$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: 97hTYa7oONFOH+Zavc7FuSX289NWRdkG+scw7Z+vlY4= Subject key identifier: BD:C2:1F:00:E7:88:46:5F:7C:DB:3A:73:09:B4:88:F5:B4:87:DB:DB Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019EB76AA833926559C68557052BB1181C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1961 Signing time: Thu 11 Jun 2026 16:01:20 +0000 Manifest this update: Thu 11 Jun 2026 16:01:20 +0000 Manifest next update: Fri 12 Jun 2026 16:01:20 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: QYB/L0g/niEatJNgHKMzWbMX5j4DDwOIRmRolB9MxRM=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: frdjE4Wx38p5EUYNv0lgccc2f1Q.roa (hash: JurRqiiO3KqAIZd8NOglvrx6zYK4Dcv5SLr7KkdNG1w=) 6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:6a:a8:33:92:65:59:c6:85:57:05:2b:b1:18:1c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jun 11 16:01:20 2026 GMT Not After : Jun 12 16:01:20 2026 GMT Subject: CN=bdc21f00e788465f7cdb3a7309b488f5b487dbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:49:2c:cc:f1:98:0a:d1:2a:06:fb:0f:fc: ea:6c:c2:02:78:d7:b7:fb:1d:18:c0:fe:b7:d2:4e: 7e:29:71:06:13:16:29:34:b2:6c:14:21:ff:24:d4: 50:aa:0c:49:01:4a:cf:5d:b2:cd:83:df:b7:c7:35: ab:43:4d:04:24:76:e9:b4:e5:5f:30:39:b4:52:39: 96:b2:d0:b3:09:fd:61:99:a0:49:79:6f:f7:a9:d7: a9:8a:30:42:66:21:12:71:2b:95:54:0f:4c:f7:2f: 30:ec:82:e1:47:38:b5:38:6c:fb:13:26:1f:61:ea: 6d:3b:82:c0:cd:46:ca:16:f3:a8:a4:0e:d6:3b:8d: 7d:f0:98:55:d5:30:63:fc:0a:ce:b2:33:f8:3b:aa: de:69:70:48:12:fe:0c:21:43:4d:2b:1a:e7:af:49: 9c:07:ea:77:fb:42:98:dc:e9:d0:c7:96:78:37:07: f8:ae:67:2e:d8:12:b5:03:8a:db:3b:9f:6e:19:03: 45:46:d2:59:22:db:4d:e0:70:65:23:c9:61:16:87: 75:2a:36:59:ed:3f:71:89:cd:09:6e:3e:e5:26:10: c0:f2:71:8d:91:18:82:c3:e9:48:72:c8:8c:b9:38: 8e:62:2b:00:b5:ff:2d:2e:bd:a2:74:32:8d:85:f8: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:1F:00:E7:88:46:5F:7C:DB:3A:73:09:B4:88:F5:B4:87:DB:DB X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:b2:d5:55:3a:08:71:96:08:93:a1:db:18:3f:fe:92:b7: a8:6f:19:86:55:66:b5:f0:8c:cc:b1:35:93:0c:ab:64:91:de: d3:4b:3f:aa:c9:e3:e8:98:65:0e:28:dc:60:8e:b3:c4:d3:d6: 0a:c4:6e:2e:86:3d:fd:fe:f2:f2:ef:ab:e1:da:26:a1:41:f4: 92:36:04:9e:d5:e1:66:bd:d9:a3:65:63:72:0d:07:a7:d6:6c: bc:1d:84:f9:00:a5:81:13:33:2d:b0:6b:2a:11:75:82:b5:fc: 9f:01:da:5e:f7:08:ec:1a:4d:81:20:98:e6:58:08:24:b4:d1: 66:f5:36:d5:3f:f3:c6:36:46:fc:d6:20:58:6f:77:7c:24:41: a8:75:56:30:9f:b0:d2:86:06:5b:ea:69:3e:81:32:80:74:40: 4e:5d:c6:7c:d7:a9:c5:61:95:1f:2a:fc:8a:b4:e0:26:63:08: 38:ce:6d:10:fa:52:3a:b0:94:b4:1a:ab:e7:0a:e8:ab:6e:14: 22:c8:5f:9b:9b:80:ac:dc:42:5e:de:ed:2d:5a:e6:69:3d:42: cc:84:05:3c:20:d4:8c:4c:e8:8d:ae:03:6c:bf:af:3f:59:28: f4:8b:a7:3f:57:fa:09:21:6a:54:d0:8f:1a:16:0b:d1:89:a5: 8d:2a:84:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63aqgzkmVZxoVXBSuxGByWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwNjExMTYwMTIwWhcNMjYwNjEyMTYwMTIwWjAzMTEwLwYDVQQD EyhiZGMyMWYwMGU3ODg0NjVmN2NkYjNhNzMwOWI0ODhmNWI0ODdkYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMpJLMzxmArRKgb7D/zqbMICeNe3 +x0YwP630k5+KXEGExYpNLJsFCH/JNRQqgxJAUrPXbLNg9+3xzWrQ00EJHbptOVf MDm0UjmWstCzCf1hmaBJeW/3qdepijBCZiEScSuVVA9M9y8w7ILhRzi1OGz7EyYf YeptO4LAzUbKFvOopA7WO4198JhV1TBj/ArOsjP4O6reaXBIEv4MIUNNKxrnr0mc B+p3+0KY3OnQx5Z4Nwf4rmcu2BK1A4rbO59uGQNFRtJZIttN4HBlI8lhFod1KjZZ 7T9xic0Jbj7lJhDA8nGNkRiCw+lIcsiMuTiOYisAtf8tLr2idDKNhfgNdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3CHwDniEZffNs6cwm0iPW0h9vbMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcGy1VU6 CHGWCJOh2xg//pK3qG8ZhlVmtfCMzLE1kwyrZJHe00s/qsnj6JhlDijcYI6zxNPW CsRuLoY9/f7y8u+r4domoUH0kjYEntXhZr3Zo2Vjcg0Hp9ZsvB2E+QClgRMzLbBr KhF1grX8nwHaXvcI7BpNgSCY5lgIJLTRZvU21T/zxjZG/NYgWG93fCRBqHVWMJ+w 0oYGW+ppPoEygHRATl3GfNepxWGVHyr8irTgJmMIOM5tEPpSOrCUtBqr5wroq24U Ishfm5uArNxCXt7tLVrmaT1CzIQFPCDUjEzoja4DbL+vP1ko9IunP1f6CSFqVNCP GhYL0YmljSqE+A== -----END CERTIFICATE-----Generated at Thu Jun 11 23:17:47 2026 by rpki-client