$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: ETNjpWbzpZ/dY2bSHzix0tAEUMkbTpstUNci/Akolf8= Subject key identifier: 3C:E7:66:F2:3D:93:36:CC:AA:69:C4:4D:ED:94:6D:99:5B:C6:0E:26 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019D9AB2C8786E2EE7CC7847DB86E8363130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 1258 Signing time: Fri 17 Apr 2026 09:08:21 +0000 Manifest this update: Fri 17 Apr 2026 09:08:21 +0000 Manifest next update: Sat 18 Apr 2026 09:08:21 +0000 Files and hashes: 1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 4: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=) 5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=) 6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 7: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 8: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 9: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: CG07Bj9GqlTZOPPt0Gvcbgcq14AeRkR9Y2Ao15lalxI=) 11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) 12: uaZQDhIwfSYmxyJRtqIy_L_zHso.roa (hash: N+ZzHwJkmYGK/5t3l5o1KIYLDvFM99cPQu6Ca7RAknE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 09:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:b2:c8:78:6e:2e:e7:cc:78:47:db:86:e8:36:31:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Apr 17 09:08:21 2026 GMT Not After : Apr 18 09:08:21 2026 GMT Subject: CN=3ce766f23d9336ccaa69c44ded946d995bc60e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:fe:c5:ae:35:31:cd:72:5e:88:47:31:9c: 42:ac:fd:9c:18:73:14:3e:dd:96:a5:7b:a5:62:61: 10:35:8e:db:fb:4d:de:8f:c2:b1:a4:33:ad:74:7e: 9c:63:39:06:fd:be:1c:8a:6a:de:77:cc:56:6b:c4: 74:74:8a:ff:51:02:3e:a7:4f:57:f0:b5:7b:d5:fc: 02:46:0d:7e:68:7a:e5:3c:f0:09:d3:16:a6:98:9c: dd:01:c4:16:6f:ac:3f:ba:cd:89:04:93:3c:de:f8: d5:16:14:0e:b6:b4:30:a2:51:19:e5:7b:07:bd:ec: 2c:aa:34:23:e1:9c:82:82:3b:6a:ae:0c:49:ee:f4: 71:13:55:8a:0f:5e:ea:e6:f2:9e:74:84:2c:38:0a: 9a:38:4c:be:eb:36:07:5f:19:18:40:1d:67:c2:ca: fd:9b:2f:ca:98:ae:22:78:c9:f6:3b:62:7a:51:35: 29:e7:77:f2:86:64:d5:ab:4b:f9:68:56:5f:90:56: 2c:a7:d5:73:16:db:e1:0a:eb:f8:6b:17:d6:e1:66: 5f:3a:95:16:43:f8:d1:34:8d:5e:b7:10:c7:8e:0a: 4c:d9:f8:6f:6d:78:2f:dd:99:3f:4a:fd:23:19:77: 88:eb:e8:6b:e0:b5:7d:11:d6:ee:f1:36:19:ce:28: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E7:66:F2:3D:93:36:CC:AA:69:C4:4D:ED:94:6D:99:5B:C6:0E:26 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0a:31:8f:35:32:fb:92:59:fc:30:2c:25:18:89:85:78:db: b4:6b:f7:53:9c:8c:8f:24:6c:b6:3e:71:63:be:1e:71:3f:63: ff:a7:5a:cd:ae:59:97:f6:4e:0a:35:18:22:49:c2:66:58:8a: 40:48:7a:06:a5:81:d2:1c:03:d3:11:82:3a:39:26:b6:9b:00: 9a:e9:27:72:12:95:93:e6:64:18:85:cc:d9:db:c2:bb:b6:cf: c5:72:e5:72:a9:2a:ce:63:19:28:9f:e3:f6:2b:b4:61:18:40: 9d:83:56:28:d1:5c:8d:c6:74:cf:3b:cf:0c:72:ad:ef:03:69: cf:60:f1:d1:07:25:09:ed:50:aa:bd:21:c0:4c:e9:ea:eb:bd: e4:39:dd:94:4f:4a:3b:16:a6:f6:77:cb:d3:5d:67:3d:01:ac: fb:b6:ac:55:17:59:fb:0b:bb:3a:f9:cc:5d:5e:c7:7c:04:25: b5:3f:06:8a:b9:9b:55:ce:ed:de:28:a6:c0:1f:a2:34:a4:04: 71:16:af:3a:6c:0f:13:c0:6d:a2:76:ff:4b:1e:5a:51:a7:8e: 8d:bd:24:8b:9b:20:27:d0:82:35:d2:d5:5e:86:ea:cb:1d:ba: d6:5d:8e:eb:ee:fd:04:73:1d:a2:3e:f9:10:48:fe:11:75:ab: 47:d5:60:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2assh4bi7nzHhH24boNjEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwNDE3MDkwODIxWhcNMjYwNDE4MDkwODIxWjAzMTEwLwYDVQQD EygzY2U3NjZmMjNkOTMzNmNjYWE2OWM0NGRlZDk0NmQ5OTViYzYwZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLf+xa41Mc1yXohHMZxCrP2cGHMU Pt2WpXulYmEQNY7b+03ej8KxpDOtdH6cYzkG/b4cimred8xWa8R0dIr/UQI+p09X 8LV71fwCRg1+aHrlPPAJ0xammJzdAcQWb6w/us2JBJM83vjVFhQOtrQwolEZ5XsH vewsqjQj4ZyCgjtqrgxJ7vRxE1WKD17q5vKedIQsOAqaOEy+6zYHXxkYQB1nwsr9 my/KmK4ieMn2O2J6UTUp53fyhmTVq0v5aFZfkFYsp9VzFtvhCuv4axfW4WZfOpUW Q/jRNI1etxDHjgpM2fhvbXgv3Zk/Sv0jGXeI6+hr4LV9Edbu8TYZzijNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDznZvI9kzbMqmnETe2UbZlbxg4mMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgoxjzUy +5JZ/DAsJRiJhXjbtGv3U5yMjyRstj5xY74ecT9j/6daza5Zl/ZOCjUYIknCZliK QEh6BqWB0hwD0xGCOjkmtpsAmuknchKVk+ZkGIXM2dvCu7bPxXLlcqkqzmMZKJ/j 9iu0YRhAnYNWKNFcjcZ0zzvPDHKt7wNpz2Dx0QclCe1Qqr0hwEzp6uu95DndlE9K Oxam9nfL011nPQGs+7asVRdZ+wu7OvnMXV7HfAQltT8GirmbVc7t3iimwB+iNKQE cRavOmwPE8Btonb/Sx5aUaeOjb0ki5sgJ9CCNdLVXobqyx261l2O6+79BHMdoj75 EEj+EXWrR9Vggg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:10 2026 by rpki-client