$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: HFQ6n5cBoBMdm53oiKqvWaYizFiJ+PQMmXeYGic/LAw= Subject key identifier: BD:3D:6C:0A:73:66:B1:5A:2E:BA:1E:03:7F:43:25:98:2D:5D:05:25 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019DA30B037185023D2518633D2E5DDBAF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0A97 Signing time: Sun 19 Apr 2026 00:01:41 +0000 Manifest this update: Sun 19 Apr 2026 00:01:41 +0000 Manifest next update: Mon 20 Apr 2026 00:01:41 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Duy_rM8zgDjySYe4ZSDOg73tPCE.roa (hash: X8/ksNeJf+bfGjtKgbxWuhpWvkDUusV0gttXbiXMo/w=) 4: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: XONRzEFOsbDEj9znzLwvCwi+FjkuQQVDDjzJ9t/prIY=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:0b:03:71:85:02:3d:25:18:63:3d:2e:5d:db:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Apr 19 00:01:41 2026 GMT Not After : Apr 20 00:01:41 2026 GMT Subject: CN=bd3d6c0a7366b15a2eba1e037f4325982d5d0525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:74:df:f8:03:cb:32:9e:c7:67:c0:c9:47: 5c:32:f3:9b:bb:f6:bd:d6:fc:2b:f0:22:8b:39:12: f0:3d:0c:4c:6f:de:ff:5c:50:65:44:ad:21:be:f2: 05:00:4d:d7:60:2e:0c:61:61:90:c5:4f:b2:fa:7d: 22:ff:0c:1b:a6:71:90:39:52:86:ba:56:ee:76:cb: d8:bf:b0:4f:bd:57:d1:58:0f:cc:9b:0d:56:5a:d3: 6c:59:18:03:d3:9f:ca:5b:0f:46:f0:b1:60:20:2d: 07:75:a5:96:dc:8c:c5:f0:87:51:35:49:9e:e8:0f: 7a:01:88:97:a1:83:7b:a2:29:bb:f0:ef:af:80:5d: 07:13:3d:de:98:d1:bb:0e:04:f1:d3:c9:ee:b2:27: 5b:a6:c8:32:c8:57:2a:df:0b:16:9e:0b:c1:7f:27: aa:de:b4:72:a4:69:74:8b:13:7e:a2:46:93:73:ee: cf:37:ca:f8:9e:dc:3f:4a:b2:d1:a6:95:68:94:20: 3f:fc:d4:f4:5d:50:90:98:e5:49:ea:e8:39:d9:46: c8:d8:cf:0e:01:d6:ea:40:6a:ff:d1:f1:91:e8:7a: d9:1d:35:43:63:3a:34:76:da:9a:11:63:04:24:89: 21:7b:11:47:d3:0b:ce:68:bf:c8:bb:34:64:6d:12: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:6C:0A:73:66:B1:5A:2E:BA:1E:03:7F:43:25:98:2D:5D:05:25 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e6:83:cb:97:30:14:43:d9:8b:51:e4:fd:e3:df:ef:55:57: dc:81:7a:4d:ed:36:f8:1d:f6:9b:72:45:32:0c:a4:c7:22:06: 01:56:b7:7c:2e:fa:d2:45:29:b1:4e:ed:f1:7b:b6:cf:11:a5: 80:bd:59:e6:fb:68:be:f9:2b:bd:e6:ef:7c:6f:55:17:30:8e: 30:79:f2:e3:72:91:20:77:52:81:95:3e:c1:31:b9:45:bc:1d: c0:92:0a:00:d6:2e:b5:e1:6b:5a:15:f3:6b:71:82:8c:0f:6a: 15:75:e0:65:fe:40:f4:52:fe:80:4d:ca:fb:21:b6:09:a7:2a: 9a:1d:dd:75:a9:82:db:13:ef:11:e3:a9:51:86:41:3b:81:34: 68:63:d7:e6:dd:ed:1c:05:bf:e3:a1:4b:37:4f:7c:18:f5:b6: fe:16:8e:e6:32:d3:1d:f9:d0:a9:6f:b5:33:4b:d4:9d:65:55: e9:8d:65:7c:47:58:26:99:77:71:85:28:c7:15:ae:27:cb:15: ab:3a:2f:43:93:f5:28:f2:78:5f:62:d0:4d:d1:7a:3c:74:c8: a8:d0:46:fd:bc:9a:fe:25:d7:c7:bd:b1:7b:35:c7:f4:59:0c: 4d:2a:90:46:8c:23:f3:d4:38:ac:cf:d7:ac:e4:d4:30:d2:90: e3:6c:72:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCwNxhQI9JRhjPS5d26+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwNDE5MDAwMTQxWhcNMjYwNDIwMDAwMTQxWjAzMTEwLwYDVQQD EyhiZDNkNmMwYTczNjZiMTVhMmViYTFlMDM3ZjQzMjU5ODJkNWQwNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z03/gDyzKex2fAyUdcMvObu/a9 1vwr8CKLORLwPQxMb97/XFBlRK0hvvIFAE3XYC4MYWGQxU+y+n0i/wwbpnGQOVKG ulbudsvYv7BPvVfRWA/Mmw1WWtNsWRgD05/KWw9G8LFgIC0HdaWW3IzF8IdRNUme 6A96AYiXoYN7oim78O+vgF0HEz3emNG7DgTx08nusidbpsgyyFcq3wsWngvBfyeq 3rRypGl0ixN+okaTc+7PN8r4ntw/SrLRppVolCA//NT0XVCQmOVJ6ug52UbI2M8O AdbqQGr/0fGR6HrZHTVDYzo0dtqaEWMEJIkhexFH0wvOaL/IuzRkbRKI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL09bApzZrFaLroeA39DJZgtXQUlMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuaDy5cw FEPZi1Hk/ePf71VX3IF6Te02+B32m3JFMgykxyIGAVa3fC760kUpsU7t8Xu2zxGl gL1Z5vtovvkrvebvfG9VFzCOMHny43KRIHdSgZU+wTG5RbwdwJIKANYuteFrWhXz a3GCjA9qFXXgZf5A9FL+gE3K+yG2Cacqmh3ddamC2xPvEeOpUYZBO4E0aGPX5t3t HAW/46FLN098GPW2/haO5jLTHfnQqW+1M0vUnWVV6Y1lfEdYJpl3cYUoxxWuJ8sV qzovQ5P1KPJ4X2LQTdF6PHTIqNBG/bya/iXXx72xezXH9FkMTSqQRowj89Q4rM/X rOTUMNKQ42xy9Q== -----END CERTIFICATE-----Generated at Sun Apr 19 08:46:27 2026 by rpki-client