$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: Bv2TAgzNTus/GAzy4QfDnJEiNjgpHpIlEGcINtJMD88= Subject key identifier: 8E:6E:63:34:63:46:7B:39:19:3D:56:12:2B:34:59:6B:30:EE:9E:85 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019E905CB13A4091CCB3FD2BB525B8403EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 123D Signing time: Thu 04 Jun 2026 02:00:53 +0000 Manifest this update: Thu 04 Jun 2026 02:00:53 +0000 Manifest next update: Fri 05 Jun 2026 02:00:53 +0000 Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=) 2: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Mm4Xt46EXmXphnZvOcZSfWwb04ize1SAPsEcuJ1l/2I=) 3: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=) 4: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=) 5: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=) 6: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=) 7: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=) 8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=) 9: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=) 10: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=) 11: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=) 12: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=) 13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=) 14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=) 15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=) 16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=) 17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=) 18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=) 19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=) 20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=) 21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=) 22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=) 23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=) 24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=) 25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=) 26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:90:5c:b1:3a:40:91:cc:b3:fd:2b:b5:25:b8:40:3e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jun 4 02:00:53 2026 GMT Not After : Jun 5 02:00:53 2026 GMT Subject: CN=8e6e633463467b39193d56122b34596b30ee9e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:23:d1:c7:76:b8:b1:ef:3d:fa:aa:bf:db: d8:50:a2:bf:2e:5a:89:bf:6a:e7:28:d0:bb:34:8e: 0d:7c:a2:3e:61:91:ce:72:9c:da:10:0a:d6:fe:42: 3f:fc:f9:3d:ce:27:38:70:30:a0:a0:a6:9f:e5:95: 20:b3:cc:91:ed:1e:df:8a:3d:ec:8a:27:64:0b:23: ae:63:43:f5:37:27:ad:07:3f:00:ee:0e:84:c5:32: de:5f:c0:a5:66:49:68:87:f1:3d:a6:ce:fc:8b:7e: 3e:19:af:56:c7:05:6f:b5:d6:60:f2:03:70:cb:07: 07:0f:75:ad:d8:d5:74:26:2c:a0:e4:97:70:c8:cf: ad:7b:8d:d0:9d:90:99:15:b5:92:77:b6:b3:4a:6a: f4:4f:62:9a:7e:5e:97:8e:b6:23:8b:16:ea:6c:90: b4:69:4e:b2:61:68:b2:f5:bd:58:01:b1:9f:6b:ed: 69:77:3b:1a:a2:b2:a0:1b:95:30:cc:9d:bc:a2:81: fc:0a:ac:58:94:1c:61:f4:e4:71:73:e2:37:e3:11: 57:7b:41:9a:68:e4:b3:a8:24:f3:8d:5c:b6:6f:15: 77:5a:d6:de:7a:4c:67:d7:7b:26:0e:bc:4c:33:2a: 0b:16:7d:8d:42:5a:42:5b:f8:ff:a7:b9:45:19:7d: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:63:34:63:46:7B:39:19:3D:56:12:2B:34:59:6B:30:EE:9E:85 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:dd:2b:b0:98:94:6f:63:7b:cd:5a:8d:37:b5:d5:e7:e5:43: 7d:88:30:8c:70:ca:d9:b3:1a:2b:9a:dc:12:e3:38:b9:46:74: ad:79:a1:ec:5b:41:ea:2f:59:02:c1:63:4b:12:bb:f9:44:d5: 9e:1d:5d:19:65:40:0c:0c:da:1c:b5:86:13:c2:50:0d:b0:80: 9e:3b:1f:c5:cc:97:72:aa:b6:fb:1d:2a:18:95:7a:ce:7c:34: 65:cf:45:2c:08:81:f0:14:ee:2d:fc:53:ce:df:09:94:98:0c: 4d:da:12:de:7c:71:0b:8d:df:0c:6d:12:e2:a7:de:3c:26:07: e2:3f:50:4f:0c:f2:60:37:a8:30:91:6f:9d:91:7a:0e:8b:94: 32:b8:06:73:62:1c:38:38:57:e8:d4:cf:db:32:d6:8e:19:71: e3:bb:fa:11:ae:f4:fa:07:b9:67:c5:62:e1:62:79:41:05:c1: b5:0f:13:c3:6f:10:8c:7f:29:9d:27:38:6e:38:2f:20:bf:11: f0:95:db:d1:6e:74:d6:39:35:a3:61:e3:28:de:bb:c5:8d:74: 6e:e4:26:46:69:fe:da:32:bd:e7:3b:9e:61:fa:46:0f:34:16: 53:10:2a:d1:89:89:b1:3b:df:12:84:72:d2:37:ef:25:61:62: 56:91:0d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6QXLE6QJHMs/0rtSW4QD7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwNjA0MDIwMDUzWhcNMjYwNjA1MDIwMDUzWjAzMTEwLwYDVQQD Eyg4ZTZlNjMzNDYzNDY3YjM5MTkzZDU2MTIyYjM0NTk2YjMwZWU5ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bcj0cd2uLHvPfqqv9vYUKK/LlqJ v2rnKNC7NI4NfKI+YZHOcpzaEArW/kI//Pk9zic4cDCgoKaf5ZUgs8yR7R7fij3s iidkCyOuY0P1NyetBz8A7g6ExTLeX8ClZkloh/E9ps78i34+Ga9WxwVvtdZg8gNw ywcHD3Wt2NV0Jiyg5JdwyM+te43QnZCZFbWSd7azSmr0T2Kafl6XjrYjixbqbJC0 aU6yYWiy9b1YAbGfa+1pdzsaorKgG5UwzJ28ooH8CqxYlBxh9ORxc+I34xFXe0Ga aOSzqCTzjVy2bxV3Wtbeekxn13smDrxMMyoLFn2NQlpCW/j/p7lFGX31bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5uYzRjRns5GT1WEis0WWsw7p6FMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN0rsJiU b2N7zVqNN7XV5+VDfYgwjHDK2bMaK5rcEuM4uUZ0rXmh7FtB6i9ZAsFjSxK7+UTV nh1dGWVADAzaHLWGE8JQDbCAnjsfxcyXcqq2+x0qGJV6znw0Zc9FLAiB8BTuLfxT zt8JlJgMTdoS3nxxC43fDG0S4qfePCYH4j9QTwzyYDeoMJFvnZF6DouUMrgGc2Ic ODhX6NTP2zLWjhlx47v6Ea70+ge5Z8Vi4WJ5QQXBtQ8Tw28QjH8pnSc4bjgvIL8R 8JXb0W501jk1o2HjKN67xY10buQmRmn+2jK95zueYfpGDzQWUxAq0YmJsTvfEoRy 0jfvJWFiVpENQg== -----END CERTIFICATE-----Generated at Thu Jun 4 11:17:00 2026 by rpki-client