$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: pCS0c5DYiFrWf0A/xESDPQq/T1Uw6mOWZEaSFiIO2Go= Subject key identifier: 56:83:35:34:A8:BD:4F:D4:C2:86:E0:77:C2:A5:F2:D9:95:CE:CF:C6 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019D9819027C3A3F37A17D4EB7CCC2398FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 14C3 Signing time: Thu 16 Apr 2026 21:01:09 +0000 Manifest this update: Thu 16 Apr 2026 21:01:09 +0000 Manifest next update: Fri 17 Apr 2026 21:01:09 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: zi40DMiCsvNPmxAI70m/t6a7CpeFYBL+9HD5ohmR3QY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:19:02:7c:3a:3f:37:a1:7d:4e:b7:cc:c2:39:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Apr 16 21:01:09 2026 GMT Not After : Apr 17 21:01:09 2026 GMT Subject: CN=56833534a8bd4fd4c286e077c2a5f2d995cecfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:96:f2:d5:99:47:37:e9:8c:ee:d0:74:34: 7a:ee:f1:1e:ac:78:82:4d:b6:a7:b9:37:41:c6:8b: 9a:95:c1:c3:01:5a:fa:a9:a2:ef:6d:52:5f:61:d6: bb:8c:08:72:79:a7:dd:ad:d0:57:08:aa:8b:65:75: 4b:e7:00:58:88:ec:46:4a:1e:bc:6f:9b:00:78:3b: 19:a6:7d:56:e0:49:6f:6f:8d:51:10:2e:8b:ce:15: 9b:26:99:7d:3f:d8:86:32:62:0c:a1:fe:e8:05:1f: 7a:af:c1:e8:fe:dc:db:2e:a6:f9:33:3a:29:d5:92: bd:82:bd:ff:11:61:54:21:dc:6b:06:3e:32:38:f0: 3c:10:37:30:a1:53:a9:36:2d:bb:3d:3f:07:31:b7: d4:d1:93:21:f1:44:61:34:54:6e:a7:71:41:d0:12: 60:dc:f6:e6:a2:f0:72:bb:b5:36:d6:dc:c9:c3:f3: 43:8e:65:36:10:f9:3a:9c:f4:29:2a:16:d1:a7:3f: 73:af:0e:26:b1:4b:1a:13:cc:cc:bd:df:f5:2f:07: ad:31:e0:17:4f:b2:9d:16:d1:99:cf:30:2b:98:dc: c3:d0:55:88:60:59:77:46:b8:1b:b6:c1:d1:4e:6b: d1:0d:6e:a6:8e:fc:1f:9f:3f:8a:3f:e1:6d:ed:a2: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:35:34:A8:BD:4F:D4:C2:86:E0:77:C2:A5:F2:D9:95:CE:CF:C6 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:15:df:37:d1:19:84:72:92:4d:2e:87:76:a0:33:a3:a3:dd: ea:79:2c:3f:94:22:76:da:8d:f6:a2:fb:e2:46:74:95:08:d0: c4:b9:55:60:db:ad:19:74:cc:bf:5f:43:33:4a:a4:80:88:69: fc:a5:76:91:71:91:f3:29:7e:d7:7e:c6:b4:ed:9a:35:5d:25: fc:d8:10:3b:30:ba:da:37:a7:22:38:b7:04:9d:31:6f:98:41: ba:16:cd:05:d4:21:b2:21:7a:2d:ac:b5:59:b8:09:1e:0f:0b: bb:f8:f0:3a:cf:a9:f9:b6:b3:e7:00:56:92:b9:01:ca:4a:44: 7a:18:00:39:b2:7a:bd:b0:c3:a9:d7:c0:d0:d7:2b:6e:bf:27: 58:be:e8:aa:4b:66:9b:8e:2d:dc:12:18:44:4d:48:30:6a:22: 0d:41:d0:8d:81:de:d1:60:ae:56:95:14:d8:38:f7:1b:1a:d5: 89:ab:56:2b:ec:3c:68:39:46:b7:d9:7e:80:a4:ba:87:c0:3e: 1c:1b:ee:bb:d9:f4:ec:10:68:c5:79:e7:47:ff:e2:3b:22:7a: c5:d2:aa:f8:dc:c7:74:83:67:80:41:62:ee:28:72:1e:f1:70: 36:0e:27:f0:4b:1b:d1:9c:13:db:f2:83:0c:0b:42:56:f4:2b: 16:59:fe:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGQJ8Oj83oX1Ot8zCOY/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNDE2MjEwMTA5WhcNMjYwNDE3MjEwMTA5WjAzMTEwLwYDVQQD Eyg1NjgzMzUzNGE4YmQ0ZmQ0YzI4NmUwNzdjMmE1ZjJkOTk1Y2VjZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+yW8tWZRzfpjO7QdDR67vEerHiC TbanuTdBxoualcHDAVr6qaLvbVJfYda7jAhyeafdrdBXCKqLZXVL5wBYiOxGSh68 b5sAeDsZpn1W4Elvb41REC6LzhWbJpl9P9iGMmIMof7oBR96r8Ho/tzbLqb5Mzop 1ZK9gr3/EWFUIdxrBj4yOPA8EDcwoVOpNi27PT8HMbfU0ZMh8URhNFRup3FB0BJg 3PbmovByu7U21tzJw/NDjmU2EPk6nPQpKhbRpz9zrw4msUsaE8zMvd/1LwetMeAX T7KdFtGZzzArmNzD0FWIYFl3RrgbtsHRTmvRDW6mjvwfnz+KP+Ft7aLYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaDNTSovU/Uwobgd8Kl8tmVzs/GMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThXfN9EZ hHKSTS6HdqAzo6Pd6nksP5QidtqN9qL74kZ0lQjQxLlVYNutGXTMv19DM0qkgIhp /KV2kXGR8yl+137GtO2aNV0l/NgQOzC62jenIji3BJ0xb5hBuhbNBdQhsiF6Lay1 WbgJHg8Lu/jwOs+p+baz5wBWkrkBykpEehgAObJ6vbDDqdfA0Ncrbr8nWL7oqktm m44t3BIYRE1IMGoiDUHQjYHe0WCuVpUU2Dj3GxrViatWK+w8aDlGt9l+gKS6h8A+ HBvuu9n07BBoxXnnR//iOyJ6xdKq+NzHdINngEFi7ihyHvFwNg4n8Esb0ZwT2/KD DAtCVvQrFln+wg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:10:30 2026 by rpki-client