$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: t4I4vS6TDCyuWR7D0deagjP4UjwC8EPa/KSqzU+2wLA= Subject key identifier: 55:C1:73:E9:49:B5:F2:34:81:3A:66:CB:E6:B6:0D:18:A1:AB:50:A8 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019F1A8D7F16FCB7AA78E1184B63C3109550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 19BA Signing time: Tue 30 Jun 2026 22:01:48 +0000 Manifest this update: Tue 30 Jun 2026 22:01:48 +0000 Manifest next update: Wed 01 Jul 2026 22:01:48 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: pDP1MapWAgsiE3hXKYslrhvnWoLl95UOvLqRz5pbM9w=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 4: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 5: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 6: JN5Xl2itZnfoN1-AHrSGf0M9a-A.roa (hash: PeeO/UBb3bHdKEGFa7zXlFuiaEiMJi1ody98bu4CNSk=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: Y1o82bE2-gHB1r-LJfG7FW6CDno.roa (hash: M0bYY1tvqoKKPy6ihZHMLQgzM3Djtdt9R4G+PSmX6ng=) 9: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 13: r9RKCxC-bJSZP5eNLFlTH-P45J4.roa (hash: 7LAwVur+A67mmGnNZEsZn6jtCdt4Y9Ty6Li1zYtAdB4=) 14: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 20:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1a:8d:7f:16:fc:b7:aa:78:e1:18:4b:63:c3:10:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jun 30 22:01:48 2026 GMT Not After : Jul 1 22:01:48 2026 GMT Subject: CN=55c173e949b5f234813a66cbe6b60d18a1ab50a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:10:69:b9:c5:6b:8e:c7:04:bb:d9:fb:3f: 91:cc:c5:f1:79:8f:c1:ba:ba:ba:7a:70:c9:f3:0f: 85:3f:ba:28:95:a8:0b:55:35:ad:56:e1:ea:4e:e2: ea:0d:1e:1b:98:f5:6a:79:78:d5:53:2f:fb:7e:26: ba:d9:11:73:04:45:b6:c3:11:29:25:e8:81:0a:e7: 3e:eb:d6:65:df:07:4b:15:1c:f0:aa:4a:ca:22:94: c0:39:f2:87:d6:92:59:38:6f:51:75:39:66:7e:3e: 6b:1c:3f:ed:25:1e:15:a9:8f:80:59:19:c0:6e:1a: 03:42:3e:22:9a:ae:34:bc:4c:18:0f:4e:ec:61:93: 65:d0:98:35:ac:99:67:b1:c6:9b:fb:37:54:d6:19: c3:48:8e:16:c0:c7:a8:8c:57:42:83:cc:72:ff:36: 0b:4a:44:2e:ff:41:57:5d:bf:4b:b2:e7:6d:fc:40: 54:78:5a:4f:de:6a:a6:3d:a2:f6:93:5c:09:3c:f5: d0:d0:6c:31:46:d5:52:80:56:29:35:4c:89:2d:0a: b4:7f:b4:61:7e:a2:ab:38:54:df:3d:ad:13:96:cd: ff:9d:66:6b:5a:61:a6:b6:9e:e0:68:d7:f6:a2:08: ef:30:54:f9:d3:cc:7f:62:b4:c2:5c:37:f0:ef:95: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C1:73:E9:49:B5:F2:34:81:3A:66:CB:E6:B6:0D:18:A1:AB:50:A8 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:e8:98:dd:28:70:67:6b:a0:1d:79:43:b4:5f:1d:88:43: fc:46:f8:d9:dd:18:cd:88:eb:f3:35:96:98:3e:d6:b8:23:dd: a5:cd:44:1f:01:3c:ba:50:0e:cc:82:fa:db:75:15:71:4c:ae: e5:f5:25:32:2a:a1:8f:c6:3b:0b:ad:34:bf:16:e4:26:28:b1: 16:c9:16:3d:76:22:c5:07:11:a1:b6:b2:86:f1:20:a6:dd:ca: c6:dc:5d:48:0c:dd:c8:74:99:3d:cf:4b:18:aa:9c:d3:12:93: db:b8:09:c3:e8:bd:6d:2a:4f:9c:f5:86:af:a7:7a:35:d7:4e: 36:65:12:95:a9:85:38:a2:9d:69:0f:5f:4f:9e:5a:4b:58:00: c4:c9:d3:e1:23:c4:4d:b0:ce:c3:1f:a7:66:b1:3c:a0:9d:1d: 01:c7:27:fa:37:be:4a:17:50:7d:33:e6:25:be:fa:2b:dc:15: 48:2a:4d:e2:cd:d2:2e:ea:9e:6d:d5:b5:b9:f7:ca:86:55:a3: 2d:52:13:23:e7:6a:bd:51:4e:37:f2:9c:d4:ca:06:a3:0d:f9: f4:91:a1:3a:1d:9b:d6:c5:91:00:b1:95:dc:0e:19:25:5d:f5: c4:2c:4b:0d:6b:02:73:4f:34:9c:82:65:85:13:ce:80:44:87: 27:6c:28:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8ajX8W/LeqeOEYS2PDEJVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwNjMwMjIwMTQ4WhcNMjYwNzAxMjIwMTQ4WjAzMTEwLwYDVQQD Eyg1NWMxNzNlOTQ5YjVmMjM0ODEzYTY2Y2JlNmI2MGQxOGExYWI1MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz4QabnFa47HBLvZ+z+RzMXxeY/B urq6enDJ8w+FP7oolagLVTWtVuHqTuLqDR4bmPVqeXjVUy/7fia62RFzBEW2wxEp JeiBCuc+69Zl3wdLFRzwqkrKIpTAOfKH1pJZOG9RdTlmfj5rHD/tJR4VqY+AWRnA bhoDQj4imq40vEwYD07sYZNl0Jg1rJlnscab+zdU1hnDSI4WwMeojFdCg8xy/zYL SkQu/0FXXb9Lsudt/EBUeFpP3mqmPaL2k1wJPPXQ0GwxRtVSgFYpNUyJLQq0f7Rh fqKrOFTfPa0Tls3/nWZrWmGmtp7gaNf2ogjvMFT508x/YrTCXDfw75V/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXBc+lJtfI0gTpmy+a2DRihq1CoMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgbomN0o cGdroB15Q7RfHYhD/Eb42d0YzYjr8zWWmD7WuCPdpc1EHwE8ulAOzIL623UVcUyu 5fUlMiqhj8Y7C600vxbkJiixFskWPXYixQcRobayhvEgpt3KxtxdSAzdyHSZPc9L GKqc0xKT27gJw+i9bSpPnPWGr6d6NddONmUSlamFOKKdaQ9fT55aS1gAxMnT4SPE TbDOwx+nZrE8oJ0dAccn+je+ShdQfTPmJb76K9wVSCpN4s3SLuqebdW1uffKhlWj LVITI+dqvVFON/Kc1MoGow359JGhOh2b1sWRALGV3A4ZJV31xCxLDWsCc080nIJl hRPOgESHJ2woOg== -----END CERTIFICATE-----Generated at Wed Jul 1 03:18:22 2026 by rpki-client