$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: 7Cr+02gxkg6c4WKerASyfWlkYVUCKp+hjtfHIoqJ2Oo= Subject key identifier: 88:7F:50:60:A0:CF:13:BD:A0:0B:3B:48:43:ED:5B:E4:FA:E7:83:D1 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019EC06D91974A5F60C95DA3D7741CF916E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1A58 Signing time: Sat 13 Jun 2026 10:01:06 +0000 Manifest this update: Sat 13 Jun 2026 10:01:06 +0000 Manifest next update: Sun 14 Jun 2026 10:01:06 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 5: DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa (hash: RjKMh5gW8pzBFR6f7By8eZXYSn1q9xeUUivYB7s0Dqk=) 6: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 7: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 8: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 9: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 10: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 11: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 12: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 13: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 14: _-CNKE2_7z_kM89zZk_UMMjhAl8.roa (hash: Fyok2cPZyLmptoNn7yS8WruQ3n7BVYZFEv5nHH8YA4g=) 15: _NYoKUb2N9O5Kuha08Z6TeOlAr8.roa (hash: hBPKH/sFoPLiqzPdXoKvs5WcXNHmeMzZr7pF/u9rRGI=) 16: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: yDKUR5/lr+igq38HMxECBEIzSWz4NljO+4QJwAY++OI=) 17: exnQ7gB88yNkRwZahGn_4_0thMc.roa (hash: UKbCwLgFQt8tO8VlzO1XESsFMxIsfuopvo5y4s+FJG4=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 22: ynBFSrV8ZH9_wqVoAfnt_FjSrrU.roa (hash: 5p+YTYImMlKlaiHoiipBJ5nPHx1e+dUAQvrDcV9snYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:91:97:4a:5f:60:c9:5d:a3:d7:74:1c:f9:16:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jun 13 10:01:06 2026 GMT Not After : Jun 14 10:01:06 2026 GMT Subject: CN=887f5060a0cf13bda00b3b4843ed5be4fae783d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:57:38:e4:8a:f3:66:f6:45:4b:7e:ae:0c: 8b:ce:35:eb:be:4d:72:b7:a5:05:63:b6:01:9d:71: 5c:3a:e4:0f:33:c3:b3:c1:29:ec:22:de:6c:8f:1f: f3:06:b5:62:ec:74:70:96:3a:68:69:26:ae:d3:35: 9d:8f:26:89:28:91:4a:60:e5:21:94:8c:53:0d:f2: df:50:c9:48:da:28:2a:c8:e3:c9:a7:6c:e1:fd:7f: 5c:b3:c5:37:10:92:74:3f:2a:8f:94:7c:2c:77:04: e1:1a:bf:d7:09:bf:d3:8c:5b:09:a0:36:f6:3d:6a: e5:f4:22:9c:fd:1a:45:0a:7d:cb:49:58:0f:55:bd: b5:1b:03:32:de:84:1d:1f:56:cb:3e:44:c6:6d:ef: ab:b6:f7:26:7a:5c:0e:ef:7a:1d:a2:96:81:08:8c: c4:c5:7a:ec:d9:0d:16:2b:42:65:62:20:ca:e2:93: ff:ff:2c:1f:13:94:e1:a1:e4:14:8a:eb:47:b4:6f: db:bb:14:ad:e3:57:84:1c:ad:dc:68:88:d0:41:e0: fe:5a:af:16:70:97:b1:c4:74:4d:76:28:ff:88:26: 26:fe:a3:e8:c3:38:24:cc:81:c6:75:f1:0f:52:ca: 99:56:5b:48:9c:80:39:28:5c:4d:68:9d:3b:46:50: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7F:50:60:A0:CF:13:BD:A0:0B:3B:48:43:ED:5B:E4:FA:E7:83:D1 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ee:b0:17:8e:7d:29:bc:ba:7c:02:25:5b:45:29:78:4a:89: 2e:33:56:7b:1e:07:53:09:de:e8:5b:01:1b:77:2d:b2:7c:09: 8b:0b:d6:03:e9:1b:27:2a:60:ec:d5:84:41:2f:e4:b1:5c:e6: 16:f9:8a:e3:0c:e8:cb:14:67:f0:f1:dd:4e:66:d5:dd:ce:9c: 39:6e:e4:26:ea:34:b1:b1:d7:d5:64:59:98:53:49:df:20:9b: 6f:ff:a3:59:46:14:cb:28:ea:cd:d6:95:40:a4:92:76:98:32: 15:da:5a:3b:4c:2a:59:23:f5:37:22:59:17:69:7f:f0:0f:d9: aa:0d:76:d9:f9:fc:45:1d:63:4b:0f:b6:44:b8:82:36:e4:06: cc:c5:0e:e1:11:a5:87:a6:70:1f:3f:b0:d6:7b:13:df:c5:ec: c4:b5:74:4b:e9:1d:6f:a6:bc:3b:7a:2f:aa:c4:2f:f8:5c:25: 6e:e1:dd:79:2c:9a:be:87:e2:e5:ac:23:94:9f:27:5c:f3:25: 6d:55:68:e1:d4:ce:67:79:b6:04:d0:cc:81:0d:34:ae:26:65: 95:c2:ce:c7:03:80:16:aa:5f:c3:71:03:d8:c5:8f:94:04:9c: 23:16:08:25:86:d5:7d:b5:ba:e7:94:a1:56:ae:13:eb:76:fe: f8:cc:c1:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbZGXSl9gyV2j13Qc+RbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwNjEzMTAwMTA2WhcNMjYwNjE0MTAwMTA2WjAzMTEwLwYDVQQD Eyg4ODdmNTA2MGEwY2YxM2JkYTAwYjNiNDg0M2VkNWJlNGZhZTc4M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq9XOOSK82b2RUt+rgyLzjXrvk1y t6UFY7YBnXFcOuQPM8OzwSnsIt5sjx/zBrVi7HRwljpoaSau0zWdjyaJKJFKYOUh lIxTDfLfUMlI2igqyOPJp2zh/X9cs8U3EJJ0PyqPlHwsdwThGr/XCb/TjFsJoDb2 PWrl9CKc/RpFCn3LSVgPVb21GwMy3oQdH1bLPkTGbe+rtvcmelwO73odopaBCIzE xXrs2Q0WK0JlYiDK4pP//ywfE5ThoeQUiutHtG/buxSt41eEHK3caIjQQeD+Wq8W cJexxHRNdij/iCYm/qPowzgkzIHGdfEPUsqZVltInIA5KFxNaJ07RlDp4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh/UGCgzxO9oAs7SEPtW+T654PRMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+6wF459 Kby6fAIlW0UpeEqJLjNWex4HUwne6FsBG3ctsnwJiwvWA+kbJypg7NWEQS/ksVzm FvmK4wzoyxRn8PHdTmbV3c6cOW7kJuo0sbHX1WRZmFNJ3yCbb/+jWUYUyyjqzdaV QKSSdpgyFdpaO0wqWSP1NyJZF2l/8A/Zqg122fn8RR1jSw+2RLiCNuQGzMUO4RGl h6ZwHz+w1nsT38XsxLV0S+kdb6a8O3ovqsQv+FwlbuHdeSyavofi5awjlJ8nXPMl bVVo4dTOZ3m2BNDMgQ00riZllcLOxwOAFqpfw3ED2MWPlAScIxYIJYbVfbW655Sh Vq4T63b++MzBHA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:05:22 2026 by rpki-client