$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: 9yGWK0B7nmiTxjsxPOz9Xia4liDs7neFmOR7rrjFsQ4= Subject key identifier: 82:0F:60:71:4F:67:F1:0A:83:71:AA:61:00:DE:5B:B8:DB:57:B8:AD Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019DA3410E4D062ADAFBFDDAF8F429E76880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: B4 Signing time: Sun 19 Apr 2026 01:00:42 +0000 Manifest this update: Sun 19 Apr 2026 01:00:42 +0000 Manifest next update: Mon 20 Apr 2026 01:00:42 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: 58qro/v9uZ/jftaT7+ErBAXVeup+wrScHjg8d1CmFGo=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:41:0e:4d:06:2a:da:fb:fd:da:f8:f4:29:e7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Apr 19 01:00:42 2026 GMT Not After : Apr 20 01:00:42 2026 GMT Subject: CN=820f60714f67f10a8371aa6100de5bb8db57b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:9f:02:5d:ba:d9:56:5c:d5:6e:dd:9b:59: 04:1f:1c:82:9e:d0:42:3b:fe:2f:e8:26:ba:e8:f0: 3b:f7:67:15:6a:45:61:38:9a:2c:a8:70:1a:89:c6: 63:a8:20:0e:26:7b:ca:b0:21:e0:d9:fc:5e:2d:13: 4d:61:43:c5:91:14:a2:ab:36:c3:70:21:70:87:62: 72:d1:bb:cb:a2:46:f4:08:74:b5:31:f1:43:d5:94: 35:cd:c5:c7:26:ae:4f:e1:5d:62:39:00:97:38:1a: b7:f1:a8:0a:47:fc:18:f0:34:c5:a8:82:bc:63:15: 78:e5:bc:49:03:d4:6f:5b:d6:49:a4:a5:d6:25:88: 60:b3:5b:04:49:50:37:10:3c:9d:cf:d5:b8:68:98: 4f:ec:9c:9b:ca:b9:21:2a:0a:cf:3c:98:c4:0b:d5: 32:e8:67:2e:c8:8b:64:3c:36:d2:f0:11:cc:79:3f: 8d:bc:1d:30:ae:43:82:91:53:e8:f5:62:e7:83:d3: 2c:98:06:3d:e0:2e:f1:ec:56:82:94:81:a5:eb:df: 04:73:97:4c:2a:96:17:f2:26:d8:ae:b7:a3:0e:ad: 9e:96:71:72:2a:52:d0:c1:f5:85:78:f2:0a:f7:63: 71:21:d5:bd:ee:ea:28:20:4d:29:57:46:ad:ea:04: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0F:60:71:4F:67:F1:0A:83:71:AA:61:00:DE:5B:B8:DB:57:B8:AD X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ab:d3:b0:2c:71:36:7a:6e:62:0c:ce:dc:7b:00:fe:c9:a8: 50:f5:d6:bc:11:c2:3f:3a:ff:2f:4d:fd:6e:10:6d:97:a6:6b: 4a:45:51:50:ba:1d:73:42:0d:e6:a5:4a:3e:51:32:1e:0b:5d: 7d:c7:bd:21:a0:79:2a:b1:9c:ed:e3:22:aa:21:db:ea:36:65: 2c:c6:c8:03:77:e3:1c:8d:7b:53:8b:38:87:9e:96:9e:43:53: 2d:10:ee:3c:de:9d:15:c5:39:7b:ab:c8:0f:ca:0b:34:8a:40: 23:24:22:9c:dc:01:d4:cb:9f:9a:1d:c2:09:0d:7e:39:af:c3: 5d:30:02:8b:3d:0f:3a:28:51:5d:71:ab:74:eb:76:3c:a2:7e: d2:d1:f8:6f:7b:d4:0f:7c:34:be:82:4a:b4:5b:73:11:31:22: d1:f8:f1:dc:a2:cb:6e:b3:e1:7a:7a:c0:c3:98:60:07:2d:06: 83:a9:45:5b:49:bc:7f:40:41:04:2e:6d:d0:81:d3:8d:71:6e: 16:a7:51:28:48:01:19:3b:82:83:5a:3f:2d:42:78:69:41:e3: 23:ee:53:2b:51:89:76:d4:c0:6e:a8:d1:76:b0:04:e9:b7:8f: de:37:46:b3:10:c9:37:5f:d1:cf:db:90:a0:dc:0b:86:c2:37: fe:14:c0:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jQQ5NBira+/3a+PQp52iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNDE5MDEwMDQyWhcNMjYwNDIwMDEwMDQyWjAzMTEwLwYDVQQD Eyg4MjBmNjA3MTRmNjdmMTBhODM3MWFhNjEwMGRlNWJiOGRiNTdiOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gyfAl262VZc1W7dm1kEHxyCntBC O/4v6Ca66PA792cVakVhOJosqHAaicZjqCAOJnvKsCHg2fxeLRNNYUPFkRSiqzbD cCFwh2Jy0bvLokb0CHS1MfFD1ZQ1zcXHJq5P4V1iOQCXOBq38agKR/wY8DTFqIK8 YxV45bxJA9RvW9ZJpKXWJYhgs1sESVA3EDydz9W4aJhP7JybyrkhKgrPPJjEC9Uy 6GcuyItkPDbS8BHMeT+NvB0wrkOCkVPo9WLng9MsmAY94C7x7FaClIGl698Ec5dM KpYX8ibYrrejDq2elnFyKlLQwfWFePIK92NxIdW97uooIE0pV0at6gSwLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIPYHFPZ/EKg3GqYQDeW7jbV7itMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqvTsCxx NnpuYgzO3HsA/smoUPXWvBHCPzr/L039bhBtl6ZrSkVRULodc0IN5qVKPlEyHgtd fce9IaB5KrGc7eMiqiHb6jZlLMbIA3fjHI17U4s4h56WnkNTLRDuPN6dFcU5e6vI D8oLNIpAIyQinNwB1Mufmh3CCQ1+Oa/DXTACiz0POihRXXGrdOt2PKJ+0tH4b3vU D3w0voJKtFtzETEi0fjx3KLLbrPhenrAw5hgBy0Gg6lFW0m8f0BBBC5t0IHTjXFu FqdRKEgBGTuCg1o/LUJ4aUHjI+5TK1GJdtTAbqjRdrAE6beP3jdGsxDJN1/Rz9uQ oNwLhsI3/hTAvQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:09:53 2026 by rpki-client