$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: cIWpnXPgel/IdeYcXMluDJElxhTYXIsu77NhsEPfl1I= Subject key identifier: 31:04:96:E7:F1:B9:5F:71:DE:62:A6:DA:D8:BA:35:1B:1A:A2:C2:52 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019EB7339290AFFE0046E79B692BD3726D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1987 Signing time: Thu 11 Jun 2026 15:01:10 +0000 Manifest this update: Thu 11 Jun 2026 15:01:10 +0000 Manifest next update: Fri 12 Jun 2026 15:01:10 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 3: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 4: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 5: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 6: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 7: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: VewDlEOQVyWyTdQu5i2D7aksLQuMVMhVgTOw1Sd+H7E=) 8: T_-ZwXAe_QX6a_DWOX3bIJp1j9Q.roa (hash: bLBlB7pcSnb/QIpqPULkkSG+4UsT0yPWM54kxPKFPAg=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:33:92:90:af:fe:00:46:e7:9b:69:2b:d3:72:6d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jun 11 15:01:10 2026 GMT Not After : Jun 12 15:01:10 2026 GMT Subject: CN=310496e7f1b95f71de62a6dad8ba351b1aa2c252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:07:b4:c6:54:ea:e7:d4:1d:30:b9:80:26: 0f:a6:d7:5e:30:63:e4:62:2d:49:42:ce:02:ad:7c: 59:01:a7:a6:ce:af:6c:87:58:90:cc:42:28:f0:e8: d0:a8:84:3a:9e:5c:63:18:ff:69:67:e4:e1:51:73: e9:d2:66:68:12:fc:f2:e5:2a:a5:a8:49:c7:5b:43: c0:19:84:a6:9a:e9:e4:54:e5:2d:b9:27:4d:74:d5: 46:55:a7:29:20:4c:a1:28:e5:bc:73:5a:44:b3:8a: 0c:ff:5d:4d:92:a8:26:3a:f2:e7:45:39:81:1c:06: f2:57:df:33:1b:ac:31:74:7e:68:4d:93:dd:4e:1a: c5:f7:48:9a:44:a2:16:82:66:46:3c:2f:6b:fc:64: 94:3a:12:4b:d3:3b:ff:7f:d4:90:52:3c:12:01:20: 1b:2d:71:4e:e3:89:18:5d:36:20:46:54:03:54:f8: b4:3c:93:f9:52:c3:fb:92:75:05:45:45:b0:85:18: 06:2e:eb:87:e1:56:17:1c:c0:a7:1d:a3:ec:22:02: 15:0a:3b:7c:29:33:d5:b4:4a:ea:43:7e:d6:fe:c8: 23:e6:ab:89:b9:ae:53:c7:bf:81:15:c6:58:9f:ae: cd:15:c4:18:59:3a:97:ac:ac:ad:01:1e:97:54:08: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:96:E7:F1:B9:5F:71:DE:62:A6:DA:D8:BA:35:1B:1A:A2:C2:52 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e1:c4:23:c4:17:a2:b8:6e:9e:fd:00:cd:3c:79:89:f9:b9: fe:82:27:80:02:82:57:b4:48:38:8f:2b:69:d2:88:84:3b:6d: cb:7a:3b:8c:7d:b1:37:94:c3:2a:93:38:31:44:76:25:a8:e3: 17:5b:e6:21:57:93:d4:b8:e1:62:ae:9e:e3:e1:2f:d7:d0:2e: 38:61:cf:52:47:ff:a3:03:a6:49:19:30:9d:16:3b:64:57:d0: 37:4a:23:d2:b5:99:be:98:3b:17:be:a1:62:ce:4d:7b:22:be: ce:84:e4:16:6d:a3:0b:b5:c7:7b:74:0f:fa:bc:3a:ae:33:3a: 73:a6:93:69:d1:02:89:3b:f0:d3:93:a2:92:db:19:dc:98:0b: 0e:a3:7d:0e:5d:e5:b3:c6:c1:e1:29:a0:f0:f4:cb:b8:d1:01: ec:fc:17:cb:0a:ad:4f:ac:ce:a2:70:e8:66:ef:6d:55:70:52: cd:f1:9e:39:ca:03:21:ec:97:b1:2e:d8:9b:44:b5:9c:b0:34: f0:c7:fa:41:e3:ec:fa:48:23:15:21:52:73:5d:95:94:3b:ea: bc:a6:05:56:5d:22:96:8d:6a:c7:a5:cf:9c:a8:81:3d:20:97: b6:17:0a:a1:b1:06:a1:a9:c6:98:6e:ab:4f:cb:1d:66:02:13: 37:66:40:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63M5KQr/4ARuebaSvTcm1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwNjExMTUwMTEwWhcNMjYwNjEyMTUwMTEwWjAzMTEwLwYDVQQD EygzMTA0OTZlN2YxYjk1ZjcxZGU2MmE2ZGFkOGJhMzUxYjFhYTJjMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+UHtMZU6ufUHTC5gCYPptdeMGPk Yi1JQs4CrXxZAaemzq9sh1iQzEIo8OjQqIQ6nlxjGP9pZ+ThUXPp0mZoEvzy5Sql qEnHW0PAGYSmmunkVOUtuSdNdNVGVacpIEyhKOW8c1pEs4oM/11NkqgmOvLnRTmB HAbyV98zG6wxdH5oTZPdThrF90iaRKIWgmZGPC9r/GSUOhJL0zv/f9SQUjwSASAb LXFO44kYXTYgRlQDVPi0PJP5UsP7knUFRUWwhRgGLuuH4VYXHMCnHaPsIgIVCjt8 KTPVtErqQ37W/sgj5quJua5Tx7+BFcZYn67NFcQYWTqXrKytAR6XVAh0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEElufxuV9x3mKm2ti6NRsaosJSMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguHEI8QX orhunv0AzTx5ifm5/oIngAKCV7RIOI8radKIhDtty3o7jH2xN5TDKpM4MUR2Jajj F1vmIVeT1LjhYq6e4+Ev19AuOGHPUkf/owOmSRkwnRY7ZFfQN0oj0rWZvpg7F76h Ys5NeyK+zoTkFm2jC7XHe3QP+rw6rjM6c6aTadECiTvw05OiktsZ3JgLDqN9Dl3l s8bB4Smg8PTLuNEB7PwXywqtT6zOonDoZu9tVXBSzfGeOcoDIeyXsS7Ym0S1nLA0 8Mf6QePs+kgjFSFSc12VlDvqvKYFVl0ilo1qx6XPnKiBPSCXthcKobEGoanGmG6r T8sdZgITN2ZAhA== -----END CERTIFICATE-----Generated at Thu Jun 11 17:52:17 2026 by rpki-client