$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 9FUj9zX9IIfe12ujKbkpZU83cmawMAqg4KLHnzuTP4A= Subject key identifier: 85:09:5F:7E:96:C3:BE:7B:48:3E:53:FB:74:C8:08:07:E8:5B:16:AA Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019ED197DE37905D9BDBF28FE35CCAFA9098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1285 Signing time: Tue 16 Jun 2026 18:00:51 +0000 Manifest this update: Tue 16 Jun 2026 18:00:51 +0000 Manifest next update: Wed 17 Jun 2026 18:00:51 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: b292P+N308RCwcmLgJ8LYdqdo5/z4o6IZO5o6U8UdO4=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d1:97:de:37:90:5d:9b:db:f2:8f:e3:5c:ca:fa:90:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 16 18:00:51 2026 GMT Not After : Jun 17 18:00:51 2026 GMT Subject: CN=85095f7e96c3be7b483e53fb74c80807e85b16aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:ac:e7:e3:3a:b7:5e:52:97:68:83:79:41: 7e:89:38:e4:6a:c0:60:3d:2c:89:6b:76:b1:b7:3e: 9a:02:ee:71:9d:b5:ae:7d:d7:4c:f2:6e:a9:e2:41: 90:f3:2b:01:8b:ba:b2:1d:3d:65:ac:ec:94:ee:7d: 59:10:77:29:b1:63:bb:e0:a1:7e:9d:21:1a:ff:07: a7:5d:21:d2:ed:3b:fb:87:1f:b1:d9:96:0d:2c:17: 7f:89:b8:14:cc:e7:d5:b2:68:35:65:f6:a7:e9:c3: a3:2c:b2:21:0f:d3:91:37:f7:c9:53:0f:8c:af:f3: d8:8a:7f:22:80:3b:1a:3b:ad:05:04:be:96:b0:c8: d0:97:97:85:b4:f5:a7:f2:72:03:e8:cf:37:c6:ff: 79:20:b7:f7:54:fd:3d:77:a1:2c:5e:d0:50:aa:c8: ff:d6:23:83:94:7a:9d:8f:6e:39:a8:a7:62:ea:66: 39:3f:88:b6:bd:a8:cb:78:8e:0a:68:0b:bd:14:63: 11:04:d8:bb:4c:b3:84:8c:bf:33:8b:52:b8:37:7a: 50:14:6b:5f:4b:02:b0:ff:1c:92:04:af:be:a4:26: ca:0f:ef:4f:bc:58:a6:10:15:9d:6b:6f:1e:d1:09: 4e:00:78:2a:e4:4d:cd:4f:6d:da:b1:b6:24:b3:24: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:5F:7E:96:C3:BE:7B:48:3E:53:FB:74:C8:08:07:E8:5B:16:AA X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:df:ef:fb:16:82:5f:2f:33:12:fb:73:82:61:3b:8d:6d:5c: fa:17:ff:e5:14:17:89:e4:ef:f6:79:6a:e8:87:6f:d2:71:62: 8d:06:d0:f9:44:88:05:77:29:f2:4c:e7:2c:02:a0:3b:0d:fe: 6c:6c:20:cf:b3:93:95:94:db:e5:97:a2:eb:ff:a6:e6:a6:bd: 70:ec:0c:d6:ca:09:fd:03:bc:7f:0b:55:c5:c4:fb:55:7a:de: b5:f3:ed:e3:5a:fd:d7:98:f5:78:e6:98:a7:31:5f:9f:58:d4: 5a:6d:86:b9:10:39:02:f3:c2:07:f4:a3:b2:37:a0:57:9e:e0: e3:b2:7a:f5:71:b4:fc:25:80:d0:72:4a:66:51:4a:a1:d9:2c: b2:8b:85:1a:81:25:df:41:13:6e:a0:86:1b:83:a4:c7:32:02: 90:62:08:c7:fb:b9:02:09:fb:58:11:93:27:8a:92:f4:5d:7d: 62:97:60:fa:8f:a6:b1:54:cf:ec:10:2d:3f:44:44:1c:66:96: 63:9a:09:a5:6a:05:c4:5d:38:98:af:fa:da:d4:b9:fb:e9:9f: 8e:76:32:22:ed:e8:d1:12:1e:53:ae:ea:e3:ee:b8:ad:48:0c: 1d:32:76:ff:85:32:98:73:13:15:1d:2f:ac:3c:d9:5a:62:09: ea:8a:2b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Rl943kF2b2/KP41zK+pCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjE2MTgwMDUxWhcNMjYwNjE3MTgwMDUxWjAzMTEwLwYDVQQD Eyg4NTA5NWY3ZTk2YzNiZTdiNDgzZTUzZmI3NGM4MDgwN2U4NWIxNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSs5+M6t15Sl2iDeUF+iTjkasBg PSyJa3axtz6aAu5xnbWufddM8m6p4kGQ8ysBi7qyHT1lrOyU7n1ZEHcpsWO74KF+ nSEa/wenXSHS7Tv7hx+x2ZYNLBd/ibgUzOfVsmg1Zfan6cOjLLIhD9ORN/fJUw+M r/PYin8igDsaO60FBL6WsMjQl5eFtPWn8nID6M83xv95ILf3VP09d6EsXtBQqsj/ 1iODlHqdj245qKdi6mY5P4i2vajLeI4KaAu9FGMRBNi7TLOEjL8zi1K4N3pQFGtf SwKw/xySBK++pCbKD+9PvFimEBWda28e0QlOAHgq5E3NT23asbYksyQxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUJX36Ww757SD5T+3TICAfoWxaqMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9/v+xaC Xy8zEvtzgmE7jW1c+hf/5RQXieTv9nlq6Idv0nFijQbQ+USIBXcp8kznLAKgOw3+ bGwgz7OTlZTb5Zei6/+m5qa9cOwM1soJ/QO8fwtVxcT7VXretfPt41r915j1eOaY pzFfn1jUWm2GuRA5AvPCB/SjsjegV57g47J69XG0/CWA0HJKZlFKodkssouFGoEl 30ETbqCGG4OkxzICkGIIx/u5Agn7WBGTJ4qS9F19Ypdg+o+msVTP7BAtP0REHGaW Y5oJpWoFxF04mK/62tS5++mfjnYyIu3o0RIeU67q4+64rUgMHTJ2/4UymHMTFR0v rDzZWmIJ6oortg== -----END CERTIFICATE-----Generated at Wed Jun 17 04:00:41 2026 by rpki-client