$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: 98YLCt3fSvGnCLJyoq0wRP+cWPYr/DWhJlZlLVBENlQ= Subject key identifier: 98:FF:18:3B:1B:7A:5D:14:B2:3D:78:D1:2B:A0:A1:9D:69:45:B0:08 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019DA41C713EBD4411AB5C2DFAF9DE194A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0DC8 Signing time: Sun 19 Apr 2026 05:00:20 +0000 Manifest this update: Sun 19 Apr 2026 05:00:20 +0000 Manifest next update: Mon 20 Apr 2026 05:00:20 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: ip+9pMY79WRItboHAXRD2NgVl66wILCiKjnpMzuZU8o=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1c:71:3e:bd:44:11:ab:5c:2d:fa:f9:de:19:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Apr 19 05:00:20 2026 GMT Not After : Apr 20 05:00:20 2026 GMT Subject: CN=98ff183b1b7a5d14b23d78d12ba0a19d6945b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:40:b3:64:0f:6f:05:22:64:ca:ad:3d:70: 23:38:fb:5a:06:91:56:b6:8a:ab:be:8d:50:dc:e8: 1e:f4:18:1b:56:d0:ea:65:21:b7:3c:de:3e:60:f2: 7e:8a:f1:60:21:04:15:23:e5:9b:d6:b4:10:58:1f: ca:3d:f1:ca:b6:75:f7:74:7d:67:26:b0:5a:90:38: 01:f8:b5:60:a7:23:a4:16:96:34:cc:5c:b4:ce:93: 9e:13:b8:65:88:4b:5a:38:d2:a0:af:cd:62:de:b8: 05:25:7a:7c:c2:31:9b:6b:31:f4:87:96:25:50:bb: bc:34:fe:ce:24:9e:c2:fd:7e:32:44:25:c4:f9:9f: 8e:44:d9:0a:6f:42:36:09:5e:aa:54:85:12:fb:ea: f9:b7:f7:eb:7d:ff:20:dc:9b:82:83:ff:51:e7:da: f1:dd:4d:48:8a:fc:0f:7c:73:84:90:9f:80:47:ae: 9f:4b:5a:c0:92:40:c9:96:a5:5c:4f:e6:5c:c1:19: f0:8b:59:0c:e3:bc:bf:41:c0:e4:5d:d9:50:36:95: e3:43:f9:19:8f:91:4d:2b:a4:2b:36:9c:2c:f6:db: 6e:fb:f1:3b:dd:09:7f:18:68:4a:97:41:45:bd:4d: 1c:e1:62:bf:46:6c:10:79:2e:3b:61:6b:5c:23:3d: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:18:3B:1B:7A:5D:14:B2:3D:78:D1:2B:A0:A1:9D:69:45:B0:08 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7a:62:74:a5:13:fc:95:bc:21:13:0e:54:ed:c6:5a:66:17: 5c:2b:c9:2d:ad:f8:43:d4:d1:b2:55:f6:4f:02:9f:22:67:e2: 8f:65:4b:67:11:f5:4c:19:a8:b1:c6:21:f8:e8:b6:1c:8b:a0: d9:31:8f:12:03:9e:87:3c:14:ce:66:13:5d:c7:00:ad:2f:6b: 86:59:8a:73:b7:0e:7a:b5:07:6d:77:d1:ee:d2:54:6b:a0:a2: ec:e9:55:d8:a7:b9:da:aa:8c:b9:6b:d9:8d:7c:bc:84:c2:db: 46:11:dd:47:32:98:ce:2c:64:91:a9:f8:c6:02:d7:95:f0:cb: e0:87:d7:52:d2:9f:51:c2:db:8b:eb:9c:c8:61:1f:d7:17:a7: d2:e0:f7:7f:12:ce:d7:dc:c9:a4:35:5a:f8:0a:80:41:ad:18: 64:6f:f0:ba:e9:38:c0:6c:c9:e6:57:2e:1f:39:92:ce:0e:a1: 6b:a8:16:1f:00:4c:23:17:30:99:80:77:9c:46:e8:07:91:e2: 5b:9f:87:5e:ff:c3:4b:4e:cd:b2:47:97:14:cc:29:4e:7a:8f: db:90:a6:fb:98:8b:19:6d:19:c0:29:36:61:0b:00:7e:6f:9d: cd:e6:f8:a7:c9:ce:a0:23:97:57:0d:db:0a:c3:1e:04:72:87: 89:f4:39:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHHE+vUQRq1wt+vneGUplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwNDE5MDUwMDIwWhcNMjYwNDIwMDUwMDIwWjAzMTEwLwYDVQQD Eyg5OGZmMTgzYjFiN2E1ZDE0YjIzZDc4ZDEyYmEwYTE5ZDY5NDViMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4hAs2QPbwUiZMqtPXAjOPtaBpFW toqrvo1Q3Oge9BgbVtDqZSG3PN4+YPJ+ivFgIQQVI+Wb1rQQWB/KPfHKtnX3dH1n JrBakDgB+LVgpyOkFpY0zFy0zpOeE7hliEtaONKgr81i3rgFJXp8wjGbazH0h5Yl ULu8NP7OJJ7C/X4yRCXE+Z+ORNkKb0I2CV6qVIUS++r5t/frff8g3JuCg/9R59rx 3U1IivwPfHOEkJ+AR66fS1rAkkDJlqVcT+ZcwRnwi1kM47y/QcDkXdlQNpXjQ/kZ j5FNK6QrNpws9ttu+/E73Ql/GGhKl0FFvU0c4WK/RmwQeS47YWtcIz3zlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj/GDsbel0Usj140SugoZ1pRbAIMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnpidKUT /JW8IRMOVO3GWmYXXCvJLa34Q9TRslX2TwKfImfij2VLZxH1TBmoscYh+Oi2HIug 2TGPEgOehzwUzmYTXccArS9rhlmKc7cOerUHbXfR7tJUa6Ci7OlV2Ke52qqMuWvZ jXy8hMLbRhHdRzKYzixkkan4xgLXlfDL4IfXUtKfUcLbi+ucyGEf1xen0uD3fxLO 19zJpDVa+AqAQa0YZG/wuuk4wGzJ5lcuHzmSzg6ha6gWHwBMIxcwmYB3nEboB5Hi W5+HXv/DS07NskeXFMwpTnqP25Cm+5iLGW0ZwCk2YQsAfm+dzeb4p8nOoCOXVw3b CsMeBHKHifQ5Xw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:14:36 2026 by rpki-client