$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: ovBi8ZW93C55kvJNkHNYCRlujQuwSRWqGPyCh4x5H/g= Subject key identifier: 77:62:65:8D:89:12:8A:2D:01:DB:15:27:69:C0:36:90:0D:C1:65:AB Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019F1A1FD02CA0C5AF66F3725CD3A7AB09D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 199A Signing time: Tue 30 Jun 2026 20:02:00 +0000 Manifest this update: Tue 30 Jun 2026 20:02:00 +0000 Manifest next update: Wed 01 Jul 2026 20:02:00 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: Tu4YIkcHmbaRwBvbo2jQORqcMa5ETq1Az64AjSVHDQ0=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1a:1f:d0:2c:a0:c5:af:66:f3:72:5c:d3:a7:ab:09:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jun 30 20:02:00 2026 GMT Not After : Jul 1 20:02:00 2026 GMT Subject: CN=7762658d89128a2d01db152769c036900dc165ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:ba:de:b9:07:b8:73:7a:72:58:69:64:ac: 36:6e:30:53:d7:0a:39:31:89:bb:12:2b:0a:68:17: 53:be:e5:1f:2c:a6:b0:f7:6d:50:68:68:d4:cb:36: 79:07:ec:d9:7c:ad:17:c1:4b:43:53:92:fc:54:c5: ea:1c:1c:86:9e:2a:46:67:fb:52:43:43:c3:80:ec: d4:d9:a0:85:85:1a:76:34:a1:da:42:23:3c:58:3e: d4:87:4b:12:9b:e7:c8:d9:5b:3d:a0:e4:94:7c:ef: d9:6d:8b:68:cb:22:65:32:27:f4:94:3a:15:a3:94: 5f:bf:61:84:60:97:4b:9f:5a:f5:42:3b:df:e0:b6: a3:61:16:e2:dd:07:64:ff:ab:e6:e1:bb:c1:31:99: f9:74:b4:45:66:72:25:b7:83:b2:4e:7b:ed:fd:26: 8c:a3:d5:0e:70:ad:cb:c4:0c:36:f4:38:56:57:2a: c4:09:3a:17:3d:ee:3f:a6:6a:87:56:55:81:38:c4: e1:72:d0:e5:13:87:8c:e6:86:ab:8c:3a:8a:37:2e: 30:e8:84:09:68:63:41:fe:72:67:7d:8a:60:52:6d: 13:ad:5c:56:26:68:08:d4:74:1b:b0:e6:5c:01:33: cb:15:00:4d:f5:54:00:1c:bf:70:d4:ba:40:8a:ec: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:62:65:8D:89:12:8A:2D:01:DB:15:27:69:C0:36:90:0D:C1:65:AB X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0d:70:c0:69:91:b3:8d:8f:c6:e3:41:ef:91:4e:c7:6c:9f: ea:ac:86:e4:5b:3c:54:26:ce:42:90:82:79:9a:8f:76:c1:21: 0e:af:d3:7c:7c:1a:b0:f4:0f:f8:7b:ff:61:15:87:da:6d:68: 0f:d7:37:c6:a9:a6:89:e1:22:2e:22:6d:d0:a7:b5:8b:e1:f7: 0f:62:6b:54:03:8d:43:f2:d5:41:0e:de:4b:78:eb:55:9d:49: 84:12:7e:5f:18:30:1d:9c:a8:3a:ce:43:2e:f0:e7:d7:85:47: ff:80:bf:82:40:9d:3e:ee:a3:b4:0d:3d:e7:68:ae:69:50:0a: 31:97:34:d2:9b:9a:11:31:69:06:83:cd:18:b3:c0:cf:df:a9: 1a:dc:93:c4:70:57:89:b8:e7:08:6d:ba:09:82:33:e7:75:f5: 4e:57:6a:f6:ff:4e:27:22:53:56:49:fb:cf:3a:1e:b2:fd:46: 56:2a:a6:10:ac:01:35:08:4f:c7:a7:2b:e5:f0:ab:a1:54:05: 0f:4f:51:98:f0:68:c0:f5:62:fe:c6:ea:f6:10:f5:4f:a1:be: 39:12:4d:89:e7:dd:82:0f:2c:16:4b:86:83:c4:7e:13:c0:7c: e2:98:60:58:38:e4:f8:c3:93:6a:9a:9a:a5:b2:3f:9c:32:d1: af:88:da:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8aH9AsoMWvZvNyXNOnqwnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNjMwMjAwMjAwWhcNMjYwNzAxMjAwMjAwWjAzMTEwLwYDVQQD Eyg3NzYyNjU4ZDg5MTI4YTJkMDFkYjE1Mjc2OWMwMzY5MDBkYzE2NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpK63rkHuHN6clhpZKw2bjBT1wo5 MYm7EisKaBdTvuUfLKaw921QaGjUyzZ5B+zZfK0XwUtDU5L8VMXqHByGnipGZ/tS Q0PDgOzU2aCFhRp2NKHaQiM8WD7Uh0sSm+fI2Vs9oOSUfO/ZbYtoyyJlMif0lDoV o5Rfv2GEYJdLn1r1Qjvf4LajYRbi3Qdk/6vm4bvBMZn5dLRFZnIlt4OyTnvt/SaM o9UOcK3LxAw29DhWVyrECToXPe4/pmqHVlWBOMThctDlE4eM5oarjDqKNy4w6IQJ aGNB/nJnfYpgUm0TrVxWJmgI1HQbsOZcATPLFQBN9VQAHL9w1LpAiuwsbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdiZY2JEootAdsVJ2nANpANwWWrMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg1wwGmR s42PxuNB75FOx2yf6qyG5Fs8VCbOQpCCeZqPdsEhDq/TfHwasPQP+Hv/YRWH2m1o D9c3xqmmieEiLiJt0Ke1i+H3D2JrVAONQ/LVQQ7eS3jrVZ1JhBJ+XxgwHZyoOs5D LvDn14VH/4C/gkCdPu6jtA0952iuaVAKMZc00puaETFpBoPNGLPAz9+pGtyTxHBX ibjnCG26CYIz53X1Tldq9v9OJyJTVkn7zzoesv1GViqmEKwBNQhPx6cr5fCroVQF D09RmPBowPVi/sbq9hD1T6G+ORJNiefdgg8sFkuGg8R+E8B84phgWDjk+MOTapqa pbI/nDLRr4jang== -----END CERTIFICATE-----Generated at Tue Jun 30 23:15:28 2026 by rpki-client