$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: t6DlS0wozyLFA4Rbx5kAYUVPLpxnyA+sToT/2aFIbVE= Subject key identifier: 4E:3D:24:EE:85:46:A5:97:61:80:1C:50:36:3E:FA:5B:D9:06:5C:92 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019EBEED2B065ABFE3DDED9096AE88535F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 198B Signing time: Sat 13 Jun 2026 03:01:14 +0000 Manifest this update: Sat 13 Jun 2026 03:01:14 +0000 Manifest next update: Sun 14 Jun 2026 03:01:14 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 3: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 4: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 5: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 6: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 7: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: l7w4zNta+C7br2hP99dLxRfc1Pm66OS9g1L4Vb/jCEk=) 8: T_-ZwXAe_QX6a_DWOX3bIJp1j9Q.roa (hash: bLBlB7pcSnb/QIpqPULkkSG+4UsT0yPWM54kxPKFPAg=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ed:2b:06:5a:bf:e3:dd:ed:90:96:ae:88:53:5f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jun 13 03:01:14 2026 GMT Not After : Jun 14 03:01:14 2026 GMT Subject: CN=4e3d24ee8546a59761801c50363efa5bd9065c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:78:4e:58:61:8d:2f:94:2a:72:58:3e:2c: 37:7d:7d:8d:1d:e0:e7:31:69:20:94:4b:33:a9:ac: 60:6a:a6:b5:33:2f:b9:ae:0f:ff:24:71:a5:48:3c: 80:f3:21:7c:c0:c3:59:34:45:c3:ad:2a:ea:14:46: e8:d6:05:76:87:95:38:2b:4e:46:1a:62:88:b1:50: 17:e9:29:7e:74:60:16:50:3f:05:4e:f6:11:c4:46: 7b:f0:24:95:44:f5:57:6a:8d:58:88:38:3d:eb:d7: dc:67:ed:ab:ec:f3:51:b0:73:64:8d:80:af:38:71: d5:85:04:51:14:49:ec:03:ce:f9:64:9d:76:aa:b1: 76:91:65:a5:8f:0c:d2:d6:7c:07:88:9c:fc:21:5e: 89:4b:af:45:7d:c7:e0:a1:1c:fa:02:7a:f1:a8:55: 14:ce:6e:b2:67:26:d7:84:51:da:28:1a:82:77:a2: 92:bd:48:be:70:18:0a:d2:58:86:04:2c:28:dc:05: 61:84:06:bc:20:39:10:91:1a:01:b7:97:5b:3e:60: 7f:e4:7b:b9:d9:37:77:87:7f:93:bb:e1:3d:a6:7f: 23:0e:d1:98:53:ec:bd:b5:08:8c:3c:51:76:f9:30: 22:aa:7c:5a:cb:50:fe:4c:6c:0f:85:4d:f5:45:7d: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:24:EE:85:46:A5:97:61:80:1C:50:36:3E:FA:5B:D9:06:5C:92 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b8:85:37:75:5d:e8:e4:09:c8:ff:fc:4c:fc:ca:71:d0:da: b2:70:f9:9b:14:cf:d5:eb:de:9e:03:1c:03:e3:23:95:b1:97: d9:b8:98:bc:2a:ff:9f:64:27:be:9c:1c:a1:12:db:9e:5f:94: a9:89:d4:36:3a:2f:da:5b:f1:a2:c5:ae:87:36:20:b6:be:a5: 0e:37:b7:ff:f8:3f:c5:fe:02:aa:2c:7b:17:e1:87:a7:5c:63: 6a:10:fe:2d:c0:9a:67:f8:65:d3:a0:5f:5d:bc:c7:f0:46:df: 57:2e:bf:9b:6b:66:81:96:4d:f7:b3:05:3f:fe:98:05:76:91: c8:c4:6d:e1:61:15:96:f9:e3:f8:61:ad:5c:e1:8f:46:5e:4e: 96:aa:aa:af:a8:7c:06:b7:ca:3e:ea:b4:c4:3e:4e:05:e5:5e: cb:bc:25:27:e1:60:ac:27:75:6b:25:87:1f:b3:50:c4:68:62: ae:42:24:92:57:67:34:20:17:22:37:47:3c:37:c4:70:31:28: 8e:ca:5c:47:52:f3:20:a6:d3:14:fc:7e:42:5c:d4:8a:bc:b7: e0:94:b6:0c:38:2d:74:e0:7f:c3:17:1f:28:58:80:cd:a2:fd: 4b:27:e8:cf:3e:8b:d7:29:ef:58:d2:e4:05:22:a1:f7:c2:47: c6:4a:c1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7SsGWr/j3e2Qlq6IU18LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwNjEzMDMwMTE0WhcNMjYwNjE0MDMwMTE0WjAzMTEwLwYDVQQD Eyg0ZTNkMjRlZTg1NDZhNTk3NjE4MDFjNTAzNjNlZmE1YmQ5MDY1YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjh4TlhhjS+UKnJYPiw3fX2NHeDn MWkglEszqaxgaqa1My+5rg//JHGlSDyA8yF8wMNZNEXDrSrqFEbo1gV2h5U4K05G GmKIsVAX6Sl+dGAWUD8FTvYRxEZ78CSVRPVXao1YiDg969fcZ+2r7PNRsHNkjYCv OHHVhQRRFEnsA875ZJ12qrF2kWWljwzS1nwHiJz8IV6JS69FfcfgoRz6AnrxqFUU zm6yZybXhFHaKBqCd6KSvUi+cBgK0liGBCwo3AVhhAa8IDkQkRoBt5dbPmB/5Hu5 2Td3h3+Tu+E9pn8jDtGYU+y9tQiMPFF2+TAiqnxay1D+TGwPhU31RX2UJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE49JO6FRqWXYYAcUDY++lvZBlySMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYriFN3Vd 6OQJyP/8TPzKcdDasnD5mxTP1evengMcA+MjlbGX2biYvCr/n2QnvpwcoRLbnl+U qYnUNjov2lvxosWuhzYgtr6lDje3//g/xf4Cqix7F+GHp1xjahD+LcCaZ/hl06Bf XbzH8EbfVy6/m2tmgZZN97MFP/6YBXaRyMRt4WEVlvnj+GGtXOGPRl5Olqqqr6h8 BrfKPuq0xD5OBeVey7wlJ+FgrCd1ayWHH7NQxGhirkIkkldnNCAXIjdHPDfEcDEo jspcR1LzIKbTFPx+QlzUiry34JS2DDgtdOB/wxcfKFiAzaL9Syfozz6L1ynvWNLk BSKh98JHxkrB3w== -----END CERTIFICATE-----Generated at Sat Jun 13 09:32:32 2026 by rpki-client