$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: dj/2rajtQslGK4R21NjoE4nqgz1ZV1jpvNM/x+3D1OI= Subject key identifier: 72:03:EB:12:AD:1B:CA:5A:6B:E9:EA:01:86:4B:84:E8:F6:74:DA:21 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019F11C043CA311CF2051776EC97E92C7585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1694 Signing time: Mon 29 Jun 2026 05:00:40 +0000 Manifest this update: Mon 29 Jun 2026 05:00:40 +0000 Manifest next update: Tue 30 Jun 2026 05:00:40 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: EVSyFfKqfPkhycyACpvnlteH3GXF6vSIaVFAQSRVLzg=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:c0:43:ca:31:1c:f2:05:17:76:ec:97:e9:2c:75:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jun 29 05:00:40 2026 GMT Not After : Jun 30 05:00:40 2026 GMT Subject: CN=7203eb12ad1bca5a6be9ea01864b84e8f674da21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:bf:ea:a8:b6:68:bf:40:71:72:49:87:3f: 70:23:c3:97:60:cc:34:e2:00:9f:aa:c0:79:2a:b8: 6e:ac:31:96:87:60:e3:10:9f:d3:16:65:a1:e5:2a: eb:b3:1c:11:9f:1f:66:8e:f0:bc:46:7a:b9:c8:31: 47:b9:5a:88:59:da:4a:bb:53:f0:f8:10:0a:c6:20: 47:f4:19:ce:4a:c4:31:40:7b:ad:2f:64:96:9e:96: c0:47:df:d2:93:49:67:be:e2:fe:cb:49:30:b3:7c: ef:8a:21:3c:9f:b7:db:7c:8d:4c:e0:2c:f2:50:91: 3b:bd:ce:52:67:b5:37:77:05:9e:0b:3d:dc:7c:a8: 41:2c:56:2a:bb:52:52:48:36:81:69:85:77:5b:f5: 9c:27:6b:24:4a:14:9e:ec:de:04:bd:66:0f:41:e0: 5b:52:26:37:ed:3f:6b:bf:f7:cd:fe:4a:d7:07:40: 9c:08:bb:1e:1e:39:af:0d:da:0b:08:18:ee:0a:2c: cf:63:67:09:88:1e:f8:f5:62:8a:33:66:80:15:62: dc:d4:ec:e5:b2:0a:40:16:da:ab:f9:19:c2:a4:af: 47:17:8d:d3:07:23:f6:08:d8:71:93:44:04:fd:5d: e1:1a:e6:e4:41:f4:fd:31:fd:74:89:8b:40:f9:58: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:EB:12:AD:1B:CA:5A:6B:E9:EA:01:86:4B:84:E8:F6:74:DA:21 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:ae:99:d4:94:36:4e:33:02:52:6c:4a:e7:b5:74:9b:88: c3:a6:5d:5a:a9:29:d8:d6:c8:98:38:b8:c4:13:57:4e:64:14: 86:55:5a:00:5e:de:b8:f1:bc:ff:5b:f4:ec:9e:9c:9a:85:2f: 8c:f8:1d:06:ec:3d:c7:67:75:ce:e0:e0:6c:76:90:f4:e1:5c: 33:69:14:44:52:ce:87:b5:be:6c:36:ba:8c:54:40:ec:e9:c6: 13:9d:1d:47:79:93:b8:e5:fd:e7:fc:77:56:a4:0a:3c:41:f6: 4b:47:16:5b:3c:1b:61:30:98:a8:1d:88:f2:c3:56:38:cd:0c: a8:c3:02:89:ad:f8:c9:59:43:3f:16:66:93:92:3f:0b:b9:c3: 0e:40:ef:11:8a:9c:aa:09:24:89:0a:99:7b:ae:2f:ce:92:e4: 91:16:38:23:0d:44:a2:ba:51:58:23:a6:0c:55:63:ff:0c:70: 29:d7:19:62:bb:97:81:ac:67:ac:8a:23:7c:c6:b7:72:d8:45: 06:9c:dd:76:38:5c:ab:c4:a1:54:b5:cc:f0:d3:75:b3:f6:62: 29:fb:b3:60:10:ba:5e:26:b8:c7:2a:25:a1:1e:40:7a:cf:5e: 25:a0:8e:f7:23:0f:01:f7:d3:9e:31:a4:27:53:71:24:ff:44: b0:bb:26:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RwEPKMRzyBRd27JfpLHWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwNjI5MDUwMDQwWhcNMjYwNjMwMDUwMDQwWjAzMTEwLwYDVQQD Eyg3MjAzZWIxMmFkMWJjYTVhNmJlOWVhMDE4NjRiODRlOGY2NzRkYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBm/6qi2aL9AcXJJhz9wI8OXYMw0 4gCfqsB5KrhurDGWh2DjEJ/TFmWh5SrrsxwRnx9mjvC8Rnq5yDFHuVqIWdpKu1Pw +BAKxiBH9BnOSsQxQHutL2SWnpbAR9/Sk0lnvuL+y0kws3zviiE8n7fbfI1M4Czy UJE7vc5SZ7U3dwWeCz3cfKhBLFYqu1JSSDaBaYV3W/WcJ2skShSe7N4EvWYPQeBb UiY37T9rv/fN/krXB0CcCLseHjmvDdoLCBjuCizPY2cJiB749WKKM2aAFWLc1Ozl sgpAFtqr+RnCpK9HF43TByP2CNhxk0QE/V3hGubkQfT9Mf10iYtA+VhSdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHID6xKtG8paa+nqAYZLhOj2dNohMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQaumdSU Nk4zAlJsSue1dJuIw6ZdWqkp2NbImDi4xBNXTmQUhlVaAF7euPG8/1v07J6cmoUv jPgdBuw9x2d1zuDgbHaQ9OFcM2kURFLOh7W+bDa6jFRA7OnGE50dR3mTuOX95/x3 VqQKPEH2S0cWWzwbYTCYqB2I8sNWOM0MqMMCia34yVlDPxZmk5I/C7nDDkDvEYqc qgkkiQqZe64vzpLkkRY4Iw1EorpRWCOmDFVj/wxwKdcZYruXgaxnrIojfMa3cthF Bpzddjhcq8ShVLXM8NN1s/ZiKfuzYBC6Xia4xyoloR5Aes9eJaCO9yMPAffTnjGk J1NxJP9EsLsmfA== -----END CERTIFICATE-----Generated at Mon Jun 29 12:41:09 2026 by rpki-client