$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 3c4/aOPhwn5WzXGRcfdBxIV6gRGjZ1o3v5cS/KhZ2GQ= Subject key identifier: 1E:35:D7:19:2E:5C:48:27:1E:E1:D0:17:01:8F:BF:4F:16:57:E6:1F Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019EB6578FEF00DF8BE9508006D01D0A3616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 19F3 Signing time: Thu 11 Jun 2026 11:00:52 +0000 Manifest this update: Thu 11 Jun 2026 11:00:52 +0000 Manifest next update: Fri 12 Jun 2026 11:00:52 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: EY7R5yLKsdaGq/h8voR/fVS3BwwbipEQMBcLDh/zAFg=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:57:8f:ef:00:df:8b:e9:50:80:06:d0:1d:0a:36:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jun 11 11:00:52 2026 GMT Not After : Jun 12 11:00:52 2026 GMT Subject: CN=1e35d7192e5c48271ee1d017018fbf4f1657e61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:df:fb:14:06:37:f1:af:57:29:12:5d:ec: 95:e6:55:f3:1e:4d:97:a9:f3:fc:15:ae:10:77:50: 3e:d4:db:3f:47:18:4d:37:64:9c:fa:98:2f:87:18: 54:56:38:79:a2:69:3d:bc:81:b8:29:4d:9f:d0:23: f1:d2:95:fe:5d:48:75:94:1e:5b:b2:72:a8:d8:5f: d8:5b:d0:e5:bf:99:5e:75:6a:66:88:6b:9b:73:50: 5e:66:b4:82:4c:5c:dc:21:c2:44:b7:de:a4:1b:38: c9:5a:eb:9e:c6:b9:c5:8b:d6:e9:12:28:99:78:87: a4:00:c7:c4:1f:fd:f2:c3:3c:fc:22:6d:36:d0:82: be:45:6a:f6:55:e9:78:ad:53:68:13:ec:9a:04:9f: bf:93:aa:f1:6b:82:3a:25:6b:58:28:5f:77:08:ea: ec:a9:23:d8:35:3d:a7:d5:a9:e0:9c:d0:a5:51:4e: ce:6c:09:40:f5:6a:83:c2:3d:27:21:fb:ea:3c:57: 0c:00:2a:08:7e:22:9f:48:34:fd:ba:96:22:fe:67: 0c:94:b8:f1:66:ae:72:83:e9:0a:04:81:8f:a9:3a: b3:2e:a4:fb:4b:61:5a:33:be:ee:6a:45:23:b3:3c: 2e:ea:6e:43:da:38:7e:ab:97:87:06:42:3a:6f:0f: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:D7:19:2E:5C:48:27:1E:E1:D0:17:01:8F:BF:4F:16:57:E6:1F X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e7:2f:fc:d2:a9:56:b1:cd:65:53:46:c6:d4:7e:f1:63:11: 2d:f4:98:c1:53:dc:f7:dd:86:9c:53:76:fa:f3:93:a6:b6:ad: 3f:59:bb:b4:cd:a9:e3:39:d3:24:ba:5c:8a:af:40:a4:cd:07: e5:a1:98:36:ac:e1:5f:d6:40:a8:c3:eb:bd:59:b6:b7:cf:74: 60:a3:bb:a8:2a:73:4f:50:84:2b:1e:e5:11:93:3f:d4:a0:df: ce:6a:53:68:c7:4a:22:cc:f7:c9:88:44:b2:96:6a:bc:10:6e: d7:cb:bc:37:96:3b:ac:f9:74:63:c8:79:e0:6e:9f:ae:1e:1e: b4:0b:51:d7:b0:db:a2:68:a7:81:84:a9:ee:3c:bd:91:e4:92: d2:bc:d8:97:81:c9:9b:13:ae:60:c3:b8:bb:46:19:81:8a:9c: 5c:15:23:84:6e:d1:63:ba:44:5a:54:7f:77:f2:96:83:72:29: 64:0a:be:72:fb:88:4b:f6:29:bf:f4:be:5e:8d:38:4e:d3:09: 4c:ca:d6:7a:35:33:6f:e1:49:b4:d1:a0:80:46:a8:3c:a8:df: ed:b7:e5:0c:d3:67:5c:53:9e:ab:42:68:ac:47:15:54:99:46: 13:e8:f5:d4:46:2f:70:49:1c:62:db:1a:b1:71:09:56:0b:86: d4:00:0b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62V4/vAN+L6VCABtAdCjYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNjExMTEwMDUyWhcNMjYwNjEyMTEwMDUyWjAzMTEwLwYDVQQD EygxZTM1ZDcxOTJlNWM0ODI3MWVlMWQwMTcwMThmYmY0ZjE2NTdlNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mnf+xQGN/GvVykSXeyV5lXzHk2X qfP8Fa4Qd1A+1Ns/RxhNN2Sc+pgvhxhUVjh5omk9vIG4KU2f0CPx0pX+XUh1lB5b snKo2F/YW9Dlv5ledWpmiGubc1BeZrSCTFzcIcJEt96kGzjJWuuexrnFi9bpEiiZ eIekAMfEH/3ywzz8Im020IK+RWr2Vel4rVNoE+yaBJ+/k6rxa4I6JWtYKF93COrs qSPYNT2n1angnNClUU7ObAlA9WqDwj0nIfvqPFcMACoIfiKfSDT9upYi/mcMlLjx Zq5yg+kKBIGPqTqzLqT7S2FaM77uakUjszwu6m5D2jh+q5eHBkI6bw+0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB411xkuXEgnHuHQFwGPv08WV+YfMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkucv/NKp VrHNZVNGxtR+8WMRLfSYwVPc992GnFN2+vOTpratP1m7tM2p4znTJLpciq9ApM0H 5aGYNqzhX9ZAqMPrvVm2t890YKO7qCpzT1CEKx7lEZM/1KDfzmpTaMdKIsz3yYhE spZqvBBu18u8N5Y7rPl0Y8h54G6frh4etAtR17DbomingYSp7jy9keSS0rzYl4HJ mxOuYMO4u0YZgYqcXBUjhG7RY7pEWlR/d/KWg3IpZAq+cvuIS/Ypv/S+Xo04TtMJ TMrWejUzb+FJtNGggEaoPKjf7bflDNNnXFOeq0JorEcVVJlGE+j11EYvcEkcYtsa sXEJVguG1AALMA== -----END CERTIFICATE-----Generated at Thu Jun 11 17:53:19 2026 by rpki-client