$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: F/r/ErWZsT/OQUjO2S2oW1fWv5tQmWrtljj7dzl5wVk= Subject key identifier: A4:A3:91:11:52:8F:A8:AB:7A:9B:B0:B8:48:72:12:27:EB:04:16:DE Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019EB733C468FC240A2DE5A8B876198D8B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 197B Signing time: Thu 11 Jun 2026 15:01:23 +0000 Manifest this update: Thu 11 Jun 2026 15:01:23 +0000 Manifest next update: Fri 12 Jun 2026 15:01:23 +0000 Files and hashes: 1: 3qg1KGc8omoslEG7jKlx4gx_LhQ.roa (hash: TnGs+EX2f9uQeebTem+/sfQFkc/zmqJQ5dURkVKi/n4=) 2: 4KsNQpqZCzqF5DWTGMqSZIdafk4.roa (hash: LOn9PMfVYWd9yqbUArMEkf8C7kjYf3BgWxcSoG8pKwI=) 3: 6JxXQsPP5HeOd-zrinJyzOvxbvk.roa (hash: avnYdM5iKLHNYRmn2VZGG+0Rulxb30BrgSNse/s1Stw=) 4: 8jnBDiXHCMLwoqK_MUEphtqond4.roa (hash: JQNWS1MN5qM+R+cOUByVeUtDUjjovKMpy1HfvZa5BDs=) 5: CIPqMceoslS6LHeUzahqX5ZpIbI.roa (hash: Mj/kOm8dtViy8eTI8+PFg8dlCnOVmLacRiUDOSj27Kc=) 6: N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa (hash: ezUkbSC7P3mO/d4z+5YndvD9aLmtqZ6KOctd3R4dOws=) 7: OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa (hash: BnGONzncD2wwl5KKt6nDn2hcjBqGU1Umy1qq2TndNLU=) 8: X5qhIZ7xGCMvKQfZQrbeuOZ9uf8.roa (hash: i3DUL5+61b/Yr3dFWew0V6gv0s7RuSUIeTUfltYEFJs=) 9: Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa (hash: TMEeISdGQlH/KULrec6oWy2p2scTUrKdaSvlMRJx3eE=) 10: iO24D_W0B1UjBwRFlQ8CdPgIqgs.roa (hash: VKTFC+1OrvrVs+DP4mHHKFLGZKyqteGaSW/b1eEAqMs=) 11: jytqbvPB7p4L3yG-M73X311CEZM.roa (hash: OoChTy3t+Ypl0/yoHt/yN9OFfFbQL1CiSDqOkSSFy9Y=) 12: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: 3w1Wi0uashOoRDhm5em/OUvTsjk7wMFq3Xdektu6rsQ=) 13: x3SzmyzLt8OYyGIP7YYKzeSx1t0.roa (hash: aW1SwGzhZKDv9vTg+ztGzAN+MHGjx+qNx1xNIM7zvvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:33:c4:68:fc:24:0a:2d:e5:a8:b8:76:19:8d:8b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jun 11 15:01:23 2026 GMT Not After : Jun 12 15:01:23 2026 GMT Subject: CN=a4a39111528fa8ab7a9bb0b848721227eb0416de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:ff:e6:75:4c:27:bc:f4:74:6e:76:4c:c7: a3:db:4a:a1:7b:95:7a:51:89:3a:9e:52:49:52:14: e5:af:70:98:87:2a:ff:89:3d:f4:b5:ca:52:ba:f4: 15:06:91:12:c5:49:36:67:e2:94:a4:db:06:ce:a5: d6:59:2d:e1:04:aa:13:61:d8:c6:38:83:6d:cc:a3: 9e:cc:6e:2d:b3:15:20:11:7d:95:f0:a5:c4:68:d3: 00:f3:ed:62:50:36:92:a6:67:4d:a6:31:d9:d7:c5: 6c:50:d0:2b:78:cf:17:73:11:66:a3:e2:50:64:82: af:ef:db:8d:34:7b:15:c8:33:45:4c:ca:b8:6d:33: af:1c:67:fd:f3:66:74:08:35:1f:3c:f9:55:f2:1a: 49:27:4b:5c:68:55:9a:fd:65:4c:c3:a1:93:61:ff: 06:d3:e8:e4:c5:07:6b:fa:94:b5:3b:07:5e:a1:00: 6f:a2:33:bf:01:a9:ab:f4:e9:65:0e:2a:d7:b5:16: a6:3e:6b:a1:4d:d1:ea:65:12:a3:92:9c:62:ec:a1: 83:5b:9d:b3:5f:d5:e5:94:7f:05:86:0b:93:5a:25: 4e:4e:e8:ee:6c:9d:88:d2:60:ed:dc:fc:c1:5b:8d: 91:49:35:5f:64:d1:8a:58:11:ab:d0:7d:a8:72:74: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:91:11:52:8F:A8:AB:7A:9B:B0:B8:48:72:12:27:EB:04:16:DE X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:61:b9:f1:7c:d5:e3:1d:11:54:3d:8d:01:4e:ad:4b:de:a1: 23:5a:01:47:b7:35:26:a9:5d:eb:98:d3:ac:61:c1:c9:fe:12: 4e:4a:22:47:3a:21:43:9a:32:74:24:4f:69:71:5c:c7:67:f8: a1:0b:10:91:e4:f2:06:3c:6b:d5:4f:7f:64:7e:01:b5:64:cb: ab:db:34:48:78:00:d2:66:e8:ac:38:63:0a:f8:6a:fe:a7:d5: 3c:4d:38:a3:ea:07:02:0f:14:b5:c5:34:45:c6:9f:8c:a3:09: 90:a5:ca:9f:6e:da:b0:cd:0e:98:d7:41:2a:2a:40:ad:eb:37: 20:06:1c:57:e2:d1:ff:0b:65:f7:7a:90:3d:c2:0b:d7:6a:4e: 82:0f:25:e9:86:b9:22:1e:ff:9f:13:16:0d:74:61:25:1c:2c: ca:40:93:b2:bd:85:09:e9:b0:24:e9:72:4e:ce:23:72:27:f6: 30:cc:80:3b:00:a3:31:79:e2:ad:83:1f:6c:a7:74:91:07:96: 12:c0:67:fc:cb:32:51:b9:13:65:6c:5c:24:0d:d0:93:d2:96: da:94:1e:67:32:39:b7:99:1c:33:54:0f:09:14:fa:79:43:a1: 56:cc:b0:00:2f:1b:5e:2e:ca:65:2b:ea:dd:99:a3:0f:5a:33: d5:e8:df:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63M8Ro/CQKLeWouHYZjYtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwNjExMTUwMTIzWhcNMjYwNjEyMTUwMTIzWjAzMTEwLwYDVQQD EyhhNGEzOTExMTUyOGZhOGFiN2E5YmIwYjg0ODcyMTIyN2ViMDQxNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27//5nVMJ7z0dG52TMej20qhe5V6 UYk6nlJJUhTlr3CYhyr/iT30tcpSuvQVBpESxUk2Z+KUpNsGzqXWWS3hBKoTYdjG OINtzKOezG4tsxUgEX2V8KXEaNMA8+1iUDaSpmdNpjHZ18VsUNAreM8XcxFmo+JQ ZIKv79uNNHsVyDNFTMq4bTOvHGf982Z0CDUfPPlV8hpJJ0tcaFWa/WVMw6GTYf8G 0+jkxQdr+pS1OwdeoQBvojO/Aamr9OllDirXtRamPmuhTdHqZRKjkpxi7KGDW52z X9XllH8FhguTWiVOTujubJ2I0mDt3PzBW42RSTVfZNGKWBGr0H2ocnSRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSjkRFSj6irepuwuEhyEifrBBbeMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmG58XzV 4x0RVD2NAU6tS96hI1oBR7c1Jqld65jTrGHByf4STkoiRzohQ5oydCRPaXFcx2f4 oQsQkeTyBjxr1U9/ZH4BtWTLq9s0SHgA0mborDhjCvhq/qfVPE04o+oHAg8UtcU0 RcafjKMJkKXKn27asM0OmNdBKipAres3IAYcV+LR/wtl93qQPcIL12pOgg8l6Ya5 Ih7/nxMWDXRhJRwsykCTsr2FCemwJOlyTs4jcif2MMyAOwCjMXnirYMfbKd0kQeW EsBn/MsyUbkTZWxcJA3Qk9KW2pQeZzI5t5kcM1QPCRT6eUOhVsywAC8bXi7KZSvq 3ZmjD1oz1ejflA== -----END CERTIFICATE-----Generated at Thu Jun 11 17:32:30 2026 by rpki-client