$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 1w6UJeB/VTrA9ZsWD96MQr6rIw6UzglxFyCAW0YNYQg= Subject key identifier: 4A:09:B0:D2:E1:63:6D:3F:99:8D:68:13:D3:E4:26:F2:AA:D1:B9:1F Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019EC25C1F2680F6708C538F7C0AE3258144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0CC2 Signing time: Sat 13 Jun 2026 19:01:17 +0000 Manifest this update: Sat 13 Jun 2026 19:01:17 +0000 Manifest next update: Sun 14 Jun 2026 19:01:17 +0000 Files and hashes: 1: 0op4kBn3nhJDS2c-3qkz2b-MpN8.roa (hash: p0a4okV6J9l4+O2oGkvx7QwdvUvDDySRezt3gBKNWXg=) 2: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 3: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 4: 4nCS3yJcUAi5JrThzjtLIzzourM.roa (hash: UJoY2jzWce2RClEU6oRS8O+I8laUw5oEqmUWTdetQF4=) 5: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 6: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 7: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 8: GDpxYSLxVItp_NOPYubGX5UYZok.roa (hash: VWyhjhW15PBvlxYZCfYoqEw7FI0WMEXJbvw8jcCf0xQ=) 9: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 10: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 11: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 12: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 13: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 14: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 15: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: cye7TagQLjsHYAJUHNDbCQ0k2IBTa1E19se1rabR62A=) 16: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 17: qLaayI2tY9A0TdjGpIVUCiHX4ZQ.roa (hash: DO7Ul6TvG+RD/fBgXFTFv86hvW9qPGUJgXT/uFTsnc0=) 18: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 19: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:5c:1f:26:80:f6:70:8c:53:8f:7c:0a:e3:25:81:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jun 13 19:01:17 2026 GMT Not After : Jun 14 19:01:17 2026 GMT Subject: CN=4a09b0d2e1636d3f998d6813d3e426f2aad1b91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:b7:28:67:ba:26:d4:8e:f1:28:81:17:f7: 69:71:e0:31:7d:9e:bd:e4:bd:41:40:8f:eb:5b:71: 6a:35:56:00:f1:ab:83:48:df:b6:e9:d3:49:31:8a: 8b:8c:5c:b3:eb:8e:29:00:9c:00:9b:a2:81:6e:84: 22:a5:5a:f4:46:17:fd:eb:82:c4:f8:f1:8f:6b:4e: 5b:ce:03:27:f7:3f:12:7c:41:0e:98:0d:6f:e9:10: ec:50:fa:f3:12:46:ba:18:78:c7:0a:6b:1d:3b:99: 64:18:39:e3:bd:7a:5a:5f:e7:bc:ad:9f:f4:74:72: 11:a6:f6:fe:00:ed:32:41:bb:77:17:a3:00:3f:41: 95:53:26:fa:fd:cb:b6:86:24:89:fb:ae:cd:02:88: 01:69:c2:a4:5c:f1:4e:00:67:1c:45:8a:06:31:18: 4b:10:af:37:56:9b:71:7e:66:ec:1f:95:71:ab:04: bb:51:a7:e5:4b:ce:7e:31:de:54:74:8a:df:85:3b: e3:34:6e:87:38:d0:b3:74:b0:9d:b8:ad:5d:fc:06: e6:1b:90:18:b2:28:18:01:0c:fb:6c:2a:52:30:f0: dc:dd:6e:6d:0d:ed:97:61:d8:40:e8:1d:6a:fc:87: 60:ae:64:d6:1a:f2:1a:e7:0c:8f:9c:e1:ef:6e:e6: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:09:B0:D2:E1:63:6D:3F:99:8D:68:13:D3:E4:26:F2:AA:D1:B9:1F X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:82:c6:8c:69:eb:64:90:ac:d0:78:dc:9d:86:90:64:da:da: e2:eb:70:6c:d6:0d:fd:45:8f:69:2b:b4:21:39:36:e7:ff:d5: 3f:25:7e:27:3a:51:a1:76:84:e7:3f:1a:9d:d1:3c:e0:62:07: 30:ca:7b:38:03:99:ab:7b:22:73:e9:c9:ed:82:65:07:87:7a: 1e:ab:68:93:4c:41:39:47:7b:57:cf:ab:c2:65:7d:97:92:4e: 06:3d:09:7e:d0:3e:d8:cc:2d:c0:34:c9:e0:2a:06:17:e0:b3: 8f:50:83:0e:1f:fd:32:d4:7f:59:43:b7:7e:7d:32:ac:bf:d7: 1f:01:c3:85:ca:39:93:4a:7d:be:c8:5c:ef:a4:ec:a9:a8:1f: 1e:8c:4d:44:16:9f:8b:5c:e8:48:f1:6c:4c:85:ed:f7:9e:3c: 4e:ed:cf:24:f5:8b:32:a1:07:3b:6b:57:67:22:9a:00:0f:8a: 97:e9:0c:d1:ac:9d:94:5e:21:62:72:da:5a:f0:5e:96:b8:e8: 48:29:51:23:7d:12:24:4c:67:0b:08:70:98:3c:1d:82:88:1e: 60:15:77:9c:ad:cc:c6:4e:d0:fc:da:94:36:3a:81:f8:86:96: 12:1c:84:6d:3a:e8:fe:b6:89:c6:a1:16:66:e4:52:2e:09:09: 0b:cb:e2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CXB8mgPZwjFOPfArjJYFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwNjEzMTkwMTE3WhcNMjYwNjE0MTkwMTE3WjAzMTEwLwYDVQQD Eyg0YTA5YjBkMmUxNjM2ZDNmOTk4ZDY4MTNkM2U0MjZmMmFhZDFiOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUa3KGe6JtSO8SiBF/dpceAxfZ69 5L1BQI/rW3FqNVYA8auDSN+26dNJMYqLjFyz644pAJwAm6KBboQipVr0Rhf964LE +PGPa05bzgMn9z8SfEEOmA1v6RDsUPrzEka6GHjHCmsdO5lkGDnjvXpaX+e8rZ/0 dHIRpvb+AO0yQbt3F6MAP0GVUyb6/cu2hiSJ+67NAogBacKkXPFOAGccRYoGMRhL EK83VptxfmbsH5VxqwS7UaflS85+Md5UdIrfhTvjNG6HONCzdLCduK1d/AbmG5AY sigYAQz7bCpSMPDc3W5tDe2XYdhA6B1q/IdgrmTWGvIa5wyPnOHvbuYSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoJsNLhY20/mY1oE9PkJvKq0bkfMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4LGjGnr ZJCs0HjcnYaQZNra4utwbNYN/UWPaSu0ITk25//VPyV+JzpRoXaE5z8andE84GIH MMp7OAOZq3sic+nJ7YJlB4d6Hqtok0xBOUd7V8+rwmV9l5JOBj0JftA+2MwtwDTJ 4CoGF+Czj1CDDh/9MtR/WUO3fn0yrL/XHwHDhco5k0p9vshc76TsqagfHoxNRBaf i1zoSPFsTIXt9548Tu3PJPWLMqEHO2tXZyKaAA+Kl+kM0aydlF4hYnLaWvBelrjo SClRI30SJExnCwhwmDwdgogeYBV3nK3Mxk7Q/NqUNjqB+IaWEhyEbTro/raJxqEW ZuRSLgkJC8vibg== -----END CERTIFICATE-----Generated at Sun Jun 14 02:40:00 2026 by rpki-client