$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: rc55PBAI3fDmR7xFNqwLEAUfj9t9nMH49kmGVvm2CY8= Subject key identifier: 69:E4:8A:71:D0:A6:62:B3:65:A9:5D:76:AA:90:B7:7A:E6:B7:A6:D2 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019D99622389015B521C98E91D3A7676341C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 1234 Signing time: Fri 17 Apr 2026 03:00:38 +0000 Manifest this update: Fri 17 Apr 2026 03:00:38 +0000 Manifest next update: Sat 18 Apr 2026 03:00:38 +0000 Files and hashes: 1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=) 2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: es3qNOJZlXWKIP84I6Bt/LmckUGZrWvHV2Wf1gtRrlw=) 3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=) 4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=) 5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=) 6: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=) 7: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=) 8: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=) 9: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=) 10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=) 11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=) 12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:23:89:01:5b:52:1c:98:e9:1d:3a:76:76:34:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Apr 17 03:00:38 2026 GMT Not After : Apr 18 03:00:38 2026 GMT Subject: CN=69e48a71d0a662b365a95d76aa90b77ae6b7a6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:2c:20:d4:57:bf:02:99:22:a2:10:6f:9c: b1:ff:7a:78:0f:a5:e6:d1:72:2a:18:59:b4:c3:0a: e2:97:13:71:32:76:a1:75:93:fa:fa:a9:f6:3d:ae: e9:16:50:a4:9f:bd:28:5b:9e:7a:d7:47:44:29:f2: d1:77:68:f3:00:d7:91:9c:9d:a0:24:ca:1f:df:a4: 54:89:8b:32:86:8c:4d:67:ff:f9:d6:13:f6:b4:20: c8:09:6b:68:57:28:45:18:8f:16:2e:31:d2:d7:6a: 14:f7:19:04:0e:9e:25:40:86:f0:8a:dc:1e:72:9f: 0a:37:0f:c0:70:69:92:f7:33:e9:44:0c:ae:80:99: d3:54:b4:b7:d7:60:f7:26:de:d2:65:a9:d4:09:61: 70:cd:aa:a8:93:f8:ac:79:76:b4:59:95:04:79:50: 77:d6:c8:fa:e0:0d:28:c2:6d:16:d1:a1:e6:4b:44: c3:9e:61:90:7b:a6:a0:83:95:66:cf:3a:2d:5d:33: 45:69:7a:67:0f:cf:52:51:61:57:fc:b4:ff:0c:8f: 3d:23:7b:db:75:d4:a6:e1:07:fc:d0:66:11:90:9f: 75:53:8b:84:d8:c1:8e:e5:19:ea:18:f4:60:2b:f2: 6d:e3:30:22:85:0a:a6:79:3d:d7:60:55:1c:5d:c5: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:8A:71:D0:A6:62:B3:65:A9:5D:76:AA:90:B7:7A:E6:B7:A6:D2 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c1:63:38:1f:3b:51:cd:e1:dd:14:00:d1:42:41:26:3d:f7: 7d:db:48:8a:9d:ef:16:af:89:0d:52:86:2a:85:96:41:d8:b8: aa:40:14:ed:e4:ea:29:ba:d0:7a:4f:37:d6:be:18:e3:12:0c: 55:e0:00:74:80:e5:71:a1:2c:05:bc:24:37:df:0e:8c:83:65: f0:14:3b:b6:d5:b6:56:62:ac:09:b4:46:a5:f4:0d:33:05:b1: 62:af:09:eb:e4:0d:77:bc:a7:45:78:ea:8c:71:7f:56:4a:5f: 42:3b:34:d7:20:f0:c8:2a:b2:16:ae:34:6f:32:68:16:bb:a8: 77:a7:68:a5:dd:92:2c:24:ce:7c:be:e0:22:df:2b:36:0d:d3: bb:68:4f:d8:e7:78:65:15:c2:72:4d:41:ab:a6:38:6e:b8:9c: fc:a0:74:99:01:de:1e:6b:29:fc:87:7c:2c:51:5b:51:77:5e: c7:43:0d:b8:c2:5a:bb:6f:12:2a:ba:ad:59:56:4a:b3:ef:30: 18:12:45:ec:8e:d3:56:f9:d0:1e:48:5a:74:41:e0:75:80:66: d8:5c:0b:ec:f8:75:06:f9:3f:d3:c4:7d:4b:1d:7f:7e:78:e0: 09:17:c7:06:5b:39:15:a7:81:28:cf:b1:d4:4b:7b:c1:c1:2b: 52:ab:f5:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYiOJAVtSHJjpHTp2djQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwNDE3MDMwMDM4WhcNMjYwNDE4MDMwMDM4WjAzMTEwLwYDVQQD Eyg2OWU0OGE3MWQwYTY2MmIzNjVhOTVkNzZhYTkwYjc3YWU2YjdhNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1ssINRXvwKZIqIQb5yx/3p4D6Xm 0XIqGFm0wwrilxNxMnahdZP6+qn2Pa7pFlCkn70oW55610dEKfLRd2jzANeRnJ2g JMof36RUiYsyhoxNZ//51hP2tCDICWtoVyhFGI8WLjHS12oU9xkEDp4lQIbwitwe cp8KNw/AcGmS9zPpRAyugJnTVLS312D3Jt7SZanUCWFwzaqok/iseXa0WZUEeVB3 1sj64A0owm0W0aHmS0TDnmGQe6agg5VmzzotXTNFaXpnD89SUWFX/LT/DI89I3vb ddSm4Qf80GYRkJ91U4uE2MGO5RnqGPRgK/Jt4zAihQqmeT3XYFUcXcWuGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnkinHQpmKzZalddqqQt3rmt6bSMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8FjOB87 Uc3h3RQA0UJBJj33fdtIip3vFq+JDVKGKoWWQdi4qkAU7eTqKbrQek831r4Y4xIM VeAAdIDlcaEsBbwkN98OjINl8BQ7ttW2VmKsCbRGpfQNMwWxYq8J6+QNd7ynRXjq jHF/VkpfQjs01yDwyCqyFq40bzJoFruod6dopd2SLCTOfL7gIt8rNg3Tu2hP2Od4 ZRXCck1Bq6Y4bric/KB0mQHeHmsp/Id8LFFbUXdex0MNuMJau28SKrqtWVZKs+8w GBJF7I7TVvnQHkhadEHgdYBm2FwL7Ph1Bvk/08R9Sx1/fnjgCRfHBls5FaeBKM+x 1Et7wcErUqv1Qg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:52 2026 by rpki-client