$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: x9qjYTSdS+0ne6d0RRKbnUwB6TRJNkU44N0dvdaQJ5Q= Subject key identifier: DC:4E:19:98:CB:9A:52:C7:98:6E:F9:E7:49:27:68:4C:AD:66:8A:EE Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019EB2B1B412CF8E9941F85531A2449D15FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1275 Signing time: Wed 10 Jun 2026 18:00:50 +0000 Manifest this update: Wed 10 Jun 2026 18:00:50 +0000 Manifest next update: Thu 11 Jun 2026 18:00:50 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: LEhqqjF8zl+ozJ9MNjVK2yyPLpaQdrjuGPvQL2mLe3s=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Jun 2026 14:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b2:b1:b4:12:cf:8e:99:41:f8:55:31:a2:44:9d:15:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 10 18:00:50 2026 GMT Not After : Jun 11 18:00:50 2026 GMT Subject: CN=dc4e1998cb9a52c7986ef9e74927684cad668aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:49:05:f4:14:84:14:33:df:56:63:80:a9: 7d:37:c1:97:92:66:fd:b2:60:e9:7f:5b:50:36:0d: 5f:3c:9e:2f:79:0b:2b:53:59:52:18:45:fe:55:72: a8:d1:d7:f3:ac:e1:24:79:71:08:fc:4a:81:54:e4: 72:03:e3:71:c0:5f:e7:d2:8f:38:e0:2d:2c:fa:f2: e6:40:f1:ae:7c:48:2b:6b:7e:a1:ec:cf:f2:f6:5b: a7:a9:27:da:6f:3b:97:e4:f7:dd:06:ad:c7:a5:9c: a4:26:67:c7:b9:72:7e:fc:7a:f6:b8:e9:c0:d7:aa: f5:99:2a:e6:2d:f3:00:c5:be:4e:3a:bd:06:27:c5: e5:fe:2a:c5:bc:9f:90:a4:83:fb:2c:b7:09:37:cd: 2a:2c:73:8c:8d:98:0f:0d:74:1a:e0:c9:32:06:f9: d1:9f:aa:2e:26:10:81:78:50:66:2c:96:72:55:fd: 1d:92:04:5b:b1:5d:52:0b:61:9b:28:ef:56:f1:1f: f1:cc:40:cf:cb:a4:91:5e:ee:f6:bf:90:f5:43:19: 07:8f:42:3c:e8:a1:08:a3:f4:00:9d:0d:c1:6e:9e: 14:5c:1c:9c:48:0f:42:ae:e5:f8:6f:10:ff:57:f6: d7:d4:3a:78:14:73:74:fd:1d:47:0d:9b:01:34:90: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4E:19:98:CB:9A:52:C7:98:6E:F9:E7:49:27:68:4C:AD:66:8A:EE X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8d:af:b6:c3:ed:36:b3:a7:af:22:f2:64:c1:70:b7:4f:38: 0f:8e:f5:c6:ad:47:4e:12:99:5a:74:5b:3b:8d:e4:7e:0d:68: 34:ec:f6:c1:6e:74:4a:9d:d6:77:d3:ab:35:d0:b5:97:eb:0c: 16:7e:dc:7a:3d:a8:c4:22:17:1b:d9:f3:7e:7f:9d:ee:1e:64: 32:b3:99:61:b3:ac:6b:fc:69:6d:4d:1e:ae:fd:ef:f3:01:26: aa:eb:fb:3a:e5:d4:41:23:77:48:ef:d8:f4:9b:f7:05:36:96: 74:c0:c7:13:4d:56:f7:b1:f9:82:88:69:18:9b:65:21:61:fc: 25:2e:ef:51:f1:46:fc:74:e6:70:13:cf:60:03:68:a5:d8:ff: cf:41:cf:2e:7c:6a:29:7a:fd:e9:f4:cf:c2:51:c2:d9:9a:21: 2e:93:c3:14:44:37:d7:70:5d:39:ff:6f:07:c6:2c:e6:5d:3a: 82:bc:48:eb:9c:5f:11:68:30:25:a0:80:7c:51:1b:2a:04:69: 62:f8:08:66:84:68:92:72:d6:c5:73:af:05:c5:d7:74:0d:aa: 1b:67:07:7e:87:28:9f:44:16:e3:88:0f:6c:2e:7b:71:42:9e: 5a:66:d2:35:e0:31:2e:86:3c:ef:05:64:74:09:88:ce:45:a0: 6e:f9:66:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6ysbQSz46ZQfhVMaJEnRX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjEwMTgwMDUwWhcNMjYwNjExMTgwMDUwWjAzMTEwLwYDVQQD EyhkYzRlMTk5OGNiOWE1MmM3OTg2ZWY5ZTc0OTI3Njg0Y2FkNjY4YWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ1JBfQUhBQz31ZjgKl9N8GXkmb9 smDpf1tQNg1fPJ4veQsrU1lSGEX+VXKo0dfzrOEkeXEI/EqBVORyA+NxwF/n0o84 4C0s+vLmQPGufEgra36h7M/y9lunqSfabzuX5PfdBq3HpZykJmfHuXJ+/Hr2uOnA 16r1mSrmLfMAxb5OOr0GJ8Xl/irFvJ+QpIP7LLcJN80qLHOMjZgPDXQa4MkyBvnR n6ouJhCBeFBmLJZyVf0dkgRbsV1SC2GbKO9W8R/xzEDPy6SRXu72v5D1QxkHj0I8 6KEIo/QAnQ3Bbp4UXBycSA9CruX4bxD/V/bX1Dp4FHN0/R1HDZsBNJA6qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxOGZjLmlLHmG7550knaEytZoruMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo2vtsPt NrOnryLyZMFwt084D471xq1HThKZWnRbO43kfg1oNOz2wW50Sp3Wd9OrNdC1l+sM Fn7cej2oxCIXG9nzfn+d7h5kMrOZYbOsa/xpbU0erv3v8wEmquv7OuXUQSN3SO/Y 9Jv3BTaWdMDHE01W97H5gohpGJtlIWH8JS7vUfFG/HTmcBPPYANopdj/z0HPLnxq KXr96fTPwlHC2ZohLpPDFEQ313BdOf9vB8Ys5l06grxI65xfEWgwJaCAfFEbKgRp YvgIZoRoknLWxXOvBcXXdA2qG2cHfocon0QW44gPbC57cUKeWmbSNeAxLoY87wVk dAmIzkWgbvlmtQ== -----END CERTIFICATE-----Generated at Wed Jun 10 21:04:46 2026 by rpki-client