$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: p4zB9BUQESD/rFgFqjHgopTua0tTSonCs9ll4kNgQus= Subject key identifier: A9:3A:99:85:0D:8D:FA:C2:7D:C1:D1:32:83:4A:23:F6:2C:F8:0C:1D Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019F18677EA6C4C3C53B4207E78DBFE8DBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 19A8 Signing time: Tue 30 Jun 2026 12:01:03 +0000 Manifest this update: Tue 30 Jun 2026 12:01:03 +0000 Manifest next update: Wed 01 Jul 2026 12:01:03 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: OPwjoZpONXcZayjEe7b01vsManuYeRfrQzvmm0wACA4=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 15: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:18:67:7e:a6:c4:c3:c5:3b:42:07:e7:8d:bf:e8:db:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jun 30 12:01:03 2026 GMT Not After : Jul 1 12:01:03 2026 GMT Subject: CN=a93a99850d8dfac27dc1d132834a23f62cf80c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:41:52:40:63:2a:7b:81:79:44:87:2c:01: c1:a8:1e:ed:2d:92:94:6b:df:2b:dd:80:ac:ef:59: 0a:56:0e:a7:db:6f:8b:a4:98:28:35:26:23:f1:ff: 1a:93:2d:62:3d:d8:2a:63:3c:28:92:8b:e1:de:a6: f4:ac:b2:62:8a:09:95:82:ad:10:3a:e4:43:3c:36: 4e:5d:76:27:23:54:8a:34:66:de:35:0d:d1:6d:01: b4:fc:88:d4:ce:af:eb:a7:48:8e:8a:e9:f8:d1:81: a9:e7:f5:69:c8:a8:55:5f:1b:d1:d9:ba:bf:d0:5d: b5:64:08:bf:6f:be:a6:c9:50:8b:da:12:7b:41:27: bc:01:84:7a:da:4a:32:c6:82:1e:64:42:9c:ca:ac: b0:61:18:b5:9d:e9:0c:c2:48:ae:10:ea:c7:1d:bb: 4a:b3:84:5f:a2:bd:db:2d:72:14:2e:96:ec:c3:e0: 85:50:ac:bf:db:d9:cc:ac:bd:9e:7c:5e:fa:33:e1: 48:34:32:15:88:f2:6f:9e:de:a0:bd:5c:54:e8:bf: 22:64:82:7e:01:c4:5f:ec:ec:07:46:50:d8:56:39: a1:6f:c0:d9:e4:e5:41:5f:96:36:16:bd:7a:e1:47: 7a:40:43:24:67:ce:b5:99:27:f6:2f:68:e3:68:59: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:99:85:0D:8D:FA:C2:7D:C1:D1:32:83:4A:23:F6:2C:F8:0C:1D X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a7:47:2f:ce:39:08:57:59:d8:d2:02:02:48:29:08:d6:33: 19:80:31:68:18:87:82:29:5f:25:04:30:ad:1c:2f:4d:1c:da: 91:43:be:4a:97:a7:1e:8b:09:d1:b2:9d:32:49:54:86:c1:93: d2:2a:9d:a8:f4:24:cf:35:40:51:7b:12:05:0e:5e:e8:00:5a: b8:25:a3:64:cd:1a:db:ea:5e:fd:aa:24:01:47:84:a6:22:cb: 9a:0c:d6:63:8e:e3:72:01:6c:4a:c8:c9:ba:47:df:71:ac:90: ca:25:ce:db:50:76:10:a3:97:70:c0:aa:62:1a:20:dc:0b:9e: 9b:75:be:ad:0e:5c:a5:d7:08:7a:d0:83:2c:4d:4c:a0:bf:8b: 0c:d4:68:81:55:06:a2:d6:6a:65:e9:d2:f6:6d:eb:9b:29:dd: f1:ba:2e:1f:b7:eb:d0:e5:77:86:70:06:14:b5:a6:f9:0b:0c: 2a:89:4c:da:8a:c5:5c:86:aa:9b:20:a3:c9:a5:f3:fa:9a:57: ca:68:99:e3:9e:a5:87:78:31:b8:9c:3d:22:95:03:d0:f1:c7: 10:d7:ce:48:9f:20:b8:ff:c1:ce:95:f1:3b:57:1a:c1:0f:d0: 20:c1:9f:91:dd:f4:3e:4c:5d:f8:04:e8:29:f1:1c:f0:0d:33: 53:9c:4d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8YZ36mxMPFO0IH542/6NvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwNjMwMTIwMTAzWhcNMjYwNzAxMTIwMTAzWjAzMTEwLwYDVQQD EyhhOTNhOTk4NTBkOGRmYWMyN2RjMWQxMzI4MzRhMjNmNjJjZjgwYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArENBUkBjKnuBeUSHLAHBqB7tLZKU a98r3YCs71kKVg6n22+LpJgoNSYj8f8aky1iPdgqYzwokovh3qb0rLJiigmVgq0Q OuRDPDZOXXYnI1SKNGbeNQ3RbQG0/IjUzq/rp0iOiun40YGp5/VpyKhVXxvR2bq/ 0F21ZAi/b76myVCL2hJ7QSe8AYR62koyxoIeZEKcyqywYRi1nekMwkiuEOrHHbtK s4Rfor3bLXIULpbsw+CFUKy/29nMrL2efF76M+FINDIViPJvnt6gvVxU6L8iZIJ+ AcRf7OwHRlDYVjmhb8DZ5OVBX5Y2Fr164Ud6QEMkZ861mSf2L2jjaFmndQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk6mYUNjfrCfcHRMoNKI/Ys+AwdMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaadHL845 CFdZ2NICAkgpCNYzGYAxaBiHgilfJQQwrRwvTRzakUO+SpenHosJ0bKdMklUhsGT 0iqdqPQkzzVAUXsSBQ5e6ABauCWjZM0a2+pe/aokAUeEpiLLmgzWY47jcgFsSsjJ ukffcayQyiXO21B2EKOXcMCqYhog3Auem3W+rQ5cpdcIetCDLE1MoL+LDNRogVUG otZqZenS9m3rmynd8bouH7fr0OV3hnAGFLWm+QsMKolM2orFXIaqmyCjyaXz+ppX ymiZ456lh3gxuJw9IpUD0PHHENfOSJ8guP/BzpXxO1cawQ/QIMGfkd30Pkxd+ATo KfEc8A0zU5xN9Q== -----END CERTIFICATE-----Generated at Tue Jun 30 18:22:55 2026 by rpki-client