$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: eRQbMNxcrRX/JvtshHEufl5Ci5ZVuopoRyslOp5u/aQ= Subject key identifier: CA:4F:20:7C:93:56:D0:7A:05:DB:87:FE:FD:B5:DE:9B:A3:42:F2:93 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019EB68E14BAF6B1BBB79B5D9F4E1F01D4AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1977 Signing time: Thu 11 Jun 2026 12:00:25 +0000 Manifest this update: Thu 11 Jun 2026 12:00:25 +0000 Manifest next update: Fri 12 Jun 2026 12:00:25 +0000 Files and hashes: 1: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (hash: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI=) 2: 1DvNK1UEfocldcVoSCDz4-rQCu0.roa (hash: W9AE3etelZntnhp0Syb26y14LnYuyubNeRnjY+KTeic=) 3: 2IRQ2tg7AckZC-qaAHhGpj_YvX0.roa (hash: E5vcK/Kzq3X0ZU3ua0SSHujRQ2xDF2dauEaV4Vglvqc=) 4: 2osfvL67DJoldSiDF4PR7UDb-Fk.asa (hash: pYfpBcJ4cmAcBPsCiYsmdDQ6g93wwl6UaITv0MdLIHE=) 5: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (hash: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA=) 6: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (hash: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw=) 7: FqNQkwV2PkUHvMVmXxQ_4Xh4Z4A.asa (hash: hkpJ0WmcrDsxGzzWcZrOMxEr2e+VC3Rb+eENHFvnu7o=) 8: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (hash: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E=) 9: PzoJn7JmNA7HLgDJj3qABg4rdIg.roa (hash: Pu8elV3ASkAhzzlLq5cnqoeSEZGr98s46wDdEgSzMVE=) 10: Rs1lwHsOhORTbpOYC0DdvHoRuG4.roa (hash: 2ldj5+OjHEBz42EYRxs+dDbaX+fxjP+Yz7ZHeTr6lGA=) 11: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (hash: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4=) 12: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (hash: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y=) 13: eLLgkJY0LUjDQzm5GuuyzsHUdO8.roa (hash: 5HseyNnROV3cBPGdpH59V7rf9Io+o9Vye7FV9A2XVfo=) 14: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: YnOzpk1h08zjC1bLIW1E2pgTi8mfhDitdQafvq7LOeI=) 15: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (hash: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k=) 16: qJ3niIVK-kPpD_FGpR52CMp181s.roa (hash: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:8e:14:ba:f6:b1:bb:b7:9b:5d:9f:4e:1f:01:d4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jun 11 12:00:25 2026 GMT Not After : Jun 12 12:00:25 2026 GMT Subject: CN=ca4f207c9356d07a05db87fefdb5de9ba342f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:b0:9e:c6:a8:70:67:b4:9b:1c:8b:37:02: ba:4f:02:0c:4e:bb:c7:1d:4c:da:e7:f4:17:2f:2a: ab:44:b9:c5:84:72:00:04:bf:df:ad:68:1c:55:e2: 1f:9f:ad:d5:f9:2f:f3:74:58:b7:a5:7e:3a:22:87: e8:0c:9a:a3:d3:e7:f2:a1:12:86:57:94:0e:e7:35: d5:9f:48:0d:16:09:b9:7a:ad:5c:01:f8:77:02:cc: 38:e3:e9:9f:76:0c:94:cc:bd:51:5c:bd:91:b9:ac: 8c:0a:76:31:76:59:d2:07:82:e1:1e:c4:d7:cb:42: 66:d2:37:4d:34:10:e6:d7:c0:70:08:a5:89:db:a4: b3:64:7f:49:c2:4f:ce:e9:ca:99:bd:49:af:25:8c: 38:4f:a6:14:48:c2:df:dd:b0:3a:90:9a:be:4c:ac: 81:da:64:13:6a:55:0e:1c:90:52:30:bb:45:66:4a: 4c:45:11:44:27:7f:b6:35:f6:b6:9e:b8:69:ae:dd: 99:5d:34:5e:46:98:f1:2b:e2:11:5f:5e:95:30:e7: dc:20:b2:87:9e:b9:be:3f:24:68:1c:b8:ea:fd:dc: f4:b4:95:25:3f:ea:85:88:21:ad:ad:da:84:5e:21: 88:7f:87:26:d7:38:3e:d4:d4:78:48:58:f7:1b:b1: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4F:20:7C:93:56:D0:7A:05:DB:87:FE:FD:B5:DE:9B:A3:42:F2:93 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f3:ea:41:fe:8c:1a:65:a7:e6:7e:83:6e:fe:16:ca:17:36: 15:2c:f5:65:26:6b:c5:f1:48:0f:8b:10:3f:56:19:6b:21:fa: e2:16:ea:94:fc:d0:0c:ce:79:0e:7d:5f:5f:8a:3f:24:cf:a7: 92:cb:1b:12:ac:ec:27:6b:f6:ab:c9:5c:f8:62:07:50:bf:41: dd:cd:60:34:c9:74:b6:33:8e:13:ba:c1:40:29:62:50:80:b0: 54:1b:5a:d8:e7:00:98:2d:0c:20:61:3e:7b:9c:d1:0f:4c:c6: a8:40:52:e2:17:c8:4e:76:a0:8b:f2:01:ba:0e:06:12:a5:14: 97:c0:33:2e:3e:40:6f:12:4e:f4:d1:30:0d:1c:21:b1:aa:a8: c8:89:02:27:90:9c:69:33:a7:63:e9:09:0e:4a:21:e2:8f:73: 5a:24:d9:f0:e3:63:30:f6:e5:ce:d7:79:69:77:9a:b4:b0:82: d4:0e:85:de:6c:56:7b:d8:83:4e:70:33:da:df:42:f4:6c:b7: f4:8c:65:eb:f7:e1:17:c1:07:46:cd:f0:cd:8e:8d:39:01:22: d6:96:87:68:7d:89:78:c5:91:c1:20:bd:20:ee:e5:8c:ba:af: c4:2d:5b:9f:47:9e:67:1a:11:27:9c:a1:f3:81:aa:2c:88:66: 6c:07:b3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62jhS69rG7t5tdn04fAdSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwNjExMTIwMDI1WhcNMjYwNjEyMTIwMDI1WjAzMTEwLwYDVQQD EyhjYTRmMjA3YzkzNTZkMDdhMDVkYjg3ZmVmZGI1ZGU5YmEzNDJmMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDOwnsaocGe0mxyLNwK6TwIMTrvH HUza5/QXLyqrRLnFhHIABL/frWgcVeIfn63V+S/zdFi3pX46IofoDJqj0+fyoRKG V5QO5zXVn0gNFgm5eq1cAfh3Asw44+mfdgyUzL1RXL2RuayMCnYxdlnSB4LhHsTX y0Jm0jdNNBDm18BwCKWJ26SzZH9Jwk/O6cqZvUmvJYw4T6YUSMLf3bA6kJq+TKyB 2mQTalUOHJBSMLtFZkpMRRFEJ3+2Nfa2nrhprt2ZXTReRpjxK+IRX16VMOfcILKH nrm+PyRoHLjq/dz0tJUlP+qFiCGtrdqEXiGIf4cm1zg+1NR4SFj3G7HrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpPIHyTVtB6BduH/v213pujQvKTMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/PqQf6M GmWn5n6Dbv4Wyhc2FSz1ZSZrxfFID4sQP1YZayH64hbqlPzQDM55Dn1fX4o/JM+n kssbEqzsJ2v2q8lc+GIHUL9B3c1gNMl0tjOOE7rBQCliUICwVBta2OcAmC0MIGE+ e5zRD0zGqEBS4hfITnagi/IBug4GEqUUl8AzLj5AbxJO9NEwDRwhsaqoyIkCJ5Cc aTOnY+kJDkoh4o9zWiTZ8ONjMPblztd5aXeatLCC1A6F3mxWe9iDTnAz2t9C9Gy3 9Ixl6/fhF8EHRs3wzY6NOQEi1paHaH2JeMWRwSC9IO7ljLqvxC1bn0eeZxoRJ5yh 84GqLIhmbAezWw== -----END CERTIFICATE-----Generated at Thu Jun 11 20:31:29 2026 by rpki-client