$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: EDR2h6Gtr8ZTs9fxphh7+u77whmWF9nPrWsVe63biLI= Subject key identifier: 66:81:B0:F5:60:AB:7C:FA:BE:EA:39:8D:14:51:D4:CA:D7:16:AB:CE Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019EB76A579AA90D7BA5BE45FC89C2CCD3A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1966 Signing time: Thu 11 Jun 2026 16:01:00 +0000 Manifest this update: Thu 11 Jun 2026 16:01:00 +0000 Manifest next update: Fri 12 Jun 2026 16:01:00 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 6: foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa (hash: YKATndLpT6xlZT8C0s4iCTzEsBCAnIUWa7dwMMehpso=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: 8FKct4+M9TE/quDcOLdusEes5bYdkySaj/ZT0Brdw8I=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:6a:57:9a:a9:0d:7b:a5:be:45:fc:89:c2:cc:d3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jun 11 16:01:00 2026 GMT Not After : Jun 12 16:01:00 2026 GMT Subject: CN=6681b0f560ab7cfabeea398d1451d4cad716abce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:5d:96:ed:5b:58:6f:a9:7d:33:da:2f:cd: 5b:76:eb:75:91:c3:b2:46:15:74:b9:4d:37:8a:4c: 4e:9a:82:df:e4:b1:c5:3c:5e:be:66:0d:8d:89:e2: ff:d4:92:9c:31:cf:2e:ae:95:19:eb:d1:82:2a:a6: 9b:3f:8d:1f:11:48:6e:6f:9e:d5:50:31:3a:bc:db: 6d:da:2b:e9:13:8b:b6:44:89:7a:e4:45:45:4b:09: 11:a5:f0:11:33:a6:c9:e8:b8:c3:fc:d9:9b:bc:de: e4:61:c6:e3:15:fb:e1:76:c8:8c:5a:da:5d:f3:b1: 79:3a:5a:76:7c:f7:11:1a:b7:8d:cc:16:ae:ff:31: 03:96:cd:74:1c:3f:d7:2a:b8:59:80:6b:47:38:c5: 8d:70:6e:7e:2a:98:98:d5:b4:ea:af:57:28:ae:b2: e7:18:0d:c1:d2:49:05:8f:08:b7:01:b7:b5:ea:93: c2:93:22:1a:70:6b:49:16:09:8a:69:70:ec:01:89: f2:1b:9d:3e:ce:af:9a:4e:d6:4c:6c:a7:2a:a8:1d: 00:ee:84:fb:c9:e9:51:ea:9b:62:b9:c0:d5:bb:f5: ad:33:90:e3:27:d7:b7:97:22:7a:84:ef:1c:7b:d8: 8f:a5:5e:b7:69:b7:0d:d1:3e:58:f6:fa:40:bf:81: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:B0:F5:60:AB:7C:FA:BE:EA:39:8D:14:51:D4:CA:D7:16:AB:CE X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f7:95:70:05:8f:04:e0:cf:f4:2b:92:a9:02:76:3c:a3:b3: 8c:76:6c:3f:9c:22:4a:5c:df:b7:b9:1f:3b:41:bf:61:05:64: f2:87:da:19:7d:8b:92:73:1b:a4:04:27:e9:98:9c:dc:c9:d1: 98:93:7c:62:d4:66:a8:f0:48:9e:ba:1c:69:8a:ff:0c:98:9e: 92:2e:cd:7b:30:f4:77:b4:a1:ba:a4:8d:71:91:d3:3e:fa:00: 1a:eb:1e:63:b7:6c:0f:af:73:f7:bd:38:78:41:0d:05:48:19: b3:c0:e0:36:13:2d:ae:c0:44:7a:55:8f:c6:ed:e8:d1:78:08: 83:45:63:1e:0d:7f:1e:58:16:b6:82:56:cf:2f:35:4d:7c:dc: 49:c1:91:f5:6f:d1:bb:d2:61:0c:3b:b5:21:7d:8e:f1:18:d6: 59:94:31:1f:63:f3:f5:da:97:98:2c:b5:40:0c:90:1f:fc:f7: 31:25:20:9b:39:dd:85:8c:43:fa:ec:cb:cf:42:cf:d8:d4:14: d0:7a:7e:d6:8e:8b:c2:23:48:a4:d2:9a:19:cb:68:5d:9a:71: 9e:5e:15:6a:85:6e:77:44:c0:76:dc:66:4d:7f:09:51:6f:44: ca:f0:08:01:de:61:e3:67:4e:56:dc:97:07:14:8d:86:cb:6a: d6:c0:82:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63aleaqQ17pb5F/InCzNOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwNjExMTYwMTAwWhcNMjYwNjEyMTYwMTAwWjAzMTEwLwYDVQQD Eyg2NjgxYjBmNTYwYWI3Y2ZhYmVlYTM5OGQxNDUxZDRjYWQ3MTZhYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxJdlu1bWG+pfTPaL81bdut1kcOy RhV0uU03ikxOmoLf5LHFPF6+Zg2NieL/1JKcMc8urpUZ69GCKqabP40fEUhub57V UDE6vNtt2ivpE4u2RIl65EVFSwkRpfARM6bJ6LjD/NmbvN7kYcbjFfvhdsiMWtpd 87F5Olp2fPcRGreNzBau/zEDls10HD/XKrhZgGtHOMWNcG5+KpiY1bTqr1corrLn GA3B0kkFjwi3Abe16pPCkyIacGtJFgmKaXDsAYnyG50+zq+aTtZMbKcqqB0A7oT7 yelR6ptiucDVu/WtM5DjJ9e3lyJ6hO8ce9iPpV63abcN0T5Y9vpAv4HNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaBsPVgq3z6vuo5jRRR1MrXFqvOMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/eVcAWP BODP9CuSqQJ2PKOzjHZsP5wiSlzft7kfO0G/YQVk8ofaGX2LknMbpAQn6Zic3MnR mJN8YtRmqPBInrocaYr/DJieki7NezD0d7ShuqSNcZHTPvoAGuseY7dsD69z9704 eEENBUgZs8DgNhMtrsBEelWPxu3o0XgIg0VjHg1/HlgWtoJWzy81TXzcScGR9W/R u9JhDDu1IX2O8RjWWZQxH2Pz9dqXmCy1QAyQH/z3MSUgmzndhYxD+uzLz0LP2NQU 0Hp+1o6LwiNIpNKaGctoXZpxnl4VaoVud0TAdtxmTX8JUW9EyvAIAd5h42dOVtyX BxSNhstq1sCCgA== -----END CERTIFICATE-----Generated at Thu Jun 11 21:52:10 2026 by rpki-client