$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: +6nnBgE+SKTC57yJNTsyTtam/eg2faJesJrBACikTbw= Subject key identifier: 4B:97:16:22:C2:D8:EC:9F:EA:2C:48:24:1A:E0:5C:46:BE:97:1F:89 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019F17C32F7EEB0CA6AF029FDA22EA6C2496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1990 Signing time: Tue 30 Jun 2026 09:01:35 +0000 Manifest this update: Tue 30 Jun 2026 09:01:35 +0000 Manifest next update: Wed 01 Jul 2026 09:01:35 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: Hb+ecr6SJL7ul+1a0lTUFoFsobm3RXV9TRN2xbTCoh8=) 2: 4gN6zBi78OBSrRzQCuH8bXeFoVI.roa (hash: U9nKlZ5jvkxT1z9dBEzIRMaUeCcnxY8Qs0aa6wmXI+4=) 3: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=) 4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=) 5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=) 6: NCNXc5lMowEEWRt7GMK-jUnw7SI.roa (hash: jH0mGr8QJrUmmcn9H7M7XqUSldOHcyG979yAvGsjcFo=) 7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=) 8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=) 9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=) 10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=) 11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:17:c3:2f:7e:eb:0c:a6:af:02:9f:da:22:ea:6c:24:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jun 30 09:01:35 2026 GMT Not After : Jul 1 09:01:35 2026 GMT Subject: CN=4b971622c2d8ec9fea2c48241ae05c46be971f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:37:f7:5d:51:62:41:87:dc:3a:45:6a:75: 70:6f:fe:14:78:53:93:23:d9:08:cf:e0:78:ad:e5: e4:9f:20:fa:55:e9:a8:3c:43:74:4c:8e:d7:3c:28: fb:6e:20:de:84:6a:32:44:63:b2:da:04:b2:12:93: b6:f6:69:58:89:67:1b:81:02:42:51:1a:03:eb:a2: 38:cf:1a:58:2e:8d:c9:bd:6c:08:9d:48:ab:98:5f: 01:74:36:b8:fd:23:77:84:76:82:07:f9:4d:82:3e: 80:f2:65:0a:be:64:29:57:65:80:0c:ca:08:cf:bc: 8e:be:1a:7d:df:77:18:37:dd:ce:e5:fe:cc:52:3c: a0:99:ce:61:a3:46:20:90:d1:dd:45:f3:88:14:73: f1:b6:e5:6e:9a:38:c5:10:da:ff:51:59:af:e5:ea: a9:f9:b9:53:83:f9:6d:7c:07:fd:b9:bf:a5:41:b4: e9:81:d5:6f:4d:1b:b6:f4:97:33:d0:ac:e9:d8:f4: 20:23:71:f6:41:75:76:47:2e:72:41:bd:2e:36:cc: 1c:04:22:ee:4f:53:07:67:21:55:ac:87:96:ce:aa: 27:98:60:46:ae:d6:be:db:7d:ec:92:3c:55:74:1f: 77:00:82:32:74:61:42:f6:a7:06:04:c0:af:16:70: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:16:22:C2:D8:EC:9F:EA:2C:48:24:1A:E0:5C:46:BE:97:1F:89 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:63:6c:d6:6b:fb:c4:57:cb:09:be:da:49:e8:55:f0:4e:43: c8:d6:7d:08:11:15:e1:67:c7:cc:d3:ad:86:49:89:4f:b1:ed: 86:11:24:8f:3e:4f:76:6b:14:cd:96:5f:38:04:99:fc:b1:8f: 70:97:f4:57:66:f0:7e:f4:3b:c6:08:a5:82:35:e3:91:26:f3: 36:ba:1a:67:d5:9b:ab:fa:98:eb:46:10:5e:29:7f:b4:1e:bd: 3b:23:df:db:d9:1c:80:ef:91:bf:27:20:56:53:c9:0a:2c:f9: f9:28:55:8e:a4:7c:0c:0b:03:70:59:a5:ab:ff:e7:1f:c9:b3: 54:5b:1d:a1:2a:4c:86:9a:3f:d2:6f:d8:54:67:33:06:dc:4e: 54:a5:26:d0:a9:a3:bb:51:f6:bd:9e:29:ce:34:bb:b6:83:4b: ce:61:16:a3:ed:62:f9:5d:e0:50:d3:75:06:bc:82:9b:bc:7a: d5:72:37:cd:b0:43:e0:a4:51:dd:04:93:d4:1a:6f:59:39:f3: 2c:ec:a0:68:6a:c4:e9:ba:7e:62:d1:66:59:2c:14:d2:19:b9: 0f:a2:ad:dd:2b:f9:00:c9:ac:63:b8:50:2b:60:fe:9b:1b:82: 12:02:a7:2d:77:6e:54:79:93:f9:7a:6b:5d:b9:30:0e:00:fb: c8:7f:ca:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8Xwy9+6wymrwKf2iLqbCSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwNjMwMDkwMTM1WhcNMjYwNzAxMDkwMTM1WjAzMTEwLwYDVQQD Eyg0Yjk3MTYyMmMyZDhlYzlmZWEyYzQ4MjQxYWUwNWM0NmJlOTcxZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjk3911RYkGH3DpFanVwb/4UeFOT I9kIz+B4reXknyD6VemoPEN0TI7XPCj7biDehGoyRGOy2gSyEpO29mlYiWcbgQJC URoD66I4zxpYLo3JvWwInUirmF8BdDa4/SN3hHaCB/lNgj6A8mUKvmQpV2WADMoI z7yOvhp933cYN93O5f7MUjygmc5ho0YgkNHdRfOIFHPxtuVumjjFENr/UVmv5eqp +blTg/ltfAf9ub+lQbTpgdVvTRu29Jcz0Kzp2PQgI3H2QXV2Ry5yQb0uNswcBCLu T1MHZyFVrIeWzqonmGBGrta+233skjxVdB93AIIydGFC9qcGBMCvFnC3SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuXFiLC2Oyf6ixIJBrgXEa+lx+JMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGNs1mv7 xFfLCb7aSehV8E5DyNZ9CBEV4WfHzNOthkmJT7HthhEkjz5PdmsUzZZfOASZ/LGP cJf0V2bwfvQ7xgilgjXjkSbzNroaZ9Wbq/qY60YQXil/tB69OyPf29kcgO+Rvycg VlPJCiz5+ShVjqR8DAsDcFmlq//nH8mzVFsdoSpMhpo/0m/YVGczBtxOVKUm0Kmj u1H2vZ4pzjS7toNLzmEWo+1i+V3gUNN1BryCm7x61XI3zbBD4KRR3QST1BpvWTnz LOygaGrE6bp+YtFmWSwU0hm5D6Kt3Sv5AMmsY7hQK2D+mxuCEgKnLXduVHmT+Xpr XbkwDgD7yH/K2Q== -----END CERTIFICATE-----Generated at Tue Jun 30 18:24:59 2026 by rpki-client