$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: P79Lu5tXa8wD1K2j5gCqQUkk181H+PpxQ6HwYgdU85c= Subject key identifier: 85:66:0F:E5:39:CC:21:AC:67:B3:AB:C9:48:F2:29:01:0D:48:D9:2F Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019DA29CA7FE5EE8C1CFC3939B8CE9B10A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1944 Signing time: Sat 18 Apr 2026 22:01:08 +0000 Manifest this update: Sat 18 Apr 2026 22:01:08 +0000 Manifest next update: Sun 19 Apr 2026 22:01:08 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 0mDShmyQKUp4YdL7Ak2fOwf_ln4.roa (hash: cmEc3xEggewJFYU5aqtKVs0Q4v5k0w3JZFkx4qlV9Wc=) 3: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 4: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (hash: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA=) 5: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=) 6: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 7: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 8: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 9: CA3XMZSRf-G3ODjblICPF-EIxj8.roa (hash: VyF40sc+pRDppM7qNwDKdKVxboVcpPNc0TqHKAIYGnE=) 10: DlbWkC5JlObpaQbh5pYrcOuhUDo.roa (hash: 5ZY0b/IjheGn0WGAGieSGsGNwfBNcd9Ekci2Iu3Ck4M=) 11: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 12: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 13: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 14: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=) 15: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 16: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 17: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 18: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 19: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 20: Z4tsMasr475PZDRWvm4ex7ESXO8.roa (hash: x1q/+0sH/c43tTyBJa6b3wh2hl1q14JnzKQuZGqEr1I=) 21: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 22: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 23: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 24: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: gekyO1qCCigNLu1F0etRvxc4E0vcSGfBR6IFOLOXpzY=) 25: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 26: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 27: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 28: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 29: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 30: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 31: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 32: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 33: o4PwLG_moTiY139IzZuL6upeTkA.roa (hash: ZfhKwHM96PoMcD115Xy9gRe1flstjY89l+eR5aAx9zE=) 34: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 35: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 36: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 37: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:9c:a7:fe:5e:e8:c1:cf:c3:93:9b:8c:e9:b1:0a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Apr 18 22:01:08 2026 GMT Not After : Apr 19 22:01:08 2026 GMT Subject: CN=85660fe539cc21ac67b3abc948f229010d48d92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:3b:5b:d7:0f:fd:37:a5:13:aa:5f:47:54: 5d:d4:a9:50:ef:f1:05:0d:31:b2:6d:79:70:7c:bd: e9:4f:63:5b:65:9d:2d:5b:43:1a:05:62:2c:f8:f1: 39:3e:16:98:ef:1f:7a:23:96:b8:5f:23:95:b5:95: 1d:93:66:8b:3c:f3:8c:43:89:67:22:45:2f:59:5d: 24:ff:1e:f5:f9:d2:60:4a:2a:91:03:f7:38:15:9d: b0:44:74:10:33:33:41:21:a9:67:47:34:72:36:0d: f7:ca:9e:42:6e:c3:3d:50:2a:91:a6:4c:1d:02:f9: 41:3f:ab:89:4e:38:32:de:f6:91:6d:33:09:42:d6: 48:f9:b4:ae:f2:90:2c:36:3a:c2:15:d8:4d:6b:5e: d7:fb:e8:d4:a5:6a:0d:59:f7:43:ba:e2:ac:65:2c: 5a:63:39:a0:5d:3f:7d:4f:5b:2c:68:ae:7d:08:1c: 99:6d:4b:49:a3:87:c9:6b:84:94:56:0f:35:b5:cb: e1:c2:01:9a:c1:a3:5c:df:49:8a:9e:a2:e4:f7:6c: 6f:e3:29:02:18:28:9c:7a:9a:9c:cc:b1:66:55:f8: 08:47:7c:91:54:04:93:8c:be:f4:a2:e4:c3:23:b5: 1d:2a:01:aa:95:b5:78:5a:00:50:dd:ee:18:44:31: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:0F:E5:39:CC:21:AC:67:B3:AB:C9:48:F2:29:01:0D:48:D9:2F X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:39:c5:c3:50:87:c2:1b:e0:cf:06:6d:24:e1:95:a4:77:a9: f4:62:b3:38:1f:0a:68:dc:26:6a:63:bb:d9:56:32:2a:b0:19: 5d:36:fa:e8:5a:dc:a4:dc:dd:3a:68:6e:b5:34:34:14:49:e8: 28:53:d6:ee:0a:51:56:49:30:7a:b9:fe:2b:4b:9f:26:98:6c: 65:d9:e9:a9:d6:7a:6d:44:a1:b5:d3:04:0f:88:6e:87:92:be: 39:5b:04:42:cb:ca:7e:51:4b:11:19:05:64:c2:c4:4e:9d:11: 87:0c:91:bc:45:b9:03:17:83:cd:1c:34:a7:b6:f8:c0:4f:04: 1e:c6:4c:c7:c2:f6:93:30:d1:67:57:ae:92:0d:ab:22:95:71: fc:50:38:79:4d:0c:08:69:8b:50:39:c3:6b:79:bd:40:5c:88: ea:c3:70:bb:67:a5:e6:f8:71:42:5e:17:db:1c:20:c0:43:ef: ff:78:01:63:08:67:47:3c:84:9a:7f:df:aa:e2:26:aa:bb:a2: ea:c4:6b:b4:0f:39:17:3d:f3:29:50:d8:6a:9c:e1:4c:35:8f: c6:8d:b6:09:3f:5d:0a:1d:8a:74:14:8e:95:71:66:73:9d:68: ec:81:39:b0:e5:a1:02:71:e1:0c:69:b1:2b:7e:db:d1:85:49: f7:8a:93:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2inKf+XujBz8OTm4zpsQqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwNDE4MjIwMTA4WhcNMjYwNDE5MjIwMTA4WjAzMTEwLwYDVQQD Eyg4NTY2MGZlNTM5Y2MyMWFjNjdiM2FiYzk0OGYyMjkwMTBkNDhkOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfo7W9cP/TelE6pfR1Rd1KlQ7/EF DTGybXlwfL3pT2NbZZ0tW0MaBWIs+PE5PhaY7x96I5a4XyOVtZUdk2aLPPOMQ4ln IkUvWV0k/x71+dJgSiqRA/c4FZ2wRHQQMzNBIalnRzRyNg33yp5CbsM9UCqRpkwd AvlBP6uJTjgy3vaRbTMJQtZI+bSu8pAsNjrCFdhNa17X++jUpWoNWfdDuuKsZSxa YzmgXT99T1ssaK59CByZbUtJo4fJa4SUVg81tcvhwgGawaNc30mKnqLk92xv4ykC GCicepqczLFmVfgIR3yRVASTjL70ouTDI7UdKgGqlbV4WgBQ3e4YRDFEYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVmD+U5zCGsZ7OryUjyKQENSNkvMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjnFw1CH whvgzwZtJOGVpHep9GKzOB8KaNwmamO72VYyKrAZXTb66FrcpNzdOmhutTQ0FEno KFPW7gpRVkkwern+K0ufJphsZdnpqdZ6bUShtdMED4huh5K+OVsEQsvKflFLERkF ZMLETp0RhwyRvEW5AxeDzRw0p7b4wE8EHsZMx8L2kzDRZ1eukg2rIpVx/FA4eU0M CGmLUDnDa3m9QFyI6sNwu2el5vhxQl4X2xwgwEPv/3gBYwhnRzyEmn/fquImqrui 6sRrtA85Fz3zKVDYapzhTDWPxo22CT9dCh2KdBSOlXFmc51o7IE5sOWhAnHhDGmx K37b0YVJ94qT/w== -----END CERTIFICATE-----Generated at Sun Apr 19 08:49:29 2026 by rpki-client