$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: iLVfHY4w9RYrd1lGd7s0cqN8I62gYTCYSAYCTmSbcd8= Subject key identifier: 59:06:C4:6E:90:5F:23:E0:1B:2C:E8:EA:99:54:18:57:38:14:D7:D9 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019EB57BEF45D09D119A8C7FE765B718E0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 154A Signing time: Thu 11 Jun 2026 07:00:58 +0000 Manifest this update: Thu 11 Jun 2026 07:00:58 +0000 Manifest next update: Fri 12 Jun 2026 07:00:58 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 0YEqptvknGZBvRD2XHl5fP2zh4mb8qWU0i8dYIsdYQg=) 7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b5:7b:ef:45:d0:9d:11:9a:8c:7f:e7:65:b7:18:e0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jun 11 07:00:58 2026 GMT Not After : Jun 12 07:00:58 2026 GMT Subject: CN=5906c46e905f23e01b2ce8ea995418573814d7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:7b:7d:1b:19:6b:19:3e:d4:08:b1:c7:b5: eb:de:0f:d0:7e:04:b1:c3:e3:8a:a7:d8:d6:85:d1: a5:fe:56:43:3d:f5:69:3b:18:86:6d:89:04:9f:f0: 3a:70:5d:17:e5:c5:43:99:04:35:4b:01:9b:3e:67: 7c:2c:bc:59:fe:16:02:35:37:34:71:75:74:39:fc: 37:77:ad:5f:37:27:85:16:13:a6:01:5a:7c:87:bc: 67:81:90:22:6a:9e:1d:ed:b1:c5:f8:42:30:00:58: e7:7b:cc:c0:fc:f5:5b:2f:7d:2e:5a:d2:ca:08:b4: ba:d9:44:dd:63:2a:dc:8a:a0:1c:a6:52:00:57:cc: 79:b4:66:e5:87:50:8b:e9:03:81:f2:75:43:e0:1c: 5e:55:ec:28:f8:a9:18:97:06:f4:80:2b:5c:62:7c: 90:1f:7d:cc:3c:f4:d1:86:ef:e3:0e:1a:0f:87:ad: 26:f5:45:a9:aa:e7:68:e3:34:7c:5d:45:e4:5a:97: 28:f0:34:54:e8:4e:b3:f3:e0:96:ea:f4:d2:88:5d: 2f:0b:a1:cf:b6:64:b6:41:32:97:ee:3d:5b:9e:c3: 03:10:9e:55:c0:b3:b6:68:9f:75:4e:d6:ed:9b:33: 3b:51:b5:8b:1a:1e:56:05:09:2e:1c:56:80:ce:69: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:C4:6E:90:5F:23:E0:1B:2C:E8:EA:99:54:18:57:38:14:D7:D9 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6d:bc:7d:41:c2:9c:f0:4e:29:8f:41:45:91:a5:ea:50:a3: 0d:e0:1c:9b:84:fe:d1:49:27:19:4e:01:40:55:1e:cf:f5:c8: 9a:29:fd:d0:37:e8:0c:1c:3e:95:40:9a:53:b6:fc:89:df:cb: b3:47:f5:88:c0:f2:a1:a9:5c:64:e9:f3:f4:12:6e:8a:0e:ed: 0f:73:86:1b:80:50:d0:37:46:5d:c0:30:76:9f:c4:e5:3c:c2: 3b:98:79:a3:6c:ae:76:3a:20:ce:35:6a:b5:4a:59:63:26:57: e9:1b:88:83:1e:0f:69:9f:5f:d5:18:ac:72:aa:57:be:3a:ba: 6c:c0:89:a2:0e:5f:8d:82:66:97:74:43:7c:10:d5:0b:b7:85: 3b:da:48:68:d3:f9:cb:47:de:09:37:ee:d0:75:5f:86:86:01: fc:0e:89:e7:5d:2c:50:ff:3a:1a:3e:8c:4d:9d:4c:5e:11:c1: 72:b7:15:eb:ba:6d:19:10:a4:8f:2b:03:75:fd:2e:75:43:94: 90:68:4c:a4:b4:5b:b3:45:a4:3e:09:4d:5a:8f:68:35:57:de: f4:1e:0c:ff:d3:58:04:ac:e9:f3:34:d6:2f:2d:22:c4:15:ea: 77:dd:84:ee:a8:c8:1d:0c:97:e4:5c:95:15:bb:ec:9c:2e:1c: 73:db:56:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ61e+9F0J0Rmox/52W3GODUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwNjExMDcwMDU4WhcNMjYwNjEyMDcwMDU4WjAzMTEwLwYDVQQD Eyg1OTA2YzQ2ZTkwNWYyM2UwMWIyY2U4ZWE5OTU0MTg1NzM4MTRkN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytJ7fRsZaxk+1Aixx7Xr3g/QfgSx w+OKp9jWhdGl/lZDPfVpOxiGbYkEn/A6cF0X5cVDmQQ1SwGbPmd8LLxZ/hYCNTc0 cXV0Ofw3d61fNyeFFhOmAVp8h7xngZAiap4d7bHF+EIwAFjne8zA/PVbL30uWtLK CLS62UTdYyrciqAcplIAV8x5tGblh1CL6QOB8nVD4BxeVewo+KkYlwb0gCtcYnyQ H33MPPTRhu/jDhoPh60m9UWpqudo4zR8XUXkWpco8DRU6E6z8+CW6vTSiF0vC6HP tmS2QTKX7j1bnsMDEJ5VwLO2aJ91TtbtmzM7UbWLGh5WBQkuHFaAzmnA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkGxG6QXyPgGyzo6plUGFc4FNfZMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG228fUHC nPBOKY9BRZGl6lCjDeAcm4T+0UknGU4BQFUez/XImin90DfoDBw+lUCaU7b8id/L s0f1iMDyoalcZOnz9BJuig7tD3OGG4BQ0DdGXcAwdp/E5TzCO5h5o2yudjogzjVq tUpZYyZX6RuIgx4PaZ9f1RiscqpXvjq6bMCJog5fjYJml3RDfBDVC7eFO9pIaNP5 y0feCTfu0HVfhoYB/A6J510sUP86Gj6MTZ1MXhHBcrcV67ptGRCkjysDdf0udUOU kGhMpLRbs0WkPglNWo9oNVfe9B4M/9NYBKzp8zTWLy0ixBXqd92E7qjIHQyX5FyV FbvsnC4cc9tWDA== -----END CERTIFICATE-----Generated at Thu Jun 11 13:09:26 2026 by rpki-client