$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: 7PXtk/kZTA2O6Rm//b3GBd6bslogaahYXjDB+NYsnLU= Subject key identifier: 90:54:42:1B:6F:50:FA:B8:43:8F:1A:E5:85:F2:BF:7E:99:A9:78:31 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019F134167241D56EDC4989080876CEFA0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1989 Signing time: Mon 29 Jun 2026 12:01:20 +0000 Manifest this update: Mon 29 Jun 2026 12:01:20 +0000 Manifest next update: Tue 30 Jun 2026 12:01:20 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: ewjRMapo0C2mwZ5Vk0mG2A54KgrK1GIMvW0A9RrhO1w=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:13:41:67:24:1d:56:ed:c4:98:90:80:87:6c:ef:a0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jun 29 12:01:20 2026 GMT Not After : Jun 30 12:01:20 2026 GMT Subject: CN=9054421b6f50fab8438f1ae585f2bf7e99a97831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:19:b9:32:97:80:07:cd:b5:b0:83:29:a4: b3:66:84:bb:50:0b:f8:da:30:97:a1:22:83:bb:61: a2:78:91:f7:9b:7b:8c:98:2c:56:7f:57:a9:43:03: 94:f8:0e:f3:37:c8:ca:87:d2:ca:0c:92:05:9c:2c: 42:5c:7a:6e:fb:03:30:35:5c:fb:6b:0f:ab:30:5f: 87:c2:fa:f3:15:7d:ab:d3:9c:b2:c3:cc:85:88:11: 89:e1:81:28:1a:9b:7f:9a:b4:b6:e5:af:7b:a2:51: df:2d:6e:f4:75:86:bb:4a:2d:06:c4:7c:a9:1b:c5: 25:42:de:51:7f:90:58:1a:61:e9:2d:be:3f:d0:0e: 12:a9:4f:d3:de:48:2f:63:3f:c4:27:ce:fb:c2:e5: d5:36:97:e5:53:4f:ee:bf:85:88:6e:db:d3:d8:ab: 6b:ae:f4:1a:f1:d9:eb:05:ab:9e:4b:d8:03:9d:f1: b7:1c:a3:e8:0e:b1:48:31:e7:ed:c4:a6:63:c4:3f: 25:58:49:16:87:75:50:45:0f:a4:ed:ae:4c:fa:c9: 9d:e6:01:ab:7c:25:3e:51:97:bc:81:bd:6f:98:a8: 23:4e:21:36:75:e3:9a:e3:37:84:ae:db:3b:82:7c: b0:de:85:77:84:31:fb:56:e1:93:7d:8a:66:02:be: 36:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:42:1B:6F:50:FA:B8:43:8F:1A:E5:85:F2:BF:7E:99:A9:78:31 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bd:f6:42:f6:7d:b4:b3:fa:4f:c3:1c:03:e7:ab:42:90:f6: 9b:c1:4b:33:64:8b:d1:72:ab:e0:bc:32:dd:51:e7:6a:9a:c3: 50:92:2f:8a:da:0d:51:19:10:98:56:75:b2:7f:1c:ba:44:b7: 1b:7c:43:ac:31:df:68:bc:e1:b7:4b:18:ba:b7:1d:52:c3:f2: ca:5e:b0:97:e3:33:a0:d6:07:25:07:8f:41:83:3b:ff:1a:34: d1:89:87:43:a7:7c:e9:d9:b3:3f:5a:bd:e5:87:64:24:76:68: a9:3f:77:9e:4c:9e:00:77:27:ea:54:69:84:d7:58:41:51:b7: 21:af:eb:b3:74:04:1d:62:b1:94:8e:37:1d:8b:bf:15:85:74: da:40:bd:1b:9d:af:1a:84:e8:ac:d2:e2:c4:c4:37:03:38:58: cf:ed:bb:19:40:78:7f:41:32:5c:1e:89:bd:5a:f6:8c:5f:b0: d7:81:2c:94:1f:9a:d7:93:ec:e2:f7:4b:b1:2f:bc:56:d2:21: 5b:e3:bc:3e:16:d3:cf:f8:ab:b4:10:56:83:77:e1:e5:65:ae: 5b:a3:d7:28:86:ec:43:a4:28:ce:d0:c7:25:e4:28:23:c8:f6: bc:93:28:28:cf:2f:ef:5b:c3:33:07:a9:f8:06:b9:d8:e1:63: 63:83:24:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8TQWckHVbtxJiQgIds76DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNjI5MTIwMTIwWhcNMjYwNjMwMTIwMTIwWjAzMTEwLwYDVQQD Eyg5MDU0NDIxYjZmNTBmYWI4NDM4ZjFhZTU4NWYyYmY3ZTk5YTk3ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttAZuTKXgAfNtbCDKaSzZoS7UAv4 2jCXoSKDu2GieJH3m3uMmCxWf1epQwOU+A7zN8jKh9LKDJIFnCxCXHpu+wMwNVz7 aw+rMF+HwvrzFX2r05yyw8yFiBGJ4YEoGpt/mrS25a97olHfLW70dYa7Si0GxHyp G8UlQt5Rf5BYGmHpLb4/0A4SqU/T3kgvYz/EJ877wuXVNpflU0/uv4WIbtvT2Ktr rvQa8dnrBaueS9gDnfG3HKPoDrFIMeftxKZjxD8lWEkWh3VQRQ+k7a5M+smd5gGr fCU+UZe8gb1vmKgjTiE2deOa4zeErts7gnyw3oV3hDH7VuGTfYpmAr42swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBUQhtvUPq4Q48a5YXyv36ZqXgxMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV732QvZ9 tLP6T8McA+erQpD2m8FLM2SL0XKr4Lwy3VHnaprDUJIvitoNURkQmFZ1sn8cukS3 G3xDrDHfaLzht0sYurcdUsPyyl6wl+MzoNYHJQePQYM7/xo00YmHQ6d86dmzP1q9 5YdkJHZoqT93nkyeAHcn6lRphNdYQVG3Ia/rs3QEHWKxlI43HYu/FYV02kC9G52v GoTorNLixMQ3AzhYz+27GUB4f0EyXB6JvVr2jF+w14EslB+a15Ps4vdLsS+8VtIh W+O8PhbTz/irtBBWg3fh5WWuW6PXKIbsQ6QoztDHJeQoI8j2vJMoKM8v71vDMwep +Aa52OFjY4Mk+Q== -----END CERTIFICATE-----Generated at Mon Jun 29 18:51:41 2026 by rpki-client