$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: kDkKg+7JAfnZiH03kFP0C0yAYqoT/epDMqVviErPeeQ= Subject key identifier: 85:72:3C:36:16:35:2C:5C:5E:4E:54:57:6E:7A:4D:5C:65:2E:01:CF Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019EC06D5F328901CC698A9394D0F38C3058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1149 Signing time: Sat 13 Jun 2026 10:00:53 +0000 Manifest this update: Sat 13 Jun 2026 10:00:53 +0000 Manifest next update: Sun 14 Jun 2026 10:00:53 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (hash: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: +t3/UjXuQcIDUOp7uBHBwkAg18CocfaD7JWMo7efYik=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:5f:32:89:01:cc:69:8a:93:94:d0:f3:8c:30:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jun 13 10:00:53 2026 GMT Not After : Jun 14 10:00:53 2026 GMT Subject: CN=85723c3616352c5c5e4e54576e7a4d5c652e01cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:f3:df:6a:75:06:68:44:ac:75:d9:19:8a: ea:53:9e:fa:8b:ec:12:81:12:d7:80:d1:02:82:e6: 26:3a:32:56:a0:5d:5e:6f:ef:51:0c:df:a8:4c:55: 28:08:34:ff:75:05:f5:64:1b:e7:18:06:8c:15:39: f9:f3:58:d1:19:64:03:06:ef:43:e5:70:84:b8:82: 9a:96:7c:6e:17:72:39:41:86:7a:27:bc:17:64:2a: 66:3f:af:c7:ec:1f:0b:58:a4:3d:53:78:2d:3d:97: 8d:48:d4:ba:f2:ad:fe:86:7b:05:8a:57:5d:34:47: 82:d8:25:b4:fc:b7:8e:6b:51:28:86:2e:21:32:11: 4c:ad:69:6d:ad:ad:12:0a:88:41:5c:d4:a9:b0:1c: ad:52:0a:05:c4:89:cf:5b:1e:33:2c:66:a2:0c:7a: e8:80:b2:a9:d0:21:13:90:bd:2b:9a:4b:dc:13:8d: f2:29:5f:cd:27:1b:e0:42:7c:93:e9:8b:08:e9:d1: 21:6e:48:ae:20:a9:41:e8:f9:3b:d3:25:dd:32:8c: 3e:6c:56:9c:c7:f0:79:34:4c:ef:c2:ef:4c:13:fa: 82:a2:09:b7:ce:cd:1e:bc:86:c2:e8:86:58:1a:bd: 7c:4d:c8:52:c3:ce:a4:34:94:88:2b:29:91:9e:42: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:3C:36:16:35:2C:5C:5E:4E:54:57:6E:7A:4D:5C:65:2E:01:CF X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:47:bb:8a:a5:28:21:a4:30:da:e5:1d:07:71:bb:81:e7:3e: fc:41:f8:fe:f9:f9:bb:b0:d0:c3:ac:3b:00:ba:a0:b6:fb:75: b2:24:fe:e3:60:0e:5d:53:6b:16:d5:22:22:4c:c7:2b:af:d0: ad:fd:c9:ca:b8:9e:31:6b:dc:dd:fa:91:01:7b:55:56:95:af: ad:e7:02:2f:a7:33:f6:01:fd:34:dd:72:3e:3f:8a:fe:a2:01: 2e:39:5e:f5:b2:13:b7:5e:61:65:e1:b1:a0:98:a2:57:28:3c: 09:3e:33:fd:cf:97:14:01:fe:d9:77:3a:9e:12:76:c3:34:6e: c8:22:c3:cf:cf:9e:10:71:39:34:e7:f9:87:17:1a:1b:1c:20: 90:cf:8d:f4:24:26:08:06:e5:f4:55:e9:38:ed:0e:39:09:a8: 0d:b0:69:c9:fd:ee:03:d5:8e:43:b1:cd:bf:73:3c:e2:3c:ff: c3:da:91:fb:cb:5e:ca:af:30:35:d7:94:72:37:50:27:38:1b: 80:d2:66:47:ea:c3:54:16:28:08:19:98:93:21:e6:c7:97:a6: 16:70:ba:bb:c8:1e:3a:88:cf:69:67:bf:c2:a8:f5:49:14:a0: b5:43:f9:0d:fe:e8:cc:3c:9b:11:f4:43:59:88:4f:83:97:c4: 41:66:0c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbV8yiQHMaYqTlNDzjDBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNjEzMTAwMDUzWhcNMjYwNjE0MTAwMDUzWjAzMTEwLwYDVQQD Eyg4NTcyM2MzNjE2MzUyYzVjNWU0ZTU0NTc2ZTdhNGQ1YzY1MmUwMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrfz32p1BmhErHXZGYrqU576i+wS gRLXgNECguYmOjJWoF1eb+9RDN+oTFUoCDT/dQX1ZBvnGAaMFTn581jRGWQDBu9D 5XCEuIKalnxuF3I5QYZ6J7wXZCpmP6/H7B8LWKQ9U3gtPZeNSNS68q3+hnsFildd NEeC2CW0/LeOa1Eohi4hMhFMrWltra0SCohBXNSpsBytUgoFxInPWx4zLGaiDHro gLKp0CETkL0rmkvcE43yKV/NJxvgQnyT6YsI6dEhbkiuIKlB6Pk70yXdMow+bFac x/B5NEzvwu9ME/qCogm3zs0evIbC6IZYGr18TchSw86kNJSIKymRnkLJRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVyPDYWNSxcXk5UV256TVxlLgHPMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEe7iqUo IaQw2uUdB3G7gec+/EH4/vn5u7DQw6w7ALqgtvt1siT+42AOXVNrFtUiIkzHK6/Q rf3JyrieMWvc3fqRAXtVVpWvrecCL6cz9gH9NN1yPj+K/qIBLjle9bITt15hZeGx oJiiVyg8CT4z/c+XFAH+2Xc6nhJ2wzRuyCLDz8+eEHE5NOf5hxcaGxwgkM+N9CQm CAbl9FXpOO0OOQmoDbBpyf3uA9WOQ7HNv3M84jz/w9qR+8teyq8wNdeUcjdQJzgb gNJmR+rDVBYoCBmYkyHmx5emFnC6u8geOojPaWe/wqj1SRSgtUP5Df7ozDybEfRD WYhPg5fEQWYMTw== -----END CERTIFICATE-----Generated at Sat Jun 13 14:17:25 2026 by rpki-client