$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: FyjDnX5f7M04kO4AAcjpHKTgW0IOBNfSWXs9t/Bg0Gk= Subject key identifier: D3:4B:AA:54:43:9D:C1:11:A0:6C:36:0E:35:35:AD:25:23:28:E4:62 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019D9A3DEB4C04D5EF538CE3A7390A8ADBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0C48 Signing time: Fri 17 Apr 2026 07:00:42 +0000 Manifest this update: Fri 17 Apr 2026 07:00:42 +0000 Manifest next update: Sat 18 Apr 2026 07:00:42 +0000 Files and hashes: 1: 0z8pTI41iPuVrCQVQ1wuJedcLng.roa (hash: e+SXHoPepQrK1mT7vZuMdVv/Sb/mCHdwtmRTk5f2KY0=) 2: 1-1lvKVidMjz9SqtbPt81s0r7r0I.roa (hash: ZlBElaLY1A20NV3b70L3QV0eyy9Ku8m61r7maErkkKY=) 3: 2_-FI-AoJnOM9FRj9JIZ87TxIGU.roa (hash: fYqLfLAgXXv2j6Hlh2bmzcVErlr45q7qc3mJo6wcwjY=) 4: 38r2X0leHHTAmJ6zVJSwuzoD2E0.roa (hash: uyTAZ2GgNW9/wIH0EkQGQyRV3AY/RO2eHsNraGcFPPk=) 5: 3PUBNkz9FwV2NNGvr5c1xPHsrKs.roa (hash: Iue6j8hQXBufFHKI47UYN7vcS1Nx2fj3o4JuzfixAMQ=) 6: AJ3MwDklWh6RGcZWO3B6VDqJAJY.roa (hash: Yuib442tbLdb8BWpxFaa8rNZZob81Q5G+L93ljA7GLg=) 7: BK8IgDa2YWfH15KeQoypNaZ7M18.roa (hash: 6BpUvOIxTW0cg027WM/QNtn7tQ+zM4t80RnLiUv7sIs=) 8: CZCLA3Cj6YYp_k_a7y0b2rbgyzo.roa (hash: SaDoVmzs9e3hbWzh+uCnOLVQP2mnuXiNzqqPyyTBq2o=) 9: F0KEI4lW7Epb_3eoekIpwBqbc2E.roa (hash: UC+E/xpST3sk4LrjHrlkIcP31YMZn/3d6DZdEgG8Rdg=) 10: FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa (hash: jL7hfr1fG9q8Db+UI2ObK7nG/hXNzIiR02v0n72Zs0Y=) 11: JrpsDD8G_9HrVRADrUGdVzpQ0GM.roa (hash: PfSJmHGRfRFt+GOTf/z8aUHtcRQ35VQoUt2Ubm4KDs4=) 12: JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa (hash: C2FzGkWqusy1+L9+G5l/4MmyS4qSpGF23YAr4kNJZHQ=) 13: Latg5HfFxVV45cY_wXpQ9M7y2UM.roa (hash: AMl3v5ozRzV/5w1KglWOLAOe0okRBu64taR6MmvtD44=) 14: N0sDm-EFGV2amFYWHwErrX3Dbus.roa (hash: Xmo1dvVrCIWSNTaeVoMmKU+6tNLC/YtQosQjQwiD/3c=) 15: UypHuJtN1zmqt0Zba9DljNJ2WgY.roa (hash: PFDshKDp/mzgsdaZsjSV8dCLT3xJ6p+HUpwQxcGrMuI=) 16: _opU9Zflr19Qgw9wxcT5CzBzFeE.roa (hash: hVBzTOs1aH7AxZYfWOOyLBurJardjc8RPMc3Hjjv5+g=) 17: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: wuewpwcraHju8L4V3Xf5u3A7glZfvKEEt/b55pMbFXQ=) 18: aqPgWOakmp5fii05oBo6v_tlmAQ.roa (hash: 4j9frFtx7FlfahOenBDreDRrYBvvkfNPAcv1Ywz2/HM=) 19: enYE37jQOciNrH4vp2_3FdUT0io.roa (hash: PoAlpwtftho9gluuF95P6FYOuD1hDRKv7R9Nta21XGo=) 20: j6F5nKl7VxhTCPP7Z6aypppg1qg.roa (hash: b/KmdMBh7vGAQW3XZYIqLqb1iW1YZRpjzYx/XN6MR5Y=) 21: j6ZEfuBoBwoJsq_P8O7JAQCMW2w.roa (hash: SGo/KKeiXkzjoKtnxVRa/5ncyP+lv+PUCdh1kKaxLxc=) 22: j6h2wYXBGU0po-975zEbDRhXVP8.roa (hash: VuTt2+GtidZibv9WAUHaogEOazxD2GyG76InT6TAm6k=) 23: l7FVy9qV9r7TJi_Vr2KpMSypfts.roa (hash: BO7WgU3AlrlmLiXeaJCpacGRr3Q1uOzmvzOfD3QKH6s=) 24: nFU8l0SuNs4mLVgObqGXtp6gnoI.roa (hash: dp4PPf/CcvyLdCI3a30WQB7bcOJJ7sLxhjedTuWlcA0=) 25: oIuhu7p6aWmfRWyHDTYYujSpvBg.roa (hash: N6w5aijddF5a+28/lsfmW9lIDEzr9ob0acHLJcTeo5w=) 26: ol5o-VeacDxR8G56FJbb2bssCJU.roa (hash: HWf9NNfp469bQ5Wf7jn4TMJbz+S/ZW2Aq8n1tyLEU+8=) 27: qBWm7A0WS3zBN-JGFS-9sK_Eh6w.roa (hash: 4LBBNQp4gDvDBqUejc/thQ1e9DZu2ZKGjdRJpeYildA=) 28: qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa (hash: h1N79r6IwikpSxLGbvCodpvdgy0jF1MGCYu94qAhjf4=) 29: s5_XzwQfnjREeGyxGEXKHTbuCec.roa (hash: f2LNPZwtscDHDTcGq3OeJusAQETPe2+DG2C2X0YawWI=) 30: t9VfVoic7D0Eb12yRbnLassyYY8.roa (hash: OIvXTMlAaBLVGYWH+/8UMptxQ45gYDbOsCNpVMjE62A=) 31: tEnzcmF181z_Fz4dFzQyfZ882o4.roa (hash: RBYNG12SzCTfXGwx/F5qbQVTQCBmyDYwNw6MWUM/ecc=) 32: txBk-VXH5xe4UoDume1p4XjQxe8.roa (hash: fvggVxYxk2NuJg8YSSyrCKqxJryG0wPDwlaCqOHmZFc=) 33: uBIYg6HBl9Jf8Kf0_1APF11RXj4.roa (hash: Cy62Nntc/tzkP5N8nJbuKZSP38j9mL0EAGyc0aabhl4=) 34: wTgQ6fCMDPpS81pwpnjiyHzyTpc.roa (hash: ixnoZEKtVyJai2PVSvQa52pLsUnTfY2h9ItkAule9hg=) 35: y6XyUstS_SjZUuRcmwKI2O2hK4g.roa (hash: 6KaNgtch9hdulImqbKsvBI0tlfN0LaRnEF0phbzSwYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3d:eb:4c:04:d5:ef:53:8c:e3:a7:39:0a:8a:db:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Apr 17 07:00:42 2026 GMT Not After : Apr 18 07:00:42 2026 GMT Subject: CN=d34baa54439dc111a06c360e3535ad252328e462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:cb:66:5a:f4:60:f8:1a:f8:66:01:08:76: bc:60:a1:ac:98:73:3f:ab:95:af:94:2b:f9:be:3b: 86:68:e7:d0:ce:b7:8a:c9:df:4c:21:5a:e6:1e:f5: a5:1b:f9:8a:fd:e6:39:dd:a0:9c:37:ab:41:8d:6c: 6f:a1:49:6e:1c:83:8d:b1:bf:97:4d:ff:b8:7e:e5: 49:c8:29:5d:80:95:11:31:a6:6e:7a:44:d1:4d:54: dc:32:fc:22:e8:5a:41:f4:e9:3a:95:62:bb:43:5b: e0:1a:c5:8d:1b:c8:e3:6a:c8:c0:c9:26:80:b3:8e: 07:e3:4a:04:2f:e5:94:d3:a7:a9:4c:55:ea:ea:eb: 0a:87:42:d0:e1:1f:f7:67:ad:66:cf:30:7c:ac:3d: 50:33:d7:c8:51:55:21:3e:2e:bf:75:34:e7:68:49: 7e:3a:6c:94:d8:39:f6:2b:bb:62:27:8b:2a:4c:89: 99:74:1d:6f:a4:51:74:12:45:fc:cc:61:e7:36:0f: ae:74:f3:a9:23:be:66:49:ff:c1:5a:23:59:44:29: 8d:c5:ec:94:b8:8a:c1:c5:27:bf:2c:a5:1c:96:98: 8e:e4:14:8b:b1:05:73:fb:fa:ac:16:2e:8d:dd:5b: e3:1a:7a:0d:08:c9:73:02:68:76:01:03:ae:1a:0a: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4B:AA:54:43:9D:C1:11:A0:6C:36:0E:35:35:AD:25:23:28:E4:62 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:fc:98:21:bf:f9:34:7c:e2:54:4c:7c:d1:18:6c:06:20: a2:88:8c:f8:ae:fe:56:ad:93:54:7d:95:26:18:8a:4c:f8:87: 66:4e:d0:b6:1d:d7:5e:d1:24:ab:55:af:28:b0:20:e7:87:8c: 8f:11:d2:d4:47:3b:81:33:5f:a3:6c:01:c7:2f:d5:93:3b:ce: a7:88:15:d4:8f:31:ca:52:08:dc:a0:8e:39:e2:7c:08:95:9f: 79:3b:a2:31:82:8a:3b:81:5f:32:ea:9f:62:3a:53:46:a5:3e: 82:a1:ef:b9:ad:5e:0b:b5:4f:08:fd:ce:7e:44:41:da:7a:70: 4f:54:ec:73:12:83:68:2b:24:fa:3d:93:d4:74:87:80:d2:44: 2d:45:42:a0:eb:ba:4c:50:e0:8e:26:59:cc:59:96:0d:b4:2f: 23:de:97:d2:9a:ea:5d:85:af:37:a0:51:c1:1c:9f:47:be:c3: 4d:1b:62:00:74:12:71:67:02:fd:09:2c:e1:08:f0:ce:4a:57: 10:8b:f7:78:fc:43:16:36:5b:e4:96:eb:65:6a:30:b5:cb:d4: 82:de:bc:7b:c5:5f:31:6f:68:85:ee:d8:5e:73:55:a4:79:0c: 51:5a:4e:ae:32:b9:cb:0e:07:c0:36:69:93:7a:2e:7b:10:66: 70:71:57:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPetMBNXvU4zjpzkKitvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwNDE3MDcwMDQyWhcNMjYwNDE4MDcwMDQyWjAzMTEwLwYDVQQD EyhkMzRiYWE1NDQzOWRjMTExYTA2YzM2MGUzNTM1YWQyNTIzMjhlNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgDLZlr0YPga+GYBCHa8YKGsmHM/ q5WvlCv5vjuGaOfQzreKyd9MIVrmHvWlG/mK/eY53aCcN6tBjWxvoUluHIONsb+X Tf+4fuVJyCldgJURMaZuekTRTVTcMvwi6FpB9Ok6lWK7Q1vgGsWNG8jjasjAySaA s44H40oEL+WU06epTFXq6usKh0LQ4R/3Z61mzzB8rD1QM9fIUVUhPi6/dTTnaEl+ OmyU2Dn2K7tiJ4sqTImZdB1vpFF0EkX8zGHnNg+udPOpI75mSf/BWiNZRCmNxeyU uIrBxSe/LKUclpiO5BSLsQVz+/qsFi6N3VvjGnoNCMlzAmh2AQOuGgplowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNLqlRDncERoGw2DjU1rSUjKORiMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkP8mCG/ +TR84lRMfNEYbAYgooiM+K7+Vq2TVH2VJhiKTPiHZk7Qth3XXtEkq1WvKLAg54eM jxHS1Ec7gTNfo2wBxy/VkzvOp4gV1I8xylII3KCOOeJ8CJWfeTuiMYKKO4FfMuqf YjpTRqU+gqHvua1eC7VPCP3OfkRB2npwT1TscxKDaCsk+j2T1HSHgNJELUVCoOu6 TFDgjiZZzFmWDbQvI96X0prqXYWvN6BRwRyfR77DTRtiAHQScWcC/Qks4QjwzkpX EIv3ePxDFjZb5JbrZWowtcvUgt68e8VfMW9ohe7YXnNVpHkMUVpOrjK5yw4HwDZp k3ouexBmcHFXtA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:46 2026 by rpki-client