$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: CeB/Qi2Nw3RV9c8BIGdJebPUEUP48HI+hqATBz79COg= Subject key identifier: B0:16:73:6F:30:86:82:E9:0D:DE:8D:D6:D6:D6:8F:33:24:39:9E:8F Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019DA3E67038E2E501B8FF621E195744503F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 195F Signing time: Sun 19 Apr 2026 04:01:21 +0000 Manifest this update: Sun 19 Apr 2026 04:01:21 +0000 Manifest next update: Mon 20 Apr 2026 04:01:21 +0000 Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=) 2: 4YrP_GMXN-9_98lTPO7BAnb9Uww.roa (hash: ZE5NJ8weEe35ei1/Z8mIitscXSDfGVCMmkz9eemXrFY=) 3: 4jDuY8VO0qUXF7q46qoMV9gLKuM.roa (hash: viGMatLEXcz0cMUCHgF1aDM1PbJJdZT8heBBxrGwjjQ=) 4: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=) 5: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=) 6: CF8v_7CP69NrOln1kLcho0WvTUQ.roa (hash: qGT89sK/IEAzkkJR4Z6rBcs+Koq0fLCoBmu4JX+p5Xw=) 7: DblLYXIGEMn10bjafoE3RYpg084.roa (hash: /9cYHrgPsrPV+y83ZtewE2z9k66ot5C9ns5yRKrm9zs=) 8: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: KzWSz5YDZb1mJgWkEzlDBEu9kGryg7CQzTXWbdqSPXY=) 9: X_6bIPHUjcft5RSNrpu-xAL46Gw.roa (hash: 1Ewh/IIUkGsZDwdeBTqMnliDPxZTB0K5G9TY45ehyJU=) 10: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=) 11: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=) 12: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:e6:70:38:e2:e5:01:b8:ff:62:1e:19:57:44:50:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Apr 19 04:01:21 2026 GMT Not After : Apr 20 04:01:21 2026 GMT Subject: CN=b016736f308682e90dde8dd6d6d68f3324399e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:39:be:1b:ed:2a:a2:09:61:3a:c1:f3:15: c6:be:d1:19:54:18:e4:f6:72:e8:6c:2d:cd:19:7b: 5a:e9:ed:0b:60:be:af:f7:8a:bc:a4:54:9d:c1:d8: ae:b7:41:0c:a4:c5:08:ef:4e:3d:fe:35:46:45:21: bd:b4:8c:43:d0:a8:d1:14:a5:35:b1:78:82:d3:3e: 8d:18:a6:9b:d1:46:e1:bd:19:a4:29:64:06:64:ee: 43:82:38:01:cd:8e:fe:0e:74:3b:14:d5:be:cd:30: f5:13:c6:27:f4:fe:26:72:14:e5:43:53:b6:1f:02: a1:c2:5d:f3:09:f5:34:23:75:06:55:8f:7a:ad:8b: b7:f3:99:a6:52:b2:3c:ce:ae:ab:37:66:a9:fe:37: 0a:79:bf:5c:15:78:41:c4:12:72:db:8f:9e:06:e0: eb:4b:e4:57:0f:0c:fa:5d:f9:0e:2b:a2:86:b9:a5: 29:69:5b:15:91:14:e2:87:87:7b:03:e4:00:ec:ea: 69:1a:80:8d:95:6a:df:52:a0:3c:69:a6:56:fe:a2: 58:98:8a:ab:6b:2f:fc:3d:f6:91:23:e6:34:7f:1c: ac:83:ad:4a:ad:35:b4:2d:db:1d:d4:63:21:0b:42: 10:37:47:18:9b:8e:ed:fb:c1:f5:be:37:cb:bd:81: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:16:73:6F:30:86:82:E9:0D:DE:8D:D6:D6:D6:8F:33:24:39:9E:8F X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:58:d6:d2:05:c2:05:d2:e0:79:05:ed:bc:9c:3d:1d:6b:91: bf:af:b5:92:7c:81:1c:9a:dd:4a:2a:c0:dc:99:f9:b2:2d:ca: 1d:5f:91:a2:ab:6a:be:e5:77:cb:65:d5:b1:c1:19:96:6a:17: 9d:26:91:16:52:d5:19:94:56:45:12:c4:8b:41:b8:db:22:d4: bf:db:c0:b6:54:e8:7b:d4:4c:96:f9:e6:ef:5f:72:7f:a4:27: e3:99:95:f2:7b:41:82:b1:7e:30:a8:49:a8:df:d8:3a:89:27: 40:bc:9d:71:0b:51:2e:69:80:af:81:c3:73:f8:e1:af:62:44: 48:47:84:c6:70:cb:51:38:77:a8:8d:a8:e7:1b:90:38:86:d7: e7:1e:09:ea:35:87:1a:77:11:d0:74:33:9f:47:e2:0c:5b:47: 76:1b:36:5e:9e:9a:6a:4e:37:9e:2c:23:89:00:31:99:51:ff: a2:89:c7:57:e7:b6:19:0c:78:d2:7c:32:69:f7:8d:dc:67:8e: f8:3f:24:7f:65:e3:3b:66:52:0a:70:a9:16:7c:dd:15:56:a7: 92:4a:5e:f5:22:39:1e:f0:8d:81:55:08:72:38:4e:f8:f3:f4: 5c:98:28:1b:7c:c7:73:4b:3e:c7:91:c7:41:d0:95:d4:7b:5d: f2:83:e8:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2j5nA44uUBuP9iHhlXRFA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwNDE5MDQwMTIxWhcNMjYwNDIwMDQwMTIxWjAzMTEwLwYDVQQD EyhiMDE2NzM2ZjMwODY4MmU5MGRkZThkZDZkNmQ2OGYzMzI0Mzk5ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSA5vhvtKqIJYTrB8xXGvtEZVBjk 9nLobC3NGXta6e0LYL6v94q8pFSdwdiut0EMpMUI7049/jVGRSG9tIxD0KjRFKU1 sXiC0z6NGKab0UbhvRmkKWQGZO5DgjgBzY7+DnQ7FNW+zTD1E8Yn9P4mchTlQ1O2 HwKhwl3zCfU0I3UGVY96rYu385mmUrI8zq6rN2ap/jcKeb9cFXhBxBJy24+eBuDr S+RXDwz6XfkOK6KGuaUpaVsVkRTih4d7A+QA7OppGoCNlWrfUqA8aaZW/qJYmIqr ay/8PfaRI+Y0fxysg61KrTW0Ldsd1GMhC0IQN0cYm47t+8H1vjfLvYFfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAWc28whoLpDd6N1tbWjzMkOZ6PMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1jW0gXC BdLgeQXtvJw9HWuRv6+1knyBHJrdSirA3Jn5si3KHV+RoqtqvuV3y2XVscEZlmoX nSaRFlLVGZRWRRLEi0G42yLUv9vAtlToe9RMlvnm719yf6Qn45mV8ntBgrF+MKhJ qN/YOoknQLydcQtRLmmAr4HDc/jhr2JESEeExnDLUTh3qI2o5xuQOIbX5x4J6jWH GncR0HQzn0fiDFtHdhs2Xp6aak43niwjiQAxmVH/oonHV+e2GQx40nwyafeN3GeO +D8kf2XjO2ZSCnCpFnzdFVankkpe9SI5HvCNgVUIcjhO+PP0XJgoG3zHc0s+x5HH QdCV1Htd8oPoYg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:42:30 2026 by rpki-client