$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: k2W9WPMo+An6gkkJLEndQrobsE06FtFVVy9itGNLcHE= Subject key identifier: 70:75:C7:32:F0:B4:C8:3B:44:EE:9F:BC:36:13:14:70:D9:40:3D:EA Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019DA309F1D6F687EEAE7DAFCECA1AAB7EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 1239 Signing time: Sun 19 Apr 2026 00:00:31 +0000 Manifest this update: Sun 19 Apr 2026 00:00:31 +0000 Manifest next update: Mon 20 Apr 2026 00:00:31 +0000 Files and hashes: 1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=) 2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 8nr34UIplC44JH6RsFJ6SqwVzkogHJ/hT3JufyexZdk=) 3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=) 4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=) 5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=) 6: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=) 7: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=) 8: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=) 9: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=) 10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=) 11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=) 12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:09:f1:d6:f6:87:ee:ae:7d:af:ce:ca:1a:ab:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Apr 19 00:00:31 2026 GMT Not After : Apr 20 00:00:31 2026 GMT Subject: CN=7075c732f0b4c83b44ee9fbc36131470d9403dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:bd:a3:ee:c6:6d:c9:79:f2:97:00:42:2b: 96:5c:57:0c:65:75:30:19:f7:ca:12:0b:1c:8a:e6: 45:07:1f:61:fa:6c:94:52:4e:cc:4d:2b:c1:14:0b: 28:0a:90:e4:b8:13:c3:dc:eb:38:0c:98:91:85:bd: b8:e2:35:aa:13:b9:e0:56:4e:f4:c1:0c:a0:1c:53: ad:09:d6:61:df:ec:94:f0:20:1d:46:84:51:1f:52: fa:7d:9e:2e:75:64:63:57:19:8c:2d:59:6d:7f:86: a0:5f:7a:fb:e7:a4:7e:8c:d5:d1:4e:04:34:2f:87: 6c:99:67:53:04:81:f4:1f:1f:a4:04:6e:bd:44:2b: 5d:83:dc:8c:31:3d:78:4a:39:bb:3c:ff:cb:0b:fc: a7:a5:f9:90:91:43:80:ba:36:e0:99:9d:07:5e:0d: 9f:60:92:c0:9e:26:2f:d6:a0:82:99:38:a8:ae:6a: dc:2c:bf:08:b8:72:61:f3:1e:db:b8:1a:8e:cc:54: 5e:93:8e:3d:d7:9b:37:66:d7:ed:ae:88:4f:91:d2: 5a:bc:b0:9a:73:1e:06:a6:b9:8c:d6:6b:79:f4:fd: 35:43:bd:00:c0:61:54:55:92:6e:42:9d:42:6a:a0: b8:dd:6e:5c:82:b2:68:49:cd:38:13:b2:c4:b9:79: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:75:C7:32:F0:B4:C8:3B:44:EE:9F:BC:36:13:14:70:D9:40:3D:EA X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b4:49:53:bc:6f:17:22:66:f6:02:1e:90:18:24:d0:cd:8f: 03:59:05:08:fa:09:ed:ed:c2:8d:d6:69:5d:83:eb:64:b8:66: 0b:80:96:81:8e:3e:61:7f:b3:95:21:53:d6:7c:95:2a:46:30: a1:b4:42:80:92:27:e6:fe:6c:9c:61:5d:ba:90:ac:1e:5d:c2: 72:4a:5c:02:62:b4:22:d6:a1:67:cd:04:94:c5:d4:db:ab:6f: e6:f2:4e:6d:db:c5:75:b2:1e:5a:4b:55:f8:da:92:e1:ef:ee: 7a:1c:2c:a1:10:31:c4:67:a8:05:d8:36:82:5c:5a:55:95:e3: 1f:48:05:e3:04:0b:f3:c3:5a:3f:e7:80:e0:93:09:e6:3c:59: a2:f5:60:eb:cb:0b:02:c6:64:14:b3:2c:a9:ff:02:76:06:ee: c7:fd:56:4c:c3:0c:66:96:5f:79:63:61:dd:77:c2:e9:5c:e6: ce:8c:3a:e2:75:33:74:4a:a8:4f:b8:43:02:c6:d8:60:19:cf: d4:b2:2c:e3:f3:34:a7:20:c5:e8:52:d9:95:2b:44:4e:84:67: 81:c3:93:a2:7d:08:20:a8:6a:d9:3f:71:50:54:f1:d9:d7:44: e4:79:d9:ae:56:06:82:7d:76:1d:07:d8:c2:8d:b6:c4:19:cc: cf:65:de:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCfHW9ofurn2vzsoaq371MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwNDE5MDAwMDMxWhcNMjYwNDIwMDAwMDMxWjAzMTEwLwYDVQQD Eyg3MDc1YzczMmYwYjRjODNiNDRlZTlmYmMzNjEzMTQ3MGQ5NDAzZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB69o+7Gbcl58pcAQiuWXFcMZXUw GffKEgsciuZFBx9h+myUUk7MTSvBFAsoCpDkuBPD3Os4DJiRhb244jWqE7ngVk70 wQygHFOtCdZh3+yU8CAdRoRRH1L6fZ4udWRjVxmMLVltf4agX3r756R+jNXRTgQ0 L4dsmWdTBIH0Hx+kBG69RCtdg9yMMT14Sjm7PP/LC/ynpfmQkUOAujbgmZ0HXg2f YJLAniYv1qCCmTiormrcLL8IuHJh8x7buBqOzFRek44915s3ZtftrohPkdJavLCa cx4GprmM1mt59P01Q70AwGFUVZJuQp1CaqC43W5cgrJoSc04E7LEuXnlmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB1xzLwtMg7RO6fvDYTFHDZQD3qMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLRJU7xv FyJm9gIekBgk0M2PA1kFCPoJ7e3CjdZpXYPrZLhmC4CWgY4+YX+zlSFT1nyVKkYw obRCgJIn5v5snGFdupCsHl3CckpcAmK0ItahZ80ElMXU26tv5vJObdvFdbIeWktV +NqS4e/uehwsoRAxxGeoBdg2glxaVZXjH0gF4wQL88NaP+eA4JMJ5jxZovVg68sL AsZkFLMsqf8Cdgbux/1WTMMMZpZfeWNh3XfC6Vzmzow64nUzdEqoT7hDAsbYYBnP 1LIs4/M0pyDF6FLZlStEToRngcOTon0IIKhq2T9xUFTx2ddE5HnZrlYGgn12HQfY wo22xBnMz2XebQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:04:51 2026 by rpki-client