$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: mUQCUgHrf9Cknich9QB+l5eiqUDyY/ZlA2aqJxB+7YA= Subject key identifier: C8:68:5A:74:B6:8B:CD:AC:54:95:5E:A7:97:37:10:6F:7C:50:AD:03 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019EE21E8CD22F85AB6B94BE571B55C15D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 12DF Signing time: Fri 19 Jun 2026 23:01:53 +0000 Manifest this update: Fri 19 Jun 2026 23:01:53 +0000 Manifest next update: Sat 20 Jun 2026 23:01:53 +0000 Files and hashes: 1: 1ry6dgAjbcA9Vxe_CaUTivwraGw.roa (hash: Tp3u22oMArnoURTZef0Da/cKIsTOsl6oiGZZNulLs5Y=) 2: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=) 3: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 7irP0wqnDgUhBPF2+iBg6ZiiswGDTAo6Xoroz98l2hE=) 4: F9sOFhGwXAaixZhiKbOZTTQcajY.roa (hash: TzbjeUNO5viiVpucy3wHmnjnPx1dcWJJadQ/3w/f5DE=) 5: GSyFhlRd0WEh2HwHoPQ3xfwSIPk.roa (hash: vVGVQ1N3GA4LCIRkvyUtnsRCyLcmBYjOq9Mdp31x/cA=) 6: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=) 7: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=) 8: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=) 9: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=) 10: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=) 11: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=) 12: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=) 13: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=) 14: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e2:1e:8c:d2:2f:85:ab:6b:94:be:57:1b:55:c1:5d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jun 19 23:01:53 2026 GMT Not After : Jun 20 23:01:53 2026 GMT Subject: CN=c8685a74b68bcdac54955ea79737106f7c50ad03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:49:21:85:ad:db:ff:8e:83:db:e9:29:8c: 2c:9b:bb:34:48:20:97:a9:71:04:db:2b:48:a0:4e: 68:fa:0c:cb:60:e1:4a:30:c2:07:42:9d:20:df:75: 65:63:30:c3:8b:9f:c1:92:b0:09:d2:6c:2e:f9:57: 73:05:ef:ed:ad:59:f6:a4:24:88:e5:73:03:5f:68: e8:1e:07:e8:e6:39:77:61:05:eb:57:4a:9c:3c:06: eb:b0:4b:6e:67:05:27:ae:31:3a:13:3a:5c:c9:1e: 64:e7:5a:90:d5:34:ef:18:22:85:63:24:a4:82:69: 62:0d:59:f8:e9:e1:93:e3:8f:6e:86:50:8a:e5:21: 0d:58:47:31:2b:5f:22:f8:7a:69:cb:a3:1c:d2:9a: 47:a9:9c:7f:3d:0a:66:ca:4d:b7:dc:f0:e6:11:37: 9f:d8:16:d7:c0:43:8f:ca:6b:66:a2:33:89:0b:f4: 07:d0:5f:3b:0d:d9:55:97:03:13:aa:32:e1:a4:ef: 32:d3:49:cd:30:da:99:30:f6:a4:a3:3f:88:25:82: 84:f1:a6:9e:9a:0c:d3:0e:ee:e4:f5:1c:28:ce:5c: c7:d5:df:a2:2b:4f:10:75:44:74:bf:83:7c:30:f9: 31:55:80:b6:67:ee:11:4e:ab:0c:ff:1f:42:e7:49: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:68:5A:74:B6:8B:CD:AC:54:95:5E:A7:97:37:10:6F:7C:50:AD:03 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:b5:09:05:ca:9a:90:8b:7b:27:f6:66:62:21:1a:33:9e: 50:dd:73:59:8a:e0:b8:fa:ea:73:5a:c0:33:ce:41:46:3b:50: 98:7b:6c:1d:30:f7:d0:a2:7a:4c:ef:68:44:11:cc:6f:5b:c4: 6a:8e:8f:a3:6f:29:29:a3:67:54:82:31:c4:e2:7d:98:4a:c7: ff:29:68:5f:3a:19:46:31:0a:e0:31:9b:de:cf:0b:da:e4:50: 77:a9:05:3e:86:a5:62:c4:75:57:c6:95:6f:bb:78:3f:b6:be: db:92:12:2e:58:c9:bb:2e:8d:b9:d0:14:7f:50:78:19:9e:bf: f7:6d:7a:69:21:d4:36:11:f0:f8:ac:f0:98:6f:81:ae:9d:f5: cd:ac:04:af:07:f9:7b:8c:c4:54:86:43:23:32:13:69:f7:80: 34:ca:aa:bf:fb:d1:1e:c4:6e:d7:f9:35:db:46:fa:c6:3d:9f: 21:9b:d2:97:c8:e5:81:e3:b4:db:25:b7:6b:c6:82:98:9b:42: 08:b9:7a:03:eb:0a:2b:87:dd:bb:4e:98:8d:b6:c4:14:8d:38: 40:07:e4:68:4b:14:2c:8e:8a:de:0c:0d:93:ab:d7:75:8f:b0: ea:d0:6e:9c:bc:15:c7:c3:35:46:dd:3a:90:20:ce:75:9e:c3: 67:7a:93:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7iHozSL4Wra5S+VxtVwV0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwNjE5MjMwMTUzWhcNMjYwNjIwMjMwMTUzWjAzMTEwLwYDVQQD EyhjODY4NWE3NGI2OGJjZGFjNTQ5NTVlYTc5NzM3MTA2ZjdjNTBhZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf9JIYWt2/+Og9vpKYwsm7s0SCCX qXEE2ytIoE5o+gzLYOFKMMIHQp0g33VlYzDDi5/BkrAJ0mwu+VdzBe/trVn2pCSI 5XMDX2joHgfo5jl3YQXrV0qcPAbrsEtuZwUnrjE6EzpcyR5k51qQ1TTvGCKFYySk gmliDVn46eGT449uhlCK5SENWEcxK18i+Hppy6Mc0ppHqZx/PQpmyk233PDmETef 2BbXwEOPymtmojOJC/QH0F87DdlVlwMTqjLhpO8y00nNMNqZMPakoz+IJYKE8aae mgzTDu7k9RwozlzH1d+iK08QdUR0v4N8MPkxVYC2Z+4RTqsM/x9C50lYowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhoWnS2i82sVJVep5c3EG98UK0DMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVW1CQXK mpCLeyf2ZmIhGjOeUN1zWYrguPrqc1rAM85BRjtQmHtsHTD30KJ6TO9oRBHMb1vE ao6Po28pKaNnVIIxxOJ9mErH/yloXzoZRjEK4DGb3s8L2uRQd6kFPoalYsR1V8aV b7t4P7a+25ISLljJuy6NudAUf1B4GZ6/9216aSHUNhHw+KzwmG+Brp31zawErwf5 e4zEVIZDIzITafeANMqqv/vRHsRu1/k120b6xj2fIZvSl8jlgeO02yW3a8aCmJtC CLl6A+sKK4fdu06YjbbEFI04QAfkaEsULI6K3gwNk6vXdY+w6tBunLwVx8M1Rt06 kCDOdZ7DZ3qTeA== -----END CERTIFICATE-----Generated at Sat Jun 20 03:13:56 2026 by rpki-client