$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: EC7rfxFm4QpxLFpi9fWYvJidOAgYj6rQT6LNjh0EUp0= Subject key identifier: A7:8D:38:48:05:CE:04:F8:FF:21:F3:97:66:05:B8:73:EE:4C:01:D4 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019EB7A10B74C046D0FCAB84BE8076B60728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 19A9 Signing time: Thu 11 Jun 2026 17:00:45 +0000 Manifest this update: Thu 11 Jun 2026 17:00:45 +0000 Manifest next update: Fri 12 Jun 2026 17:00:45 +0000 Files and hashes: 1: 0sdOvh4nfn0lveRxykk33cNxIIM.roa (hash: kD83I12ad3Fh1a3zjr7gmmT7/0FXYiO1h6O1pIwZPsc=) 2: 0xQr7SsuNbVkdglbPEuYeR908M4.roa (hash: OwNc5ie37GMpKkc5b6+YlsSSG7y7AT9vwxdWFk6XL+M=) 3: 30sdxKKP0ars307oYhGI6BrpG2o.roa (hash: Ivy6fMnEE31k2bYTRHxwk6l6HgInwqqeEaoOQT4ACBE=) 4: 62z-_Nd4i8kmKRcFEqTrWOYEGyQ.roa (hash: s4eIzMK2BxY+5zTpdTU6OHEC3fxJT8gAlfgpPK+B7Q8=) 5: BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa (hash: Etgsi90oMnqKxDk2sxnBlfxaINgYrLG9ZZzEIRCrPps=) 6: C2WOVwVQYwVr2nuLF8nZxh0HNso.roa (hash: dY3J82jDEAIC/rY1dL+3vS1oH5Nh7406smEXm0DFhew=) 7: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (hash: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4=) 8: PpTOr4rXJzyV-q6NiqHNVjbAYZU.roa (hash: jQEomOlSvY4s8mgJ4+q3cKFP031XgY4ZDEypZ2ab0XY=) 9: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (hash: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4=) 10: WhADIH61bkJ2leuk_zArifd_fK0.roa (hash: BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=) 11: Ygn_c8zbC36xqFlDHNWeV-WM8pU.roa (hash: CXih/mSxLCAOHxPVZ72EgZHKzViKS2T68SjIziUjdEM=) 12: k71425zZrgvZnNmix7lRrfFGz8M.roa (hash: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI=) 13: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: owXdsMksFN5bD9aTbQXyQs7i9eO59wAizLaIddk95ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:a1:0b:74:c0:46:d0:fc:ab:84:be:80:76:b6:07:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jun 11 17:00:45 2026 GMT Not After : Jun 12 17:00:45 2026 GMT Subject: CN=a78d384805ce04f8ff21f3976605b873ee4c01d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:0e:75:cb:3d:43:b7:66:47:12:33:d9:b5: 3e:ea:cf:42:2a:c2:c0:9c:b7:57:c4:06:1f:d8:2e: 46:d5:02:98:d3:1e:53:87:10:d2:3a:86:9d:1d:65: 24:b8:dc:96:49:fd:97:55:6c:97:73:f8:89:ae:fe: 22:d3:8b:b0:5c:c3:22:f2:3b:a7:11:63:75:70:69: 12:76:12:eb:78:76:7c:d7:cd:00:1a:69:09:12:dd: d4:b2:b9:11:6c:5d:f0:74:32:cd:e5:f3:44:24:d6: af:8a:59:dd:d3:68:e2:36:99:70:01:ad:75:fd:2b: 66:6c:f7:37:49:aa:d4:73:3f:cd:71:77:65:e5:65: 94:08:ea:5b:ab:74:ff:2c:45:18:56:bc:fa:e7:e7: 27:77:ae:fa:23:36:ab:1d:46:ef:1a:9a:81:97:9c: ad:6d:03:98:ec:67:3e:2d:2b:5b:1e:64:ec:cf:8d: 5b:d4:19:b2:90:c9:b2:f0:26:0e:0e:8e:4a:26:2f: 7b:41:28:19:9b:b8:d5:9d:5a:86:99:d2:2f:98:19: c8:d4:6d:6d:16:c2:a6:59:f7:3a:5d:94:26:73:eb: 46:2d:98:8e:1e:00:65:6a:2a:e7:31:4c:d0:93:66: f4:f3:70:15:52:e6:49:7c:06:cf:49:4d:c1:f1:a0: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8D:38:48:05:CE:04:F8:FF:21:F3:97:66:05:B8:73:EE:4C:01:D4 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:44:c9:93:e1:ff:ce:0a:85:17:67:6d:58:6a:ed:9e:36:4e: 40:86:f7:13:de:98:4f:e3:5f:08:da:e0:64:f2:01:84:6f:35: 16:56:99:a2:b4:3e:bc:6c:27:39:73:5a:9f:8e:ef:cf:cf:87: 06:4f:22:9c:44:2a:4d:1b:32:82:e7:c0:70:1a:50:fc:67:49: e9:ae:9d:e7:b1:2a:c9:85:cb:73:99:a1:5e:3d:ab:52:fc:29: e8:7c:93:f2:de:96:4f:26:49:35:50:10:be:f5:35:91:2f:50: 33:09:fe:d0:99:c9:a7:e0:c3:52:88:71:47:9e:9f:67:5e:42: 54:07:32:fc:e6:b6:45:00:fb:ba:c6:fc:73:cb:a4:b1:1d:b8: f7:7b:d7:d2:82:da:53:5c:cc:b6:f3:18:52:52:0d:81:3f:0f: e9:e8:a7:ea:92:3f:ab:4d:44:d9:17:ab:4f:67:2b:ef:99:1e: fb:42:fc:00:cf:17:0d:ab:b9:4f:34:ff:69:fe:af:23:ae:9a: b1:5b:6a:bd:7f:b1:60:74:8a:ab:41:15:49:f2:ad:5e:02:87: d4:c9:9a:fe:2f:60:66:51:17:1e:c6:9f:6b:ae:68:99:2c:d3: 39:89:fc:4e:78:8d:fc:39:19:e9:66:63:26:9c:2c:9d:87:f3: 9f:86:5c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63oQt0wEbQ/KuEvoB2tgcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwNjExMTcwMDQ1WhcNMjYwNjEyMTcwMDQ1WjAzMTEwLwYDVQQD EyhhNzhkMzg0ODA1Y2UwNGY4ZmYyMWYzOTc2NjA1Yjg3M2VlNGMwMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLYOdcs9Q7dmRxIz2bU+6s9CKsLA nLdXxAYf2C5G1QKY0x5ThxDSOoadHWUkuNyWSf2XVWyXc/iJrv4i04uwXMMi8jun EWN1cGkSdhLreHZ8180AGmkJEt3UsrkRbF3wdDLN5fNEJNavilnd02jiNplwAa11 /StmbPc3SarUcz/NcXdl5WWUCOpbq3T/LEUYVrz65+cnd676IzarHUbvGpqBl5yt bQOY7Gc+LStbHmTsz41b1BmykMmy8CYODo5KJi97QSgZm7jVnVqGmdIvmBnI1G1t FsKmWfc6XZQmc+tGLZiOHgBlairnMUzQk2b083AVUuZJfAbPSU3B8aBVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeNOEgFzgT4/yHzl2YFuHPuTAHUMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOETJk+H/ zgqFF2dtWGrtnjZOQIb3E96YT+NfCNrgZPIBhG81FlaZorQ+vGwnOXNan47vz8+H Bk8inEQqTRsygufAcBpQ/GdJ6a6d57EqyYXLc5mhXj2rUvwp6HyT8t6WTyZJNVAQ vvU1kS9QMwn+0JnJp+DDUohxR56fZ15CVAcy/Oa2RQD7usb8c8uksR2493vX0oLa U1zMtvMYUlINgT8P6ein6pI/q01E2RerT2cr75ke+0L8AM8XDau5TzT/af6vI66a sVtqvX+xYHSKq0EVSfKtXgKH1Mma/i9gZlEXHsafa65omSzTOYn8TniN/DkZ6WZj JpwsnYfzn4Zcgw== -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:19 2026 by rpki-client