$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: Sz+WT/6PYprOwtLRG5AqIf/+W9MqtZ37fMWw/4hztOg= Subject key identifier: 13:98:5E:9D:13:71:0A:CF:97:D9:26:D1:AD:91:85:51:EE:9B:9F:5B Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019EBE1143012B820FC92BB7CB36C5D10134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1960 Signing time: Fri 12 Jun 2026 23:01:02 +0000 Manifest this update: Fri 12 Jun 2026 23:01:02 +0000 Manifest next update: Sat 13 Jun 2026 23:01:02 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: QuYPH+FQ3PdSfCfRA8Vu49V/vpkfItsfkmVRG0mfCds=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:11:43:01:2b:82:0f:c9:2b:b7:cb:36:c5:d1:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jun 12 23:01:02 2026 GMT Not After : Jun 13 23:01:02 2026 GMT Subject: CN=13985e9d13710acf97d926d1ad918551ee9b9f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:8a:c3:a8:b9:71:0e:ae:95:14:c8:ab:1c: bb:eb:9d:13:5a:5e:ee:1d:4a:a1:5a:7b:86:4b:8b: 40:f3:ef:b0:ec:a0:86:7c:26:a8:72:40:40:92:9f: 17:dc:fb:a0:03:e9:53:8e:d9:97:37:91:37:d0:c5: 3d:7f:39:c2:ce:51:57:9a:19:74:90:0f:44:14:68: e6:26:11:1d:5a:c6:49:f7:82:1f:4f:5f:96:6e:90: e5:9e:34:41:93:8c:ba:10:13:86:5e:28:1d:68:14: 2d:6b:ab:65:a9:8b:22:3b:76:8a:01:d3:40:2c:7e: 93:b6:1d:5f:bb:58:87:30:c4:7f:28:94:39:43:54: d1:43:25:82:d9:dd:77:d6:e7:37:df:5c:2e:8c:68: 08:6d:8e:4e:f5:a0:5b:50:2e:99:af:35:fc:c2:39: 7a:9d:c9:cd:e0:22:a1:c3:2e:2b:48:bc:ec:ac:86: 91:5d:66:7d:4d:6f:13:e7:0a:37:fd:74:68:76:da: 20:3f:d8:5a:87:6c:1e:40:61:fc:61:1d:0a:dd:50: ed:fa:07:48:27:0b:16:49:d5:48:02:52:14:62:40: 5a:91:b8:b0:aa:b2:9e:99:97:e6:b9:cc:62:a2:0f: 3a:0a:bd:43:23:3c:ed:d8:f9:61:f3:79:89:7b:59: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:5E:9D:13:71:0A:CF:97:D9:26:D1:AD:91:85:51:EE:9B:9F:5B X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:5d:3a:82:3f:df:38:a9:dd:1e:ad:22:f8:57:6d:87:38: 07:46:58:41:20:0e:cd:3f:70:f7:bb:aa:4d:75:49:7f:bc:c6: 8f:fe:36:f4:ea:d3:3d:de:bf:30:f0:68:21:82:42:c9:6c:d2: 8e:86:12:e3:99:d3:9a:6c:8e:68:c6:d8:66:eb:cf:38:06:f5: cf:8c:af:fe:ad:1a:b2:fb:4b:39:67:c1:6b:bf:95:ab:44:76: 14:cf:78:5a:68:b8:c1:42:fe:07:bc:0a:55:b7:0a:4e:91:d8: 0d:28:51:c2:94:2e:03:01:25:3a:d6:81:1c:16:8d:25:73:e6: 1a:19:79:65:63:ff:02:4a:c8:58:d3:92:ac:50:57:0c:ff:2e: b4:9b:19:70:10:a7:d8:ca:ef:af:4f:6b:ef:1a:ac:92:6e:e8: cf:b0:3d:fb:3f:cf:2d:82:f6:02:30:5d:01:da:a2:bb:b3:5e: c1:d8:dd:83:b5:8d:48:87:86:71:b2:3d:db:d5:43:76:4c:a2: 19:c1:ad:fb:2b:ad:dd:fa:91:31:59:e8:0a:c8:bb:f2:19:e6: 10:86:dd:0c:6d:a0:bc:ee:16:b5:ad:ca:13:8f:9d:08:bb:ba: 00:b2:fe:ac:c1:a1:c3:c9:3c:9a:a4:81:a3:f1:1e:e9:12:21: 00:05:c3:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ6+EUMBK4IPySu3yzbF0QE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNjEyMjMwMTAyWhcNMjYwNjEzMjMwMTAyWjAzMTEwLwYDVQQD EygxMzk4NWU5ZDEzNzEwYWNmOTdkOTI2ZDFhZDkxODU1MWVlOWI5ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuKKw6i5cQ6ulRTIqxy7650TWl7u HUqhWnuGS4tA8++w7KCGfCaockBAkp8X3PugA+lTjtmXN5E30MU9fznCzlFXmhl0 kA9EFGjmJhEdWsZJ94IfT1+WbpDlnjRBk4y6EBOGXigdaBQta6tlqYsiO3aKAdNA LH6Tth1fu1iHMMR/KJQ5Q1TRQyWC2d131uc331wujGgIbY5O9aBbUC6ZrzX8wjl6 ncnN4CKhwy4rSLzsrIaRXWZ9TW8T5wo3/XRodtogP9hah2weQGH8YR0K3VDt+gdI JwsWSdVIAlIUYkBakbiwqrKemZfmucxiog86Cr1DIzzt2Plh83mJe1n7iwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBOYXp0TcQrPl9km0a2RhVHum59bMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCdd OoI/3zip3R6tIvhXbYc4B0ZYQSAOzT9w97uqTXVJf7zGj/429OrTPd6/MPBoIYJC yWzSjoYS45nTmmyOaMbYZuvPOAb1z4yv/q0asvtLOWfBa7+Vq0R2FM94Wmi4wUL+ B7wKVbcKTpHYDShRwpQuAwElOtaBHBaNJXPmGhl5ZWP/AkrIWNOSrFBXDP8utJsZ cBCn2Mrvr09r7xqskm7oz7A9+z/PLYL2AjBdAdqiu7Newdjdg7WNSIeGcbI929VD dkyiGcGt+yut3fqRMVnoCsi78hnmEIbdDG2gvO4Wta3KE4+dCLu6ALL+rMGhw8k8 mqSBo/Ee6RIhAAXD6Q== -----END CERTIFICATE-----Generated at Sat Jun 13 09:01:22 2026 by rpki-client