$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: 19ZhSRUq+cMJ8fVcqn2fNsWt/zkEZT3foKQhD9+ztHs= Subject key identifier: 85:1A:91:EB:82:7F:21:18:94:DB:C8:50:34:D5:0F:E4:40:34:BF:61 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019EC111908182E349DBF6086E8588D9834B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 049D Signing time: Sat 13 Jun 2026 13:00:14 +0000 Manifest this update: Sat 13 Jun 2026 13:00:14 +0000 Manifest next update: Sun 14 Jun 2026 13:00:14 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 7_KuEvRi_14zb6ajXHwy-1HJpm0.roa (hash: y9zbrYx6KIqniGx302kiI/eIzCLca5mKO3xeDDaCZf0=) 4: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 5: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 6: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 11: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 12: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 13: n4PyCzNuArzvMMSs4_9M2Rr_Pcc.roa (hash: v767wGXxzM+38xa2Dth+I2XGtOv/gRqhBPQGRj3YQas=) 14: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 15: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 16: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: IVjkMlzaoKU15ShEp7o6fW5IgmSbR1DHL1yv+1VTpiQ=) 17: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:11:90:81:82:e3:49:db:f6:08:6e:85:88:d9:83:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jun 13 13:00:14 2026 GMT Not After : Jun 14 13:00:14 2026 GMT Subject: CN=851a91eb827f211894dbc85034d50fe44034bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:ce:11:56:71:2b:7b:64:90:63:59:2d:cd: d0:f0:ee:a7:63:4e:46:0a:79:de:ef:5d:46:06:a9: 90:c7:95:6b:1f:41:03:44:43:8f:3a:b6:94:1e:ec: 2b:e5:5f:a3:42:c0:d0:38:fa:b1:4e:51:50:64:cb: 6a:8b:ed:89:32:10:14:72:4c:b9:f8:cb:30:06:50: ec:a1:af:0d:2a:1f:7a:67:71:26:80:a5:a4:86:8e: d5:5c:08:61:c8:be:63:88:3a:bb:a6:69:5e:34:0f: be:31:d6:f9:9b:40:04:66:13:cd:82:7a:83:08:6d: 86:5a:dd:0e:f3:05:da:93:17:74:e6:f0:5c:b7:4b: ae:96:95:c2:70:91:25:90:af:20:48:53:f4:b6:15: 1b:2c:92:be:90:08:f7:2f:5f:00:a2:6f:a2:a9:3d: 2c:06:2a:8a:42:76:b3:33:68:bb:00:9b:2f:e4:70: e3:77:8d:c1:9d:b8:84:19:ed:a0:df:ed:7f:fc:c6: 37:a6:2e:36:5f:f7:9a:f5:22:66:b1:a5:1a:d5:a9: f0:7c:91:4e:69:93:ce:1a:01:0f:10:80:6b:06:7a: cb:61:7b:31:cd:34:fe:83:41:e9:95:7b:42:be:ac: 9e:20:32:bd:da:fa:91:56:d9:aa:3c:5a:26:d5:17: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1A:91:EB:82:7F:21:18:94:DB:C8:50:34:D5:0F:E4:40:34:BF:61 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:39:1b:7b:d2:98:dc:90:4f:d8:06:5f:51:64:a3:1d:1b:5f: f0:c4:32:85:28:c5:25:be:88:c9:0e:dc:66:79:ad:db:75:57: 36:80:7b:89:38:e1:42:6c:03:56:b4:a7:e3:0a:c4:2c:c2:50: 6f:36:7f:84:32:98:1b:31:ae:1a:ed:d9:8a:d2:a1:be:4d:d3: 69:8e:95:f1:17:dc:bb:23:d8:d3:04:3f:0e:94:3a:34:f7:42: 11:c0:1c:f3:ac:09:fb:52:25:dc:ce:03:5a:a2:5d:27:09:b5: e7:fb:eb:60:45:34:1e:47:05:94:13:ed:13:5c:23:7b:75:ec: 2d:fb:08:5c:97:40:e7:6e:d8:59:6c:ca:21:b7:2d:a7:ca:30: 37:90:9d:6f:3f:7c:d7:ed:d3:0e:00:a3:34:20:80:16:20:a8: e2:86:09:89:6f:dd:2a:40:c3:95:54:bc:c5:28:42:c8:33:5d: 4b:b7:ef:cb:2c:54:1b:a0:c4:c1:4f:b0:71:d2:1c:a8:91:c3: a2:23:10:96:1b:ab:91:bc:da:3a:36:99:59:42:2d:17:dd:3d: 68:f1:ca:3f:fe:9c:54:7c:00:fd:63:41:63:3e:29:ae:63:bc: 73:cd:11:bd:5d:ec:02:48:d3:7b:dd:8c:0a:9a:00:80:fc:b9: d6:3b:45:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BEZCBguNJ2/YIboWI2YNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwNjEzMTMwMDE0WhcNMjYwNjE0MTMwMDE0WjAzMTEwLwYDVQQD Eyg4NTFhOTFlYjgyN2YyMTE4OTRkYmM4NTAzNGQ1MGZlNDQwMzRiZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAfOEVZxK3tkkGNZLc3Q8O6nY05G Cnne711GBqmQx5VrH0EDREOPOraUHuwr5V+jQsDQOPqxTlFQZMtqi+2JMhAUcky5 +MswBlDsoa8NKh96Z3EmgKWkho7VXAhhyL5jiDq7pmleNA++Mdb5m0AEZhPNgnqD CG2GWt0O8wXakxd05vBct0uulpXCcJElkK8gSFP0thUbLJK+kAj3L18Aom+iqT0s BiqKQnazM2i7AJsv5HDjd43BnbiEGe2g3+1//MY3pi42X/ea9SJmsaUa1anwfJFO aZPOGgEPEIBrBnrLYXsxzTT+g0HplXtCvqyeIDK92vqRVtmqPFom1RcYJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUakeuCfyEYlNvIUDTVD+RANL9hMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDkbe9KY 3JBP2AZfUWSjHRtf8MQyhSjFJb6IyQ7cZnmt23VXNoB7iTjhQmwDVrSn4wrELMJQ bzZ/hDKYGzGuGu3ZitKhvk3TaY6V8RfcuyPY0wQ/DpQ6NPdCEcAc86wJ+1Il3M4D WqJdJwm15/vrYEU0HkcFlBPtE1wje3XsLfsIXJdA527YWWzKIbctp8owN5Cdbz98 1+3TDgCjNCCAFiCo4oYJiW/dKkDDlVS8xShCyDNdS7fvyyxUG6DEwU+wcdIcqJHD oiMQlhurkbzaOjaZWUItF909aPHKP/6cVHwA/WNBYz4prmO8c80RvV3sAkjTe92M CpoAgPy51jtF8g== -----END CERTIFICATE-----Generated at Sat Jun 13 16:08:16 2026 by rpki-client