$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: 5+SVMso9jhOwJUR7xR7N4Q1fAasarc0XDWXrfwENJpI= Subject key identifier: 79:55:3B:F5:34:1E:54:1B:06:49:05:95:3D:90:23:C2:DA:73:68:71 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019EB6203B27F81DE9B2F96947A4031AD505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 03A5 Signing time: Thu 11 Jun 2026 10:00:26 +0000 Manifest this update: Thu 11 Jun 2026 10:00:26 +0000 Manifest next update: Fri 12 Jun 2026 10:00:26 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: VRJ7asYpyV1lG+qKme4QbIR+EN8tiUR0ukY30nMdHJw=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 9: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 10: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 11: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 12: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 13: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 14: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 15: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 16: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) 17: zO5zaPfAU_WOrCSlNRCPHYyExaQ.roa (hash: 3A28xy/zcM7UqXUvvI8yJ+JLhZsOGWIKL5lp3c/NVyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:20:3b:27:f8:1d:e9:b2:f9:69:47:a4:03:1a:d5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jun 11 10:00:26 2026 GMT Not After : Jun 12 10:00:26 2026 GMT Subject: CN=79553bf5341e541b064905953d9023c2da736871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:e6:86:26:47:9c:80:2e:64:d5:8c:26:20: ba:6d:e2:d6:25:71:2d:fe:4b:26:f5:d9:ef:88:87: 2c:08:ef:e5:b2:e1:7a:39:30:30:d5:f6:52:da:e2: 4f:81:ce:43:be:ee:48:3b:34:71:5f:13:03:7c:01: 42:70:5b:a3:b8:2d:94:90:71:65:da:79:0e:8e:8e: ad:0f:53:38:61:0f:c1:66:f9:ab:d6:44:ac:9f:2c: 3c:d4:2c:83:34:ac:5b:6a:57:04:fa:f1:ad:23:d5: 1e:e6:37:32:1e:6b:3e:b5:94:0e:2e:e2:3e:a0:64: 5f:4c:cb:fd:5d:e7:4a:04:3a:1d:28:a5:04:b4:4d: f1:ff:83:94:d3:d6:fe:ce:e9:5e:dc:62:37:9f:94: 4f:c3:d1:d4:ca:5c:0b:0d:be:bc:7c:39:d9:a1:36: b5:c8:4a:96:32:e1:d0:8a:c5:31:f0:ff:9e:b4:59: ec:4b:31:bd:28:3c:94:90:e9:6f:86:77:b2:d4:52: 2a:8f:d7:88:ad:71:0c:0c:51:60:27:49:fa:34:14: ee:30:65:14:d7:29:8a:f7:99:cc:f3:bc:44:6f:6c: 73:70:fe:52:90:4e:b8:64:c5:c1:21:26:fc:6e:fe: d9:69:89:52:9d:7b:d0:f6:23:0a:43:da:b2:77:3c: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:3B:F5:34:1E:54:1B:06:49:05:95:3D:90:23:C2:DA:73:68:71 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:de:86:fc:db:30:fb:fa:bb:95:06:91:e6:12:37:7a:91: de:b8:79:de:08:2d:5b:bd:3e:16:d2:7b:50:e0:c7:b3:9f:82: 20:24:75:92:3c:6e:fa:51:9f:92:cd:a4:aa:9e:86:2e:57:3f: 94:9c:8c:a0:c6:2f:60:30:a5:7e:83:a5:7d:3a:5f:ea:ec:a0: e0:0f:a3:d6:87:3c:97:55:a7:6a:35:dc:c0:c5:1c:e9:b3:ba: 73:78:45:b2:30:01:3f:0c:e6:7f:d2:66:19:d9:92:03:9b:f7: dd:a1:ec:1a:98:7a:ff:ed:3a:d1:6c:71:05:41:e9:2a:cf:da: 5d:90:13:32:b1:24:64:4a:c9:52:80:0f:d7:13:65:b4:a2:50: 5a:42:ac:7d:50:29:3c:5b:f2:6a:95:78:31:54:c0:cc:e8:7d: 9f:92:93:f6:27:d8:c2:87:8e:0f:42:1a:37:14:69:89:83:b1: c2:00:0f:b3:58:53:e3:21:8e:fa:06:22:39:04:27:cf:23:7b: 82:c1:0e:a8:f7:cc:bc:65:8c:66:bf:c9:3e:73:58:00:59:33: 20:52:34:03:f8:67:70:aa:f7:3d:1e:52:5e:51:14:c2:8d:3d: 0d:2b:41:ad:39:00:ad:c3:ed:93:03:b3:df:2c:b8:40:ad:c6: 4d:77:8d:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62IDsn+B3psvlpR6QDGtUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNjExMTAwMDI2WhcNMjYwNjEyMTAwMDI2WjAzMTEwLwYDVQQD Eyg3OTU1M2JmNTM0MWU1NDFiMDY0OTA1OTUzZDkwMjNjMmRhNzM2ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3/mhiZHnIAuZNWMJiC6beLWJXEt /ksm9dnviIcsCO/lsuF6OTAw1fZS2uJPgc5Dvu5IOzRxXxMDfAFCcFujuC2UkHFl 2nkOjo6tD1M4YQ/BZvmr1kSsnyw81CyDNKxbalcE+vGtI9Ue5jcyHms+tZQOLuI+ oGRfTMv9XedKBDodKKUEtE3x/4OU09b+zule3GI3n5RPw9HUylwLDb68fDnZoTa1 yEqWMuHQisUx8P+etFnsSzG9KDyUkOlvhney1FIqj9eIrXEMDFFgJ0n6NBTuMGUU 1ymK95nM87xEb2xzcP5SkE64ZMXBISb8bv7ZaYlSnXvQ9iMKQ9qydzxOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlVO/U0HlQbBkkFlT2QI8Lac2hxMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQnehvzb MPv6u5UGkeYSN3qR3rh53ggtW70+FtJ7UODHs5+CICR1kjxu+lGfks2kqp6GLlc/ lJyMoMYvYDClfoOlfTpf6uyg4A+j1oc8l1WnajXcwMUc6bO6c3hFsjABPwzmf9Jm GdmSA5v33aHsGph6/+060WxxBUHpKs/aXZATMrEkZErJUoAP1xNltKJQWkKsfVAp PFvyapV4MVTAzOh9n5KT9ifYwoeOD0IaNxRpiYOxwgAPs1hT4yGO+gYiOQQnzyN7 gsEOqPfMvGWMZr/JPnNYAFkzIFI0A/hncKr3PR5SXlEUwo09DStBrTkArcPtkwOz 3yy4QK3GTXeNfw== -----END CERTIFICATE-----Generated at Thu Jun 11 15:29:37 2026 by rpki-client