$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: Qauhxb30/XiS6RDZs+2Ch9V5ICNOTVjQQSmCW2VMwdc= Subject key identifier: 77:3F:EE:BD:5F:48:C8:42:A6:FC:F3:2B:83:51:88:69:BE:B0:12:F1 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019E9AE03A20A6D194B782E18863CECCAC9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 196E Signing time: Sat 06 Jun 2026 03:00:46 +0000 Manifest this update: Sat 06 Jun 2026 03:00:46 +0000 Manifest next update: Sun 07 Jun 2026 03:00:46 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: qmzPPyR150A/q/DlBSi1jtcwcXw8KNY6LQZLBMRGGkg=) 8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9a:e0:3a:20:a6:d1:94:b7:82:e1:88:63:ce:cc:ac:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jun 6 03:00:46 2026 GMT Not After : Jun 7 03:00:46 2026 GMT Subject: CN=773feebd5f48c842a6fcf32b83518869beb012f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:29:54:65:d8:e0:d6:82:aa:79:d5:34:dd: 94:b8:8c:10:d1:4a:fb:63:87:ef:1d:6d:15:8d:c8: de:21:e4:55:67:c2:52:60:80:9b:71:ff:ec:b7:ca: 93:75:a1:ad:44:8a:e7:ba:0a:4e:83:94:1d:fc:f2: c6:fc:0a:e5:f0:e0:45:56:4c:20:5c:28:c9:f5:e1: f5:da:0c:23:7a:90:54:22:82:8c:8a:5f:95:11:9c: d4:b6:5f:4d:c7:3a:b1:1c:4c:0a:b2:34:99:8c:ec: 4a:20:ca:c1:0d:d7:08:69:bb:d2:8f:e3:ab:33:eb: 60:db:2e:6f:e3:43:8f:cc:14:91:91:84:e2:a4:9c: 48:f8:a1:37:36:cc:a4:d9:87:ce:20:03:8d:39:8f: da:c4:ad:6b:a6:1e:43:93:0c:b1:02:7b:05:9e:4d: 1e:c3:57:8e:52:f0:28:d3:33:53:36:65:ee:07:3f: ce:c6:56:b5:20:07:3c:e6:0a:f1:33:0b:b3:f7:15: f0:e5:05:bc:c4:36:f8:33:b6:bf:1d:31:05:fd:b5: 16:80:ea:13:e7:fe:5e:f9:73:f3:37:81:96:29:b9: 19:11:53:db:18:03:03:5e:ec:0b:ea:52:eb:ad:74: a6:20:ec:b6:10:8b:f7:13:fb:3d:6b:ca:35:b9:c1: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3F:EE:BD:5F:48:C8:42:A6:FC:F3:2B:83:51:88:69:BE:B0:12:F1 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:25:01:bc:59:47:bf:83:d4:69:2f:5a:74:fc:e4:62:c6:d6: 74:f8:d3:75:8a:42:32:3c:ae:7c:03:87:73:08:d2:3c:80:be: bb:a0:b1:c7:38:a0:e0:84:f9:72:1b:9f:c3:9a:f7:ae:53:51: fe:0a:88:5c:2b:39:21:15:4b:c4:8e:78:f2:39:2c:4b:98:6d: 96:a5:c4:1d:e5:21:41:b4:55:67:ec:cf:a4:6e:ec:2d:9f:b5: 43:a0:02:ca:09:52:aa:26:b2:e0:f6:e1:9d:5f:d5:8b:84:bf: e7:9d:12:5a:b0:af:50:18:b5:31:4b:16:21:9a:07:17:96:c5: 59:f6:41:a1:1f:be:b1:ed:c8:15:af:21:2b:35:29:9e:19:f6: ef:d2:20:e4:75:33:69:e0:5f:f0:73:6f:5b:f2:f1:e5:3c:aa: 2f:5f:3a:7e:96:2a:f3:9e:c3:19:7c:79:72:c3:b8:82:d0:7d: 8f:7b:b2:dc:15:9f:bf:e0:5e:58:34:7d:7d:df:31:8d:96:e5: fe:bb:45:99:83:f0:c4:e2:46:cb:e3:bc:7b:cd:b6:af:b6:62: 34:5e:83:99:94:90:c7:ee:77:8a:53:ed:ae:d2:b1:28:fb:9a: d5:36:74:13:35:2b:78:d2:e0:47:b3:6e:e5:ec:0a:2d:4f:27: 03:19:2c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6a4DogptGUt4LhiGPOzKyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwNjA2MDMwMDQ2WhcNMjYwNjA3MDMwMDQ2WjAzMTEwLwYDVQQD Eyg3NzNmZWViZDVmNDhjODQyYTZmY2YzMmI4MzUxODg2OWJlYjAxMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKApVGXY4NaCqnnVNN2UuIwQ0Ur7 Y4fvHW0VjcjeIeRVZ8JSYICbcf/st8qTdaGtRIrnugpOg5Qd/PLG/Arl8OBFVkwg XCjJ9eH12gwjepBUIoKMil+VEZzUtl9NxzqxHEwKsjSZjOxKIMrBDdcIabvSj+Or M+tg2y5v40OPzBSRkYTipJxI+KE3Nsyk2YfOIAONOY/axK1rph5DkwyxAnsFnk0e w1eOUvAo0zNTNmXuBz/Oxla1IAc85grxMwuz9xXw5QW8xDb4M7a/HTEF/bUWgOoT 5/5e+XPzN4GWKbkZEVPbGAMDXuwL6lLrrXSmIOy2EIv3E/s9a8o1ucGmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc/7r1fSMhCpvzzK4NRiGm+sBLxMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCUBvFlH v4PUaS9adPzkYsbWdPjTdYpCMjyufAOHcwjSPIC+u6Cxxzig4IT5chufw5r3rlNR /gqIXCs5IRVLxI548jksS5htlqXEHeUhQbRVZ+zPpG7sLZ+1Q6ACyglSqiay4Pbh nV/Vi4S/550SWrCvUBi1MUsWIZoHF5bFWfZBoR++se3IFa8hKzUpnhn279Ig5HUz aeBf8HNvW/Lx5TyqL186fpYq857DGXx5csO4gtB9j3uy3BWfv+BeWDR9fd8xjZbl /rtFmYPwxOJGy+O8e822r7ZiNF6DmZSQx+53ilPtrtKxKPua1TZ0EzUreNLgR7Nu 5ewKLU8nAxks8w== -----END CERTIFICATE-----Generated at Sat Jun 6 07:00:27 2026 by rpki-client