$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: ayGD6Flk9SEl4qz74Bs6tiJqkVJcSvJHpRE62ZLTZnY= Subject key identifier: EC:36:BF:51:E1:18:80:8F:6E:55:3C:CD:39:1E:F0:D4:BC:79:55:1A Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019DA29C772EDA4FCDDAB3B87D742ADA036C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 18D6 Signing time: Sat 18 Apr 2026 22:00:56 +0000 Manifest this update: Sat 18 Apr 2026 22:00:56 +0000 Manifest next update: Sun 19 Apr 2026 22:00:56 +0000 Files and hashes: 1: 6SfzyA20maGiI5XJBQeDm_u97nY.roa (hash: u3qBuRlWiB0K8K8vlPB1p6jUd1Xd8XzeiX/KEClwly8=) 2: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=) 3: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=) 4: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=) 5: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=) 6: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=) 7: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=) 8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=) 9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=) 10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=) 11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=) 12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=) 13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=) 14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=) 15: UWaCKuifSAXQ_q_qbqARMjeLkuk.roa (hash: xqvi3BTcN1RVOAgMAoZQMY8MT30m6KbWtN2qeSF/sR8=) 16: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=) 17: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=) 18: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=) 19: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=) 20: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=) 21: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=) 22: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=) 23: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=) 24: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=) 25: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: lkmIBIs/1WskPPAiGxZ3ORaWCGrrMO+HNjZUyAvBdyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:9c:77:2e:da:4f:cd:da:b3:b8:7d:74:2a:da:03:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Apr 18 22:00:56 2026 GMT Not After : Apr 19 22:00:56 2026 GMT Subject: CN=ec36bf51e118808f6e553ccd391ef0d4bc79551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:54:a3:d3:7a:fc:15:d8:94:61:18:e1:38: 8d:8f:01:ea:54:54:a7:e5:fe:fc:cf:2b:2d:fc:d6: 5e:cb:04:c5:75:60:fe:cf:b4:15:40:43:55:48:5b: bf:2d:48:da:b8:01:9d:3e:77:18:49:71:15:36:b5: f8:da:a0:b2:35:16:d6:ab:c4:76:5a:8c:28:60:ae: 92:88:3c:43:de:26:76:b9:43:65:66:6f:55:49:fc: e7:95:62:d3:1b:7d:71:04:dc:62:ae:d7:15:d7:dc: e3:dc:e1:08:67:74:1a:5a:cd:77:71:6f:a8:bd:fd: d0:04:cf:2d:12:f7:d2:33:e4:ea:89:3b:6b:cc:fa: 84:3c:db:28:8c:b6:18:e3:b2:c9:03:e6:a9:34:22: 78:0d:4d:a7:37:70:d8:e0:ff:2b:09:31:63:07:b0: 36:ed:42:77:43:8a:5f:94:9e:44:e9:c8:dc:46:cc: 13:5d:3d:5d:91:59:a9:f4:94:3e:15:f9:cb:bc:49: 35:e8:80:e2:31:ed:af:ba:3f:51:eb:2c:b0:b3:ce: e3:34:00:fd:a6:a3:ae:63:dd:53:a2:5e:da:ac:c0: 40:b6:6e:d6:bf:d7:05:bc:bc:d4:f9:8d:0c:4c:71: 0c:40:02:15:ae:c9:5a:59:a6:b6:51:d3:2e:28:4e: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:BF:51:E1:18:80:8F:6E:55:3C:CD:39:1E:F0:D4:BC:79:55:1A X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:23:0c:bb:ca:6b:83:dd:58:4c:99:d2:08:b1:3c:fc:c6:8a: a4:26:f7:e2:32:19:cf:10:a8:28:05:d6:30:02:07:3d:e5:27: cf:97:4a:80:ee:6f:37:87:c2:5c:af:5a:d0:8f:eb:42:ee:d4: 11:11:c6:13:a5:7e:79:27:f5:a9:1f:90:4b:26:e8:bc:f5:a2: 87:d9:cc:f1:65:0a:1e:50:14:fd:b8:97:18:13:5c:00:3a:60: 3a:63:00:ce:55:bf:67:82:d5:e9:bd:56:7e:b9:1e:28:2e:7a: 5f:5d:91:f5:95:48:6a:3b:08:a3:d7:7e:6f:4d:29:a6:88:ac: 36:0c:15:ec:34:1b:3b:31:75:1a:4d:d0:68:3f:81:d1:e4:b4: 49:58:8b:64:75:9e:b6:df:ac:87:e0:81:b5:cb:ad:2f:a5:9a: 16:a7:b4:d8:9a:da:6b:21:4b:ff:43:b6:86:46:96:d8:22:63: 5a:db:b2:73:cf:88:97:31:b7:25:d7:e3:ed:b6:25:cc:9d:ac: 88:bd:9a:0d:ec:e1:9f:68:e6:63:c5:32:55:b9:c5:9a:fc:ef: 91:fe:d1:52:48:a3:02:cd:75:43:79:8c:db:56:cf:44:3b:b6: eb:45:53:b5:27:0a:37:ad:39:86:51:f2:d6:1f:39:9f:87:bd: dc:b9:54:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2inHcu2k/N2rO4fXQq2gNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwNDE4MjIwMDU2WhcNMjYwNDE5MjIwMDU2WjAzMTEwLwYDVQQD EyhlYzM2YmY1MWUxMTg4MDhmNmU1NTNjY2QzOTFlZjBkNGJjNzk1NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmxUo9N6/BXYlGEY4TiNjwHqVFSn 5f78zyst/NZeywTFdWD+z7QVQENVSFu/LUjauAGdPncYSXEVNrX42qCyNRbWq8R2 WowoYK6SiDxD3iZ2uUNlZm9VSfznlWLTG31xBNxirtcV19zj3OEIZ3QaWs13cW+o vf3QBM8tEvfSM+TqiTtrzPqEPNsojLYY47LJA+apNCJ4DU2nN3DY4P8rCTFjB7A2 7UJ3Q4pflJ5E6cjcRswTXT1dkVmp9JQ+FfnLvEk16IDiMe2vuj9R6yyws87jNAD9 pqOuY91Tol7arMBAtm7Wv9cFvLzU+Y0MTHEMQAIVrslaWaa2UdMuKE5nIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw2v1HhGICPblU8zTke8NS8eVUaMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiMMu8pr g91YTJnSCLE8/MaKpCb34jIZzxCoKAXWMAIHPeUnz5dKgO5vN4fCXK9a0I/rQu7U ERHGE6V+eSf1qR+QSybovPWih9nM8WUKHlAU/biXGBNcADpgOmMAzlW/Z4LV6b1W frkeKC56X12R9ZVIajsIo9d+b00ppoisNgwV7DQbOzF1Gk3QaD+B0eS0SViLZHWe tt+sh+CBtcutL6WaFqe02JraayFL/0O2hkaW2CJjWtuyc8+IlzG3Jdfj7bYlzJ2s iL2aDezhn2jmY8UyVbnFmvzvkf7RUkijAs11Q3mM21bPRDu260VTtScKN605hlHy 1h85n4e93LlUHA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:45 2026 by rpki-client