$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: +D/+72WOGd2vQbjNJi197ZoJ6AMDjzNm1o7oHEzEE14= Subject key identifier: 08:07:2B:67:8C:E2:83:6D:E7:CB:71:AA:C8:68:92:1E:5B:97:40:5B Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019EBE112015D9E952B8AF0806978D15D9B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 19F7 Signing time: Fri 12 Jun 2026 23:00:53 +0000 Manifest this update: Fri 12 Jun 2026 23:00:53 +0000 Manifest next update: Sat 13 Jun 2026 23:00:53 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: aM2sJzNgnEzAIhMWOgz0Sq2HOMRa1g2vIvUzhgEEySs=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:11:20:15:d9:e9:52:b8:af:08:06:97:8d:15:d9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jun 12 23:00:53 2026 GMT Not After : Jun 13 23:00:53 2026 GMT Subject: CN=08072b678ce2836de7cb71aac868921e5b97405b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:dc:a5:95:51:90:71:5a:97:70:91:0d:b4: 99:0a:e9:16:8e:71:bd:72:d5:86:5f:c2:b5:95:68: 70:b8:d1:ce:c4:9e:c9:03:2a:6a:1b:55:98:13:78: 11:9c:68:77:6a:a1:30:6c:4d:da:55:bf:b3:4c:5a: 44:72:f1:aa:4f:6b:ec:ff:28:cf:80:bf:28:1e:a1: c6:29:3c:a3:ab:ae:52:3b:d6:86:12:69:4a:72:c8: f1:50:f2:e8:c6:eb:ea:8d:8d:fb:63:21:4e:3d:53: 47:4f:8a:c2:83:d9:6d:5f:cb:7c:b7:ca:9d:4a:34: d9:84:38:2d:82:a4:5e:ad:5f:ab:d3:10:62:62:b1: 49:8d:4a:cb:16:bc:8b:fe:70:73:a0:dd:bf:2c:2e: 65:b6:0e:91:f7:55:0e:ae:77:90:0d:f1:be:cd:de: bc:3c:ea:d9:be:df:de:46:5a:88:05:3f:91:5f:77: 6b:df:86:53:bd:63:cb:52:4b:b0:b1:d6:54:e4:8d: 64:70:2a:39:fc:2e:9c:d3:ca:83:8a:3b:74:03:2e: b6:c4:46:38:91:b3:44:39:5b:7a:d1:c7:df:35:33: 03:3a:6d:c2:19:fa:d5:76:cf:8e:bd:93:ed:7b:1b: f0:0e:72:a8:60:c8:07:84:66:4c:53:d8:a3:e6:40: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:07:2B:67:8C:E2:83:6D:E7:CB:71:AA:C8:68:92:1E:5B:97:40:5B X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ab:cf:07:11:dd:30:75:c8:f3:9d:ce:02:57:b6:da:83:bc: 3f:63:60:37:5a:39:ac:b3:ad:09:20:df:8c:d6:3f:97:68:2d: 68:64:6a:2c:d0:6a:e0:79:86:04:d9:91:00:ac:62:5f:43:bd: 30:58:36:1f:cb:f3:09:14:1a:24:b7:5b:a2:99:c0:22:d7:f2: 7c:39:81:9a:dc:86:7e:22:74:d5:66:92:58:e7:ef:32:bd:42: 4d:c9:a3:74:d8:a9:d6:fc:ff:c0:68:16:68:74:6f:bf:6b:a7: 88:20:da:60:1f:78:fa:4f:93:84:ae:a7:71:00:74:38:28:76: 7b:ca:b8:3c:df:c6:2f:82:f1:88:31:73:ab:96:79:52:03:0f: 90:ea:24:32:27:58:bb:9e:8b:0e:e0:88:15:22:8a:04:b9:06: a8:cd:f2:93:72:5f:22:cd:d8:c6:17:74:6c:0f:5f:8e:c3:94: 58:b7:7c:1a:39:7d:35:81:df:30:51:4e:9f:d7:4d:2e:41:72: 1f:1d:a1:0d:91:06:54:31:96:49:94:e6:e4:e7:99:5d:64:0d: 0b:5b:9c:c7:a0:70:d3:7d:d5:17:41:17:d6:aa:11:d9:7b:5f: c5:96:1a:84:ca:6a:fb:3a:d6:46:c1:61:60:a8:b0:42:e9:b6: 08:15:9c:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+ESAV2elSuK8IBpeNFdmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNjEyMjMwMDUzWhcNMjYwNjEzMjMwMDUzWjAzMTEwLwYDVQQD EygwODA3MmI2NzhjZTI4MzZkZTdjYjcxYWFjODY4OTIxZTViOTc0MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYbcpZVRkHFal3CRDbSZCukWjnG9 ctWGX8K1lWhwuNHOxJ7JAypqG1WYE3gRnGh3aqEwbE3aVb+zTFpEcvGqT2vs/yjP gL8oHqHGKTyjq65SO9aGEmlKcsjxUPLoxuvqjY37YyFOPVNHT4rCg9ltX8t8t8qd SjTZhDgtgqRerV+r0xBiYrFJjUrLFryL/nBzoN2/LC5ltg6R91UOrneQDfG+zd68 POrZvt/eRlqIBT+RX3dr34ZTvWPLUkuwsdZU5I1kcCo5/C6c08qDijt0Ay62xEY4 kbNEOVt60cffNTMDOm3CGfrVds+OvZPtexvwDnKoYMgHhGZMU9ij5kAROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgHK2eM4oNt58txqshokh5bl0BbMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6vPBxHd MHXI853OAle22oO8P2NgN1o5rLOtCSDfjNY/l2gtaGRqLNBq4HmGBNmRAKxiX0O9 MFg2H8vzCRQaJLdbopnAItfyfDmBmtyGfiJ01WaSWOfvMr1CTcmjdNip1vz/wGgW aHRvv2uniCDaYB94+k+ThK6ncQB0OCh2e8q4PN/GL4LxiDFzq5Z5UgMPkOokMidY u56LDuCIFSKKBLkGqM3yk3JfIs3Yxhd0bA9fjsOUWLd8Gjl9NYHfMFFOn9dNLkFy Hx2hDZEGVDGWSZTm5OeZXWQNC1ucx6Bw033VF0EX1qoR2XtfxZYahMpq+zrWRsFh YKiwQum2CBWcxg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:22:44 2026 by rpki-client