$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: wOPuN2yF7HvAclmABDE3VlT12zhhTxgwX+w7dTpgB+c= Subject key identifier: 26:7C:EC:20:36:BE:1E:BF:C3:A1:7C:61:B5:A8:D6:A7:2E:B0:30:DA Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019D984FD234F90005AEDD7730C204D17D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 10B9 Signing time: Thu 16 Apr 2026 22:01:01 +0000 Manifest this update: Thu 16 Apr 2026 22:01:01 +0000 Manifest next update: Fri 17 Apr 2026 22:01:01 +0000 Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=) 2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=) 3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=) 4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=) 5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=) 6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=) 7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: C0MLvbzTxyjwL5nNIrLvGkwvli3oij0vwOsd0jVwAoQ=) 8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=) 9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=) 10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:d2:34:f9:00:05:ae:dd:77:30:c2:04:d1:7d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Apr 16 22:01:01 2026 GMT Not After : Apr 17 22:01:01 2026 GMT Subject: CN=267cec2036be1ebfc3a17c61b5a8d6a72eb030da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:4d:62:0a:9c:ef:16:08:20:37:be:33:37: 6c:c1:10:cc:3d:33:49:44:37:54:ae:e2:9c:e6:9d: 51:1e:41:42:69:78:5c:84:dd:2b:01:9f:48:8c:aa: 18:b4:3f:5c:5e:17:f3:a1:f0:42:15:7b:87:d4:34: 38:3e:7e:91:f4:47:8b:f2:49:47:7e:ea:c8:0d:f0: 29:2e:f3:2c:96:88:23:cd:30:49:ef:77:19:69:4d: c4:65:c4:57:54:6e:f6:45:f4:7e:1f:08:c7:39:2b: d6:f7:21:90:30:25:0e:b7:0f:72:09:88:17:ce:cc: 4e:8c:1c:bc:56:2a:d7:d9:84:ea:48:b0:7e:96:c0: 42:7b:26:f1:97:14:12:7f:85:8d:1f:0c:ac:fb:33: 59:b2:2a:aa:ae:5e:03:4a:f0:76:22:bf:c9:43:32: 3d:cc:50:cd:6c:89:88:58:c0:79:42:92:a6:87:e4: 0c:38:99:dd:4a:81:d2:7c:d4:09:b5:6d:aa:b8:8e: 38:75:ff:d2:c8:09:ac:8c:46:b8:e1:05:aa:f7:9c: b9:8e:5f:7b:a5:73:ff:e1:06:96:b5:02:85:73:1c: 0c:26:18:58:58:6a:05:e6:46:fe:cd:b5:be:5f:57: 5f:fa:af:1f:96:23:81:06:5b:d0:31:fa:d0:bb:58: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7C:EC:20:36:BE:1E:BF:C3:A1:7C:61:B5:A8:D6:A7:2E:B0:30:DA X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:9b:b3:fc:1e:fe:49:6c:b9:2d:58:99:8b:21:2b:81:d4: b4:8f:ed:bf:02:07:ef:9f:b6:5e:e2:12:d8:b8:57:6b:b9:5f: c3:62:45:96:05:72:2b:f0:a2:82:9e:d9:ab:26:55:21:91:1d: dd:59:db:d7:4b:e2:0b:8b:78:a5:37:60:87:8d:30:71:3b:7d: 76:f9:3b:4a:f4:09:9d:ae:d9:b8:03:2e:21:dd:ee:59:cd:6f: c0:ee:57:88:8e:a1:60:cf:8b:d3:95:54:03:39:cb:b3:da:0d: 2c:49:81:11:b7:e4:bb:e2:33:26:36:5c:6b:40:e9:84:5f:d9: e7:73:b7:59:9a:d7:40:da:f6:37:96:12:15:81:db:39:0e:cf: 86:c6:6c:9a:0a:0e:0e:de:d3:4d:24:b1:62:2b:34:e1:93:af: e3:10:29:57:44:91:5b:e2:1a:f9:5d:36:cf:e0:75:db:17:81: 94:ea:69:89:5d:70:2e:58:5e:c2:3b:9f:be:45:f7:45:66:a9: b1:f4:ec:b9:22:10:36:20:86:4f:38:38:86:32:a8:ae:c2:ce: 9b:d0:94:d5:10:bd:61:66:05:66:ed:a7:6b:ba:eb:bb:47:db: 36:19:93:44:b1:5f:d6:d4:93:b3:4d:96:3b:b7:b3:89:33:50: 2b:f1:85:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT9I0+QAFrt13MMIE0X1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwNDE2MjIwMTAxWhcNMjYwNDE3MjIwMTAxWjAzMTEwLwYDVQQD EygyNjdjZWMyMDM2YmUxZWJmYzNhMTdjNjFiNWE4ZDZhNzJlYjAzMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw9NYgqc7xYIIDe+MzdswRDMPTNJ RDdUruKc5p1RHkFCaXhchN0rAZ9IjKoYtD9cXhfzofBCFXuH1DQ4Pn6R9EeL8klH furIDfApLvMslogjzTBJ73cZaU3EZcRXVG72RfR+HwjHOSvW9yGQMCUOtw9yCYgX zsxOjBy8VirX2YTqSLB+lsBCeybxlxQSf4WNHwys+zNZsiqqrl4DSvB2Ir/JQzI9 zFDNbImIWMB5QpKmh+QMOJndSoHSfNQJtW2quI44df/SyAmsjEa44QWq95y5jl97 pXP/4QaWtQKFcxwMJhhYWGoF5kb+zbW+X1df+q8fliOBBlvQMfrQu1g6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZ87CA2vh6/w6F8YbWo1qcusDDaMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcSbs/we /klsuS1YmYshK4HUtI/tvwIH75+2XuIS2LhXa7lfw2JFlgVyK/Cigp7ZqyZVIZEd 3Vnb10viC4t4pTdgh40wcTt9dvk7SvQJna7ZuAMuId3uWc1vwO5XiI6hYM+L05VU AznLs9oNLEmBEbfku+IzJjZca0DphF/Z53O3WZrXQNr2N5YSFYHbOQ7PhsZsmgoO Dt7TTSSxYis04ZOv4xApV0SRW+Ia+V02z+B12xeBlOppiV1wLlhewjufvkX3RWap sfTsuSIQNiCGTzg4hjKorsLOm9CU1RC9YWYFZu2na7rru0fbNhmTRLFf1tSTs02W O7eziTNQK/GF2w== -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:27 2026 by rpki-client