$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: JzM0TsWV5igPMAhNFH5nVJlnb4FuGzjRYg8KSMWn57Q= Subject key identifier: F3:0B:10:07:A0:85:71:47:3F:97:7E:4B:05:EE:C6:A4:8B:5D:1C:8B Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019F11C0491592CCF4A0D254E02C3BBF38F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1221 Signing time: Mon 29 Jun 2026 05:00:42 +0000 Manifest this update: Mon 29 Jun 2026 05:00:42 +0000 Manifest next update: Tue 30 Jun 2026 05:00:42 +0000 Files and hashes: 1: 6c4lQYlmCImr6936UOytP-6zDQk.roa (hash: IGAHsgZguKh5GivQr6MkxZilAYcjcv7njdxTslcIaUA=) 2: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (hash: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=) 3: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (hash: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=) 4: RKY7lmdtb6IZif0ZQO2zEp317ek.roa (hash: MiEE6D3s9DZHsWmRS4CwT7MDH9wPZNxbpSI8mSRJ1pI=) 5: VhdKFflL6wzVMXCQhX8bkLBALKo.roa (hash: GmQzzs1E/5GYPLQuRjYECvhEeGtOhpZPCBL21n8gXMM=) 6: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 7: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: /xcad7Efe1QIjObWxjFAUSgwoHjzTmuHrkdbkX1g5bw=) 8: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 9: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 10: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (hash: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=) 11: hRU-I7VYBBSVdVSepj3lB_SbNbo.roa (hash: QFiqe79GtYZBZg6GY0hgWLy4V/DB651N8dcO63zb6yk=) 12: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 13: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 14: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 15: mll0JS45VfsGyC4p947Xw9ARAuk.roa (hash: SaWT036nVOihQ/TIk7R5WevvvdD0q/i8CFax8NpY1KY=) 16: qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa (hash: e4vTmIa36MwpM5S5DLu7QHR1O71kqBkmpQlt4QzUxjA=) 17: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 18: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 19: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:c0:49:15:92:cc:f4:a0:d2:54:e0:2c:3b:bf:38:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jun 29 05:00:42 2026 GMT Not After : Jun 30 05:00:42 2026 GMT Subject: CN=f30b1007a08571473f977e4b05eec6a48b5d1c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:3b:b8:48:13:50:40:6b:4b:11:dd:db:41: 3c:eb:e9:cb:98:f4:21:06:cd:67:45:eb:f6:84:07: f7:40:dd:5b:e0:92:19:b7:28:ea:cb:3b:d9:f5:95: 1d:c3:06:3e:9d:39:9e:d6:0a:05:1f:2b:09:85:88: e8:f5:ee:a2:71:21:ac:00:ee:fb:ea:f3:b9:58:d7: 0f:30:f9:cb:52:f6:32:09:9e:4a:6c:77:7d:69:a4: b5:f0:5b:ae:77:9f:9e:13:66:3f:91:f6:2f:3e:6f: 7b:62:8e:ae:22:68:5d:25:04:50:f9:ec:51:3e:a4: bf:a4:d6:12:ca:da:6c:62:a5:f7:94:e9:88:17:30: 74:cc:f6:20:6b:9f:b6:2b:23:e9:e8:0d:2f:37:6a: 1d:6c:f4:14:ad:a3:0f:10:a9:c4:d9:06:9b:27:bb: cc:38:66:60:e5:db:eb:78:a6:27:67:85:2d:d4:7e: 2a:e1:eb:a5:21:85:5b:54:83:cf:af:9a:e0:14:01: 49:a3:53:ea:69:2d:9a:fd:5c:63:1a:22:f6:64:6c: 8f:49:05:c4:ef:99:19:7d:d3:37:f7:c3:0f:7e:42: 6f:8c:d2:bd:49:eb:4b:35:96:42:66:a1:fa:60:b1: 11:7b:25:21:be:e3:40:d0:be:32:e0:db:7e:27:19: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0B:10:07:A0:85:71:47:3F:97:7E:4B:05:EE:C6:A4:8B:5D:1C:8B X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:40:49:98:ae:1c:cd:f2:76:f1:5a:63:7c:93:86:dc:a7:d3: 9c:3a:69:10:a5:ff:e9:3a:5d:b3:72:94:9b:ee:a3:5c:93:34: 49:03:c1:0c:87:4e:29:d6:4a:6d:75:02:e4:46:d2:8f:4f:3b: 7d:5e:11:ac:84:ca:4c:e0:c8:68:d0:12:13:a4:aa:9f:02:b7: b9:b4:20:5d:1c:ef:31:f7:3d:fa:7d:13:b6:e4:16:d7:2f:48: 16:cf:01:6a:b1:d3:1e:e9:f1:fe:0f:75:df:80:ce:5d:78:f1: 0f:cc:06:bd:d1:bc:f1:39:50:a4:8a:75:61:bb:69:07:bf:bd: 6f:3b:cb:81:a2:47:a4:cb:53:4e:2d:03:ad:c0:2c:ec:87:08: ab:97:f4:32:20:51:85:dd:6a:ed:90:21:80:f3:84:04:19:c3: 94:36:f0:18:03:ee:62:b4:b6:5e:bc:e4:32:91:46:ce:03:7e: a5:ac:5c:41:40:8d:bf:c7:ca:2c:4f:cb:dd:42:ae:83:56:57: 8e:75:7a:80:23:69:f3:0f:e7:ab:5a:54:fb:86:60:51:dc:b4: 8d:d0:cf:75:42:2f:53:3c:7b:c0:ce:14:e6:b7:93:95:26:97: 81:6b:b1:af:b5:58:c9:09:85:9f:17:aa:ae:89:dc:b0:83:ba: 7c:93:b5:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RwEkVksz0oNJU4Cw7vzj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwNjI5MDUwMDQyWhcNMjYwNjMwMDUwMDQyWjAzMTEwLwYDVQQD EyhmMzBiMTAwN2EwODU3MTQ3M2Y5NzdlNGIwNWVlYzZhNDhiNWQxYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PY7uEgTUEBrSxHd20E86+nLmPQh Bs1nRev2hAf3QN1b4JIZtyjqyzvZ9ZUdwwY+nTme1goFHysJhYjo9e6icSGsAO77 6vO5WNcPMPnLUvYyCZ5KbHd9aaS18Fuud5+eE2Y/kfYvPm97Yo6uImhdJQRQ+exR PqS/pNYSytpsYqX3lOmIFzB0zPYga5+2KyPp6A0vN2odbPQUraMPEKnE2QabJ7vM OGZg5dvreKYnZ4Ut1H4q4eulIYVbVIPPr5rgFAFJo1PqaS2a/VxjGiL2ZGyPSQXE 75kZfdM398MPfkJvjNK9SetLNZZCZqH6YLEReyUhvuNA0L4y4Nt+JxkNkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMLEAeghXFHP5d+SwXuxqSLXRyLMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEBJmK4c zfJ28VpjfJOG3KfTnDppEKX/6Tpds3KUm+6jXJM0SQPBDIdOKdZKbXUC5EbSj087 fV4RrITKTODIaNASE6SqnwK3ubQgXRzvMfc9+n0TtuQW1y9IFs8BarHTHunx/g91 34DOXXjxD8wGvdG88TlQpIp1YbtpB7+9bzvLgaJHpMtTTi0DrcAs7IcIq5f0MiBR hd1q7ZAhgPOEBBnDlDbwGAPuYrS2XrzkMpFGzgN+paxcQUCNv8fKLE/L3UKug1ZX jnV6gCNp8w/nq1pU+4ZgUdy0jdDPdUIvUzx7wM4U5reTlSaXgWuxr7VYyQmFnxeq roncsIO6fJO11Q== -----END CERTIFICATE-----Generated at Mon Jun 29 11:09:54 2026 by rpki-client