$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: i0gnUdfQ7UhuDMct1Kmv/grf3isO0ORnJKo3D+snSck= Subject key identifier: AF:8A:08:82:01:3F:48:96:34:B2:09:69:77:C7:04:8F:0D:25:D1:C3 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019ED7636B0FDE15C1D41AC1DB81AD9EA6D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0FAB Signing time: Wed 17 Jun 2026 21:01:17 +0000 Manifest this update: Wed 17 Jun 2026 21:01:17 +0000 Manifest next update: Thu 18 Jun 2026 21:01:17 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 6gcsLi8iSXNYRttr8zE8CD9F+Ur1vpkDX4rS5sz1uWI=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Jun 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d7:63:6b:0f:de:15:c1:d4:1a:c1:db:81:ad:9e:a6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jun 17 21:01:17 2026 GMT Not After : Jun 18 21:01:17 2026 GMT Subject: CN=af8a0882013f489634b2096977c7048f0d25d1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:99:29:68:f9:b1:b3:b1:3e:89:bc:cc:c4: 66:3c:5e:ba:87:90:5b:9b:a0:53:ab:2b:14:8a:26: 84:ea:a9:9e:0e:41:77:fe:81:12:8f:a8:aa:ab:62: f4:1e:8b:35:32:b3:07:23:7e:f5:67:a7:29:e5:3b: b9:62:19:a4:f0:8d:5f:4d:7c:77:16:07:9e:26:be: 47:51:93:8b:5a:79:cc:ab:fa:62:a4:c6:35:88:93: df:63:92:18:8f:20:d5:bd:69:65:a9:63:c5:f3:07: b7:d8:73:d1:76:86:79:9a:6d:bf:67:11:41:00:10: 85:6b:a0:f7:aa:c5:12:fa:d3:3f:af:98:bd:11:5d: 5e:c8:b0:cd:ff:03:20:bd:dc:e1:af:4e:1a:73:4e: f4:8c:25:1e:08:e7:3d:dc:0b:b9:b3:0b:d6:5a:df: 67:c5:da:94:26:ca:1b:ef:49:a9:85:79:0a:71:00: a3:d8:3b:5e:68:fb:51:f8:ac:41:35:1b:09:47:ee: bf:3e:d0:f2:72:1f:c9:62:e5:bd:fd:46:ec:45:73: 35:cf:50:a6:83:f4:d4:93:52:21:25:d0:ac:70:09: 27:51:b2:2b:a6:2e:2c:ea:50:cc:9d:ca:03:ab:f8: ce:92:c1:6e:0c:06:de:d5:a2:ec:a0:53:7f:2b:1d: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:08:82:01:3F:48:96:34:B2:09:69:77:C7:04:8F:0D:25:D1:C3 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:7b:c1:08:cd:ab:34:aa:23:ab:ce:3d:3e:48:42:d3:af: 04:92:e4:68:c9:eb:6f:8d:4f:13:82:15:35:b9:4e:93:bc:6e: 10:81:6b:a5:c6:73:f4:91:40:f6:5c:82:58:6f:a3:74:de:8c: bd:61:2d:5a:a3:64:d4:f1:59:03:7e:32:3d:b9:43:bf:94:a3: 49:3b:5d:c5:98:4f:d8:50:b2:df:64:ff:bc:fa:2c:54:06:0b: 6e:fb:12:bd:7e:98:38:8f:ae:a8:b3:46:14:80:11:bc:58:c5: 99:28:a3:f8:f4:72:19:34:70:25:de:8a:06:56:4a:89:ea:f5: 9a:13:c7:c6:7a:08:ae:bf:b5:f2:be:31:a1:59:51:f1:df:44: 55:e4:1e:cb:56:ae:c7:9d:eb:b3:2b:29:0b:da:fa:b2:7b:68: b8:5e:b6:d4:43:f7:5e:92:21:2e:96:ce:78:65:91:5d:8e:c1: ae:51:95:c7:fe:30:e3:5e:11:d7:20:4c:1e:4f:ef:d1:14:ba: 50:d4:59:46:6f:c2:7f:1b:d4:a4:4a:09:9d:41:df:07:33:b6: 92:78:61:5e:4a:57:4a:d0:8f:db:6c:3e:7e:21:4f:a2:7b:07: 0a:16:ec:8e:c8:de:95:55:1c:b8:b9:fb:03:68:4a:23:cd:29: 60:42:98:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7XY2sP3hXB1BrB24GtnqbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwNjE3MjEwMTE3WhcNMjYwNjE4MjEwMTE3WjAzMTEwLwYDVQQD EyhhZjhhMDg4MjAxM2Y0ODk2MzRiMjA5Njk3N2M3MDQ4ZjBkMjVkMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4uZKWj5sbOxPom8zMRmPF66h5Bb m6BTqysUiiaE6qmeDkF3/oESj6iqq2L0Hos1MrMHI371Z6cp5Tu5Yhmk8I1fTXx3 FgeeJr5HUZOLWnnMq/pipMY1iJPfY5IYjyDVvWllqWPF8we32HPRdoZ5mm2/ZxFB ABCFa6D3qsUS+tM/r5i9EV1eyLDN/wMgvdzhr04ac070jCUeCOc93Au5swvWWt9n xdqUJsob70mphXkKcQCj2DteaPtR+KxBNRsJR+6/PtDych/JYuW9/UbsRXM1z1Cm g/TUk1IhJdCscAknUbIrpi4s6lDMncoDq/jOksFuDAbe1aLsoFN/Kx0ROwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+KCIIBP0iWNLIJaXfHBI8NJdHDMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqh7wQjN qzSqI6vOPT5IQtOvBJLkaMnrb41PE4IVNblOk7xuEIFrpcZz9JFA9lyCWG+jdN6M vWEtWqNk1PFZA34yPblDv5SjSTtdxZhP2FCy32T/vPosVAYLbvsSvX6YOI+uqLNG FIARvFjFmSij+PRyGTRwJd6KBlZKier1mhPHxnoIrr+18r4xoVlR8d9EVeQey1au x53rsyspC9r6sntouF621EP3XpIhLpbOeGWRXY7BrlGVx/4w414R1yBMHk/v0RS6 UNRZRm/CfxvUpEoJnUHfBzO2knhhXkpXStCP22w+fiFPonsHChbsjsjelVUcuLn7 A2hKI80pYEKYHg== -----END CERTIFICATE-----Generated at Thu Jun 18 02:31:11 2026 by rpki-client