$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: ilKW+baIeOwbw4mbeeGtW/n3nAH1CV2M8/jZ7cT9NU0= Subject key identifier: A9:FE:7C:0D:2F:85:39:26:DE:B2:73:65:5F:1B:B6:47:F9:E3:2A:44 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019E826A9CAE04A2F6B7D6F1FC0C84BAE952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 125C Signing time: Mon 01 Jun 2026 09:01:25 +0000 Manifest this update: Mon 01 Jun 2026 09:01:25 +0000 Manifest next update: Tue 02 Jun 2026 09:01:25 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: A4fXUeqfOCSrfa2TpKTKLbwViDHgwuNpAq9S3mNRmGw=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Jun 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:82:6a:9c:ae:04:a2:f6:b7:d6:f1:fc:0c:84:ba:e9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 1 09:01:25 2026 GMT Not After : Jun 2 09:01:25 2026 GMT Subject: CN=a9fe7c0d2f853926deb273655f1bb647f9e32a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:d8:b4:93:3b:38:5a:34:81:29:ae:36:99: 51:89:aa:d0:43:2e:0f:34:51:2d:ad:86:02:42:e0: 80:c7:4d:ea:24:86:2f:21:4a:1e:cd:57:5f:f9:51: 24:6c:d9:e2:8b:29:a0:91:b5:b2:35:1c:27:17:a3: f7:64:d7:e8:92:1f:ac:b3:8b:1a:8d:f6:cc:eb:2e: 13:5a:03:1d:bd:ff:86:fd:62:c5:15:2f:ab:ad:58: 02:b7:73:6a:52:30:95:ab:23:7d:93:6e:32:5e:d0: 62:4e:df:d9:13:1b:fa:b2:a0:96:0d:58:04:51:87: e4:4a:c8:9b:11:11:53:34:41:33:8b:de:a2:c5:c6: 7c:0d:dc:29:f5:31:1d:26:df:21:96:fd:1d:95:7e: 5d:ff:5c:98:3a:3c:f1:40:15:cd:86:bd:19:aa:47: 03:e0:0d:59:c5:8a:88:d8:a6:11:5e:dd:d6:b2:09: 0c:5e:d2:bf:e2:94:5a:83:39:cd:83:40:3f:4c:fd: 73:44:1b:4a:0e:43:9b:52:52:cc:05:bc:fe:4d:28: 1e:e2:cc:ed:63:df:0b:52:83:52:68:da:40:4b:61: 68:e9:43:0a:7e:33:0a:4b:c2:41:c8:0d:59:02:f9: 52:ef:48:ea:ef:a7:dd:4d:13:df:5f:e3:e6:14:66: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FE:7C:0D:2F:85:39:26:DE:B2:73:65:5F:1B:B6:47:F9:E3:2A:44 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:28:ab:dd:b0:49:2b:fc:75:ca:67:ea:29:ff:ae:3c:af:98: 3c:ab:4e:2c:8a:74:d4:8c:fb:38:ad:40:0c:4a:ef:1b:2e:d1: 11:3a:55:a8:0b:3f:ba:81:36:d9:4b:98:f0:ec:2b:c0:75:8b: 4b:13:e9:9e:3c:f6:e2:ff:9c:2e:d3:02:b8:06:a9:ce:e1:a7: ea:b0:28:1b:a5:ac:c0:3b:f8:7c:90:3d:5f:5a:70:a2:bb:cf: 24:af:20:f7:8d:a2:0e:28:06:f6:78:2a:23:1e:6c:82:b3:01: 2e:1f:fb:23:a5:ed:21:47:4e:d4:90:38:68:ff:56:6f:3b:dd: b6:55:49:a5:34:5d:8f:b6:cb:59:bf:bf:22:f1:cf:0a:7a:3e: e9:df:a4:8e:c0:61:1f:c4:62:50:df:74:92:e2:24:fb:93:fe: 1b:65:1d:30:4f:8c:0d:d1:8a:bc:13:ac:bf:30:ac:8d:c1:c7: 79:1c:a1:57:55:ef:92:02:97:dc:65:59:d5:e9:d1:91:b9:17: fc:4d:86:57:90:40:f2:fb:0b:5b:8b:2b:83:9a:ce:c2:82:d4: 7d:7a:2c:31:d3:af:2f:eb:00:11:ad:2b:80:2c:ec:31:6f:fa: 88:7d:a1:59:01:a0:0e:40:41:11:35:28:25:61:b0:d7:a4:00: 9f:b6:52:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6CapyuBKL2t9bx/AyEuulSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjAxMDkwMTI1WhcNMjYwNjAyMDkwMTI1WjAzMTEwLwYDVQQD EyhhOWZlN2MwZDJmODUzOTI2ZGViMjczNjU1ZjFiYjY0N2Y5ZTMyYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy3YtJM7OFo0gSmuNplRiarQQy4P NFEtrYYCQuCAx03qJIYvIUoezVdf+VEkbNniiymgkbWyNRwnF6P3ZNfokh+ss4sa jfbM6y4TWgMdvf+G/WLFFS+rrVgCt3NqUjCVqyN9k24yXtBiTt/ZExv6sqCWDVgE UYfkSsibERFTNEEzi96ixcZ8Ddwp9TEdJt8hlv0dlX5d/1yYOjzxQBXNhr0ZqkcD 4A1ZxYqI2KYRXt3WsgkMXtK/4pRagznNg0A/TP1zRBtKDkObUlLMBbz+TSge4szt Y98LUoNSaNpAS2Fo6UMKfjMKS8JByA1ZAvlS70jq76fdTRPfX+PmFGZ2xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn+fA0vhTkm3rJzZV8btkf54ypEMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSir3bBJ K/x1ymfqKf+uPK+YPKtOLIp01Iz7OK1ADErvGy7RETpVqAs/uoE22UuY8OwrwHWL SxPpnjz24v+cLtMCuAapzuGn6rAoG6WswDv4fJA9X1pworvPJK8g942iDigG9ngq Ix5sgrMBLh/7I6XtIUdO1JA4aP9WbzvdtlVJpTRdj7bLWb+/IvHPCno+6d+kjsBh H8RiUN90kuIk+5P+G2UdME+MDdGKvBOsvzCsjcHHeRyhV1XvkgKX3GVZ1enRkbkX /E2GV5BA8vsLW4srg5rOwoLUfXosMdOvL+sAEa0rgCzsMW/6iH2hWQGgDkBBETUo JWGw16QAn7ZSRw== -----END CERTIFICATE-----Generated at Mon Jun 1 17:28:19 2026 by rpki-client