$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: Mwr1TXzE2q0ZnvL6NWYRxHXhitqeDVCLMC+eUAsUpwA= Subject key identifier: F2:01:E1:B9:91:46:B5:E2:D3:FE:F4:81:50:D1:A1:A3:EC:90:AA:A8 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019EBFC9093445E5417264197293D9457F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 01C5 Signing time: Sat 13 Jun 2026 07:01:23 +0000 Manifest this update: Sat 13 Jun 2026 07:01:23 +0000 Manifest next update: Sun 14 Jun 2026 07:01:23 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 9e6zmBWAVRSSBZsE3u44av21eFoLNXD0CkmUp2/+DN8=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: O-QEXm4qSbt72Nnk4qRQFwvPr_0.roa (hash: vVF+iuhTnkhVo+LKbluIv023EO5M+EyUgI75CD2LSB0=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=) 12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 15: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:c9:09:34:45:e5:41:72:64:19:72:93:d9:45:7f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Jun 13 07:01:23 2026 GMT Not After : Jun 14 07:01:23 2026 GMT Subject: CN=f201e1b99146b5e2d3fef48150d1a1a3ec90aaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:1e:ff:3c:0f:aa:6f:81:9b:24:fd:2f:6d: 8b:68:c7:08:34:42:ab:32:05:8b:31:b5:9a:b4:4c: 4b:0c:bd:68:dd:e5:5a:05:d0:fd:2f:e4:94:f1:81: 5f:6f:1e:28:56:dc:41:34:20:75:b3:31:4b:08:10: 30:b3:17:00:d4:9d:cb:74:22:d1:cd:63:38:d0:93: d9:a9:45:42:c6:52:57:e5:ca:32:29:e5:02:d1:b3: 0b:9d:26:61:35:b7:4f:7e:71:24:bf:68:9c:92:c5: 3d:f9:84:17:71:93:dd:29:3a:71:d5:87:e3:ab:be: ba:31:d5:b0:92:08:4e:66:5a:87:ac:46:ce:55:e2: 07:7a:59:1f:07:35:bd:e2:b1:57:1f:de:5e:69:fc: fa:22:8d:07:f9:7a:20:89:0e:1f:44:16:b4:54:cb: 19:e0:e1:09:4b:43:ca:93:f4:0d:12:eb:10:6b:64: 96:cc:f9:68:20:13:13:8c:b2:18:49:f0:c7:4f:b6: 89:4e:5c:e5:f1:25:d0:6f:09:72:55:c8:4a:35:60: fe:2f:cf:c8:c8:07:17:47:ab:10:8d:eb:e5:ce:7e: 13:9a:19:0a:76:a8:f2:aa:62:d0:03:e2:35:f1:48: 49:f3:8d:d8:61:06:59:09:cf:95:3e:33:dc:05:fe: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:E1:B9:91:46:B5:E2:D3:FE:F4:81:50:D1:A1:A3:EC:90:AA:A8 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:f3:b5:38:1b:95:33:b8:41:7f:e0:50:28:fc:7f:fd:5c: d0:10:c4:d1:97:65:c3:92:72:53:c8:62:28:d1:e6:3c:1c:fa: 62:e4:6d:0e:4d:eb:6b:f1:82:51:84:88:b9:4f:06:fd:ab:36: 5e:c7:84:10:c1:e2:d2:13:21:49:b7:30:36:40:4f:c1:78:3b: 02:e9:1c:57:44:90:4f:64:6e:47:33:4e:58:fe:f1:65:d2:1e: 41:9d:36:c8:64:52:2f:1d:e6:e7:43:8e:98:25:22:a9:55:4a: 1e:6a:b5:b9:cf:a0:1f:06:2c:6c:e9:24:cd:93:e6:0f:bd:50: 8a:c1:ae:89:2a:46:73:21:39:cc:ad:59:18:fc:d2:7c:24:4d: a0:0e:3d:a4:40:80:95:6e:59:be:dd:9c:6c:13:5d:f1:96:8f: d5:de:ff:64:dc:ce:70:b2:dd:d2:0e:1d:30:a8:17:10:cb:33: 5e:49:42:e4:54:ce:35:c1:bc:81:40:55:54:ef:b9:f9:b7:be: 6c:00:4e:25:3f:e1:9b:c9:1f:90:c1:fd:a4:fc:35:61:b9:94: cb:7e:d9:7e:46:c2:67:0d:32:c2:2c:85:e9:7d:18:0b:40:06: 29:2c:30:58:28:9c:31:a9:15:cb:ea:14:a5:8c:3f:1d:ef:82: 67:50:e8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/yQk0ReVBcmQZcpPZRX8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwNjEzMDcwMTIzWhcNMjYwNjE0MDcwMTIzWjAzMTEwLwYDVQQD EyhmMjAxZTFiOTkxNDZiNWUyZDNmZWY0ODE1MGQxYTFhM2VjOTBhYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2we/zwPqm+BmyT9L22LaMcINEKr MgWLMbWatExLDL1o3eVaBdD9L+SU8YFfbx4oVtxBNCB1szFLCBAwsxcA1J3LdCLR zWM40JPZqUVCxlJX5coyKeUC0bMLnSZhNbdPfnEkv2icksU9+YQXcZPdKTpx1Yfj q766MdWwkghOZlqHrEbOVeIHelkfBzW94rFXH95eafz6Io0H+XogiQ4fRBa0VMsZ 4OEJS0PKk/QNEusQa2SWzPloIBMTjLIYSfDHT7aJTlzl8SXQbwlyVchKNWD+L8/I yAcXR6sQjevlzn4TmhkKdqjyqmLQA+I18UhJ843YYQZZCc+VPjPcBf7yBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIB4bmRRrXi0/70gVDRoaPskKqoMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2DztTgb lTO4QX/gUCj8f/1c0BDE0Zdlw5JyU8hiKNHmPBz6YuRtDk3ra/GCUYSIuU8G/as2 XseEEMHi0hMhSbcwNkBPwXg7AukcV0SQT2RuRzNOWP7xZdIeQZ02yGRSLx3m50OO mCUiqVVKHmq1uc+gHwYsbOkkzZPmD71QisGuiSpGcyE5zK1ZGPzSfCRNoA49pECA lW5Zvt2cbBNd8ZaP1d7/ZNzOcLLd0g4dMKgXEMszXklC5FTONcG8gUBVVO+5+be+ bABOJT/hm8kfkMH9pPw1YbmUy37ZfkbCZw0ywiyF6X0YC0AGKSwwWCicMakVy+oU pYw/He+CZ1Dofg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:28:53 2026 by rpki-client