$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: I9xT2o19aH4f9QPsN4mO+YN2FhJLO+6B+QhMhN1vLZM= Subject key identifier: 50:5D:7E:48:5C:DB:F4:86:29:7F:B9:C0:FF:5F:62:10:16:4C:77:14 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019EBE1143B6C310F8D4120A8B5D25DB145F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 1538 Signing time: Fri 12 Jun 2026 23:01:02 +0000 Manifest this update: Fri 12 Jun 2026 23:01:02 +0000 Manifest next update: Sat 13 Jun 2026 23:01:02 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=) 3: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 4: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=) 5: Aldb8rVQEYH7AIYKbirLccTqxfk.roa (hash: xKeQuE6N5Er4acIg7kKR9Q2RvuXmil18lO24CsbXiP0=) 6: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 7: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 8: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: 2JwRYMrscgNGu06LI6HMuS65dBtlGx3Q/83kSwgRU3Q=) 9: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 10: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 11: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 12: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 13: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 14: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:11:43:b6:c3:10:f8:d4:12:0a:8b:5d:25:db:14:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jun 12 23:01:02 2026 GMT Not After : Jun 13 23:01:02 2026 GMT Subject: CN=505d7e485cdbf486297fb9c0ff5f6210164c7714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:d2:7b:f4:eb:5e:6b:15:36:53:c2:ab:fc: 87:ab:45:c5:28:55:1e:ba:20:12:8c:7e:31:f8:9f: 47:32:9c:77:96:55:a6:28:d1:49:13:6c:a9:ff:28: a7:41:eb:44:79:5f:cb:4a:1a:cc:11:fd:e5:63:30: 1d:e8:7d:e4:01:b5:93:59:f9:4b:92:12:0a:f0:53: a0:2d:f6:17:2b:b2:ed:f0:3a:e4:64:e2:6e:4c:21: b8:7f:64:fe:a3:ab:53:f1:35:84:92:07:5a:22:be: 10:38:5d:e1:25:97:11:ed:6c:25:00:ad:43:ba:68: 3f:eb:63:93:0d:d0:47:50:df:9b:9a:ca:13:e5:7d: 6b:c6:29:f3:c0:7a:49:5a:44:47:38:4b:75:86:80: 95:92:52:a8:2c:fc:6b:1d:85:96:9c:ba:da:51:49: 7f:5d:bc:cf:7d:82:a5:51:11:ba:6f:22:2f:3c:47: b7:ea:99:49:ea:24:e0:2f:ba:45:4d:fd:9f:a0:e0: f0:67:25:17:cc:44:18:9d:74:63:33:aa:76:e9:e1: d3:a4:78:7e:e1:f8:d9:91:e0:88:f2:f9:9d:11:9c: 34:45:e1:8a:21:8e:6e:e8:0e:c7:12:2a:b1:c7:5e: 2e:fe:ad:54:ab:fd:f3:f2:7b:8b:ed:59:df:1a:53: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:7E:48:5C:DB:F4:86:29:7F:B9:C0:FF:5F:62:10:16:4C:77:14 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:88:55:7c:94:06:a9:8c:5e:a8:76:89:a6:22:a6:85:08:04: 25:99:da:0b:5f:a2:90:e1:41:bc:56:46:a8:1e:3e:63:f6:91: 4a:77:e8:e7:8d:78:d3:87:a6:48:0d:a4:3b:58:6f:2d:f4:90: 8c:91:9f:2a:eb:0d:d7:b9:31:58:75:fd:69:c0:93:be:0d:f5: 58:84:e0:0a:26:63:5c:fe:47:01:94:9f:92:6c:60:a2:ea:6b: 74:87:c6:f4:d2:07:bc:c2:8c:7c:f7:08:87:95:11:90:24:83: c9:60:b2:8f:ab:42:08:3d:b0:c1:c2:71:34:59:ac:ac:78:8a: 1b:a0:5e:5e:74:47:7d:68:72:36:0f:79:e0:06:bf:0e:8a:d8: 6b:e0:ca:ab:f7:16:c4:40:0d:db:75:5b:9c:82:c0:a6:95:fd: 22:55:a2:85:07:f8:b1:48:53:ce:93:2c:b2:69:b0:b3:1f:09: 5d:71:27:11:55:37:d0:db:67:51:67:a4:4b:56:7a:9a:69:bc: 5c:b0:74:03:fd:75:f2:25:94:16:f2:d9:b2:bd:c3:3a:35:68: 4e:fb:ce:e5:0d:97:08:92:12:dc:f2:a4:ba:d5:79:16:5f:81: 9c:19:2d:8f:52:e1:3c:c6:29:d2:67:1a:50:cc:64:88:19:24: 4b:a5:67:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+EUO2wxD41BIKi10l2xRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwNjEyMjMwMTAyWhcNMjYwNjEzMjMwMTAyWjAzMTEwLwYDVQQD Eyg1MDVkN2U0ODVjZGJmNDg2Mjk3ZmI5YzBmZjVmNjIxMDE2NGM3NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7Se/TrXmsVNlPCq/yHq0XFKFUe uiASjH4x+J9HMpx3llWmKNFJE2yp/yinQetEeV/LShrMEf3lYzAd6H3kAbWTWflL khIK8FOgLfYXK7Lt8DrkZOJuTCG4f2T+o6tT8TWEkgdaIr4QOF3hJZcR7WwlAK1D umg/62OTDdBHUN+bmsoT5X1rxinzwHpJWkRHOEt1hoCVklKoLPxrHYWWnLraUUl/ XbzPfYKlURG6byIvPEe36plJ6iTgL7pFTf2foODwZyUXzEQYnXRjM6p26eHTpHh+ 4fjZkeCI8vmdEZw0ReGKIY5u6A7HEiqxx14u/q1Uq/3z8nuL7VnfGlNKVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBdfkhc2/SGKX+5wP9fYhAWTHcUMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIhVfJQG qYxeqHaJpiKmhQgEJZnaC1+ikOFBvFZGqB4+Y/aRSnfo541404emSA2kO1hvLfSQ jJGfKusN17kxWHX9acCTvg31WITgCiZjXP5HAZSfkmxgouprdIfG9NIHvMKMfPcI h5URkCSDyWCyj6tCCD2wwcJxNFmsrHiKG6BeXnRHfWhyNg954Aa/DorYa+DKq/cW xEAN23VbnILAppX9IlWihQf4sUhTzpMssmmwsx8JXXEnEVU30NtnUWekS1Z6mmm8 XLB0A/118iWUFvLZsr3DOjVoTvvO5Q2XCJIS3PKkutV5Fl+BnBktj1LhPMYp0mca UMxkiBkkS6Vn8A== -----END CERTIFICATE-----Generated at Sat Jun 13 07:36:40 2026 by rpki-client