$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 7A0SLcRmYvrwVWaIND14HVjVXn1AYQL966Au2BrQ7Es= Subject key identifier: 7F:3C:0B:9B:B4:A2:3B:D4:E5:F7:DE:C0:C5:19:B6:90:3E:BF:43:6F Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019F07AB0361AC602EE1F804AE89A5CB5C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 12A1 Signing time: Sat 27 Jun 2026 06:01:15 +0000 Manifest this update: Sat 27 Jun 2026 06:01:15 +0000 Manifest next update: Sun 28 Jun 2026 06:01:15 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: vH3IBHemhE89z0A5V//T1QTRZTRFfJ32Kv/bzeQo0WA=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:07:ab:03:61:ac:60:2e:e1:f8:04:ae:89:a5:cb:5c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 27 06:01:15 2026 GMT Not After : Jun 28 06:01:15 2026 GMT Subject: CN=7f3c0b9bb4a23bd4e5f7dec0c519b6903ebf436f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:43:bf:65:66:32:8c:7f:62:54:0f:0c:52: 13:12:d7:8e:8a:89:0d:81:c5:3b:2a:94:f0:f4:14: 95:19:37:07:1d:6f:1a:cd:55:4e:a6:c1:57:b0:ee: 9b:de:a5:33:02:3a:91:c7:c0:d2:30:de:ce:e7:b6: 04:8c:42:3a:6e:ad:f9:75:44:c7:55:ce:ea:f1:14: 91:aa:cf:8b:66:1f:34:40:0b:10:02:3c:56:49:dd: 3f:1c:66:96:87:a1:ee:c9:27:7c:05:87:5b:78:d0: a6:15:ee:d6:a8:a3:38:4a:28:a4:93:7b:01:04:d2: b8:00:49:77:38:66:62:d7:2c:00:a2:33:4c:61:2a: e6:65:87:60:5b:44:0d:66:19:6a:b3:74:eb:e6:f1: 5e:0f:86:f6:68:0f:3c:9b:67:c0:74:d0:15:f1:d9: 1b:66:5f:b9:28:58:91:3c:f8:4b:f7:35:06:10:1c: 9c:d8:2c:2b:35:bf:4d:71:12:52:aa:99:b6:aa:5c: 15:6c:38:8c:09:ef:49:d9:9e:81:54:24:e9:06:cd: 2f:c7:e6:d4:f1:96:ae:83:ca:aa:ea:97:8f:04:c8: a4:e4:98:63:ce:80:2e:b9:66:ef:c2:fd:55:23:29: 5e:49:62:31:fd:c6:1d:47:f7:2c:ba:d1:3b:42:c2: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:0B:9B:B4:A2:3B:D4:E5:F7:DE:C0:C5:19:B6:90:3E:BF:43:6F X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:29:27:d0:27:02:b9:91:c9:d0:e6:1a:3b:45:77:ae:cc:af: 8c:a4:cd:f5:bc:bf:50:8d:6c:b3:61:24:62:98:13:ab:f3:7a: 2b:92:b1:68:4a:6b:9c:c5:ae:7b:25:53:07:e6:1c:88:5f:27: 4d:d5:13:8b:ee:ce:81:7d:8c:f1:0e:6a:f3:46:fa:3d:83:a8: 21:b2:54:b5:2b:cc:cf:59:04:47:b0:f3:36:24:a3:df:6a:b0: d5:78:0f:14:e1:cc:f9:0c:33:49:45:5a:99:45:d2:22:a8:e5: 14:e7:5d:6e:77:0f:1c:c1:76:74:ee:52:42:2d:7e:76:d5:46: 06:65:66:de:a2:8b:fb:f7:84:c2:a6:2a:5c:3f:b1:40:0b:a5: 99:0b:c4:b2:ff:c4:7b:77:39:a0:fa:6b:a5:14:3a:0b:23:db: 45:b6:f6:28:31:ff:60:fe:5d:20:38:32:1e:69:fe:78:23:34: 08:cf:95:70:3c:55:ba:ee:f2:c9:7e:26:f3:15:a6:a1:11:59: 93:f6:b5:e5:b1:e1:5e:c4:e2:78:7f:a9:91:3c:0e:83:d6:e6: e7:20:6a:28:8b:4c:e3:dc:f8:54:af:a2:a4:09:eb:17:04:8b: 89:8c:b3:e2:1b:9a:3c:8d:72:79:4e:ec:6d:10:8c:48:e5:f8: 85:31:cc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8HqwNhrGAu4fgEromly1wqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjI3MDYwMTE1WhcNMjYwNjI4MDYwMTE1WjAzMTEwLwYDVQQD Eyg3ZjNjMGI5YmI0YTIzYmQ0ZTVmN2RlYzBjNTE5YjY5MDNlYmY0MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpDv2VmMox/YlQPDFITEteOiokN gcU7KpTw9BSVGTcHHW8azVVOpsFXsO6b3qUzAjqRx8DSMN7O57YEjEI6bq35dUTH Vc7q8RSRqs+LZh80QAsQAjxWSd0/HGaWh6HuySd8BYdbeNCmFe7WqKM4Siikk3sB BNK4AEl3OGZi1ywAojNMYSrmZYdgW0QNZhlqs3Tr5vFeD4b2aA88m2fAdNAV8dkb Zl+5KFiRPPhL9zUGEByc2CwrNb9NcRJSqpm2qlwVbDiMCe9J2Z6BVCTpBs0vx+bU 8Zaug8qq6pePBMik5JhjzoAuuWbvwv1VIyleSWIx/cYdR/csutE7QsIUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH88C5u0ojvU5ffewMUZtpA+v0NvMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIikn0CcC uZHJ0OYaO0V3rsyvjKTN9by/UI1ss2EkYpgTq/N6K5KxaEprnMWueyVTB+YciF8n TdUTi+7OgX2M8Q5q80b6PYOoIbJUtSvMz1kER7DzNiSj32qw1XgPFOHM+QwzSUVa mUXSIqjlFOddbncPHMF2dO5SQi1+dtVGBmVm3qKL+/eEwqYqXD+xQAulmQvEsv/E e3c5oPprpRQ6CyPbRbb2KDH/YP5dIDgyHmn+eCM0CM+VcDxVuu7yyX4m8xWmoRFZ k/a15bHhXsTieH+pkTwOg9bm5yBqKItM49z4VK+ipAnrFwSLiYyz4huaPI1yeU7s bRCMSOX4hTHMyA== -----END CERTIFICATE-----Generated at Sat Jun 27 12:03:41 2026 by rpki-client