$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: RqgI6JQwr6hJtL34xYEorGHnnR6If94JAkKopkUaCiM= Subject key identifier: A2:83:0E:4F:7B:C0:9B:97:0D:4F:7D:2E:26:A5:4A:08:1B:64:A4:24 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019EBAA2A9BBCDBADF44587C9291AFF3F238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 195F Signing time: Fri 12 Jun 2026 07:01:22 +0000 Manifest this update: Fri 12 Jun 2026 07:01:22 +0000 Manifest next update: Sat 13 Jun 2026 07:01:22 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: AJOrXLkf3RgkLeXmSwJ1jjHjGWMIDb+ik5c7QEsO9Ww=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 9: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 10: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 11: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 12: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 13: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 07:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ba:a2:a9:bb:cd:ba:df:44:58:7c:92:91:af:f3:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jun 12 07:01:22 2026 GMT Not After : Jun 13 07:01:22 2026 GMT Subject: CN=a2830e4f7bc09b970d4f7d2e26a54a081b64a424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:80:57:75:a6:d2:5a:44:90:f9:3f:cf:e0: 35:d9:d6:68:b0:3c:79:a4:0f:51:cc:bc:fd:b3:25: 44:b2:9b:b7:67:c8:1f:32:71:ee:27:35:50:0a:ed: f9:f0:b5:ed:b9:59:c9:c0:67:9b:3c:97:6c:ea:1a: c7:b7:63:b1:6a:f1:95:79:ea:5d:31:34:17:b2:9a: 71:5e:97:84:3f:f9:8e:b0:85:f9:4c:ec:bd:51:75: 1b:c1:9e:77:9a:3d:00:8f:da:ce:db:b8:43:ef:9e: 4c:1f:59:4d:19:74:c1:9c:55:5f:0a:85:f6:0d:ce: 64:7f:0f:d0:77:26:ac:9b:11:e1:a7:cd:0f:22:a4: a9:42:d0:a5:01:6f:7d:91:e1:b6:92:53:e7:9d:41: 0d:98:eb:08:30:8f:cd:a5:25:8f:f3:bc:ed:8c:ac: b1:94:45:13:8c:84:51:b2:83:7a:1a:dc:c5:dd:fe: 28:15:1e:79:a2:07:af:66:15:07:63:52:3c:e5:44: f8:1d:b7:33:5f:76:ee:8b:f3:5c:2a:d0:25:80:da: cb:08:ae:c0:7b:8a:b8:ea:a2:b6:2a:5e:be:43:f6: c2:7b:25:49:e7:cb:c1:98:b4:24:c2:d4:b6:5b:78: 24:f7:bd:f6:b4:ae:cb:93:21:66:7d:4c:8c:3f:4e: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:0E:4F:7B:C0:9B:97:0D:4F:7D:2E:26:A5:4A:08:1B:64:A4:24 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:55:b3:99:01:45:7b:91:71:25:48:8d:fc:e1:96:cd:64:30: 88:a0:2d:49:ec:31:03:d4:bf:cd:f1:2d:df:ce:5e:10:a6:19: b8:30:ef:74:87:d6:bc:b7:c6:e4:49:ba:67:13:60:9c:75:10: d3:7a:e1:43:b5:26:fc:91:09:db:dd:4f:cc:c6:a8:2e:5f:11: 7d:a4:1c:c9:4f:e2:e8:f4:86:10:02:02:a3:7e:87:8d:66:d4: e2:38:fa:8b:40:1e:5d:8d:c3:97:4f:e8:20:28:7b:4d:97:15: cc:4e:39:32:40:79:1f:d8:c7:a4:4f:52:37:6d:99:28:5e:d2: e6:09:29:94:55:8f:11:bf:58:2d:80:e2:b7:eb:38:0b:10:2d: 42:58:a2:17:19:6f:5b:fe:e8:d6:c6:14:be:df:ef:d7:d5:ef: fd:87:07:87:ac:f4:72:77:b2:bd:cc:5d:d8:d2:cc:ff:a6:85: 81:3b:0b:b0:a0:fd:42:7c:64:fb:df:2f:db:c0:07:45:3f:1c: 9b:ef:1a:f8:10:66:d1:b9:d5:d8:a0:d6:cf:45:0a:a0:fd:43: 0c:b9:55:33:be:9d:6a:a6:54:4e:38:59:0f:37:8a:b2:8e:c8: f6:a3:d1:dd:a7:8a:97:75:65:34:a9:ca:32:ea:a7:f5:56:a5: c2:a7:25:f0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ66oqm7zbrfRFh8kpGv8/I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNjEyMDcwMTIyWhcNMjYwNjEzMDcwMTIyWjAzMTEwLwYDVQQD EyhhMjgzMGU0ZjdiYzA5Yjk3MGQ0ZjdkMmUyNmE1NGEwODFiNjRhNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6uAV3Wm0lpEkPk/z+A12dZosDx5 pA9RzLz9syVEspu3Z8gfMnHuJzVQCu358LXtuVnJwGebPJds6hrHt2OxavGVeepd MTQXsppxXpeEP/mOsIX5TOy9UXUbwZ53mj0Aj9rO27hD755MH1lNGXTBnFVfCoX2 Dc5kfw/QdyasmxHhp80PIqSpQtClAW99keG2klPnnUENmOsIMI/NpSWP87ztjKyx lEUTjIRRsoN6GtzF3f4oFR55ogevZhUHY1I85UT4HbczX3bui/NcKtAlgNrLCK7A e4q46qK2Kl6+Q/bCeyVJ58vBmLQkwtS2W3gk9732tK7LkyFmfUyMP07gVwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKKDDk97wJuXDU99LialSggbZKQkMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1Wz mQFFe5FxJUiN/OGWzWQwiKAtSewxA9S/zfEt385eEKYZuDDvdIfWvLfG5Em6ZxNg nHUQ03rhQ7Um/JEJ291PzMaoLl8RfaQcyU/i6PSGEAICo36HjWbU4jj6i0AeXY3D l0/oICh7TZcVzE45MkB5H9jHpE9SN22ZKF7S5gkplFWPEb9YLYDit+s4CxAtQlii FxlvW/7o1sYUvt/v19Xv/YcHh6z0cneyvcxd2NLM/6aFgTsLsKD9Qnxk+98v28AH RT8cm+8a+BBm0bnV2KDWz0UKoP1DDLlVM76daqZUTjhZDzeKso7I9qPR3aeKl3Vl NKnKMuqn9Valwqcl8A== -----END CERTIFICATE-----Generated at Fri Jun 12 12:05:32 2026 by rpki-client