$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: b2svx5U+89xRaWAstpRxkU/f1cEasD5Q647CsNGW4Qk= Subject key identifier: E1:74:DE:E9:BF:F4:CF:18:60:4B:DD:80:7C:8B:4E:C0:A9:A1:4A:B0 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019F10E523FE36F95977B33A4A976D5FA203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 19A1 Signing time: Mon 29 Jun 2026 01:01:20 +0000 Manifest this update: Mon 29 Jun 2026 01:01:20 +0000 Manifest next update: Tue 30 Jun 2026 01:01:20 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 4: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 5: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 8: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: vdBg0GawExZwSNAGC13VnfGtI2Lf6GBwMbc1VSdE+BE=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:10:e5:23:fe:36:f9:59:77:b3:3a:4a:97:6d:5f:a2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Jun 29 01:01:20 2026 GMT Not After : Jun 30 01:01:20 2026 GMT Subject: CN=e174dee9bff4cf18604bdd807c8b4ec0a9a14ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:54:32:c4:c4:8f:e1:3d:5c:4b:f4:6e:d2: ed:21:c4:ce:86:b4:d7:cc:53:6e:60:39:83:2d:dd: 2b:3a:65:71:2b:f7:e6:a6:7d:fa:03:1c:a0:48:5b: 5c:ff:a3:45:b7:ce:1d:5c:b1:6a:7d:27:ac:2a:e8: bf:1b:a4:f0:dc:06:06:30:1b:cc:cb:98:fe:8c:e3: 8b:db:61:cc:b8:92:f8:0b:01:d2:c3:88:11:02:cf: 08:3d:a4:4b:07:14:c7:48:25:46:15:21:39:9a:60: c3:f5:6b:8e:9a:60:19:8a:31:f6:65:41:6f:8b:68: c0:16:56:b0:c5:34:47:eb:26:88:ff:d0:68:ba:4d: 73:ef:e2:52:26:ba:ad:fd:e8:5c:08:f8:fa:96:98: 68:3f:62:43:67:76:20:26:07:17:6c:37:a1:45:e9: bb:2a:e8:19:51:ab:8a:5b:6c:64:08:3f:00:1d:19: 33:38:6a:5f:5c:41:70:bc:4a:29:20:5c:c2:27:7c: 9e:47:2a:4b:1c:cb:3f:43:6d:aa:90:96:a6:be:93: c5:17:52:60:73:c9:b3:83:45:de:b5:39:18:ff:32: 7b:5e:d1:22:5a:f1:e0:f4:a4:a0:64:d5:66:37:97: 11:57:9f:eb:d8:9a:b5:5b:df:19:6c:41:ea:91:84: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:DE:E9:BF:F4:CF:18:60:4B:DD:80:7C:8B:4E:C0:A9:A1:4A:B0 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:52:ca:b0:89:08:aa:c1:d4:d9:3c:ea:9a:95:04:23:ac:42: 43:c6:b8:f4:10:0a:ce:55:48:b3:aa:25:b2:b6:95:ca:c8:36: c1:9a:da:5e:8c:b1:34:9e:b6:8c:69:85:f6:62:ec:d2:90:6b: 80:39:17:e6:3a:98:f1:17:87:a6:1b:af:02:b1:ca:e9:ce:3e: 01:0c:4d:c6:91:d9:14:50:9d:2a:95:a6:8b:69:c9:64:b7:05: 04:2a:c0:f3:a4:ab:72:7b:cc:76:14:08:e4:87:35:10:b9:25: 93:8a:9c:c3:9b:e6:4d:6c:06:71:ab:d3:27:7e:1c:4c:09:cb: 23:f4:3a:23:17:be:c1:8a:fe:6e:62:85:d1:a8:fa:57:7b:1a: fb:d0:67:87:41:02:0c:a1:fa:b1:eb:5e:e5:2a:66:0f:d1:60: f7:4f:a8:84:53:94:e1:48:d3:10:e6:6f:7f:82:a7:0f:ae:e3: 55:98:c0:36:57:c8:6c:23:36:a4:27:80:86:3d:76:ea:6d:61: b2:b6:15:41:85:f7:0a:9f:aa:11:f0:e3:f6:62:9d:48:35:d5: 2e:a4:03:99:c9:87:99:e8:ad:ab:ea:a8:80:e2:1c:e2:c8:20: 55:20:41:c6:65:a3:44:ed:6a:7e:d6:f6:d4:30:ef:bc:4b:2b: cd:c2:c8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8Q5SP+NvlZd7M6SpdtX6IDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwNjI5MDEwMTIwWhcNMjYwNjMwMDEwMTIwWjAzMTEwLwYDVQQD EyhlMTc0ZGVlOWJmZjRjZjE4NjA0YmRkODA3YzhiNGVjMGE5YTE0YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogdUMsTEj+E9XEv0btLtIcTOhrTX zFNuYDmDLd0rOmVxK/fmpn36AxygSFtc/6NFt84dXLFqfSesKui/G6Tw3AYGMBvM y5j+jOOL22HMuJL4CwHSw4gRAs8IPaRLBxTHSCVGFSE5mmDD9WuOmmAZijH2ZUFv i2jAFlawxTRH6yaI/9Bouk1z7+JSJrqt/ehcCPj6lphoP2JDZ3YgJgcXbDehRem7 KugZUauKW2xkCD8AHRkzOGpfXEFwvEopIFzCJ3yeRypLHMs/Q22qkJamvpPFF1Jg c8mzg0XetTkY/zJ7XtEiWvHg9KSgZNVmN5cRV5/r2Jq1W98ZbEHqkYQFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF03um/9M8YYEvdgHyLTsCpoUqwMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1LKsIkI qsHU2TzqmpUEI6xCQ8a49BAKzlVIs6olsraVysg2wZraXoyxNJ62jGmF9mLs0pBr gDkX5jqY8ReHphuvArHK6c4+AQxNxpHZFFCdKpWmi2nJZLcFBCrA86SrcnvMdhQI 5Ic1ELklk4qcw5vmTWwGcavTJ34cTAnLI/Q6Ixe+wYr+bmKF0aj6V3sa+9Bnh0EC DKH6sete5SpmD9Fg90+ohFOU4UjTEOZvf4KnD67jVZjANlfIbCM2pCeAhj126m1h srYVQYX3Cp+qEfDj9mKdSDXVLqQDmcmHmeitq+qogOIc4sggVSBBxmWjRO1qftb2 1DDvvEsrzcLInQ== -----END CERTIFICATE-----Generated at Mon Jun 29 10:43:40 2026 by rpki-client