$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: T+ZgPsRDFkzPBCOA1PpAlrbE+p/VJ8RWTR05qmf7Kt0= Subject key identifier: D9:CD:BA:4C:B6:CA:18:7A:32:CE:69:E8:A0:52:4D:8D:4C:62:5C:CB Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019EEC6A9333191007426ADBCC5E7B4C498E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 1993 Signing time: Sun 21 Jun 2026 23:01:07 +0000 Manifest this update: Sun 21 Jun 2026 23:01:07 +0000 Manifest next update: Mon 22 Jun 2026 23:01:07 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: QAH+nOSQTrobQ1WncAoYtg02U8KnvKTl87jeuXHDbcc=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Jun 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ec:6a:93:33:19:10:07:42:6a:db:cc:5e:7b:4c:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jun 21 23:01:07 2026 GMT Not After : Jun 22 23:01:07 2026 GMT Subject: CN=d9cdba4cb6ca187a32ce69e8a0524d8d4c625ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:22:73:32:6b:86:3f:80:ff:62:29:c4:17: 23:de:ab:e1:43:bb:59:c3:42:4e:7b:8b:d3:7a:ba: 6e:3b:2e:5e:e0:d1:37:40:24:47:5e:cc:34:f1:f5: d2:36:f1:07:94:96:d7:29:5a:03:f8:13:0f:78:ab: e6:ed:d8:e3:c7:d4:61:d6:21:b5:0e:c6:71:3f:87: 84:20:8c:f5:45:8a:1f:28:3b:e9:4d:c5:bf:48:11: a4:38:b9:80:77:9f:d1:00:83:9e:8d:d9:3e:9c:ea: 4e:79:40:da:79:ef:c0:02:c7:99:1b:b4:f3:03:59: 70:a7:4d:8a:e2:97:15:32:5a:e4:9c:46:6c:ab:9f: 14:db:9e:09:da:82:38:f1:4d:db:96:9b:01:7e:db: 21:53:e4:93:1b:68:cd:b2:35:54:e7:b5:d6:60:a9: 54:e3:59:09:0d:e7:2a:94:e6:8a:36:70:50:26:61: d7:d5:00:35:e1:80:09:72:9d:51:a1:1a:ff:cb:58: 11:db:1b:b7:e9:b2:91:ac:4d:82:25:49:60:e0:34: 91:9e:99:35:62:02:52:0b:d4:dd:bc:a2:cc:5c:79: bc:6b:0d:30:5a:61:42:57:19:55:63:01:54:99:a5: 39:fa:eb:03:2e:55:4d:94:60:0b:63:4d:4c:23:08: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CD:BA:4C:B6:CA:18:7A:32:CE:69:E8:A0:52:4D:8D:4C:62:5C:CB X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:69:d8:be:d5:56:2d:e1:84:40:c9:cf:c1:2d:fb:e0:91:51: 7b:75:58:f5:7b:2f:4e:b1:42:39:54:c3:5c:32:9c:40:86:a9: d5:e4:41:37:4c:17:a6:48:ca:8e:02:4d:9c:60:73:d5:e7:c8: b3:75:3f:99:0d:29:8a:e1:31:a1:87:3e:29:5b:6e:de:e1:83: 67:61:e2:e8:e8:58:03:9c:a2:27:f8:0e:4e:57:0a:d7:10:bb: 8b:d3:fa:c3:c1:88:d2:99:56:90:e7:3f:09:cc:63:1e:09:5f: ac:1f:2f:3d:ad:ab:ff:b7:b4:fd:2c:ec:53:0d:39:4a:8a:3a: 3b:36:7d:bd:6c:13:99:f2:50:20:0b:e5:db:d6:ce:a5:60:3e: a6:9e:b6:f2:e0:cb:2b:04:17:fb:0b:5c:a0:d6:98:1f:02:3f: e8:c9:5b:da:ec:50:bc:6e:05:b5:7b:4b:16:03:c8:b3:94:f5: 1f:60:9e:c5:a8:48:e0:5e:f2:4c:86:16:0d:90:a9:ee:6a:49: 52:9a:9f:96:ef:79:bd:5a:e1:27:2b:88:b9:81:d4:a3:52:d9: f7:fa:19:d1:49:ed:5d:3f:f7:83:93:76:16:0d:83:c5:33:36: a7:93:40:80:5b:59:1f:80:39:c9:21:a0:93:45:7b:38:72:e4: 7d:b1:58:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7sapMzGRAHQmrbzF57TEmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwNjIxMjMwMTA3WhcNMjYwNjIyMjMwMTA3WjAzMTEwLwYDVQQD EyhkOWNkYmE0Y2I2Y2ExODdhMzJjZTY5ZThhMDUyNGQ4ZDRjNjI1Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1siczJrhj+A/2IpxBcj3qvhQ7tZ w0JOe4vTerpuOy5e4NE3QCRHXsw08fXSNvEHlJbXKVoD+BMPeKvm7djjx9Rh1iG1 DsZxP4eEIIz1RYofKDvpTcW/SBGkOLmAd5/RAIOejdk+nOpOeUDaee/AAseZG7Tz A1lwp02K4pcVMlrknEZsq58U254J2oI48U3blpsBftshU+STG2jNsjVU57XWYKlU 41kJDecqlOaKNnBQJmHX1QA14YAJcp1RoRr/y1gR2xu36bKRrE2CJUlg4DSRnpk1 YgJSC9TdvKLMXHm8aw0wWmFCVxlVYwFUmaU5+usDLlVNlGALY01MIwiqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnNuky2yhh6Ms5p6KBSTY1MYlzLMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimnYvtVW LeGEQMnPwS374JFRe3VY9XsvTrFCOVTDXDKcQIap1eRBN0wXpkjKjgJNnGBz1efI s3U/mQ0piuExoYc+KVtu3uGDZ2Hi6OhYA5yiJ/gOTlcK1xC7i9P6w8GI0plWkOc/ CcxjHglfrB8vPa2r/7e0/SzsUw05Soo6OzZ9vWwTmfJQIAvl29bOpWA+pp628uDL KwQX+wtcoNaYHwI/6Mlb2uxQvG4FtXtLFgPIs5T1H2CexahI4F7yTIYWDZCp7mpJ Upqflu95vVrhJyuIuYHUo1LZ9/oZ0UntXT/3g5N2Fg2DxTM2p5NAgFtZH4A5ySGg k0V7OHLkfbFY0A== -----END CERTIFICATE-----Generated at Mon Jun 22 06:39:26 2026 by rpki-client