$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: kphiU3CID2Vr8uVqNBXLAz27e0sB96XM4/GH9Kja/FM= Subject key identifier: D9:D6:0B:80:1A:D4:F2:88:69:FE:AE:D1:81:63:54:54:75:C0:60:57 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019F1754B3B5CE2DDD440A15DD2C6C8A3699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0E89 Signing time: Tue 30 Jun 2026 07:00:54 +0000 Manifest this update: Tue 30 Jun 2026 07:00:54 +0000 Manifest next update: Wed 01 Jul 2026 07:00:54 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: yEsDmBbJwNRaUp+iUDGE38liSmZnrOA0ChOywI/p8+4=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:17:54:b3:b5:ce:2d:dd:44:0a:15:dd:2c:6c:8a:36:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jun 30 07:00:54 2026 GMT Not After : Jul 1 07:00:54 2026 GMT Subject: CN=d9d60b801ad4f28869feaed18163545475c06057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:b8:67:dc:01:2f:ef:12:f9:ef:ba:00:22: a4:be:02:0b:6b:2d:fc:94:b3:64:6c:a3:1e:3f:d9: 64:09:c8:7f:84:26:76:6d:97:09:2e:af:7d:5b:fb: 4e:9a:e8:61:07:ab:9e:28:81:49:98:95:5b:b1:82: 43:7a:41:93:b1:08:e7:a5:a4:97:28:d0:ca:a4:fa: 9c:33:f2:d4:4e:36:9a:8a:22:41:63:94:b5:2d:50: 24:7f:ed:13:78:d3:f2:66:5e:4f:c0:ad:86:f3:55: 2a:58:c1:cc:81:85:99:8c:c0:aa:62:df:03:85:4b: c6:28:f6:a3:29:a4:0a:20:6a:5e:42:86:4b:13:0f: 88:42:cf:3c:a7:56:d6:1d:31:1b:b3:3a:80:c5:ca: 94:d8:40:6c:d6:ff:c1:3b:61:ab:b7:da:ee:cd:b2: 77:e8:51:6a:6d:8a:c0:f4:94:93:fb:9e:f4:5d:d7: cf:a1:0b:a4:fc:fd:5a:83:94:f1:c6:7a:b0:53:39: 58:dd:da:09:3d:62:d0:07:0e:77:46:eb:83:a9:9c: 32:a5:bc:39:a4:28:5e:7c:69:62:ee:c6:2c:02:21: 48:a3:3a:3a:e8:f1:ae:db:c8:1f:ff:6c:eb:50:32: da:0a:81:90:f6:df:ce:b6:94:fa:af:c2:8d:08:7f: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D6:0B:80:1A:D4:F2:88:69:FE:AE:D1:81:63:54:54:75:C0:60:57 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7f:cf:c6:32:e8:6b:14:e9:03:8d:e0:a0:43:1d:61:31:9f: 6e:62:44:cf:99:e3:14:a7:47:69:3c:53:a2:ed:d1:45:17:98: a6:2b:df:47:27:7e:2d:fd:e8:dd:da:a1:9a:d7:52:57:d9:44: 8a:ce:e1:da:f7:3e:30:18:7f:64:cd:31:84:4d:85:49:f5:6f: ff:c7:6a:bc:36:bc:3d:16:ab:ff:f3:ce:1e:08:96:74:4c:9a: 6f:31:0d:23:33:f3:1c:a1:a3:79:0c:d0:37:43:14:7a:8e:b3: 48:a1:28:4d:42:b2:d1:92:ad:51:95:16:69:98:d5:d0:c1:b7: 08:56:91:07:5d:38:21:64:7a:e2:d3:9d:ae:e9:e4:27:4f:5b: 34:e5:99:d8:7d:5b:43:87:eb:1d:3f:16:e8:aa:22:f4:c7:e8: 2f:71:2c:0a:63:e8:05:a6:1a:5a:e5:f0:d0:86:a7:86:a0:ea: 51:3b:f7:ce:be:54:29:01:eb:62:d6:36:48:d2:15:81:95:ea: 66:0b:fb:c6:75:66:a1:fb:d8:79:15:08:07:e4:01:06:7d:ea: fe:31:dc:67:4c:0d:b6:eb:c0:e2:43:ca:78:e7:9d:a1:80:d0: 08:c1:1d:a3:33:88:28:1d:d8:1b:d2:02:ad:9c:d5:b7:4a:28: 30:c4:e4:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8XVLO1zi3dRAoV3SxsijaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwNjMwMDcwMDU0WhcNMjYwNzAxMDcwMDU0WjAzMTEwLwYDVQQD EyhkOWQ2MGI4MDFhZDRmMjg4NjlmZWFlZDE4MTYzNTQ1NDc1YzA2MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrq4Z9wBL+8S+e+6ACKkvgILay38 lLNkbKMeP9lkCch/hCZ2bZcJLq99W/tOmuhhB6ueKIFJmJVbsYJDekGTsQjnpaSX KNDKpPqcM/LUTjaaiiJBY5S1LVAkf+0TeNPyZl5PwK2G81UqWMHMgYWZjMCqYt8D hUvGKPajKaQKIGpeQoZLEw+IQs88p1bWHTEbszqAxcqU2EBs1v/BO2Grt9ruzbJ3 6FFqbYrA9JST+570XdfPoQuk/P1ag5TxxnqwUzlY3doJPWLQBw53RuuDqZwypbw5 pChefGli7sYsAiFIozo66PGu28gf/2zrUDLaCoGQ9t/OtpT6r8KNCH+4JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnWC4Aa1PKIaf6u0YFjVFR1wGBXMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3/PxjLo axTpA43goEMdYTGfbmJEz5njFKdHaTxTou3RRReYpivfRyd+Lf3o3dqhmtdSV9lE is7h2vc+MBh/ZM0xhE2FSfVv/8dqvDa8PRar//POHgiWdEyabzENIzPzHKGjeQzQ N0MUeo6zSKEoTUKy0ZKtUZUWaZjV0MG3CFaRB104IWR64tOdrunkJ09bNOWZ2H1b Q4frHT8W6Koi9MfoL3EsCmPoBaYaWuXw0IanhqDqUTv3zr5UKQHrYtY2SNIVgZXq Zgv7xnVmofvYeRUIB+QBBn3q/jHcZ0wNtuvA4kPKeOedoYDQCMEdozOIKB3YG9IC rZzVt0ooMMTkQw== -----END CERTIFICATE-----Generated at Tue Jun 30 18:24:18 2026 by rpki-client