$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: b8fM/DbQm7bLW/w2wmoaYWEZDEw2cDkOYsNWI6qdZbM= Subject key identifier: 5A:3A:15:65:9B:97:FE:38:C4:79:AB:C3:53:D5:E5:7D:6D:D0:4D:F2 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019F171D5EF74E4DF736040946CDEBCAB69F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 12A9 Signing time: Tue 30 Jun 2026 06:00:28 +0000 Manifest this update: Tue 30 Jun 2026 06:00:28 +0000 Manifest next update: Wed 01 Jul 2026 06:00:28 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: kka34CPnVmxjPdYHvd5UIV+N8LDKc2dR1eR3tI5H2ZY=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:17:1d:5e:f7:4e:4d:f7:36:04:09:46:cd:eb:ca:b6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 30 06:00:28 2026 GMT Not After : Jul 1 06:00:28 2026 GMT Subject: CN=5a3a15659b97fe38c479abc353d5e57d6dd04df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:e3:7c:30:06:3f:cf:7a:49:13:60:bf:c6: 69:af:0a:cf:d3:c3:ad:b4:98:dd:16:8c:56:e0:2e: 1d:90:a4:ab:76:59:5d:0e:2f:de:1a:ee:cc:56:a0: 5e:e6:07:f3:fb:60:79:a3:00:b1:b1:8c:d5:e8:be: b0:cb:5b:e1:60:fc:13:61:5e:07:7e:ca:f8:d8:e2: 80:2b:1b:0c:9c:fa:b6:bc:c2:63:37:cf:b7:1f:db: 39:9c:24:3a:0a:a7:89:09:a8:2f:9e:3a:ee:7a:0d: fb:f9:64:04:2e:5b:7a:9a:a4:fd:cd:05:db:c7:cc: f0:28:db:25:a0:c6:62:21:87:0c:43:6e:23:7f:4f: 56:e3:92:b3:28:0f:65:1f:7e:59:a1:6f:f0:65:90: d3:0f:b0:20:35:35:24:08:59:de:1c:bd:db:d3:1f: 75:ae:c8:e1:73:e4:d6:76:76:c4:69:58:e2:79:51: d3:e3:1e:ed:88:eb:6c:21:89:30:3f:bb:40:2e:30: ec:7c:0b:2a:ab:3e:e1:f3:4d:fd:a9:f3:79:04:c1: 5e:0d:17:e3:76:0e:a7:9f:20:9c:09:cc:93:c2:ba: dc:45:35:6c:c7:b3:fb:7a:ba:fc:8f:01:44:20:24: a4:a1:82:e2:1c:12:e9:7c:9f:d8:38:b2:1e:ab:24: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:15:65:9B:97:FE:38:C4:79:AB:C3:53:D5:E5:7D:6D:D0:4D:F2 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e8:c5:6f:b6:8a:4b:8e:c7:49:82:e8:98:13:d9:3a:90:6f: 7e:03:2c:7f:b8:f0:9c:2e:ae:54:b2:6e:b1:17:73:ff:9f:4d: 57:f0:92:21:dd:ce:89:f8:f1:1b:1e:09:77:67:46:8c:ee:b6: 8d:40:9d:8a:5b:1c:ed:b1:2f:04:df:7c:70:ce:98:c0:9e:87: 77:d8:5d:04:17:ad:00:63:a7:d6:f1:c3:e2:2d:b4:84:22:2e: d1:20:09:98:f4:9b:8d:95:5b:e9:39:39:5e:05:74:72:16:d8: e5:d0:b0:ab:19:fc:c9:d4:0b:33:e0:e7:28:67:95:45:61:cc: b3:af:d7:6a:b9:27:94:50:99:c7:d8:22:bd:ac:a3:b8:ee:e1: dd:34:d2:76:ac:63:95:57:95:cf:f7:78:df:8e:8d:f3:d7:dd: eb:5e:8e:54:eb:4d:e1:29:c5:f4:6b:bb:b7:03:cb:b8:2e:5c: f8:42:57:0b:ca:00:bd:82:53:98:87:07:08:96:f9:69:fa:40: e3:0f:8b:ee:a4:6d:5e:04:29:cf:17:ae:a9:2b:58:a0:e1:96: b6:6a:9e:34:3a:e4:d0:5e:44:ae:50:e1:70:48:58:60:0a:60: 74:72:58:c8:37:3b:4b:32:97:db:40:db:e6:7e:15:75:b4:34: c2:10:27:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8XHV73Tk33NgQJRs3ryrafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjMwMDYwMDI4WhcNMjYwNzAxMDYwMDI4WjAzMTEwLwYDVQQD Eyg1YTNhMTU2NTliOTdmZTM4YzQ3OWFiYzM1M2Q1ZTU3ZDZkZDA0ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/TjfDAGP896SRNgv8ZprwrP08Ot tJjdFoxW4C4dkKSrdlldDi/eGu7MVqBe5gfz+2B5owCxsYzV6L6wy1vhYPwTYV4H fsr42OKAKxsMnPq2vMJjN8+3H9s5nCQ6CqeJCagvnjrueg37+WQELlt6mqT9zQXb x8zwKNsloMZiIYcMQ24jf09W45KzKA9lH35ZoW/wZZDTD7AgNTUkCFneHL3b0x91 rsjhc+TWdnbEaVjieVHT4x7tiOtsIYkwP7tALjDsfAsqqz7h8039qfN5BMFeDRfj dg6nnyCcCcyTwrrcRTVsx7P7err8jwFEICSkoYLiHBLpfJ/YOLIeqyTbewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo6FWWbl/44xHmrw1PV5X1t0E3yMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhejFb7aK S47HSYLomBPZOpBvfgMsf7jwnC6uVLJusRdz/59NV/CSId3OifjxGx4Jd2dGjO62 jUCdilsc7bEvBN98cM6YwJ6Hd9hdBBetAGOn1vHD4i20hCIu0SAJmPSbjZVb6Tk5 XgV0chbY5dCwqxn8ydQLM+DnKGeVRWHMs6/XarknlFCZx9givayjuO7h3TTSdqxj lVeVz/d4346N89fd616OVOtN4SnF9Gu7twPLuC5c+EJXC8oAvYJTmIcHCJb5afpA 4w+L7qRtXgQpzxeuqStYoOGWtmqeNDrk0F5ErlDhcEhYYApgdHJYyDc7SzKX20Db 5n4VdbQ0whAnGA== -----END CERTIFICATE-----Generated at Tue Jun 30 13:31:03 2026 by rpki-client