$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: NIwtAN34JDqkgocDWO0oM/WPjFGmJnBZM3hsNValxpM= Subject key identifier: 4B:1D:5C:D7:33:D5:EF:74:A5:39:C3:22:72:0B:02:22:DC:AC:5E:32 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019EECA1FDDCC4C7376762FBAD4073DE6BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1293 Signing time: Mon 22 Jun 2026 00:01:39 +0000 Manifest this update: Mon 22 Jun 2026 00:01:39 +0000 Manifest next update: Tue 23 Jun 2026 00:01:39 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: h+8CMmFiEWUjlw4ZmuYO7/tK6XgPkZ/ySB2vKz004ew=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Jun 2026 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ec:a1:fd:dc:c4:c7:37:67:62:fb:ad:40:73:de:6b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 22 00:01:39 2026 GMT Not After : Jun 23 00:01:39 2026 GMT Subject: CN=4b1d5cd733d5ef74a539c322720b0222dcac5e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:c6:e7:c7:71:14:2a:12:0c:8f:ff:7c:b4: e5:d7:81:72:df:17:ed:27:b6:6c:a0:1a:7f:e3:bb: 34:f3:1b:fa:f7:66:86:3b:86:30:49:3a:95:81:8e: 0d:f1:9e:d4:d3:71:31:05:86:ca:fb:d9:10:d0:ac: 2e:7e:38:9c:cc:43:38:50:e0:dc:b6:39:7a:13:72: 93:18:95:ba:70:35:ee:a0:fe:47:43:0b:30:54:a1: 29:dd:ca:5b:75:c6:44:0b:77:a9:4e:19:6b:2b:e3: 87:e0:03:ed:24:6e:86:f5:ac:53:0d:af:6b:ca:67: e0:45:34:9c:2c:69:e5:27:20:d6:16:fd:16:3f:f0: 04:1d:0e:99:7f:b2:e6:46:76:be:d0:ae:3e:36:b7: 11:42:69:75:41:86:a7:be:47:91:4a:4c:c3:f7:ae: c1:27:18:66:90:6d:09:0b:f1:03:81:55:e1:70:21: 17:5e:aa:70:27:ff:57:98:5d:1a:af:24:d0:c1:38: d9:20:13:e4:83:bd:3e:23:29:5f:42:12:1c:19:eb: c2:66:15:4c:0b:98:d4:de:e7:a7:1b:8e:ee:e9:ad: 99:b4:5e:50:f0:0b:93:5c:7a:48:ee:fe:2c:f4:ba: 25:db:1d:e2:2e:d0:b0:59:74:d9:9a:0c:88:82:36: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:5C:D7:33:D5:EF:74:A5:39:C3:22:72:0B:02:22:DC:AC:5E:32 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7f:b6:f4:99:0c:5c:ff:13:56:82:a0:ff:03:99:5b:0a:64: ee:d2:b2:94:e7:b9:33:b9:94:17:70:b6:3b:46:a1:07:5f:59: 68:ce:f7:39:00:6c:58:1f:bd:68:4c:12:40:de:5b:6c:09:4e: 26:6c:d6:48:66:32:77:2c:be:c6:3c:78:2a:55:a3:50:5f:76: fb:c4:25:3d:eb:ed:f8:ca:cb:f7:25:5e:44:3e:4d:c7:7a:7c: f3:96:54:d1:e7:f1:bd:2a:47:02:30:1d:76:95:e4:c4:80:3e: ad:d8:c8:4d:35:d0:e8:ad:14:b0:d5:9d:44:17:18:b8:43:8c: 49:d7:a7:da:76:a5:52:b7:05:85:dc:68:f3:4b:b4:9e:0d:3a: bc:3d:a1:d5:b9:37:86:e6:c8:c8:51:74:9a:cf:87:a8:80:21: 0b:ca:1b:11:1f:02:d0:19:44:65:ff:22:f6:cc:3d:48:cc:16: e9:5f:5e:c9:aa:72:7c:fc:e5:ca:25:60:b6:52:58:fe:10:99: 63:11:bd:27:da:02:e2:1e:e0:f3:6a:a9:50:a2:86:8e:e0:bc: a8:f0:75:e8:1d:c2:1f:0c:9b:1f:80:dc:e2:52:24:81:d4:80: ec:e6:a0:c7:83:65:62:d3:89:c0:58:e7:90:4f:7c:db:2e:c4: 77:82:3c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7sof3cxMc3Z2L7rUBz3mvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjIyMDAwMTM5WhcNMjYwNjIzMDAwMTM5WjAzMTEwLwYDVQQD Eyg0YjFkNWNkNzMzZDVlZjc0YTUzOWMzMjI3MjBiMDIyMmRjYWM1ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y3G58dxFCoSDI//fLTl14Fy3xft J7ZsoBp/47s08xv692aGO4YwSTqVgY4N8Z7U03ExBYbK+9kQ0KwufjiczEM4UODc tjl6E3KTGJW6cDXuoP5HQwswVKEp3cpbdcZEC3epThlrK+OH4APtJG6G9axTDa9r ymfgRTScLGnlJyDWFv0WP/AEHQ6Zf7LmRna+0K4+NrcRQml1QYanvkeRSkzD967B JxhmkG0JC/EDgVXhcCEXXqpwJ/9XmF0aryTQwTjZIBPkg70+IylfQhIcGevCZhVM C5jU3uenG47u6a2ZtF5Q8AuTXHpI7v4s9Lol2x3iLtCwWXTZmgyIgjbx9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsdXNcz1e90pTnDInILAiLcrF4yMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn+29JkM XP8TVoKg/wOZWwpk7tKylOe5M7mUF3C2O0ahB19ZaM73OQBsWB+9aEwSQN5bbAlO JmzWSGYydyy+xjx4KlWjUF92+8QlPevt+MrL9yVeRD5Nx3p885ZU0efxvSpHAjAd dpXkxIA+rdjITTXQ6K0UsNWdRBcYuEOMSden2nalUrcFhdxo80u0ng06vD2h1bk3 hubIyFF0ms+HqIAhC8obER8C0BlEZf8i9sw9SMwW6V9eyapyfPzlyiVgtlJY/hCZ YxG9J9oC4h7g82qpUKKGjuC8qPB16B3CHwybH4Dc4lIkgdSA7Oagx4NlYtOJwFjn kE982y7Ed4I8ng== -----END CERTIFICATE-----Generated at Mon Jun 22 07:07:20 2026 by rpki-client