$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: 2SmQwKuWZE7pv25rt8JfxUF/4IA+WSTr7R+QVEZuDSo= Subject key identifier: 6F:8E:83:A9:9A:C3:9C:04:F5:09:CD:2E:5B:72:9C:DD:F9:43:18:32 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019EC06D2185A1E180CD47A8E25255944144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1996 Signing time: Sat 13 Jun 2026 10:00:37 +0000 Manifest this update: Sat 13 Jun 2026 10:00:37 +0000 Manifest next update: Sun 14 Jun 2026 10:00:37 +0000 Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=) 2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=) 3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=) 4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=) 5: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (hash: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I=) 6: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=) 7: LWeCumCGWLRiY1UBy3xVVe9OiBY.roa (hash: Xd77tEDCH+uT7udr8IstaxGuVR7mAIqesHauwpnVYWw=) 8: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=) 9: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=) 10: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=) 11: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=) 12: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=) 13: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=) 14: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=) 15: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=) 16: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=) 17: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=) 18: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=) 19: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: EwtOu+suselEUl/fyGRRMM19ejou8sbKScpiSkBIrJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:21:85:a1:e1:80:cd:47:a8:e2:52:55:94:41:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jun 13 10:00:37 2026 GMT Not After : Jun 14 10:00:37 2026 GMT Subject: CN=6f8e83a99ac39c04f509cd2e5b729cddf9431832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:93:db:42:ef:ed:a6:e4:40:3f:5c:3a:ec: ac:ea:74:4b:f4:72:97:11:d9:90:35:0e:61:8c:aa: 1d:3b:c1:e4:15:d1:05:13:12:7c:1d:bb:cb:e9:58: ce:49:db:9c:91:2c:39:01:45:33:23:0a:0e:b7:20: 62:6c:1a:31:65:56:b4:bd:fe:73:89:48:28:ab:b7: 34:7d:76:fd:65:ff:35:7d:b0:e7:ea:0a:8a:d8:35: 27:83:c0:71:48:82:12:a5:6c:dd:fb:7b:24:bf:c4: f2:0f:0d:9c:ff:84:ff:45:45:c4:f2:bf:b5:cb:73: d8:60:52:d6:c5:c3:e0:e4:ec:4a:d7:4d:02:f3:f7: d9:1d:f6:4e:7d:27:8a:7c:de:5c:a9:d8:29:17:b0: 8a:9c:41:48:5b:26:61:0c:ac:52:88:e2:8e:7c:5c: 56:c4:94:ee:1c:f6:41:54:85:d5:79:65:df:4d:51: a8:14:79:5b:fd:0a:ed:b7:54:ed:8a:1c:08:2f:55: 82:f3:2f:03:6b:0a:39:c9:a9:9e:88:d8:8c:53:f7: 57:39:71:98:68:58:ac:5a:39:c1:ac:11:e1:36:b2: 0c:04:f2:b0:04:9d:e6:31:a0:c8:af:aa:ba:ae:20: 23:0b:98:a5:e2:af:e2:41:5f:9d:27:6e:1f:85:6b: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8E:83:A9:9A:C3:9C:04:F5:09:CD:2E:5B:72:9C:DD:F9:43:18:32 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:bd:91:73:6a:c5:80:3e:1c:a1:96:27:a3:16:66:92:15:66: fa:03:4d:38:13:4d:d9:26:b0:dd:2f:ce:6c:20:a1:b6:71:4f: f0:3d:66:d6:f7:d2:6e:fc:a7:7f:ce:e9:4a:6a:bb:3e:aa:ae: 23:71:d3:e1:b1:0a:2b:53:74:aa:b6:3c:72:07:84:a4:df:31: 54:1f:c7:ab:5d:40:8f:22:68:de:76:57:91:ca:43:64:59:1d: 35:cb:63:04:26:95:c8:1f:4e:4e:7c:df:93:d8:08:96:0f:04: cf:01:f2:a4:7a:54:39:2a:e0:f9:fd:fa:5e:df:48:da:e6:af: 93:87:99:32:e8:52:10:45:f3:81:d3:c6:a2:c3:c5:3f:30:3b: 60:78:f7:4a:d7:0e:a2:2c:bc:d5:07:e7:09:39:22:7e:ac:ca: d3:c6:9c:1b:34:b7:f8:9a:4a:89:a3:b8:e5:d1:f1:20:af:f3: 8e:94:a8:77:33:c5:3d:6a:35:d3:62:5c:4b:f2:bd:0b:e9:6c: 1f:1c:d3:bc:4b:de:13:c9:29:54:ea:bb:b2:41:2d:ba:41:0e: 0b:be:01:de:74:06:1e:df:ef:c2:52:db:fe:7e:ff:ed:fa:79: b6:62:61:21:79:2a:c0:70:3d:55:40:11:c0:76:55:24:44:02: 7a:52:44:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbSGFoeGAzUeo4lJVlEFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwNjEzMTAwMDM3WhcNMjYwNjE0MTAwMDM3WjAzMTEwLwYDVQQD Eyg2ZjhlODNhOTlhYzM5YzA0ZjUwOWNkMmU1YjcyOWNkZGY5NDMxODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ImT20Lv7abkQD9cOuys6nRL9HKX EdmQNQ5hjKodO8HkFdEFExJ8HbvL6VjOSduckSw5AUUzIwoOtyBibBoxZVa0vf5z iUgoq7c0fXb9Zf81fbDn6gqK2DUng8BxSIISpWzd+3skv8TyDw2c/4T/RUXE8r+1 y3PYYFLWxcPg5OxK100C8/fZHfZOfSeKfN5cqdgpF7CKnEFIWyZhDKxSiOKOfFxW xJTuHPZBVIXVeWXfTVGoFHlb/Qrtt1TtihwIL1WC8y8Dawo5yameiNiMU/dXOXGY aFisWjnBrBHhNrIMBPKwBJ3mMaDIr6q6riAjC5il4q/iQV+dJ24fhWt/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+Og6maw5wE9QnNLltynN35QxgyMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb2Rc2rF gD4coZYnoxZmkhVm+gNNOBNN2Saw3S/ObCChtnFP8D1m1vfSbvynf87pSmq7Pqqu I3HT4bEKK1N0qrY8cgeEpN8xVB/Hq11AjyJo3nZXkcpDZFkdNctjBCaVyB9OTnzf k9gIlg8EzwHypHpUOSrg+f36Xt9I2uavk4eZMuhSEEXzgdPGosPFPzA7YHj3StcO oiy81QfnCTkifqzK08acGzS3+JpKiaO45dHxIK/zjpSodzPFPWo102JcS/K9C+ls HxzTvEveE8kpVOq7skEtukEOC74B3nQGHt/vwlLb/n7/7fp5tmJhIXkqwHA9VUAR wHZVJEQCelJE0A== -----END CERTIFICATE-----Generated at Sat Jun 13 20:30:56 2026 by rpki-client