$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: m4EJoU8q4SdJssJressPoMw15mbMCOmZN3fX8CXUscI= Subject key identifier: 65:55:58:B4:21:96:54:E7:D7:19:D7:EA:CE:3E:4F:8D:38:01:F5:D2 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019EBEED14AA853E3FC9B871FCAC414D3106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1965 Signing time: Sat 13 Jun 2026 03:01:08 +0000 Manifest this update: Sat 13 Jun 2026 03:01:08 +0000 Manifest next update: Sun 14 Jun 2026 03:01:08 +0000 Files and hashes: 1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=) 2: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=) 3: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=) 4: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=) 5: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=) 6: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=) 7: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=) 8: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=) 9: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=) 10: Q_GDlNF7cK8B95qZojWcrc4afdU.roa (hash: LjEzjQgJhMLQIyhzGC77T1fGxckoIM3+ZyoGULP6VX0=) 11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=) 12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: nrcloOgB+Q53AOMvIZZe5B8Ut97nzngioCNqfX7ESOU=) 13: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=) 14: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=) 15: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=) 16: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=) 17: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (hash: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=) 18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=) 19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=) 20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=) 21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=) 22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=) 23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=) 24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=) 25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=) 26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ed:14:aa:85:3e:3f:c9:b8:71:fc:ac:41:4d:31:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jun 13 03:01:08 2026 GMT Not After : Jun 14 03:01:08 2026 GMT Subject: CN=655558b4219654e7d719d7eace3e4f8d3801f5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:95:42:9f:24:d9:fb:57:10:e0:10:00:06: 95:05:0e:9a:eb:a9:84:fd:11:76:be:95:d9:a0:c2: 77:e0:45:be:87:73:92:16:52:8c:72:75:60:f0:ee: 61:6b:5b:af:bf:60:e5:c7:f3:61:c8:ad:c2:1e:ec: bd:70:98:77:7c:f7:79:e6:fd:34:2e:59:89:57:b8: 6e:3c:52:49:4a:03:19:b5:b0:38:99:12:5d:d4:31: dc:05:2e:02:cc:c8:38:a0:66:cd:3d:6b:5a:cc:01: 33:fb:03:97:fd:53:9d:ad:be:da:61:99:14:7f:c2: 77:f6:3a:17:d2:cf:e5:c4:f0:5a:42:e2:42:54:79: fa:7a:4d:b8:95:03:6a:d4:85:75:9c:04:f0:4a:53: 86:85:43:a6:13:8c:29:e4:5d:9a:20:48:8c:7e:ba: 03:25:59:ce:ef:96:db:35:f7:67:c7:07:8e:c0:31: a6:ef:d2:b2:51:2f:66:46:39:8a:ea:85:7a:35:26: 99:87:a7:ff:58:77:68:09:be:a4:ab:cc:a5:65:cf: 3b:96:2b:0b:83:b3:bf:7b:a3:db:05:4d:2b:42:cf: 4c:2a:f3:7f:2c:ce:fa:85:8c:d6:1d:26:71:7c:43: 52:74:3a:bb:b2:26:69:89:4b:a5:f8:73:0d:e6:f0: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:58:B4:21:96:54:E7:D7:19:D7:EA:CE:3E:4F:8D:38:01:F5:D2 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3d:db:8e:d9:80:0c:2d:50:03:43:6e:49:15:9c:0b:6e:3b: 99:b2:11:0f:ba:bc:8c:32:95:63:77:64:86:c6:23:00:2d:2c: a8:d1:ea:16:c5:1c:02:e8:e5:c5:33:61:51:1c:17:2b:cc:6a: 23:6c:f3:8b:09:f3:98:16:e9:91:83:dd:81:fb:44:6d:92:ae: 4c:1c:c5:15:58:05:a1:c4:38:6c:6c:1a:79:2d:a7:49:41:ba: 62:0c:3b:0b:38:9f:82:f5:1e:2d:cf:00:a9:3e:65:54:1a:b7: fb:6e:6d:9c:f3:12:66:20:ca:10:e7:af:fd:1e:d3:0f:a3:ca: db:ff:4f:70:b7:6a:44:2b:35:33:86:32:d8:4f:27:12:e5:92: fc:5d:20:1a:5a:09:54:af:1b:2b:a3:20:85:74:8f:15:8b:c2: 31:88:b8:b9:6a:6e:a1:a6:11:8d:01:9c:b4:d7:70:25:54:f2: cb:91:7d:06:c2:ad:7e:60:b1:63:52:3c:a0:6d:3c:da:89:fc: 2d:0d:1c:b6:ce:84:11:f9:99:49:99:c2:d9:a5:da:2b:47:49: b1:c2:fb:aa:f5:b5:28:33:d4:71:1e:56:09:3b:7b:81:1c:54: db:0f:c2:aa:c8:ca:36:c6:b6:f5:3e:f7:c5:fa:b1:88:4c:f0: d7:be:43:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7RSqhT4/ybhx/KxBTTEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwNjEzMDMwMTA4WhcNMjYwNjE0MDMwMTA4WjAzMTEwLwYDVQQD Eyg2NTU1NThiNDIxOTY1NGU3ZDcxOWQ3ZWFjZTNlNGY4ZDM4MDFmNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy6VQp8k2ftXEOAQAAaVBQ6a66mE /RF2vpXZoMJ34EW+h3OSFlKMcnVg8O5ha1uvv2Dlx/NhyK3CHuy9cJh3fPd55v00 LlmJV7huPFJJSgMZtbA4mRJd1DHcBS4CzMg4oGbNPWtazAEz+wOX/VOdrb7aYZkU f8J39joX0s/lxPBaQuJCVHn6ek24lQNq1IV1nATwSlOGhUOmE4wp5F2aIEiMfroD JVnO75bbNfdnxweOwDGm79KyUS9mRjmK6oV6NSaZh6f/WHdoCb6kq8ylZc87lisL g7O/e6PbBU0rQs9MKvN/LM76hYzWHSZxfENSdDq7siZpiUul+HMN5vBCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVVWLQhllTn1xnX6s4+T404AfXSMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz3bjtmA DC1QA0NuSRWcC247mbIRD7q8jDKVY3dkhsYjAC0sqNHqFsUcAujlxTNhURwXK8xq I2zziwnzmBbpkYPdgftEbZKuTBzFFVgFocQ4bGwaeS2nSUG6Ygw7CzifgvUeLc8A qT5lVBq3+25tnPMSZiDKEOev/R7TD6PK2/9PcLdqRCs1M4Yy2E8nEuWS/F0gGloJ VK8bK6MghXSPFYvCMYi4uWpuoaYRjQGctNdwJVTyy5F9BsKtfmCxY1I8oG082on8 LQ0cts6EEfmZSZnC2aXaK0dJscL7qvW1KDPUcR5WCTt7gRxU2w/CqsjKNsa29T73 xfqxiEzw175DnA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:09 2026 by rpki-client