$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: vcpWnXkWjiZON9k2P6FViFM2Sb7mpP2lljbdBCmXt6Y= Subject key identifier: F2:76:BD:C0:58:B5:A1:73:10:D6:C2:05:AC:91:F9:F6:38:A4:3F:35 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019EC33705468D1215032E2076F9ECF32F6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 1111 Signing time: Sat 13 Jun 2026 23:00:23 +0000 Manifest this update: Sat 13 Jun 2026 23:00:23 +0000 Manifest next update: Sun 14 Jun 2026 23:00:23 +0000 Files and hashes: 1: 0tMr1V2NrZJuowDCZdCx-tCNBkY.roa (hash: 9fKPyx7EXZECo0QhxrhTF/z1f7bEAZhvNl4JyZ6Gf8s=) 2: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 4: DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa (hash: AUqyMLZSXseXhShAyL7jvq0DAiPZYPduaEFPG6bp3bs=) 5: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 6: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=) 7: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 8: nUgTJPU9nrCII2FLyU_H2qK_pP8.roa (hash: rmb104kxYDootOUIROMu6HqlCFZnw39MmdII1tj3p9Q=) 9: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 10: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 11: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: YDz/xYTVHkm6I8STvljdwXFShRrgVkBsrUItAPITgog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c3:37:05:46:8d:12:15:03:2e:20:76:f9:ec:f3:2f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Jun 13 23:00:23 2026 GMT Not After : Jun 14 23:00:23 2026 GMT Subject: CN=f276bdc058b5a17310d6c205ac91f9f638a43f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:45:78:21:85:6a:3e:18:78:e1:b3:76:28: 28:74:80:91:a8:a3:e4:58:83:c2:4b:9b:ec:f4:ec: 7e:6f:bd:3e:3e:b5:9d:90:8b:29:b6:af:66:58:91: 89:18:22:b7:3e:6a:de:ea:5d:05:8d:9f:80:6b:b6: 63:9e:a9:39:08:2d:ad:1f:f7:68:92:42:af:ac:1d: 1a:d7:ef:a3:0c:89:12:6d:36:0d:e5:9d:15:3a:c8: 8d:cc:9a:1f:45:93:d4:3c:84:be:68:6e:41:b0:b5: 44:84:57:c0:4e:0b:e7:b4:e6:69:41:63:55:77:1a: 97:f0:e5:0b:e5:71:25:77:a1:3e:59:00:6e:9b:d8: 49:ed:de:12:c6:c6:83:4a:1d:3a:44:84:6f:ee:24: 7e:47:e9:86:f4:52:ac:c7:b3:dc:c4:7d:c0:a6:f5: 1c:b5:2f:61:b7:88:9e:5f:fc:86:4c:8b:16:cd:0d: 6e:b4:bf:ef:16:e0:2e:c8:10:65:ae:a2:5f:6b:98: c6:7e:5a:88:59:b9:41:72:75:02:4b:e8:1b:26:a0: 69:aa:c2:be:18:97:03:9b:da:98:3e:93:38:6e:6f: 2c:f8:cc:71:64:f3:6b:51:5d:48:cf:24:1f:74:0b: 6f:26:0c:9f:54:37:ca:89:39:48:a5:12:f2:62:34: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:76:BD:C0:58:B5:A1:73:10:D6:C2:05:AC:91:F9:F6:38:A4:3F:35 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:92:4c:2e:7c:3e:ad:de:82:c1:35:1d:af:2d:58:2d:99:80: 23:e1:43:64:11:67:6b:d3:c1:e3:0a:7c:71:98:b5:3a:5e:3d: 79:5b:a7:46:26:56:25:f7:30:13:1b:2d:cb:bc:47:57:f4:94: be:b6:58:b5:36:7c:5f:44:65:50:0b:6f:9f:e2:c0:43:61:2f: d5:2d:99:d0:62:fd:47:05:bb:3d:a5:d3:1c:06:00:c0:3d:41: 6b:0c:b4:e6:47:df:d6:b9:b9:cb:2a:88:30:b3:1d:75:6b:67: ab:5c:45:93:20:a0:97:53:36:ab:41:b8:b1:b4:28:53:7d:c0: 42:ea:19:1e:b4:2c:15:d0:eb:58:9f:4a:2c:f3:6d:44:93:f1: de:3a:d7:8e:b3:72:ec:8d:43:95:59:8b:83:62:d1:4a:26:af: a3:42:7a:a3:9e:fa:24:3c:14:ff:b2:23:95:64:d2:25:d1:d5: 64:4d:b9:69:57:1f:61:75:5c:50:d2:7c:32:c5:5f:b9:18:9f: 5e:16:73:36:be:b8:d5:b9:ab:26:78:95:e9:e4:ee:c9:af:3f: cb:52:06:9e:4c:2b:10:75:89:77:a0:08:e4:18:85:df:f9:f7: f6:46:79:a3:43:19:96:4d:0a:73:b0:de:1c:ee:1c:5b:4b:b8: de:f5:53:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7DNwVGjRIVAy4gdvns8y9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwNjEzMjMwMDIzWhcNMjYwNjE0MjMwMDIzWjAzMTEwLwYDVQQD EyhmMjc2YmRjMDU4YjVhMTczMTBkNmMyMDVhYzkxZjlmNjM4YTQzZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlRFeCGFaj4YeOGzdigodICRqKPk WIPCS5vs9Ox+b70+PrWdkIsptq9mWJGJGCK3Pmre6l0FjZ+Aa7Zjnqk5CC2tH/do kkKvrB0a1++jDIkSbTYN5Z0VOsiNzJofRZPUPIS+aG5BsLVEhFfATgvntOZpQWNV dxqX8OUL5XEld6E+WQBum9hJ7d4SxsaDSh06RIRv7iR+R+mG9FKsx7PcxH3ApvUc tS9ht4ieX/yGTIsWzQ1utL/vFuAuyBBlrqJfa5jGflqIWblBcnUCS+gbJqBpqsK+ GJcDm9qYPpM4bm8s+MxxZPNrUV1IzyQfdAtvJgyfVDfKiTlIpRLyYjQwVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJ2vcBYtaFzENbCBayR+fY4pD81MB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5JMLnw+ rd6CwTUdry1YLZmAI+FDZBFna9PB4wp8cZi1Ol49eVunRiZWJfcwExsty7xHV/SU vrZYtTZ8X0RlUAtvn+LAQ2Ev1S2Z0GL9RwW7PaXTHAYAwD1Bawy05kff1rm5yyqI MLMddWtnq1xFkyCgl1M2q0G4sbQoU33AQuoZHrQsFdDrWJ9KLPNtRJPx3jrXjrNy 7I1DlVmLg2LRSiavo0J6o576JDwU/7IjlWTSJdHVZE25aVcfYXVcUNJ8MsVfuRif XhZzNr641bmrJniV6eTuya8/y1IGnkwrEHWJd6AI5BiF3/n39kZ5o0MZlk0Kc7De HO4cW0u43vVTdg== -----END CERTIFICATE-----Generated at Sun Jun 14 01:41:26 2026 by rpki-client