$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: LK9/gjz/afq9HrnTEPh2uAsHOoa2PBaPkI1sHxxuN94= Subject key identifier: 35:F5:A5:90:15:F4:40:4B:A8:D5:20:B0:41:52:70:FC:1D:FC:F8:91 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019EC06D1512265A89C341C28E443CC69F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 1725 Signing time: Sat 13 Jun 2026 10:00:34 +0000 Manifest this update: Sat 13 Jun 2026 10:00:34 +0000 Manifest next update: Sun 14 Jun 2026 10:00:34 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: cBeJH5hD56tE+ylg83GpRPAxPjtQnhriKAHWCRui9Kg=) 12: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:15:12:26:5a:89:c3:41:c2:8e:44:3c:c6:9f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jun 13 10:00:34 2026 GMT Not After : Jun 14 10:00:34 2026 GMT Subject: CN=35f5a59015f4404ba8d520b0415270fc1dfcf891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:af:14:d0:95:97:dc:46:f2:82:54:64:4b: 0f:4c:55:23:13:e2:10:32:20:ec:f5:a0:9c:00:8c: e5:31:10:95:86:e5:aa:8a:a9:1d:ab:32:91:c3:0d: 88:d2:d6:df:58:07:36:c9:34:67:81:fc:9a:31:2f: da:8e:8e:4c:68:03:53:2f:89:f2:28:df:96:c2:4e: a9:46:0c:1b:49:7a:34:41:10:09:9b:11:ec:ad:10: 9e:64:1b:90:12:13:41:a6:d0:a5:67:e8:39:a6:fa: 53:6f:2e:68:8a:b6:68:8c:32:d5:79:11:1f:06:fd: c5:ee:82:61:ef:f1:16:23:0e:78:98:fc:32:95:53: 13:d8:64:72:c6:11:c1:dd:6c:bd:bf:98:12:17:ff: ee:62:b3:f9:34:a8:90:7d:88:03:aa:b4:e7:97:07: 99:08:68:6c:c6:71:e1:5a:b0:a5:42:87:23:b4:45: 78:2d:96:2e:56:eb:b4:b5:95:be:0f:3b:f8:7b:60: 2b:91:19:fa:21:74:b3:3f:fa:2b:c0:5d:70:83:ab: 5f:2c:b6:f5:3d:86:52:91:ff:e4:08:f9:89:27:0e: 47:63:42:77:98:4c:94:1d:43:83:bc:8e:6f:11:92: 3e:4e:b2:c3:56:0f:b2:31:ef:d2:24:c6:fb:5c:29: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:A5:90:15:F4:40:4B:A8:D5:20:B0:41:52:70:FC:1D:FC:F8:91 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0b:67:25:8c:ce:c1:1b:4a:59:06:b1:c8:76:23:80:c0:b7: 26:52:e6:7d:e1:4b:20:60:d5:8c:3b:bf:16:b2:a1:66:e9:3e: 78:e4:57:86:96:3e:94:29:c3:6c:81:99:43:3e:de:47:20:e9: 65:17:00:f4:b1:e2:5a:b2:e5:a2:20:77:85:5c:01:52:e5:5d: fd:aa:c5:cb:b6:7c:db:4b:1b:cb:9b:f2:39:35:b5:45:93:4d: 8e:1e:94:8d:61:8a:4d:56:9c:ff:cc:d4:33:10:44:83:3c:15: 58:7c:fe:45:ce:c0:14:4a:ff:c5:9b:fe:c3:69:dd:53:70:f0: 87:d6:98:7b:bd:7b:92:45:18:a0:90:14:46:4b:cb:f5:82:db: d9:01:48:a7:28:8b:f9:13:d2:b2:58:eb:31:16:a2:ba:f0:1f: b1:53:3f:5b:95:19:97:62:55:3b:2e:5c:78:29:5e:52:a3:69: 93:22:98:f7:ff:f5:9a:4a:90:ee:74:4d:ee:f9:c4:21:96:0e: 93:d0:a0:9b:a6:b6:a6:2d:70:d2:85:5c:b4:30:26:01:5e:dd: 16:d3:b4:46:20:75:ea:30:2f:78:36:d7:91:6f:73:a9:46:2c: ff:8e:26:5c:da:8b:61:98:7b:8b:d6:21:50:f1:bf:be:77:57: 8e:79:10:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbRUSJlqJw0HCjkQ8xp+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNjEzMTAwMDM0WhcNMjYwNjE0MTAwMDM0WjAzMTEwLwYDVQQD EygzNWY1YTU5MDE1ZjQ0MDRiYThkNTIwYjA0MTUyNzBmYzFkZmNmODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVavFNCVl9xG8oJUZEsPTFUjE+IQ MiDs9aCcAIzlMRCVhuWqiqkdqzKRww2I0tbfWAc2yTRngfyaMS/ajo5MaANTL4ny KN+Wwk6pRgwbSXo0QRAJmxHsrRCeZBuQEhNBptClZ+g5pvpTby5oirZojDLVeREf Bv3F7oJh7/EWIw54mPwylVMT2GRyxhHB3Wy9v5gSF//uYrP5NKiQfYgDqrTnlweZ CGhsxnHhWrClQocjtEV4LZYuVuu0tZW+Dzv4e2ArkRn6IXSzP/orwF1wg6tfLLb1 PYZSkf/kCPmJJw5HY0J3mEyUHUODvI5vEZI+TrLDVg+yMe/SJMb7XCl2bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX1pZAV9EBLqNUgsEFScPwd/PiRMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwtnJYzO wRtKWQaxyHYjgMC3JlLmfeFLIGDVjDu/FrKhZuk+eORXhpY+lCnDbIGZQz7eRyDp ZRcA9LHiWrLloiB3hVwBUuVd/arFy7Z820sby5vyOTW1RZNNjh6UjWGKTVac/8zU MxBEgzwVWHz+Rc7AFEr/xZv+w2ndU3Dwh9aYe717kkUYoJAURkvL9YLb2QFIpyiL +RPSsljrMRaiuvAfsVM/W5UZl2JVOy5ceCleUqNpkyKY9//1mkqQ7nRN7vnEIZYO k9Cgm6a2pi1w0oVctDAmAV7dFtO0RiB16jAveDbXkW9zqUYs/44mXNqLYZh7i9Yh UPG/vndXjnkQ8Q== -----END CERTIFICATE-----Generated at Sat Jun 13 20:23:22 2026 by rpki-client