$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 7/hMvgqJUK+C3Li4IzSx8qgz+DPk9Bcyyi3R24NaJJg= Subject key identifier: 0B:C1:14:01:5B:8F:13:12:96:54:41:0D:77:8B:4A:79:E7:A1:EE:0B Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019EB9C6960952AD16EF4F9680027616A035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 11B6 Signing time: Fri 12 Jun 2026 03:00:59 +0000 Manifest this update: Fri 12 Jun 2026 03:00:59 +0000 Manifest next update: Sat 13 Jun 2026 03:00:59 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: swtO/wfDXanhZciSRYEdRXKu+DOaLwCPXGe8sviiiTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b9:c6:96:09:52:ad:16:ef:4f:96:80:02:76:16:a0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jun 12 03:00:59 2026 GMT Not After : Jun 13 03:00:59 2026 GMT Subject: CN=0bc114015b8f13129654410d778b4a79e7a1ee0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:6a:fa:a5:f6:2b:21:71:28:9f:a0:10:54: 13:ac:25:1f:84:93:c8:67:3c:78:ca:8b:4a:ce:7b: 30:5f:f1:3f:c5:1f:57:5a:66:9b:e9:d9:8a:30:9d: 09:b9:4f:73:78:19:20:b5:0c:4e:c5:11:7f:0d:de: 9e:2f:b5:3f:ed:41:15:64:bd:05:29:e1:7d:45:2e: 64:55:b0:cf:04:6a:ae:f6:d9:c9:25:c8:f2:a2:e9: c7:db:43:03:06:9f:89:bf:24:7f:7d:64:29:2f:e0: c9:90:89:e0:b0:78:7b:af:89:9e:67:cc:48:da:e6: a7:4e:e2:b9:cc:db:83:44:60:85:cc:9f:9f:71:56: 17:4c:cf:3a:eb:a7:13:e3:4d:bd:a1:d9:48:06:51: 2d:ee:e3:35:0d:0b:88:45:29:d6:70:4f:5a:bd:6b: 47:8e:40:cc:cb:bf:c5:31:1d:72:27:c7:be:73:4a: db:a8:15:47:2d:27:d0:29:42:fb:48:36:05:9e:a6: 88:2f:dc:f3:27:0c:a6:c5:68:6a:a3:7e:7d:29:7e: 81:25:0b:60:5b:01:97:a6:ba:c8:82:d7:2c:c4:60: ee:a9:f2:8d:42:45:2a:af:b0:e0:2a:90:21:51:f2: fb:ca:95:72:4f:c0:1f:e9:1c:61:e8:53:8f:bd:bb: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:14:01:5B:8F:13:12:96:54:41:0D:77:8B:4A:79:E7:A1:EE:0B X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e8:18:d2:04:16:ba:43:41:77:b4:78:fb:67:f1:91:89:12: bd:3a:ea:8f:b5:3e:e3:3c:e4:26:3b:71:83:c6:b3:43:3a:09: 77:fb:79:73:d4:c8:b5:2a:99:23:8b:88:30:32:40:3f:a9:0d: a9:6d:cb:0f:49:bb:9f:74:d4:d4:81:b6:cb:a7:ec:a3:e2:3b: bb:f6:75:e6:a3:2b:40:a1:8f:5e:48:94:2c:16:cc:5c:6c:53: 5d:00:36:aa:80:3e:65:a2:83:0e:88:d2:8c:f7:c9:cf:0b:eb: f2:df:85:2e:29:45:c8:a3:1e:73:3a:7c:73:f7:99:65:d4:ce: 29:8e:d9:c0:b1:6b:ca:7a:c4:6b:9f:68:9c:6d:87:fe:b4:9e: 7e:9a:b6:12:84:b8:30:ec:33:dd:40:88:b5:2c:6b:42:be:27: 0f:19:8f:2c:72:55:fd:be:6e:fe:ab:00:77:c8:6d:c0:67:63: a8:bd:70:fb:82:c2:80:85:1a:3e:b7:b2:55:7a:c1:2e:ba:ef: 88:97:50:28:34:6d:f5:38:1c:41:74:a2:5a:c5:46:6f:c7:49: 40:53:ae:2d:86:9c:bc:a1:2e:e0:a2:de:ec:bc:a4:21:4e:4a: 0d:d8:1e:6c:6f:1f:59:2b:3a:f9:6d:41:ce:de:8d:56:ab:81: 86:87:d8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ65xpYJUq0W70+WgAJ2FqA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwNjEyMDMwMDU5WhcNMjYwNjEzMDMwMDU5WjAzMTEwLwYDVQQD EygwYmMxMTQwMTViOGYxMzEyOTY1NDQxMGQ3NzhiNGE3OWU3YTFlZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSBq+qX2KyFxKJ+gEFQTrCUfhJPI Zzx4yotKznswX/E/xR9XWmab6dmKMJ0JuU9zeBkgtQxOxRF/Dd6eL7U/7UEVZL0F KeF9RS5kVbDPBGqu9tnJJcjyounH20MDBp+JvyR/fWQpL+DJkIngsHh7r4meZ8xI 2uanTuK5zNuDRGCFzJ+fcVYXTM8666cT4029odlIBlEt7uM1DQuIRSnWcE9avWtH jkDMy7/FMR1yJ8e+c0rbqBVHLSfQKUL7SDYFnqaIL9zzJwymxWhqo359KX6BJQtg WwGXprrIgtcsxGDuqfKNQkUqr7DgKpAhUfL7ypVyT8Af6Rxh6FOPvbv7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvBFAFbjxMSllRBDXeLSnnnoe4LMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOugY0gQW ukNBd7R4+2fxkYkSvTrqj7U+4zzkJjtxg8azQzoJd/t5c9TItSqZI4uIMDJAP6kN qW3LD0m7n3TU1IG2y6fso+I7u/Z15qMrQKGPXkiULBbMXGxTXQA2qoA+ZaKDDojS jPfJzwvr8t+FLilFyKMeczp8c/eZZdTOKY7ZwLFrynrEa59onG2H/rSefpq2EoS4 MOwz3UCItSxrQr4nDxmPLHJV/b5u/qsAd8htwGdjqL1w+4LCgIUaPreyVXrBLrrv iJdQKDRt9TgcQXSiWsVGb8dJQFOuLYacvKEu4KLe7LykIU5KDdgebG8fWSs6+W1B zt6NVquBhofYyQ== -----END CERTIFICATE-----Generated at Fri Jun 12 06:12:00 2026 by rpki-client