$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: uL6YmBiyfoDS57KUKP10bRt1qz9bGdE90D7OnGDBJb8= Subject key identifier: 85:AB:1B:F7:31:7B:71:3C:02:A6:B8:47:1B:DB:59:46:1E:4A:EE:FD Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019EE77B84546777EA8880A8D82DB46E6771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 0503 Signing time: Sun 21 Jun 2026 00:01:32 +0000 Manifest this update: Sun 21 Jun 2026 00:01:32 +0000 Manifest next update: Mon 22 Jun 2026 00:01:32 +0000 Files and hashes: 1: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 2: 4IdsjnThncy8CG7B4TEdC8OXYTg.roa (hash: qFz8bZzW9j+BuaK9Mq/+zPbN9lxrJMGuuYqn1jNVi7U=) 3: 4SHRDgDa8nRIMsnIbi-9l_IoDW4.roa (hash: mwHoplcyNYyzHFwU8xToZ8b4ZbZDDFLqXpxAFBxgxEg=) 4: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=) 5: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (hash: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=) 6: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=) 7: Hn8PQyjLrgS6wf-4GZkEHuiPt8I.roa (hash: B1KDHu5Q7IVTvBJkPx3Mc8M6o2s+jQ1JcT/y4p7LFng=) 8: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 9: JmZyr_HiGWhXrQT4G35RdzY5FBo.roa (hash: 7gA8L5P9/nr9jLYxlFbsO9wNhD1sAVMuCpL277mztEA=) 10: Oy1Vr9hwyTh0-0iHW94GDDDFmYs.roa (hash: 5fFerRCf8VBYV4VrGw9Oh25817KoFKu/y2AnqGnWOXw=) 11: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 12: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=) 13: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 14: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 15: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 16: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=) 17: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 18: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=) 19: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=) 20: pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa (hash: DDiufBot2z3oX+2RZxG2JEHDnkreGqKnf5XhZxIEUqQ=) 21: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 22: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=) 23: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (hash: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=) 24: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=) 25: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=) 26: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: 99QPtXoaamrLN0xQveoU4se4KDkbUVV5O5IXU3tHznA=) 27: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Jun 2026 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e7:7b:84:54:67:77:ea:88:80:a8:d8:2d:b4:6e:67:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jun 21 00:01:32 2026 GMT Not After : Jun 22 00:01:32 2026 GMT Subject: CN=85ab1bf7317b713c02a6b8471bdb59461e4aeefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:fd:d7:b7:d4:ed:05:c3:53:b7:23:e7:34: c6:42:85:3b:09:3c:8d:13:64:bd:26:70:64:b4:c6: 41:32:46:9c:e0:62:b2:d1:15:d9:5d:fa:58:8f:c2: 85:21:12:d8:89:ea:89:32:81:fd:4e:76:d9:01:91: be:1a:e4:6f:b7:3c:87:41:24:ff:79:af:cd:ed:44: e3:b4:36:21:0c:aa:aa:0a:8d:ab:2b:23:4e:66:a3: 9a:65:57:44:f9:63:82:43:d8:72:63:e4:22:6b:b9: 10:78:b8:0d:91:e6:83:df:85:8a:76:dd:e9:4d:1b: 22:ef:c9:26:53:16:ae:c7:c8:e4:c4:7e:3c:04:dd: 92:71:5b:a9:6f:92:3b:3a:04:60:bc:2e:96:04:17: 8f:43:e8:27:fc:f6:08:8b:08:f7:72:bd:74:9e:d9: a0:e8:57:d8:f4:ad:90:bb:e7:8c:ed:2f:0b:dd:31: 1b:c4:fb:2b:41:ea:b6:e7:02:9b:86:c2:fa:15:ce: c3:3e:3e:40:c3:a9:af:97:c9:00:b6:70:36:f5:84: 77:eb:50:21:c7:a2:e1:d0:1d:16:ea:19:a0:85:d2: 7e:a8:10:2d:ff:a2:52:f9:ab:3d:3a:c2:30:56:d4: 4a:e0:25:77:5e:65:72:84:ed:fa:63:52:38:91:1e: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AB:1B:F7:31:7B:71:3C:02:A6:B8:47:1B:DB:59:46:1E:4A:EE:FD X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f9:a1:7d:f0:0b:ac:a8:10:75:a6:41:5f:e0:e1:af:fc:b4: 62:fa:dc:aa:31:aa:41:a6:21:70:a6:51:94:96:80:98:54:1d: cd:77:80:8a:fc:1e:e1:74:37:b1:13:1b:88:53:56:8e:13:49: 41:8a:f2:63:ca:db:49:cb:f4:6b:b9:2a:c7:07:df:40:01:07: 6d:6e:14:b0:d3:d4:62:3b:9d:7f:0c:f0:c6:09:7f:59:f2:86: e1:14:67:21:9e:39:5e:1e:0f:48:fa:b9:4e:9d:aa:51:38:fb: 09:89:53:b8:b0:38:19:4d:96:3b:ad:a0:d5:6c:6b:97:13:80: 9f:01:e8:7e:98:a0:1e:e4:07:62:8d:81:0a:8d:0b:72:1a:e7: 33:ce:d4:6c:3d:35:f8:29:e6:3b:79:0a:60:3f:5a:05:0d:ea: 18:d3:59:9c:d8:2b:c3:1c:93:4c:25:a8:4c:0b:c1:dd:cd:fe: cc:34:8e:5e:ea:8a:e4:7f:6d:17:80:de:a8:01:43:15:3c:2e: c6:fb:d5:39:12:a0:3a:37:2d:75:02:7b:aa:89:e5:55:ab:27: 76:9b:e1:53:57:54:cb:cf:93:43:a9:0c:dd:f0:98:2e:9a:9b: 90:dc:07:53:eb:02:6d:a6:a7:17:24:01:e3:1c:0c:99:22:9d: b2:28:db:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ne4RUZ3fqiICo2C20bmdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwNjIxMDAwMTMyWhcNMjYwNjIyMDAwMTMyWjAzMTEwLwYDVQQD Eyg4NWFiMWJmNzMxN2I3MTNjMDJhNmI4NDcxYmRiNTk0NjFlNGFlZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIH917fU7QXDU7cj5zTGQoU7CTyN E2S9JnBktMZBMkac4GKy0RXZXfpYj8KFIRLYieqJMoH9TnbZAZG+GuRvtzyHQST/ ea/N7UTjtDYhDKqqCo2rKyNOZqOaZVdE+WOCQ9hyY+Qia7kQeLgNkeaD34WKdt3p TRsi78kmUxaux8jkxH48BN2ScVupb5I7OgRgvC6WBBePQ+gn/PYIiwj3cr10ntmg 6FfY9K2Qu+eM7S8L3TEbxPsrQeq25wKbhsL6Fc7DPj5Aw6mvl8kAtnA29YR361Ah x6Lh0B0W6hmghdJ+qBAt/6JS+as9OsIwVtRK4CV3XmVyhO36Y1I4kR6adwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWrG/cxe3E8Aqa4RxvbWUYeSu79MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/mhffAL rKgQdaZBX+Dhr/y0YvrcqjGqQaYhcKZRlJaAmFQdzXeAivwe4XQ3sRMbiFNWjhNJ QYryY8rbScv0a7kqxwffQAEHbW4UsNPUYjudfwzwxgl/WfKG4RRnIZ45Xh4PSPq5 Tp2qUTj7CYlTuLA4GU2WO62g1WxrlxOAnwHofpigHuQHYo2BCo0LchrnM87UbD01 +CnmO3kKYD9aBQ3qGNNZnNgrwxyTTCWoTAvB3c3+zDSOXuqK5H9tF4DeqAFDFTwu xvvVORKgOjctdQJ7qonlVasndpvhU1dUy8+TQ6kM3fCYLpqbkNwHU+sCbaanFyQB 4xwMmSKdsijbHw== -----END CERTIFICATE-----Generated at Sun Jun 21 09:56:57 2026 by rpki-client