$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: R8OBagpV8R1/oWjUmd8GG/Vn+M+OofUvnccaEpNC9Xs= Subject key identifier: C5:0E:96:DC:35:99:33:7C:32:59:E9:40:2F:A2:80:48:81:D5:D4:92 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019F122E6785C116F732C178AFA2FEE54AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 14F1 Signing time: Mon 29 Jun 2026 07:00:58 +0000 Manifest this update: Mon 29 Jun 2026 07:00:58 +0000 Manifest next update: Tue 30 Jun 2026 07:00:58 +0000 Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=) 2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 6: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 7: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=) 8: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: JHr3Sr2l1xvGaFHNRTIjEF/nact1mSyByEcsd+Xo+T4=) 10: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 11: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 12: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 13: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 14: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 15: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 16: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:2e:67:85:c1:16:f7:32:c1:78:af:a2:fe:e5:4a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jun 29 07:00:58 2026 GMT Not After : Jun 30 07:00:58 2026 GMT Subject: CN=c50e96dc3599337c3259e9402fa2804881d5d492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9c:96:21:fe:78:80:3d:be:61:bc:4d:5a:9c: 5b:56:4a:81:fe:ef:80:b2:38:2b:a4:f2:42:38:23: 25:be:d9:da:15:6f:39:c0:73:8d:cc:1b:b5:bd:59: d8:70:41:94:ac:9f:5a:1b:43:2f:ca:28:6d:b5:e8: 7f:53:78:27:71:73:3b:ac:68:91:fa:c5:f0:56:1b: 3b:cf:29:9b:1a:bb:f8:c9:03:74:71:a2:a8:a9:f7: 1f:06:6e:f8:12:21:e6:52:e8:b7:cf:8d:cd:52:4e: 84:aa:a4:31:83:37:7b:24:f6:55:eb:ca:61:c4:6d: 9c:47:c3:59:e7:86:8f:95:56:ed:25:c6:50:c6:a0: 10:f0:16:7d:65:e1:d7:54:f7:82:e3:3d:30:67:e9: b3:9e:80:86:6f:00:03:2f:85:3c:e9:5b:f2:b7:b8: 8f:7c:d6:2a:0f:84:25:80:d1:de:fe:dc:03:9c:53: 45:2a:6e:fd:8d:9e:8d:60:c8:04:3f:db:e1:89:a1: 9f:cb:a2:84:db:75:01:d9:54:e4:75:e7:02:0a:7b: 91:6c:e1:b0:0d:5b:c7:e1:39:c2:2f:11:c1:b7:3f: 4d:c4:c7:2d:cb:d3:37:f4:f5:97:08:96:c0:b8:62: d5:e2:ff:9e:50:21:15:bf:9d:95:df:51:40:60:df: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:96:DC:35:99:33:7C:32:59:E9:40:2F:A2:80:48:81:D5:D4:92 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8d:51:66:6b:77:a2:46:f1:95:4c:76:b7:07:63:0a:c2:39: 7c:f8:db:1d:54:6a:b3:a8:cc:93:30:c7:7c:c1:55:55:83:fb: 31:ca:7d:f6:18:87:e1:c2:78:9c:8f:79:1c:b1:c3:67:c1:cc: 7c:da:83:fe:f3:d2:a6:f9:85:e1:5c:f3:a7:f1:ef:fe:15:40: c4:ba:4a:da:34:7a:76:9b:d0:f0:c7:ba:a0:68:35:8c:aa:a2: aa:79:0b:f2:6f:5a:c0:ef:ab:8f:5c:38:dd:93:e0:13:b1:3a: 5d:92:14:73:3e:b2:fc:cb:09:d1:45:ea:c1:dc:40:c5:6f:68: d9:b6:55:71:72:ec:d5:39:83:2d:47:f5:28:5d:b4:9c:5c:cf: fd:db:86:d5:96:c6:72:34:99:5c:3a:8c:d0:b9:0d:6c:28:29: 1e:37:d1:0a:83:ed:4a:a2:52:9e:f9:91:5a:9a:f4:d9:ac:5b: 58:90:84:dd:fa:44:af:0c:e6:0d:f1:4e:e4:b7:45:d8:29:5d: e2:c6:29:81:73:c5:cd:57:20:d8:8e:6e:f5:39:b3:4b:dd:1c: 13:5a:89:39:e6:3d:97:e7:7e:24:b7:29:09:31:5b:4c:7d:65: f6:a0:91:74:a1:60:2c:c0:e3:43:ec:33:1f:9a:6e:0b:72:d7: 7e:ae:22:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SLmeFwRb3MsF4r6L+5UqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNjI5MDcwMDU4WhcNMjYwNjMwMDcwMDU4WjAzMTEwLwYDVQQD EyhjNTBlOTZkYzM1OTkzMzdjMzI1OWU5NDAyZmEyODA0ODgxZDVkNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZyWIf54gD2+YbxNWpxbVkqB/u+A sjgrpPJCOCMlvtnaFW85wHONzBu1vVnYcEGUrJ9aG0Mvyihtteh/U3gncXM7rGiR +sXwVhs7zymbGrv4yQN0caKoqfcfBm74EiHmUui3z43NUk6EqqQxgzd7JPZV68ph xG2cR8NZ54aPlVbtJcZQxqAQ8BZ9ZeHXVPeC4z0wZ+mznoCGbwADL4U86Vvyt7iP fNYqD4QlgNHe/twDnFNFKm79jZ6NYMgEP9vhiaGfy6KE23UB2VTkdecCCnuRbOGw DVvH4TnCLxHBtz9NxMcty9M39PWXCJbAuGLV4v+eUCEVv52V31FAYN/i9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUOltw1mTN8MlnpQC+igEiB1dSSMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACY1RZmt3 okbxlUx2twdjCsI5fPjbHVRqs6jMkzDHfMFVVYP7Mcp99hiH4cJ4nI95HLHDZ8HM fNqD/vPSpvmF4Vzzp/Hv/hVAxLpK2jR6dpvQ8Me6oGg1jKqiqnkL8m9awO+rj1w4 3ZPgE7E6XZIUcz6y/MsJ0UXqwdxAxW9o2bZVcXLs1TmDLUf1KF20nFzP/duG1ZbG cjSZXDqM0LkNbCgpHjfRCoPtSqJSnvmRWpr02axbWJCE3fpErwzmDfFO5LdF2Cld 4sYpgXPFzVcg2I5u9TmzS90cE1qJOeY9l+d+JLcpCTFbTH1l9qCRdKFgLMDjQ+wz H5puC3LXfq4izQ== -----END CERTIFICATE-----Generated at Mon Jun 29 11:37:59 2026 by rpki-client