$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: QDIKXtjrIEN1dFGmP5sAXEghwPJDF+HWn7vlt8lbug8= Subject key identifier: 16:53:97:08:C9:07:1E:BA:6F:DE:2A:6D:42:B3:2D:E4:65:C7:0C:53 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019F227D72C520C0690179024FCF24435523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 12AF Signing time: Thu 02 Jul 2026 11:01:14 +0000 Manifest this update: Thu 02 Jul 2026 11:01:14 +0000 Manifest next update: Fri 03 Jul 2026 11:01:14 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: hirmbe/Qzy4++rXMp0vtG5NoI85JGJdHjmuQkq73KIA=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:22:7d:72:c5:20:c0:69:01:79:02:4f:cf:24:43:55:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jul 2 11:01:14 2026 GMT Not After : Jul 3 11:01:14 2026 GMT Subject: CN=16539708c9071eba6fde2a6d42b32de465c70c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:11:35:e2:0d:9a:fd:89:6a:f3:e0:fa:12: 12:f4:fd:e7:63:e4:55:2c:22:d8:cf:c0:2b:d7:63: 37:6d:5f:a4:a2:6a:43:ea:46:25:1a:49:c7:60:f8: 7c:f3:5b:01:98:33:47:fd:28:3a:d5:86:ce:a4:e5: 94:ff:13:82:f9:10:09:56:5a:aa:fa:2a:13:9c:d3: fa:4a:b5:35:c7:14:a6:75:a4:58:99:0a:6b:8d:2d: 10:d1:d5:fd:ea:29:62:01:6f:ce:60:16:f4:1c:23: c1:d2:39:7e:ee:6a:7a:0d:09:55:1d:73:b5:99:b0: bf:be:3f:a7:5e:e0:2e:db:1c:39:03:5d:24:6a:c8: 27:3b:04:29:f4:99:06:c3:48:c1:68:bc:e6:70:9e: 43:05:55:1b:b5:01:7f:18:5a:9e:71:15:dc:d3:e0: c6:2c:86:87:d2:b5:36:ee:a9:e7:3b:8f:b6:9f:fe: b6:8f:7d:6a:16:af:09:8c:8d:62:69:c0:7f:93:cb: 9a:af:8e:89:87:86:f4:22:a7:c6:34:2e:ee:a8:5b: 8d:35:87:08:4a:7e:6b:44:71:28:0f:dd:70:54:4a: b5:39:6e:a3:92:70:6a:dd:65:75:88:be:05:7f:94: 2b:02:0d:2a:04:09:9d:26:a2:7a:11:e6:db:c8:f3: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:53:97:08:C9:07:1E:BA:6F:DE:2A:6D:42:B3:2D:E4:65:C7:0C:53 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:18:ce:36:11:29:cd:c3:89:d6:0a:a7:66:36:61:c0:31: 6f:a0:ae:c9:a9:45:27:2f:e7:ee:02:12:37:50:3c:fa:f7:05: bf:b9:90:cf:5f:5d:06:c3:9e:4a:f9:e3:b6:47:80:2c:3f:75: 80:a0:c7:cd:bc:b1:5f:e9:7d:2c:42:df:89:3c:67:32:4e:8b: 00:6c:7f:16:91:bb:e7:2d:83:e9:28:bd:c2:14:b7:26:04:b6: 7b:44:be:04:6c:cb:f4:6f:4b:eb:9c:8d:a8:b9:11:6c:8b:5e: 2a:80:15:47:0d:b7:d8:78:01:14:cc:04:dc:0f:e5:04:79:98: 8e:69:47:f2:3a:9d:4b:9a:72:04:2e:7d:dd:0f:5c:ee:9e:63: 5e:14:47:fd:90:23:e4:26:64:08:f9:56:2e:a6:57:5a:a5:66: 0d:a0:37:3b:99:07:30:8c:c0:ac:06:61:e1:9b:67:d0:4d:5a: ee:1e:36:4c:a1:84:e4:d1:14:a2:43:1d:7a:98:3c:c0:71:90: 03:39:48:87:b0:6f:4e:73:b1:c0:d8:a7:88:96:cf:6f:24:b0: 3d:c6:b4:5a:fa:03:5f:e6:d7:9d:d8:55:e6:f3:b8:33:7b:4d: c3:a0:01:8a:ee:d4:2e:8d:2a:b1:39:6c:f5:dc:7a:88:fb:9f: 35:3b:23:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8ifXLFIMBpAXkCT88kQ1UjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNzAyMTEwMTE0WhcNMjYwNzAzMTEwMTE0WjAzMTEwLwYDVQQD EygxNjUzOTcwOGM5MDcxZWJhNmZkZTJhNmQ0MmIzMmRlNDY1YzcwYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPoRNeINmv2JavPg+hIS9P3nY+RV LCLYz8Ar12M3bV+kompD6kYlGknHYPh881sBmDNH/Sg61YbOpOWU/xOC+RAJVlqq +ioTnNP6SrU1xxSmdaRYmQprjS0Q0dX96iliAW/OYBb0HCPB0jl+7mp6DQlVHXO1 mbC/vj+nXuAu2xw5A10kasgnOwQp9JkGw0jBaLzmcJ5DBVUbtQF/GFqecRXc0+DG LIaH0rU27qnnO4+2n/62j31qFq8JjI1iacB/k8uar46Jh4b0IqfGNC7uqFuNNYcI Sn5rRHEoD91wVEq1OW6jknBq3WV1iL4Ff5QrAg0qBAmdJqJ6EebbyPOUewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZTlwjJBx66b94qbUKzLeRlxwxTMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLwYzjYR Kc3DidYKp2Y2YcAxb6CuyalFJy/n7gISN1A8+vcFv7mQz19dBsOeSvnjtkeALD91 gKDHzbyxX+l9LELfiTxnMk6LAGx/FpG75y2D6Si9whS3JgS2e0S+BGzL9G9L65yN qLkRbIteKoAVRw232HgBFMwE3A/lBHmYjmlH8jqdS5pyBC593Q9c7p5jXhRH/ZAj 5CZkCPlWLqZXWqVmDaA3O5kHMIzArAZh4Ztn0E1a7h42TKGE5NEUokMdepg8wHGQ AzlIh7BvTnOxwNiniJbPbySwPca0WvoDX+bXndhV5vO4M3tNw6ABiu7ULo0qsTls 9dx6iPufNTsj/Q== -----END CERTIFICATE-----Generated at Thu Jul 2 14:41:59 2026 by rpki-client