$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: qlF4owiUKE2m0KrEIX09iNPOUWViFpzTq9T3DcCLEic= Subject key identifier: 65:81:6B:E4:39:A2:B7:97:F8:E1:14:94:08:F7:6D:B3:7A:67:C7:EA Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019D9A30C8C12784B85ED2EAEF3D8E61BFFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 146A Signing time: Fri 17 Apr 2026 06:46:21 +0000 Manifest this update: Fri 17 Apr 2026 06:46:21 +0000 Manifest next update: Sat 18 Apr 2026 06:46:21 +0000 Files and hashes: 1: 1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa (hash: LcUqDvDIF+dS1rO59QJwzMS/rR1Ec+AWaOwx0W19I+c=) 2: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=) 3: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 2yzcZUPwgMcvthNb3K/+S2OZjqb7mUV5BQvRUL6KPiQ=) 4: CdgjSj8B2eEBBly0iK4h89jCNUc.roa (hash: aTHrwyvkvgZuRLuQPng1C8Fc89AkT7KTKhgpjKS5Q+Q=) 5: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=) 6: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=) 7: No4ule1BEvyHev0slPSf3Vweozw.roa (hash: 8LZLGZIPPDNTDh9DCx2/MjGjsFYhFM8IFjY7SFTvpMw=) 8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=) 9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=) 10: Qiql6Go7Q-b4ErD7FeQsqVuBdlY.roa (hash: K+XzTbXrMRWEIGL5pRY6yHHFD+gA13Hft9u0b4TCVNM=) 11: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=) 12: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=) 13: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (hash: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=) 14: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=) 15: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=) 16: W5olfq9Y7_Lj6KMnAWRUMCZAxjo.roa (hash: qmwFKXQc7nyx5IpOYqlWD91kE3wC9gbI51Kb8YcehEw=) 17: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=) 18: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=) 19: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=) 20: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=) 21: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=) 22: gxYBa5PVU9v9YoR3nT1e_I5ZLaQ.roa (hash: LUNLKTLF0jU435zgccL4QRfdTZFRAvMjstkjVzOvR40=) 23: hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa (hash: EYq3/vGPN6jy3lzOn8yHeB4uOnE5CknSB12P3oGEmTQ=) 24: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=) 25: ofDnG2RR07Ffgo6O-NriMLrnSqk.roa (hash: NnioAnFhMcEqC2jvleG0Rix97KFCy1QoGkLlAfyyOm0=) 26: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=) 27: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=) 28: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=) 29: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:30:c8:c1:27:84:b8:5e:d2:ea:ef:3d:8e:61:bf:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Apr 17 06:46:21 2026 GMT Not After : Apr 18 06:46:21 2026 GMT Subject: CN=65816be439a2b797f8e1149408f76db37a67c7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:16:66:93:1c:63:cd:f9:93:5f:c6:54:de: 32:2e:3c:fc:a4:7c:36:9f:f9:8e:76:16:d2:b4:55: f7:7f:3d:e2:4a:c3:53:54:3b:bc:92:12:f7:91:b2: ab:6a:9e:42:63:1b:b0:f1:77:db:d5:90:a2:c1:00: 5e:60:32:70:31:47:4b:60:f8:11:3b:03:65:a9:f1: b3:8a:67:da:d4:5f:13:39:39:9e:50:d7:6e:0f:a6: 53:de:e8:fc:95:29:a7:03:5a:c2:87:69:c6:2c:5e: b3:0f:b4:58:c6:2a:ad:68:92:53:f3:ad:a9:2c:69: 70:4e:ba:b3:0f:e2:9a:db:46:93:46:a3:80:e4:88: cf:08:e4:75:f1:28:98:63:fd:b6:95:23:f1:62:02: 07:e9:06:e4:1b:b9:c3:f8:7a:da:3c:f3:ed:21:cf: c7:8b:e3:5f:85:63:72:e8:27:68:5b:3d:9b:9c:8c: 01:58:ff:e2:10:cb:31:f3:6d:ca:d2:86:9e:75:92: f8:f4:80:7c:8d:2c:91:7a:b8:56:a4:07:58:66:68: 40:ad:92:29:ee:81:5d:43:bc:31:92:67:56:a7:0c: 2f:12:49:34:3e:77:d6:79:42:40:1d:d8:a8:1c:c9: dc:0c:c0:03:8c:84:71:f9:86:b6:28:4d:86:ac:e8: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:81:6B:E4:39:A2:B7:97:F8:E1:14:94:08:F7:6D:B3:7A:67:C7:EA X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:64:e0:ba:3f:e2:70:c0:6b:36:07:d6:fe:30:a0:5c:74:fd: 6e:89:76:84:d2:ae:d5:d7:a5:ac:91:17:77:42:c6:33:5f:c7: cd:50:d7:93:69:47:56:a9:17:21:9c:52:11:ad:6c:a9:ba:72: d0:a2:46:ee:f1:98:9e:49:43:7e:80:2d:c4:ac:cf:95:ff:77: 71:de:3c:7a:c8:d4:a2:23:7c:5f:72:3e:78:5f:ec:df:d2:e3: c2:0e:2d:a7:70:a7:1c:3e:a3:ae:50:81:7f:5c:33:64:62:d8: 7a:6d:a9:e8:b3:79:cc:97:2e:93:af:ed:69:7e:45:a5:87:22: 0a:f0:80:41:3a:22:f4:9b:21:73:c5:97:ba:8d:0b:c0:64:85: 02:8d:8c:61:1b:0c:7d:70:e0:ce:6b:77:34:c3:df:cd:64:f2: 1b:06:1d:c9:72:61:7b:54:e7:31:00:65:82:43:a7:3b:0e:99: a0:6c:99:db:11:9b:ea:57:d7:1f:6b:0c:ab:01:54:f5:c7:28: 90:7a:ea:2a:cc:e0:90:71:65:91:67:bf:ab:9c:40:c8:28:ba: 4e:db:3e:08:94:2d:e5:69:a9:b3:5e:31:3b:bc:8b:6a:e8:93: a8:63:17:bb:bd:8f:97:73:14:d2:05:5f:72:1a:6d:56:e0:04: eb:96:0d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aMMjBJ4S4XtLq7z2OYb/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwNDE3MDY0NjIxWhcNMjYwNDE4MDY0NjIxWjAzMTEwLwYDVQQD Eyg2NTgxNmJlNDM5YTJiNzk3ZjhlMTE0OTQwOGY3NmRiMzdhNjdjN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3MWZpMcY835k1/GVN4yLjz8pHw2 n/mOdhbStFX3fz3iSsNTVDu8khL3kbKrap5CYxuw8Xfb1ZCiwQBeYDJwMUdLYPgR OwNlqfGzimfa1F8TOTmeUNduD6ZT3uj8lSmnA1rCh2nGLF6zD7RYxiqtaJJT862p LGlwTrqzD+Ka20aTRqOA5IjPCOR18SiYY/22lSPxYgIH6QbkG7nD+HraPPPtIc/H i+NfhWNy6CdoWz2bnIwBWP/iEMsx823K0oaedZL49IB8jSyRerhWpAdYZmhArZIp 7oFdQ7wxkmdWpwwvEkk0PnfWeUJAHdioHMncDMADjIRx+Ya2KE2GrOi9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWBa+Q5oreX+OEUlAj3bbN6Z8fqMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2Tguj/i cMBrNgfW/jCgXHT9bol2hNKu1delrJEXd0LGM1/HzVDXk2lHVqkXIZxSEa1sqbpy 0KJG7vGYnklDfoAtxKzPlf93cd48esjUoiN8X3I+eF/s39Ljwg4tp3CnHD6jrlCB f1wzZGLYem2p6LN5zJcuk6/taX5FpYciCvCAQToi9Jshc8WXuo0LwGSFAo2MYRsM fXDgzmt3NMPfzWTyGwYdyXJhe1TnMQBlgkOnOw6ZoGyZ2xGb6lfXH2sMqwFU9cco kHrqKszgkHFlkWe/q5xAyCi6Tts+CJQt5Wmps14xO7yLauiTqGMXu72Pl3MU0gVf chptVuAE65YNBg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:25 2026 by rpki-client