$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: FoE9j6NaNAbxIwwTZMeFqyKkO2KfPtBCqLiiyxHT7u0= Subject key identifier: 03:B8:99:C2:50:F2:D9:30:4A:FB:67:16:47:06:6E:E7:17:2A:12:B2 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019F1340E63212E9BCD66F7CA93389B17529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 19CC Signing time: Mon 29 Jun 2026 12:00:47 +0000 Manifest this update: Mon 29 Jun 2026 12:00:47 +0000 Manifest next update: Tue 30 Jun 2026 12:00:47 +0000 Files and hashes: 1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=) 2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=) 3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=) 5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=) 7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: i5ALWvDcPafSK5PGOxfpTgT1NdFixtYX+4GXC1gxe1M=) 8: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 9: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=) 10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:13:40:e6:32:12:e9:bc:d6:6f:7c:a9:33:89:b1:75:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jun 29 12:00:47 2026 GMT Not After : Jun 30 12:00:47 2026 GMT Subject: CN=03b899c250f2d9304afb671647066ee7172a12b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:be:b6:8e:0d:02:42:e4:04:ea:30:e0:a4: a0:56:b9:5a:f0:75:1f:36:30:88:2c:6c:9e:50:c0: 16:e5:ab:a5:07:a1:5d:d3:5a:b9:ab:84:c8:da:6c: 12:b5:1e:9e:87:cf:80:b4:c3:9c:0e:c9:85:57:b8: 33:2a:49:f5:b6:10:6b:eb:a2:49:1c:00:4e:91:c1: a4:e9:9d:d5:b0:a4:75:ce:e8:e7:ec:38:a0:d4:83: 09:57:34:9e:b5:b8:dd:b3:41:88:c6:b9:9d:a8:63: db:3e:1b:dd:b1:fd:e7:1e:52:c6:23:17:d3:5e:1f: f2:58:b2:a2:4a:92:cb:d6:03:0b:7c:03:0c:c9:03: 3a:30:e9:c0:d5:d3:0f:74:0c:e9:51:3f:aa:85:bc: da:40:6d:e4:2a:8d:d0:de:c9:a1:e0:0e:fe:2e:39: d6:9b:15:75:df:ec:da:0a:7d:18:e2:10:b5:e6:89: 14:cc:09:3b:d9:b9:60:57:e9:96:aa:0d:81:69:46: a3:4a:a4:95:0b:ac:b6:4e:dc:e9:ef:7d:9a:11:5a: 7e:df:f0:69:d6:26:fa:24:53:b8:c5:98:81:ed:c2: a0:9f:69:d4:ac:dc:8a:1c:7d:5a:f6:43:b0:fb:da: b8:a8:88:fa:be:0d:cf:65:ff:67:fe:72:27:78:e5: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B8:99:C2:50:F2:D9:30:4A:FB:67:16:47:06:6E:E7:17:2A:12:B2 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b3:93:b3:92:bb:08:fa:b5:7d:58:bc:f4:d0:2b:6d:0f:67: 28:76:38:9a:e9:6c:7f:26:7b:6d:77:e4:b6:34:af:39:a9:64: 13:16:20:32:37:a8:b8:81:a9:f3:94:6a:dc:52:fd:d8:66:a5: 00:29:25:91:ea:65:e9:16:33:75:15:c7:6f:17:6d:a5:06:d9: 72:c8:58:c3:81:7d:4e:df:40:32:41:fc:4b:e7:3a:fd:f1:4e: 70:d5:00:67:d3:c6:ed:b3:7d:10:3a:43:a0:42:44:76:33:b9: 77:b5:c3:0e:a8:dc:f0:62:3b:0b:f5:61:6a:6e:be:5c:6a:b0: c0:a7:97:89:d3:9e:05:71:66:2e:b7:81:88:c2:8f:50:2d:bb: 18:70:bf:5d:95:13:43:33:be:9e:ed:7a:6e:5d:08:b5:5f:34: 61:57:7f:d6:0a:3b:38:2c:78:5b:f2:f2:af:e3:7c:66:1b:f4: 7d:8b:b4:65:c4:2c:a5:ba:4b:87:26:3a:d6:0a:0f:da:c0:e3: 33:81:f7:bb:8d:75:15:17:9f:7c:fb:ae:7e:a5:ba:0a:d3:78: 3f:0c:b7:08:52:2e:d0:00:07:a3:16:78:c4:7b:63:64:cb:eb: 6c:d9:e2:d2:9f:dc:41:47:11:ab:ce:7f:9d:4b:e5:f5:b6:52: c2:9f:df:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8TQOYyEum81m98qTOJsXUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwNjI5MTIwMDQ3WhcNMjYwNjMwMTIwMDQ3WjAzMTEwLwYDVQQD EygwM2I4OTljMjUwZjJkOTMwNGFmYjY3MTY0NzA2NmVlNzE3MmExMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaO+to4NAkLkBOow4KSgVrla8HUf NjCILGyeUMAW5aulB6Fd01q5q4TI2mwStR6eh8+AtMOcDsmFV7gzKkn1thBr66JJ HABOkcGk6Z3VsKR1zujn7Dig1IMJVzSetbjds0GIxrmdqGPbPhvdsf3nHlLGIxfT Xh/yWLKiSpLL1gMLfAMMyQM6MOnA1dMPdAzpUT+qhbzaQG3kKo3Q3smh4A7+LjnW mxV13+zaCn0Y4hC15okUzAk72blgV+mWqg2BaUajSqSVC6y2Ttzp732aEVp+3/Bp 1ib6JFO4xZiB7cKgn2nUrNyKHH1a9kOw+9q4qIj6vg3PZf9n/nIneOXQSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO4mcJQ8tkwSvtnFkcGbucXKhKyMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7OTs5K7 CPq1fVi89NArbQ9nKHY4mulsfyZ7bXfktjSvOalkExYgMjeouIGp85Rq3FL92Gal ACklkepl6RYzdRXHbxdtpQbZcshYw4F9Tt9AMkH8S+c6/fFOcNUAZ9PG7bN9EDpD oEJEdjO5d7XDDqjc8GI7C/Vham6+XGqwwKeXidOeBXFmLreBiMKPUC27GHC/XZUT QzO+nu16bl0ItV80YVd/1go7OCx4W/Lyr+N8Zhv0fYu0ZcQspbpLhyY61goP2sDj M4H3u411FReffPuufqW6CtN4Pwy3CFIu0AAHoxZ4xHtjZMvrbNni0p/cQUcRq85/ nUvl9bZSwp/frA== -----END CERTIFICATE-----Generated at Mon Jun 29 15:42:46 2026 by rpki-client