$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: qNNp1ZJQkpsM5ru46EOT9cMALFiO8+/dp5/GxYfMpE4= Subject key identifier: 05:1D:8B:2C:D0:6E:09:FD:02:8E:0C:5C:76:16:74:7D:A2:A0:DE:1F Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019E9CCEBDEA4D3CC7417AB84C6DEA879257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1A5C Signing time: Sat 06 Jun 2026 12:00:55 +0000 Manifest this update: Sat 06 Jun 2026 12:00:55 +0000 Manifest next update: Sun 07 Jun 2026 12:00:55 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: FzphhSa/Dtr9TKtHSDoA/WjWQh1rCp2lIp0MuaNwdb4=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=) 11: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 12: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 13: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 14: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 04:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9c:ce:bd:ea:4d:3c:c7:41:7a:b8:4c:6d:ea:87:92:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jun 6 12:00:55 2026 GMT Not After : Jun 7 12:00:55 2026 GMT Subject: CN=051d8b2cd06e09fd028e0c5c7616747da2a0de1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:a6:ac:62:2a:cb:90:c8:59:9a:df:a9:28: 0b:01:f4:3a:cb:1e:4d:e7:09:a6:99:5b:98:ec:93: fa:b3:3e:55:d5:2e:ce:c6:51:da:dc:f4:f2:77:4d: 67:f8:c8:db:c9:87:04:4c:d5:74:ad:dc:c5:2b:a9: b3:3b:5d:cb:bb:50:d4:55:87:6d:c6:aa:e6:0e:f0: 64:c4:98:8e:78:f1:61:fc:34:ce:11:30:bc:50:fb: 44:3b:96:48:94:87:93:b6:07:da:75:a5:cf:f1:76: bd:e0:92:93:a4:1e:15:6a:b2:da:9f:a0:ed:3f:09: 1c:f8:ad:6b:d3:fa:92:fb:70:86:2f:8e:29:42:4f: 50:20:94:77:8d:cb:b9:32:71:28:19:a4:d3:1c:9d: e0:52:c2:78:5c:5e:43:13:04:99:fe:98:69:07:4d: 71:9c:45:a6:23:f8:44:47:3d:a4:12:ca:8a:a4:04: fc:7a:0c:08:16:54:83:7b:c8:20:77:99:2e:0f:43: 27:4b:f9:ef:9c:41:dd:7f:99:f0:77:52:f6:79:5e: 95:ba:89:fa:82:60:5f:46:8d:6e:74:78:56:57:a2: bc:7f:ea:4a:b4:15:c6:2f:67:6f:cb:f6:cf:f8:b9: ab:15:9f:96:10:f1:27:d5:1c:9b:b8:6b:87:25:47: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1D:8B:2C:D0:6E:09:FD:02:8E:0C:5C:76:16:74:7D:A2:A0:DE:1F X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b9:6f:de:bb:04:1b:a3:e9:90:32:a8:1c:e4:cf:9a:73:ff: ea:8e:09:43:67:b9:50:07:67:69:6b:5b:ff:b5:37:42:95:57: 61:ab:15:ed:3a:fc:40:25:e1:bc:09:1e:b0:ac:5c:de:01:e8: 71:fa:8e:43:7b:4f:4f:c8:7a:64:1a:c4:32:fe:08:31:1c:9b: 8e:b9:3e:5e:e1:8c:0a:61:23:f0:34:26:a4:ef:45:77:77:3c: de:84:ee:83:1c:51:43:ab:19:33:40:4a:5f:e4:4e:fb:c5:3d: 12:02:9e:a9:60:c3:3a:fb:56:4f:7f:e7:f4:02:b9:ca:e8:cc: 88:fd:69:bc:c2:a2:9b:77:4b:17:df:d8:ec:37:a2:9f:1d:b7: 35:20:6c:46:93:82:7a:52:a5:93:85:6f:c4:20:80:a9:cc:7d: 05:ac:cb:4e:68:91:c0:a0:2e:f4:50:8b:c9:0f:f7:f5:f9:ea: 09:f9:38:a6:42:b5:3c:39:ff:04:1e:6b:da:4b:b7:a6:55:98: 10:95:e5:ac:f0:f0:09:da:1a:1d:f7:b2:9d:75:35:44:98:6e: 90:b1:c1:49:23:48:57:3e:e4:bb:1a:a6:60:d0:49:27:36:d6: 4d:28:58:33:0b:14:06:d9:4f:b8:7e:f8:92:44:aa:60:3e:02: e3:8b:a4:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6czr3qTTzHQXq4TG3qh5JXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNjA2MTIwMDU1WhcNMjYwNjA3MTIwMDU1WjAzMTEwLwYDVQQD EygwNTFkOGIyY2QwNmUwOWZkMDI4ZTBjNWM3NjE2NzQ3ZGEyYTBkZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPamrGIqy5DIWZrfqSgLAfQ6yx5N 5wmmmVuY7JP6sz5V1S7OxlHa3PTyd01n+MjbyYcETNV0rdzFK6mzO13Lu1DUVYdt xqrmDvBkxJiOePFh/DTOETC8UPtEO5ZIlIeTtgfadaXP8Xa94JKTpB4VarLan6Dt Pwkc+K1r0/qS+3CGL44pQk9QIJR3jcu5MnEoGaTTHJ3gUsJ4XF5DEwSZ/phpB01x nEWmI/hERz2kEsqKpAT8egwIFlSDe8ggd5kuD0MnS/nvnEHdf5nwd1L2eV6Vuon6 gmBfRo1udHhWV6K8f+pKtBXGL2dvy/bP+LmrFZ+WEPEn1RybuGuHJUcDLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUdiyzQbgn9Ao4MXHYWdH2ioN4fMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLlv3rsE G6PpkDKoHOTPmnP/6o4JQ2e5UAdnaWtb/7U3QpVXYasV7Tr8QCXhvAkesKxc3gHo cfqOQ3tPT8h6ZBrEMv4IMRybjrk+XuGMCmEj8DQmpO9Fd3c83oTugxxRQ6sZM0BK X+RO+8U9EgKeqWDDOvtWT3/n9AK5yujMiP1pvMKim3dLF9/Y7Deinx23NSBsRpOC elKlk4VvxCCAqcx9BazLTmiRwKAu9FCLyQ/39fnqCfk4pkK1PDn/BB5r2ku3plWY EJXlrPDwCdoaHfeynXU1RJhukLHBSSNIVz7kuxqmYNBJJzbWTShYMwsUBtlPuH74 kkSqYD4C44ukKg== -----END CERTIFICATE-----Generated at Sat Jun 6 13:25:59 2026 by rpki-client