$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: vEEaS/xumlwB+UYU5RAI/6zTYofSOMSVUnQG+c7V0K8= Subject key identifier: 85:BF:29:18:F0:82:DF:57:9B:28:D6:C7:E9:6B:E0:C4:F3:A6:74:D0 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019EC06DAD87FD64750BB1FB3A3BAF53A572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1705 Signing time: Sat 13 Jun 2026 10:01:13 +0000 Manifest this update: Sat 13 Jun 2026 10:01:13 +0000 Manifest next update: Sun 14 Jun 2026 10:01:13 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: yWBWRzIwqDtBVaqsQnOiPOvZs5JgY6Ob9dACV7TEESg=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:ad:87:fd:64:75:0b:b1:fb:3a:3b:af:53:a5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jun 13 10:01:13 2026 GMT Not After : Jun 14 10:01:13 2026 GMT Subject: CN=85bf2918f082df579b28d6c7e96be0c4f3a674d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:a1:d1:60:80:6a:f2:bd:f2:bb:88:f3:74: 0e:9b:f3:cb:ad:04:e2:a3:e1:bb:c3:ce:6a:6b:24: 01:db:40:f6:74:0f:e3:24:c4:f2:f0:51:1d:ce:e3: 1c:96:73:ef:c8:c9:d7:dd:96:6d:e1:ee:fa:9c:db: 65:55:2b:f1:60:ce:a2:34:5f:c2:48:5e:e7:97:37: fe:63:dc:06:94:f5:49:fa:a8:e6:41:9d:58:92:92: 92:71:22:d0:af:8c:3a:0e:9e:a6:e3:ab:07:aa:8d: e6:91:97:8e:12:75:43:9f:40:ae:c4:22:4b:28:d7: 8c:c9:7c:2e:f1:cd:6e:cb:c5:37:86:0b:a6:07:13: 8f:46:bb:79:c1:44:08:3e:d3:78:2b:af:7d:50:da: d3:12:34:63:f9:ce:f4:ea:fd:cb:07:8d:8e:de:ce: 71:39:cd:2b:05:d4:d5:de:47:c4:ad:a2:a5:45:c1: 69:03:65:4f:cd:27:59:3c:ec:ef:dc:7b:90:ea:00: 39:74:47:08:8d:61:13:53:ff:d7:49:5d:82:3f:af: 84:d2:d5:0e:a2:66:5f:ad:63:1a:69:af:e3:17:0b: 3e:18:e3:f0:ab:7a:37:1f:78:eb:29:2b:15:be:2a: ef:86:36:63:c4:41:68:51:be:a7:87:91:92:71:43: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BF:29:18:F0:82:DF:57:9B:28:D6:C7:E9:6B:E0:C4:F3:A6:74:D0 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d6:58:c7:7a:55:03:2f:8b:da:d2:1b:ce:eb:59:4c:bf:7d: 4e:92:f6:f8:b6:87:43:86:5a:f3:89:f2:93:b1:bf:1a:de:bc: b4:d1:81:b7:6b:8b:1d:f1:35:86:b5:cb:bc:ea:c8:3e:96:05: 5c:cd:ee:59:2c:d3:0a:c2:b1:dd:b8:4d:3f:4b:cf:ab:ec:8c: eb:1f:27:7d:94:a6:44:bb:8c:f1:ef:1c:37:dd:d8:02:5f:99: cf:91:88:bb:1f:3a:57:eb:7d:4d:b5:04:5f:d1:28:70:98:34: 6f:04:a3:fc:a9:15:8a:00:1d:43:05:f3:3c:0d:34:48:48:53: ab:1c:50:e0:ca:28:4f:60:91:d1:24:c8:41:08:4f:6d:ac:81: 3b:82:60:e8:e3:8e:7f:e1:30:0f:35:e5:7a:25:84:79:b6:de: 14:aa:a2:81:d2:64:4d:42:cf:96:da:73:f8:ee:13:e3:2c:74: b2:af:14:e0:91:53:4c:45:a8:1d:34:5f:f2:d0:de:87:1d:50: 9b:a3:c5:79:3d:0f:f9:4d:7e:45:a3:58:b0:3f:be:11:34:b7: d1:a8:df:2a:ef:50:ce:ee:ea:de:b1:f9:5b:ae:c3:da:8d:b8: 10:86:00:ef:6d:e8:36:a0:62:a1:b4:ea:b8:db:77:03:9d:d2: bd:97:7f:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Aba2H/WR1C7H7OjuvU6VyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNjEzMTAwMTEzWhcNMjYwNjE0MTAwMTEzWjAzMTEwLwYDVQQD Eyg4NWJmMjkxOGYwODJkZjU3OWIyOGQ2YzdlOTZiZTBjNGYzYTY3NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mh0WCAavK98ruI83QOm/PLrQTi o+G7w85qayQB20D2dA/jJMTy8FEdzuMclnPvyMnX3ZZt4e76nNtlVSvxYM6iNF/C SF7nlzf+Y9wGlPVJ+qjmQZ1YkpKScSLQr4w6Dp6m46sHqo3mkZeOEnVDn0CuxCJL KNeMyXwu8c1uy8U3hgumBxOPRrt5wUQIPtN4K699UNrTEjRj+c706v3LB42O3s5x Oc0rBdTV3kfEraKlRcFpA2VPzSdZPOzv3HuQ6gA5dEcIjWETU//XSV2CP6+E0tUO omZfrWMaaa/jFws+GOPwq3o3H3jrKSsVvirvhjZjxEFoUb6nh5GScUMEbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW/KRjwgt9XmyjWx+lr4MTzpnTQMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidZYx3pV Ay+L2tIbzutZTL99TpL2+LaHQ4Za84nyk7G/Gt68tNGBt2uLHfE1hrXLvOrIPpYF XM3uWSzTCsKx3bhNP0vPq+yM6x8nfZSmRLuM8e8cN93YAl+Zz5GIux86V+t9TbUE X9EocJg0bwSj/KkVigAdQwXzPA00SEhTqxxQ4MooT2CR0STIQQhPbayBO4Jg6OOO f+EwDzXleiWEebbeFKqigdJkTULPltpz+O4T4yx0sq8U4JFTTEWoHTRf8tDehx1Q m6PFeT0P+U1+RaNYsD++ETS30ajfKu9Qzu7q3rH5W67D2o24EIYA723oNqBiobTq uNt3A53SvZd/kg== -----END CERTIFICATE-----Generated at Sat Jun 13 15:30:37 2026 by rpki-client