$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: f3UOIEplDVqHRG/0A20+2eqxlwP99vWetbwuI0Cf7N4= Subject key identifier: A4:71:B0:1A:6B:29:5F:43:1E:D3:FE:B4:FA:7D:0C:80:78:E8:D0:88 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019E90CA5A87102B19C3AEB7B03CF6B39882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 14F3 Signing time: Thu 04 Jun 2026 04:00:40 +0000 Manifest this update: Thu 04 Jun 2026 04:00:40 +0000 Manifest next update: Fri 05 Jun 2026 04:00:40 +0000 Files and hashes: 1: 1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa (hash: LcUqDvDIF+dS1rO59QJwzMS/rR1Ec+AWaOwx0W19I+c=) 2: 8FqA2ZF4hxliA1oSbnxrFuSzN9E.roa (hash: dy3uYfdWJITOpK1lPFOdwtBaqmyss+P6rreDBETaVWQ=) 3: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: pFNmuSKIndlug12VAilUA5Yq+BPHDWb6WiKODlG8q84=) 5: CdgjSj8B2eEBBly0iK4h89jCNUc.roa (hash: aTHrwyvkvgZuRLuQPng1C8Fc89AkT7KTKhgpjKS5Q+Q=) 6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=) 7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=) 8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=) 9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=) 10: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=) 11: SllEqYTafno8DDixzbtUXGfrVhg.roa (hash: 74WUat2f69sdXuu1RyM9J08U8xD6b5IHOFXbh1q5+44=) 12: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=) 13: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (hash: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=) 14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=) 15: W5olfq9Y7_Lj6KMnAWRUMCZAxjo.roa (hash: qmwFKXQc7nyx5IpOYqlWD91kE3wC9gbI51Kb8YcehEw=) 16: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=) 17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=) 18: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=) 19: gxYBa5PVU9v9YoR3nT1e_I5ZLaQ.roa (hash: LUNLKTLF0jU435zgccL4QRfdTZFRAvMjstkjVzOvR40=) 20: hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa (hash: EYq3/vGPN6jy3lzOn8yHeB4uOnE5CknSB12P3oGEmTQ=) 21: m9rP0dcPDajw_wBB9DhY5sWJHwg.roa (hash: e+HHBL1u2usrpKCyzDWznso6dRBdcmKW92d3TFmMF/A=) 22: ofDnG2RR07Ffgo6O-NriMLrnSqk.roa (hash: NnioAnFhMcEqC2jvleG0Rix97KFCy1QoGkLlAfyyOm0=) 23: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=) 24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=) 25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:90:ca:5a:87:10:2b:19:c3:ae:b7:b0:3c:f6:b3:98:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jun 4 04:00:40 2026 GMT Not After : Jun 5 04:00:40 2026 GMT Subject: CN=a471b01a6b295f431ed3feb4fa7d0c8078e8d088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:46:11:d2:a5:49:a2:e6:5e:11:02:a3:2d: 56:39:fe:ea:fd:b2:3c:fd:59:9d:8d:5e:98:dc:3a: 5d:88:8b:fd:90:07:d9:1a:68:84:f7:c4:c3:2d:0b: 3b:84:a2:7d:97:0e:18:76:7c:0a:2c:bc:fd:b8:f2: f3:70:98:b1:42:82:5b:7b:37:0f:4e:d8:5e:65:5c: 92:31:50:46:19:63:f3:84:92:8b:76:5b:b2:35:7a: 7f:ef:42:42:02:d1:08:9a:ef:57:00:fa:66:a4:2b: 7e:b3:d7:03:57:62:a0:c8:17:7c:4d:84:fb:e2:e3: 55:48:1a:1a:ad:9f:71:c9:4a:ba:33:0b:22:a6:fe: f4:fd:45:43:e2:14:4f:54:5b:7b:2b:f1:60:c9:87: 08:59:c1:ae:19:bb:be:f5:9d:b5:ca:96:2b:0d:44: a9:8f:bc:36:40:89:8f:2f:a9:41:db:cc:f1:84:10: 6a:47:39:4f:40:80:bb:8e:60:02:6e:73:b2:c9:3f: d3:6b:34:25:72:d6:47:c0:c9:da:b8:d5:41:b0:ec: 14:ed:21:05:2f:d4:2c:98:e7:12:c1:37:68:fc:e1: 17:bf:69:e3:7a:39:fc:53:05:25:23:85:5b:37:53: 7e:b1:9f:4c:99:ca:e1:ea:df:08:59:bc:73:59:7f: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:B0:1A:6B:29:5F:43:1E:D3:FE:B4:FA:7D:0C:80:78:E8:D0:88 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:75:19:a8:b9:92:5b:b7:7e:6e:d3:c7:57:c9:da:1f:dd:8a: 32:3b:92:66:55:c2:18:2a:ee:26:7d:ef:41:06:d0:0d:c0:18: 5c:0b:a8:25:08:80:4a:ed:db:4d:50:d0:ac:18:c8:1f:fb:22: a5:28:dc:32:f3:01:bc:9f:9a:38:dc:41:ec:4f:80:5f:a2:25: 9e:89:7b:fc:7f:ea:5a:4e:e1:bf:64:50:4c:d3:4e:9f:85:80: ea:62:da:55:66:a0:d7:cf:b4:ed:82:6a:01:4e:a9:64:09:fb: 3a:41:fc:17:21:bb:1b:a5:01:34:18:61:49:ca:07:13:00:b9: 33:36:62:96:c3:43:05:ab:48:95:0c:ee:bf:0e:83:7c:aa:c6: 07:72:a3:12:f4:15:09:c9:75:16:5c:76:5d:cf:b8:4f:0a:28: 09:a9:7c:8d:5c:21:41:d6:54:01:70:09:8d:49:3e:ca:8e:c0: 46:d8:c5:c4:5d:f0:60:85:7c:77:bd:a4:a6:08:66:b7:af:e0: 38:04:33:20:4a:ca:05:49:f8:a8:0f:83:84:47:d9:57:83:2d: 5c:37:6e:35:e6:f2:4f:36:31:be:2a:21:b8:f1:d0:6c:77:a5: 63:61:b0:3c:ad:c0:dc:c8:97:eb:35:c6:c5:b1:10:c0:97:9a: f0:11:58:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6QylqHECsZw663sDz2s5iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwNjA0MDQwMDQwWhcNMjYwNjA1MDQwMDQwWjAzMTEwLwYDVQQD EyhhNDcxYjAxYTZiMjk1ZjQzMWVkM2ZlYjRmYTdkMGM4MDc4ZThkMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PlGEdKlSaLmXhECoy1WOf7q/bI8 /VmdjV6Y3DpdiIv9kAfZGmiE98TDLQs7hKJ9lw4YdnwKLLz9uPLzcJixQoJbezcP TtheZVySMVBGGWPzhJKLdluyNXp/70JCAtEImu9XAPpmpCt+s9cDV2KgyBd8TYT7 4uNVSBoarZ9xyUq6Mwsipv70/UVD4hRPVFt7K/FgyYcIWcGuGbu+9Z21ypYrDUSp j7w2QImPL6lB28zxhBBqRzlPQIC7jmACbnOyyT/TazQlctZHwMnauNVBsOwU7SEF L9QsmOcSwTdo/OEXv2njejn8UwUlI4VbN1N+sZ9Mmcrh6t8IWbxzWX8LowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRxsBprKV9DHtP+tPp9DIB46NCIMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHUZqLmS W7d+btPHV8naH92KMjuSZlXCGCruJn3vQQbQDcAYXAuoJQiASu3bTVDQrBjIH/si pSjcMvMBvJ+aONxB7E+AX6Ilnol7/H/qWk7hv2RQTNNOn4WA6mLaVWag18+07YJq AU6pZAn7OkH8FyG7G6UBNBhhScoHEwC5MzZilsNDBatIlQzuvw6DfKrGB3KjEvQV Ccl1Flx2Xc+4TwooCal8jVwhQdZUAXAJjUk+yo7ARtjFxF3wYIV8d72kpghmt6/g OAQzIErKBUn4qA+DhEfZV4MtXDduNebyTzYxviohuPHQbHelY2GwPK3A3MiX6zXG xbEQwJea8BFYOA== -----END CERTIFICATE-----Generated at Thu Jun 4 08:02:15 2026 by rpki-client