$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: lbeDWy0mcpC+9CogEhyN68D5xumWZIG9iELTZH0leUs= Subject key identifier: F1:9E:2E:B0:40:77:0C:CB:C7:BB:16:92:70:D0:18:DA:78:0C:8C:B2 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019EB6C60F7B3B276553D9A7C9F47D90FAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 11C3 Signing time: Thu 11 Jun 2026 13:01:33 +0000 Manifest this update: Thu 11 Jun 2026 13:01:33 +0000 Manifest next update: Fri 12 Jun 2026 13:01:33 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 2yocfb/r3K1w241NZkbRPXaG1Xw2NnzqJuN2RqMY4kU=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:c6:0f:7b:3b:27:65:53:d9:a7:c9:f4:7d:90:fa:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jun 11 13:01:33 2026 GMT Not After : Jun 12 13:01:33 2026 GMT Subject: CN=f19e2eb040770ccbc7bb169270d018da780c8cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:76:ae:8d:f4:78:68:cd:5c:65:db:dc:a0: ee:0f:13:81:48:40:65:3b:33:08:75:53:ca:c8:9e: e2:a5:d2:21:d8:01:16:c6:f7:de:92:ba:bc:ad:f6: 04:37:a0:5e:fd:7e:62:63:49:08:6b:d0:00:7d:f1: bd:81:1a:6c:31:29:cf:60:d6:b9:3c:4e:fe:d8:0b: e9:b8:ae:15:17:89:14:00:d3:25:f0:50:a8:a8:0b: c4:8a:4f:87:39:35:9e:15:17:45:4a:8d:bf:23:d1: 05:33:54:ef:51:e7:ad:3a:52:51:20:09:03:9c:c1: 90:dd:c1:0e:b8:86:b3:46:eb:63:f4:6e:61:62:bf: d7:d3:d5:17:60:1c:d9:89:5e:99:c3:52:8b:15:00: 62:2e:b4:d5:a0:40:4a:4f:34:04:6e:ba:8b:34:47: 3b:90:ac:03:a7:02:20:b9:87:42:29:3c:d1:5e:97: 58:03:bb:64:36:70:d9:cd:85:3d:8b:e9:0f:f9:9e: c7:50:30:4e:a1:21:7b:6e:c2:c3:a4:9d:00:43:c4: 02:85:e4:92:a4:63:cb:fe:ff:36:26:bf:f5:f0:42: 87:c3:39:d5:c8:e0:3a:a5:89:6a:0c:c5:55:a4:b7: 6a:1b:e6:05:c3:83:80:ee:d2:f3:89:19:cb:3d:df: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9E:2E:B0:40:77:0C:CB:C7:BB:16:92:70:D0:18:DA:78:0C:8C:B2 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:21:a7:00:16:85:b7:58:6c:b4:30:70:ed:5a:11:0e:2f:a3: 8c:5c:65:18:2a:c4:f5:8d:19:c2:47:69:a9:9a:a9:32:a3:b0: 3b:4e:04:2c:ad:3d:33:ef:a6:9b:d2:ea:51:a8:c8:45:cc:02: 97:02:d5:89:60:6f:c7:e0:1e:f7:f6:f7:39:89:31:b7:2a:94: 05:30:e4:0b:a5:36:1e:43:fa:c1:bd:9d:15:5d:61:ad:08:86: a6:6b:3c:08:b7:89:f2:e1:ba:1b:bc:2c:71:56:b4:bf:16:60: 66:61:db:85:21:3b:d8:69:ee:3b:f8:e3:3e:60:eb:1f:58:18: d2:fc:ca:f2:d7:6f:77:a1:1d:83:75:a7:22:9f:7b:bf:e9:6e: 3b:8f:a5:5b:c6:16:26:7f:0e:80:b5:a3:43:8e:a4:ed:1b:80: 83:34:98:44:e4:3c:a2:b8:fa:8d:3d:16:fd:7f:18:80:39:5f: 7e:18:07:ac:47:d8:f5:42:40:f8:b2:97:91:5f:c2:ae:be:f7: dd:5e:b1:2f:0f:a0:86:50:a1:a0:79:ad:69:b9:b1:c1:50:b3: ff:ce:25:78:78:80:85:f1:b5:b1:d2:ff:7c:3d:4e:42:01:ae: 36:60:64:5a:8b:dd:b7:51:50:48:08:c8:c8:d3:ea:22:e0:c8: 5e:8c:c7:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62xg97OydlU9mnyfR9kPrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNjExMTMwMTMzWhcNMjYwNjEyMTMwMTMzWjAzMTEwLwYDVQQD EyhmMTllMmViMDQwNzcwY2NiYzdiYjE2OTI3MGQwMThkYTc4MGM4Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNh2ro30eGjNXGXb3KDuDxOBSEBl OzMIdVPKyJ7ipdIh2AEWxvfekrq8rfYEN6Be/X5iY0kIa9AAffG9gRpsMSnPYNa5 PE7+2AvpuK4VF4kUANMl8FCoqAvEik+HOTWeFRdFSo2/I9EFM1TvUeetOlJRIAkD nMGQ3cEOuIazRutj9G5hYr/X09UXYBzZiV6Zw1KLFQBiLrTVoEBKTzQEbrqLNEc7 kKwDpwIguYdCKTzRXpdYA7tkNnDZzYU9i+kP+Z7HUDBOoSF7bsLDpJ0AQ8QCheSS pGPL/v82Jr/18EKHwznVyOA6pYlqDMVVpLdqG+YFw4OA7tLziRnLPd823wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGeLrBAdwzLx7sWknDQGNp4DIyyMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyGnABaF t1hstDBw7VoRDi+jjFxlGCrE9Y0ZwkdpqZqpMqOwO04ELK09M++mm9LqUajIRcwC lwLViWBvx+Ae9/b3OYkxtyqUBTDkC6U2HkP6wb2dFV1hrQiGpms8CLeJ8uG6G7ws cVa0vxZgZmHbhSE72GnuO/jjPmDrH1gY0vzK8tdvd6Edg3WnIp97v+luO4+lW8YW Jn8OgLWjQ46k7RuAgzSYROQ8orj6jT0W/X8YgDlffhgHrEfY9UJA+LKXkV/Crr73 3V6xLw+ghlChoHmtabmxwVCz/84leHiAhfG1sdL/fD1OQgGuNmBkWovdt1FQSAjI yNPqIuDIXozHSA== -----END CERTIFICATE-----Generated at Thu Jun 11 22:57:32 2026 by rpki-client