$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: N3E7ZLJI1KrPX+UfUdOnoaA+eGEcuIe8+R6i60MKPC0= Subject key identifier: 59:02:84:AD:A1:1C:46:2B:CE:EC:68:32:41:CB:45:5E:A8:67:2B:E2 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019EE1E72E11AA95DD197CA80EE46CA5E356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 11A9 Signing time: Fri 19 Jun 2026 22:01:24 +0000 Manifest this update: Fri 19 Jun 2026 22:01:24 +0000 Manifest next update: Sat 20 Jun 2026 22:01:24 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 8GxpqzFkgC5Hy_akXhw29hXcvRQ.roa (hash: Aev5WlLyBeoo/iwLCZCFl1FrbyeMZhKq6RcvTv7DoY0=) 3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=) 4: 8PgHUKw1IXAQ4l3fsDFXldThghI.roa (hash: sSYNwwgyn1Pl2JR7lAYVd/FhLqR5V1Uk9kHqlU9/lW0=) 5: 9irx_5__iebC-joF_t5k-HwOato.roa (hash: D9D6cEfFrHVaLUE2HmZWJvCFExnSp3xZwWxilCrXvQo=) 6: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 7: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 8: O04IwcA9x5CGZzqm2sfhLuzUJR4.roa (hash: oMZR0kR7wrd6nKqp2tAwzsrKGOicCAzcDdxLCd+f5w8=) 9: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 10: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 11: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 2wI/m9qDGXiG+lKPUWB8fDHZqeIyLBMG9tTsIzdWLos=) 12: d-QxnSqS_V0shL66uqwLAgZFIBo.roa (hash: luvYromzsoLUcbp7ns0bb/QOxsjEI+GNMV9SnMHva8E=) 13: n3aPILIh7giuoDUK56sOpHcItYE.roa (hash: lZgrxhhUmWtrA9FtAOz5wAIODFYdd/saRuVJ0sfDMlI=) 14: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) 15: s10lbFf1PKkMruBfHpFjstZvSlU.roa (hash: t/lnEDm+ylVLBsyzGjVSxg9VE+O801fYPR7RIlJnqAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e1:e7:2e:11:aa:95:dd:19:7c:a8:0e:e4:6c:a5:e3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Jun 19 22:01:24 2026 GMT Not After : Jun 20 22:01:24 2026 GMT Subject: CN=590284ada11c462bceec683241cb455ea8672be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:44:b6:b5:50:fc:ec:b5:06:9a:05:76:a2: 91:cc:d6:e0:27:4a:6e:d4:ab:80:56:7f:9b:17:c5: 68:ab:1b:b6:9a:71:6c:ff:f1:ff:0e:16:00:24:2a: 6e:78:b2:b4:d2:43:59:fa:31:bc:14:75:31:74:db: c7:49:18:e6:d5:d2:61:bd:ea:c6:f9:57:ec:66:e0: b4:cb:e1:eb:4f:e8:5f:9e:02:a2:db:44:a9:4d:89: 5f:3e:74:c4:fd:57:a4:b7:e4:ad:8f:53:1e:67:8e: 70:ae:6d:59:ec:c5:de:60:01:75:22:53:a4:55:28: af:be:8e:e6:ad:93:26:12:d0:06:09:9c:47:7a:71: 2d:b1:37:21:1c:87:b4:21:10:2e:94:98:7d:40:9b: 03:9c:87:d1:0d:4b:93:88:c2:e2:06:11:db:5f:16: 43:98:f1:24:0e:55:dc:8f:32:75:62:2a:f4:80:87: bf:7c:f6:f8:03:91:8e:e3:aa:bd:b4:6c:e6:71:4e: 87:c3:f0:74:7b:f2:86:07:69:5a:1a:4e:49:d7:a9: eb:e6:9c:a7:8a:d3:f2:91:72:cd:82:58:a2:0f:23: 2c:8f:7a:a6:71:ac:b3:dd:08:a2:d4:ff:60:e3:4c: d5:a5:11:72:94:10:14:5b:d8:81:b9:dd:25:f6:84: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:84:AD:A1:1C:46:2B:CE:EC:68:32:41:CB:45:5E:A8:67:2B:E2 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7b:db:28:1d:06:f9:2c:8e:be:a0:61:c0:fe:b1:ef:b8:94: 65:60:d4:3b:8c:65:2b:5b:fe:32:98:ab:1e:04:d4:b4:5d:13: 9f:68:c9:77:40:cd:e5:13:f8:f9:07:76:f0:40:83:bd:bf:b5: 61:73:9c:45:3f:01:61:23:9c:78:db:6d:50:f2:8b:95:02:d4: ed:5a:f8:0f:65:22:af:6a:55:4b:78:3d:f5:8a:23:3a:6b:99: 6c:12:6c:db:dd:56:58:06:d9:e3:18:7a:5b:32:b6:7d:7f:fc: 5d:43:66:45:63:02:4e:ad:9c:26:bc:12:0b:60:48:d6:89:70: 3a:13:6f:45:42:4f:9f:0f:82:61:17:e1:85:98:3c:95:f4:6e: e2:ab:af:7a:e6:b5:49:2c:29:3d:85:d7:26:ef:a0:c6:81:5c: 56:40:6a:14:ae:8b:0e:4a:b7:74:7c:10:67:73:c8:58:65:f8: 88:5c:6b:92:0c:28:dc:7a:7f:00:d8:e2:12:a5:26:0a:55:87: 7e:f5:2e:f5:21:8d:7b:b1:e6:7c:43:4e:dc:cb:1e:0b:fd:5d: d4:12:46:24:f9:2a:4a:18:00:5d:71:17:59:df:54:23:f2:3e: 60:2d:10:88:cf:f8:42:14:0b:b9:36:b0:59:b5:28:c0:6d:b9: 6e:fc:90:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7h5y4RqpXdGXyoDuRspeNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwNjE5MjIwMTI0WhcNMjYwNjIwMjIwMTI0WjAzMTEwLwYDVQQD Eyg1OTAyODRhZGExMWM0NjJiY2VlYzY4MzI0MWNiNDU1ZWE4NjcyYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLNEtrVQ/Oy1BpoFdqKRzNbgJ0pu 1KuAVn+bF8Voqxu2mnFs//H/DhYAJCpueLK00kNZ+jG8FHUxdNvHSRjm1dJhverG +VfsZuC0y+HrT+hfngKi20SpTYlfPnTE/Vekt+Stj1MeZ45wrm1Z7MXeYAF1IlOk VSivvo7mrZMmEtAGCZxHenEtsTchHIe0IRAulJh9QJsDnIfRDUuTiMLiBhHbXxZD mPEkDlXcjzJ1Yir0gIe/fPb4A5GO46q9tGzmcU6Hw/B0e/KGB2laGk5J16nr5pyn itPykXLNgliiDyMsj3qmcayz3Qii1P9g40zVpRFylBAUW9iBud0l9oQkowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkChK2hHEYrzuxoMkHLRV6oZyviMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3vbKB0G +SyOvqBhwP6x77iUZWDUO4xlK1v+MpirHgTUtF0Tn2jJd0DN5RP4+Qd28ECDvb+1 YXOcRT8BYSOceNttUPKLlQLU7Vr4D2Uir2pVS3g99YojOmuZbBJs291WWAbZ4xh6 WzK2fX/8XUNmRWMCTq2cJrwSC2BI1olwOhNvRUJPnw+CYRfhhZg8lfRu4quveua1 SSwpPYXXJu+gxoFcVkBqFK6LDkq3dHwQZ3PIWGX4iFxrkgwo3Hp/ANjiEqUmClWH fvUu9SGNe7HmfENO3MseC/1d1BJGJPkqShgAXXEXWd9UI/I+YC0QiM/4QhQLuTaw WbUowG25bvyQpQ== -----END CERTIFICATE-----Generated at Sat Jun 20 04:17:37 2026 by rpki-client