$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: O9tQRU6sHFkS5GXcnKxOA29NyQ9C5E0A2QlXxzG8tsg= Subject key identifier: 71:F9:DB:8E:DD:FF:7E:C4:A4:51:54:24:BA:4E:14:F4:9B:BD:38:87 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019F118A19312B4C359428250E6DBDC6535C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 1180 Signing time: Mon 29 Jun 2026 04:01:30 +0000 Manifest this update: Mon 29 Jun 2026 04:01:30 +0000 Manifest next update: Tue 30 Jun 2026 04:01:30 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: ffTTLLyduWQWn/VnLhZZf7kqWEPE5OKDYUEKtpzBKoI=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:8a:19:31:2b:4c:35:94:28:25:0e:6d:bd:c6:53:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jun 29 04:01:30 2026 GMT Not After : Jun 30 04:01:30 2026 GMT Subject: CN=71f9db8eddff7ec4a4515424ba4e14f49bbd3887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:a9:80:9b:a4:49:ae:52:86:dd:75:48:c9: ef:5b:67:c6:c7:1b:2b:90:4a:b0:e4:00:07:21:3b: 50:3c:aa:29:c5:a2:ec:e1:01:f5:f5:15:76:18:2e: e2:d6:51:0e:e2:d6:90:5b:ce:3d:8c:40:29:cd:d0: f3:70:c2:b7:40:3c:56:fe:4a:18:ba:77:2f:ec:99: ae:54:3d:56:f9:bc:73:7d:a2:03:da:5e:27:fd:19: ea:a1:ae:e2:d6:9b:c3:3c:6f:45:7b:0c:df:8f:62: 77:8a:10:c8:92:10:76:9d:dd:4a:a7:31:60:ad:02: a7:01:77:4b:44:63:08:fe:99:a8:a0:05:23:dd:67: b8:d6:03:03:89:a5:c4:f1:bc:1d:a5:8d:be:0c:9c: f9:41:d9:0c:c9:f4:17:48:ce:83:8d:f2:54:2b:73: ca:bf:3d:84:a5:10:50:fe:bb:ec:f9:94:63:16:33: 3a:59:b9:f7:56:5d:7e:69:88:12:2e:85:f9:de:0b: 00:bf:0b:65:23:2a:c5:f1:88:35:0f:31:56:90:95: ab:34:27:be:6e:8d:1b:df:22:cb:fb:39:e9:96:b8: 18:1d:e7:ad:3e:f7:f5:3b:36:38:82:2c:30:62:3f: ec:01:c7:6c:6f:d0:03:56:a4:d7:b9:e6:db:64:8f: 77:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:DB:8E:DD:FF:7E:C4:A4:51:54:24:BA:4E:14:F4:9B:BD:38:87 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5e:cc:44:0c:1f:1b:09:16:29:fd:08:b2:33:78:ee:a3:0c: 5b:02:d2:f3:d4:98:18:a4:70:24:20:41:dd:ab:d2:50:eb:79: af:5c:fe:e6:cc:24:7b:e0:98:af:df:c0:cd:3c:b6:db:ab:7a: 27:c0:46:29:96:a7:76:41:89:93:51:a2:f1:d1:03:04:e3:a2: 24:17:cd:3c:d5:79:cc:00:a1:66:c6:5c:91:4d:eb:34:b9:58: ec:12:6f:00:85:8a:60:e6:fa:16:9d:2c:6e:ed:8d:12:4c:12: d8:94:95:72:1e:3c:41:4d:72:1a:64:ac:e6:c8:be:60:80:72: 36:17:bf:59:33:48:b8:f3:ac:68:9d:c1:a7:e4:f3:4e:d7:ff: 5d:87:ba:d5:ae:8d:cc:c9:70:b0:ab:ab:7a:38:3c:76:97:7f: b9:03:61:20:be:c5:b2:3d:7d:9c:f3:28:19:24:44:28:82:50: f4:a3:a1:80:10:f1:3b:e5:cb:7d:ac:16:37:63:a3:3d:a1:ac: 8c:d4:3f:11:12:3e:8b:8e:1f:ec:21:c4:f6:4d:e7:57:79:8d: 8d:2a:bc:7b:4b:7e:f7:a2:b2:2c:f8:28:4e:ca:48:0d:fa:10: 1d:82:0b:16:47:9c:f4:21:2f:f6:85:4b:c6:40:42:a0:50:56: 99:db:31:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RihkxK0w1lCglDm29xlNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNjI5MDQwMTMwWhcNMjYwNjMwMDQwMTMwWjAzMTEwLwYDVQQD Eyg3MWY5ZGI4ZWRkZmY3ZWM0YTQ1MTU0MjRiYTRlMTRmNDliYmQzODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAypgJukSa5Sht11SMnvW2fGxxsr kEqw5AAHITtQPKopxaLs4QH19RV2GC7i1lEO4taQW849jEApzdDzcMK3QDxW/koY uncv7JmuVD1W+bxzfaID2l4n/Rnqoa7i1pvDPG9Fewzfj2J3ihDIkhB2nd1KpzFg rQKnAXdLRGMI/pmooAUj3We41gMDiaXE8bwdpY2+DJz5QdkMyfQXSM6DjfJUK3PK vz2EpRBQ/rvs+ZRjFjM6Wbn3Vl1+aYgSLoX53gsAvwtlIyrF8Yg1DzFWkJWrNCe+ bo0b3yLL+znplrgYHeetPvf1OzY4giwwYj/sAcdsb9ADVqTXuebbZI934QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH5247d/37EpFFUJLpOFPSbvTiHMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKV7MRAwf GwkWKf0IsjN47qMMWwLS89SYGKRwJCBB3avSUOt5r1z+5swke+CYr9/AzTy226t6 J8BGKZandkGJk1Gi8dEDBOOiJBfNPNV5zAChZsZckU3rNLlY7BJvAIWKYOb6Fp0s bu2NEkwS2JSVch48QU1yGmSs5si+YIByNhe/WTNIuPOsaJ3Bp+TzTtf/XYe61a6N zMlwsKurejg8dpd/uQNhIL7Fsj19nPMoGSREKIJQ9KOhgBDxO+XLfawWN2OjPaGs jNQ/ERI+i44f7CHE9k3nV3mNjSq8e0t+96KyLPgoTspIDfoQHYILFkec9CEv9oVL xkBCoFBWmdsxAA== -----END CERTIFICATE-----Generated at Mon Jun 29 12:40:33 2026 by rpki-client