92:0e:e5:d4:d5:7e:8e:97:20:28:d9:27:12:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Apr 16 23:00:49 2026 GMT Not After : Apr 17 23:00:49 2026 GMT Subject: CN=f109fa3538097e9ce1f5744efd4c656df9bfe6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:36:42:d1:d8:d4:68:0b:93:55:86:80:45: a0:dc:27:19:18:9f:2c:4e:76:71:27:60:0f:a4:c2: f3:79:d4:46:d5:16:ce:bc:b3:86:72:3b:7a:54:c0: f3:c2:02:2e:07:71:98:85:73:05:fe:f9:e6:f8:87: 31:09:22:5f:27:4e:06:ad:ca:72:28:4a:84:a2:a1: a0:3d:12:bd:75:f1:01:6a:16:63:9a:0e:d8:c0:94: 2d:65:e7:e0:f0:4a:b3:a7:79:c0:ed:71:90:a0:2f: e6:2e:62:03:ce:39:ec:b8:7b:3e:30:b2:64:db:5c: 6a:65:98:59:a3:f7:6c:27:3a:22:0c:51:77:b6:ed: 4c:ef:4f:5d:12:b1:b3:db:20:3e:24:c7:33:0f:cc: 7b:e9:40:67:6a:66:e2:f8:92:99:99:42:86:ff:ae: ee:95:39:60:09:8f:f4:6b:17:65:03:01:c8:ad:33: 05:54:3b:22:4d:b7:6f:0a:80:89:d6:6b:3a:49:e1: 84:92:df:2d:69:f6:8c:88:6d:66:43:e6:1a:62:ee: ee:05:d7:74:20:dd:35:f8:68:df:5d:47:90:09:85: 2b:55:83:be:27:c2:6e:59:28:13:fd:23:2b:ec:be: 4c:38:0c:64:29:3d:e6:c0:39:d4:36:61:64:5e:4d: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:09:FA:35:38:09:7E:9C:E1:F5:74:4E:FD:4C:65:6D:F9:BF:E6:A5 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ab:1c:5a:4f:1f:94:04:72:ae:a2:70:f7:e5:95:13:55:2b: 30:db:0a:0b:2b:e3:f4:5a:4a:0b:47:22:9c:43:26:1b:7d:9a: cd:06:dd:e0:3b:96:9b:48:75:da:6a:21:9b:47:51:30:e9:91: d8:83:97:be:0c:f6:91:5d:33:2c:95:85:f3:d0:f0:46:be:ed: b9:0e:8c:6b:cc:13:9d:7f:7e:b1:b8:6b:43:7c:42:f8:5b:01: eb:6b:fe:68:a1:07:26:2a:7d:97:d2:62:6d:92:6e:50:a8:6d: 18:64:a0:27:7e:9b:b7:63:a1:f2:63:3b:aa:bb:7b:50:7b:16: 32:3a:d3:06:02:70:9b:96:d5:15:a7:41:55:ef:b5:03:59:df: 9d:c1:04:c3:e9:69:45:63:b2:c5:10:bf:5f:92:6a:a4:1a:10: af:53:bb:4d:2b:4b:63:6c:73:57:67:ea:19:2f:6b:db:83:8a: ab:c9:11:fb:56:45:10:14:0c:0e:1d:3b:17:32:74:18:db:af: 14:de:72:0c:27:13:39:09:86:98:2f:35:5a:e5:a5:24:e2:dd: f7:a2:f1:6a:cc:2f:0c:e6:b3:5b:39:85:f3:a6:22:e9:6c:6c: 4b:b9:f5:8a:f8:c0:18:a8:03:fc:53:79:65:0f:94:f7:79:e3: 28:f9:33:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhpIO5dTVfo6XICjZJxKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwNDE2MjMwMDQ5WhcNMjYwNDE3MjMwMDQ5WjAzMTEwLwYDVQQD EyhmMTA5ZmEzNTM4MDk3ZTljZTFmNTc0NGVmZDRjNjU2ZGY5YmZlNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w82QtHY1GgLk1WGgEWg3CcZGJ8s TnZxJ2APpMLzedRG1RbOvLOGcjt6VMDzwgIuB3GYhXMF/vnm+IcxCSJfJ04Grcpy KEqEoqGgPRK9dfEBahZjmg7YwJQtZefg8Eqzp3nA7XGQoC/mLmIDzjnsuHs+MLJk 21xqZZhZo/dsJzoiDFF3tu1M709dErGz2yA+JMczD8x76UBnambi+JKZmUKG/67u lTlgCY/0axdlAwHIrTMFVDsiTbdvCoCJ1ms6SeGEkt8tafaMiG1mQ+YaYu7uBdd0 IN01+GjfXUeQCYUrVYO+J8JuWSgT/SMr7L5MOAxkKT3mwDnUNmFkXk1nrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEJ+jU4CX6c4fV0Tv1MZW35v+alMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWascWk8f lARyrqJw9+WVE1UrMNsKCyvj9FpKC0cinEMmG32azQbd4DuWm0h12mohm0dRMOmR 2IOXvgz2kV0zLJWF89DwRr7tuQ6Ma8wTnX9+sbhrQ3xC+FsB62v+aKEHJip9l9Ji bZJuUKhtGGSgJ36bt2Oh8mM7qrt7UHsWMjrTBgJwm5bVFadBVe+1A1nfncEEw+lp RWOyxRC/X5JqpBoQr1O7TStLY2xzV2fqGS9r24OKq8kR+1ZFEBQMDh07FzJ0GNuv FN5yDCcTOQmGmC81WuWlJOLd96LxaswvDOazWzmF86Yi6WxsS7n1ivjAGKgD/FN5 ZQ+U93njKPkzxg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:32 2026 by rpki-client