$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: L7AmuwQ5+rJ2INn1K4oFM/9dm9D5vch/LlDRKffrLXo= Subject key identifier: D5:DF:AA:47:03:6A:D3:54:6F:BC:DB:0D:B7:E6:32:00:F8:04:87:C8 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019EBDA36705F60C101911D0D176446D9986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0219 Signing time: Fri 12 Jun 2026 21:01:02 +0000 Manifest this update: Fri 12 Jun 2026 21:01:02 +0000 Manifest next update: Sat 13 Jun 2026 21:01:02 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: O5o/09oyviesKJ/MVBNdzEbN5JGuHRVZRlI6xLxISAE=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a3:67:05:f6:0c:10:19:11:d0:d1:76:44:6d:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jun 12 21:01:02 2026 GMT Not After : Jun 13 21:01:02 2026 GMT Subject: CN=d5dfaa47036ad3546fbcdb0db7e63200f80487c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:23:8f:3c:ec:38:9f:18:20:16:8f:a4:ca: 62:44:45:dd:d3:fe:df:17:d9:86:98:9f:2c:06:c6: b7:02:5c:69:a3:4c:67:e7:3c:0f:9f:d2:1e:d7:c5: ee:f1:7c:1a:fd:8a:0b:f3:2f:33:50:3b:59:77:e3: 15:c5:41:c6:58:a1:aa:03:09:0b:ff:f8:5c:40:81: a5:68:ac:57:74:91:ee:49:ca:2b:cd:c6:21:97:91: 38:46:ae:5f:86:48:88:80:65:8d:ba:cc:37:ff:ba: 0c:e4:b7:86:40:84:9e:13:ac:15:26:2d:1e:1b:12: 6e:49:05:70:59:3a:74:d1:18:c9:51:a8:fb:ae:f7: 5b:00:f1:52:50:26:c2:8c:32:21:98:20:b9:f9:56: 53:9c:ae:9b:d1:e8:82:e0:93:ee:02:7b:1d:0e:86: 53:55:d3:c6:27:69:7b:da:ec:fe:17:b6:16:0e:6d: 84:30:fa:60:b1:40:41:7c:80:24:20:9c:a0:91:0a: f7:ca:0c:b4:25:c3:cc:40:76:34:8d:8e:a2:a1:a6: 99:55:4a:59:02:6f:be:a9:e6:b0:48:b8:dd:df:07: 90:2a:d2:57:4e:a1:d9:b4:ea:b4:ba:37:0a:00:e6: 16:61:fb:52:46:86:10:9a:73:c1:85:17:a9:1c:8b: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:AA:47:03:6A:D3:54:6F:BC:DB:0D:B7:E6:32:00:F8:04:87:C8 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:50:77:ce:9c:6e:6f:83:90:88:cd:04:b7:fd:77:81:18:ff: 5b:da:f4:9a:0c:3c:85:ae:bc:9c:c8:0c:16:ca:51:ae:24:b9: f5:92:b8:de:a0:13:77:e7:a4:b4:a4:5f:97:19:4f:46:0b:bb: f3:90:bd:f9:b0:96:07:b5:f4:bd:57:52:b6:fc:04:82:ab:ad: b4:d6:b6:4a:e1:c1:40:ac:93:d4:98:f1:ce:ef:3e:46:28:a7: 9a:3d:e2:d4:09:ad:8c:e7:a4:90:04:ba:c6:dc:6b:e9:c9:d3: 89:c2:ca:72:a5:e0:16:21:a3:e3:9d:ea:6b:e5:db:ac:12:87: 5d:a9:af:1a:1e:19:7e:8b:e0:91:84:b1:ea:ec:58:21:e3:02: db:98:b8:89:ca:be:ba:ef:7d:2d:4a:d1:8f:40:29:5a:64:5e: 89:d9:0c:05:e1:68:72:0f:71:04:d7:7d:81:65:1a:7c:57:30: 4e:19:bc:46:25:a9:72:72:f5:b6:a7:29:88:e1:fe:48:e3:e3: 05:bd:05:be:1d:f9:fa:f5:cb:d4:42:f8:ef:26:22:d8:36:ae: d5:14:42:f8:90:f3:0f:a8:df:fb:19:48:07:38:0f:a7:32:6e: f4:95:fa:d7:d8:e2:81:7d:e5:0f:98:40:93:7e:ce:15:0e:22: d2:a6:d1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69o2cF9gwQGRHQ0XZEbZmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNjEyMjEwMTAyWhcNMjYwNjEzMjEwMTAyWjAzMTEwLwYDVQQD EyhkNWRmYWE0NzAzNmFkMzU0NmZiY2RiMGRiN2U2MzIwMGY4MDQ4N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+cjjzzsOJ8YIBaPpMpiREXd0/7f F9mGmJ8sBsa3Alxpo0xn5zwPn9Ie18Xu8Xwa/YoL8y8zUDtZd+MVxUHGWKGqAwkL //hcQIGlaKxXdJHuScorzcYhl5E4Rq5fhkiIgGWNusw3/7oM5LeGQISeE6wVJi0e GxJuSQVwWTp00RjJUaj7rvdbAPFSUCbCjDIhmCC5+VZTnK6b0eiC4JPuAnsdDoZT VdPGJ2l72uz+F7YWDm2EMPpgsUBBfIAkIJygkQr3ygy0JcPMQHY0jY6ioaaZVUpZ Am++qeawSLjd3weQKtJXTqHZtOq0ujcKAOYWYftSRoYQmnPBhRepHIvzzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXfqkcDatNUb7zbDbfmMgD4BIfIMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVB3zpxu b4OQiM0Et/13gRj/W9r0mgw8ha68nMgMFspRriS59ZK43qATd+ektKRflxlPRgu7 85C9+bCWB7X0vVdStvwEgquttNa2SuHBQKyT1Jjxzu8+Riinmj3i1AmtjOekkAS6 xtxr6cnTicLKcqXgFiGj453qa+XbrBKHXamvGh4ZfovgkYSx6uxYIeMC25i4icq+ uu99LUrRj0ApWmReidkMBeFocg9xBNd9gWUafFcwThm8RiWpcnL1tqcpiOH+SOPj Bb0Fvh35+vXL1EL47yYi2Dau1RRC+JDzD6jf+xlIBzgPpzJu9JX619jigX3lD5hA k37OFQ4i0qbRUw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:04 2026 by rpki-client