$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: EYgBX1TUNE8DAgmBGVllsW3qJhQCNfrKyj1Ue/oQAx0= Subject key identifier: 52:8F:DC:20:3C:68:1F:EC:C6:A4:13:CB:0C:54:6B:7F:E1:F8:2E:9A Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019F1CB389659DFDFE229B5A818E9C4C82A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 12AC Signing time: Wed 01 Jul 2026 08:02:35 +0000 Manifest this update: Wed 01 Jul 2026 08:02:35 +0000 Manifest next update: Thu 02 Jul 2026 08:02:35 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: nrGOF10jQ8X9iadUB14mjAApRa0ArVYVvu/1LU5n0+c=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1c:b3:89:65:9d:fd:fe:22:9b:5a:81:8e:9c:4c:82:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jul 1 08:02:35 2026 GMT Not After : Jul 2 08:02:35 2026 GMT Subject: CN=528fdc203c681fecc6a413cb0c546b7fe1f82e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:23:b7:b8:cf:21:ca:ab:7d:22:a2:0c:ef: c0:b2:47:6a:75:6d:67:67:d6:9f:c3:bf:02:5c:00: 92:b2:39:26:ed:a1:43:70:42:15:f3:76:92:78:41: f9:01:db:27:27:a2:99:77:7b:b1:50:72:36:08:c2: 4a:82:08:b7:04:e1:f8:cb:dd:65:d9:64:50:ed:a1: 21:60:ae:fc:d3:95:2a:d7:f3:37:e9:19:ab:ec:38: ae:1e:82:62:46:8b:96:0f:5a:f2:26:45:91:3a:1b: 24:f9:da:d7:b1:c5:19:be:c3:f9:f9:39:4e:e0:d8: 54:b3:4f:a6:3d:ed:28:c5:39:c6:25:78:59:5f:2b: bd:3a:65:b8:15:b1:e2:4f:4f:9d:34:f7:10:cd:d1: 57:0f:f0:a9:d0:61:35:fe:dc:09:c7:e5:54:4b:d3: 6d:1d:33:f5:bf:11:08:61:30:15:af:52:f7:e4:24: 3f:31:51:34:9d:8d:42:dd:8e:c9:46:5b:db:51:d1: 58:e9:79:75:57:d2:8e:19:7f:34:ee:92:57:32:ca: 38:36:49:03:61:b6:30:3a:bd:c6:47:fd:3a:95:d5: 4c:e2:7d:ba:59:90:e1:a7:af:88:c7:b0:c1:7b:b5: ae:49:4b:b1:87:5d:ee:b2:89:4f:8a:a0:7c:c0:e0: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:DC:20:3C:68:1F:EC:C6:A4:13:CB:0C:54:6B:7F:E1:F8:2E:9A X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:45:64:47:56:74:3d:d0:99:bf:96:1c:65:b7:81:74:6e:67: 40:89:17:28:bd:a3:9a:c0:8e:15:cb:84:4c:46:be:ae:9f:f0: 11:8d:3b:89:c6:fe:27:67:b2:15:c9:14:6c:48:56:24:8a:21: 7e:91:fa:8c:f8:31:b0:65:2d:b4:8c:20:dd:e9:59:ff:6a:a4: 32:75:11:7a:c0:bc:ec:f1:71:6b:fa:68:ef:05:0a:15:fc:37: 4a:b1:ce:7c:0b:5c:07:bb:50:b1:10:91:43:cc:ef:fd:34:30: 6a:5d:98:9f:06:6c:9e:dc:e9:8a:7b:02:ce:46:d9:ce:d5:48: e4:2a:a0:6e:18:30:18:fe:d2:e0:08:36:c1:8f:5d:45:5d:d1: 5f:d2:62:1f:3f:e1:fd:14:d6:3f:e7:1a:36:b0:6c:9e:1e:12: 64:ec:dd:44:ff:4c:82:60:13:3f:60:e9:af:ff:6f:df:af:b0: 7a:85:01:7d:67:87:2d:4a:12:5c:4c:4a:92:10:4e:39:56:9e: b9:8e:72:99:41:2a:88:c1:3d:f5:d3:86:d3:b2:75:b1:e4:e4: 23:43:82:a3:63:ad:ed:3b:c8:ff:5f:cd:a2:63:25:56:65:74: 77:da:8b:5e:68:2b:de:a2:a9:76:80:65:e4:ad:ff:9f:e3:0c: 37:d8:61:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8cs4llnf3+IptagY6cTIKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNzAxMDgwMjM1WhcNMjYwNzAyMDgwMjM1WjAzMTEwLwYDVQQD Eyg1MjhmZGMyMDNjNjgxZmVjYzZhNDEzY2IwYzU0NmI3ZmUxZjgyZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz4jt7jPIcqrfSKiDO/AskdqdW1n Z9afw78CXACSsjkm7aFDcEIV83aSeEH5AdsnJ6KZd3uxUHI2CMJKggi3BOH4y91l 2WRQ7aEhYK7805Uq1/M36Rmr7DiuHoJiRouWD1ryJkWROhsk+drXscUZvsP5+TlO 4NhUs0+mPe0oxTnGJXhZXyu9OmW4FbHiT0+dNPcQzdFXD/Cp0GE1/twJx+VUS9Nt HTP1vxEIYTAVr1L35CQ/MVE0nY1C3Y7JRlvbUdFY6Xl1V9KOGX807pJXMso4NkkD YbYwOr3GR/06ldVM4n26WZDhp6+Ix7DBe7WuSUuxh13usolPiqB8wOAhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKP3CA8aB/sxqQTywxUa3/h+C6aMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUVkR1Z0 PdCZv5YcZbeBdG5nQIkXKL2jmsCOFcuETEa+rp/wEY07icb+J2eyFckUbEhWJIoh fpH6jPgxsGUttIwg3elZ/2qkMnUResC87PFxa/po7wUKFfw3SrHOfAtcB7tQsRCR Q8zv/TQwal2YnwZsntzpinsCzkbZztVI5CqgbhgwGP7S4Ag2wY9dRV3RX9JiHz/h /RTWP+caNrBsnh4SZOzdRP9MgmATP2Dpr/9v36+weoUBfWeHLUoSXExKkhBOOVae uY5ymUEqiME99dOG07J1seTkI0OCo2Ot7TvI/1/NomMlVmV0d9qLXmgr3qKpdoBl 5K3/n+MMN9hh7g== -----END CERTIFICATE-----Generated at Wed Jul 1 14:25:47 2026 by rpki-client