$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: A/PKD9f26BMrcEQ+cTevh81yVdZBkzfdY4jOAptlW8U= Subject key identifier: 82:E7:69:2B:7B:6E:46:EC:3F:C8:E6:9E:31:CD:76:25:82:83:10:2C Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019EC1498A68E3A5503E72ABEB264ED635F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1967 Signing time: Sat 13 Jun 2026 14:01:22 +0000 Manifest this update: Sat 13 Jun 2026 14:01:22 +0000 Manifest next update: Sun 14 Jun 2026 14:01:22 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: Po7rRwViz3LENYJqDRIpCpwqwMD8AjmpmsvvcJKzZow=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:49:8a:68:e3:a5:50:3e:72:ab:eb:26:4e:d6:35:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jun 13 14:01:22 2026 GMT Not After : Jun 14 14:01:22 2026 GMT Subject: CN=82e7692b7b6e46ec3fc8e69e31cd76258283102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:3b:b8:73:cb:80:8e:67:4f:0c:09:1a:f3: b4:f6:71:ce:18:32:a2:79:fc:95:ef:7e:39:bd:12: cb:51:45:c9:35:61:6e:77:00:2c:48:56:e6:ae:54: b3:72:b7:2e:85:9a:f5:5a:c4:e9:c7:79:ca:79:1f: 7d:3b:45:80:b5:8e:98:2e:e6:2d:a6:34:23:eb:cf: 09:07:25:fd:0a:09:4f:7e:5b:71:db:9f:cb:6f:96: 9b:5e:91:f4:05:70:1f:0b:83:4d:ba:7a:a4:b0:f7: 08:bd:88:1f:8c:a0:36:04:32:d1:96:fa:f1:1e:b3: 83:55:3e:e7:d9:b5:3e:f6:47:2a:95:5c:e0:c3:28: 7d:53:60:78:7a:04:5e:d4:21:99:ae:bd:e7:09:7b: 3d:48:29:78:f9:e2:17:82:76:ea:67:0f:d4:8c:a1: bb:29:00:fd:84:05:3b:a8:be:5c:f3:cb:8f:74:ca: 55:ae:09:7c:87:e0:5e:ec:c8:f2:40:03:7f:d4:78: 65:25:24:18:6d:f4:1f:97:35:92:41:03:8b:3f:62: c8:3e:9e:c3:90:67:ed:38:e1:d7:86:92:23:a4:9b: 31:16:71:0c:2b:57:ff:7d:99:53:33:ae:18:9c:c3: 27:ed:4a:d5:44:6d:fa:ff:f7:08:a4:44:31:9f:d8: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E7:69:2B:7B:6E:46:EC:3F:C8:E6:9E:31:CD:76:25:82:83:10:2C X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5e:8e:55:37:56:2f:30:65:d6:c8:c5:b0:b5:09:94:af:93: 51:c0:c0:ec:c1:ec:0b:59:de:d2:4b:ce:b6:ea:0b:54:fc:2c: b2:d4:97:d5:92:1d:d6:bf:d5:5a:f2:90:e8:11:58:0b:43:a6: b5:b7:ed:58:95:38:95:e6:36:ed:fb:d4:92:2a:28:ea:bd:9e: 79:2b:4f:a1:83:d0:a9:e8:c2:fb:10:af:93:eb:99:a9:04:d8: f6:1f:e7:75:1e:21:21:3a:f5:17:62:1e:01:15:51:68:67:5a: 34:d1:76:34:93:5e:36:cc:92:c5:13:5f:a9:62:79:e3:d5:f4: 68:49:91:b6:08:ec:71:1f:b2:bb:ef:68:6e:88:7e:dd:7f:b2: e5:83:89:d2:09:b9:42:60:ee:35:e8:49:0d:22:96:33:07:08: 87:5a:b0:23:00:ea:44:db:5d:e8:5e:22:7c:67:ee:94:b3:a5: 2a:8c:58:95:4a:da:ea:70:37:8b:73:17:a0:41:aa:55:32:5d: 83:06:d5:7e:23:a7:39:27:50:df:9e:36:f4:df:43:f1:77:6b: e5:1d:40:02:3d:d5:e9:e5:8e:3c:1f:f4:87:9a:0c:e0:78:d9: c4:1f:af:5e:df:43:76:fd:22:e4:b8:36:33:57:40:48:14:08: 06:65:74:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BSYpo46VQPnKr6yZO1jXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwNjEzMTQwMTIyWhcNMjYwNjE0MTQwMTIyWjAzMTEwLwYDVQQD Eyg4MmU3NjkyYjdiNmU0NmVjM2ZjOGU2OWUzMWNkNzYyNTgyODMxMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpI7uHPLgI5nTwwJGvO09nHOGDKi efyV7345vRLLUUXJNWFudwAsSFbmrlSzcrcuhZr1WsTpx3nKeR99O0WAtY6YLuYt pjQj688JByX9CglPfltx25/Lb5abXpH0BXAfC4NNunqksPcIvYgfjKA2BDLRlvrx HrODVT7n2bU+9kcqlVzgwyh9U2B4egRe1CGZrr3nCXs9SCl4+eIXgnbqZw/UjKG7 KQD9hAU7qL5c88uPdMpVrgl8h+Be7MjyQAN/1HhlJSQYbfQflzWSQQOLP2LIPp7D kGftOOHXhpIjpJsxFnEMK1f/fZlTM64YnMMn7UrVRG36//cIpEQxn9hmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILnaSt7bkbsP8jmnjHNdiWCgxAsMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV6OVTdW LzBl1sjFsLUJlK+TUcDA7MHsC1ne0kvOtuoLVPwsstSX1ZId1r/VWvKQ6BFYC0Om tbftWJU4leY27fvUkioo6r2eeStPoYPQqejC+xCvk+uZqQTY9h/ndR4hITr1F2Ie ARVRaGdaNNF2NJNeNsySxRNfqWJ549X0aEmRtgjscR+yu+9oboh+3X+y5YOJ0gm5 QmDuNehJDSKWMwcIh1qwIwDqRNtd6F4ifGfulLOlKoxYlUra6nA3i3MXoEGqVTJd gwbVfiOnOSdQ35429N9D8Xdr5R1AAj3V6eWOPB/0h5oM4HjZxB+vXt9Ddv0i5Lg2 M1dASBQIBmV0Yw== -----END CERTIFICATE-----Generated at Sat Jun 13 23:34:44 2026 by rpki-client