$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: Cy3TEbIrix4e4Yb6LI8Br539yLIEhZS0MqrfEHJDUK8= Subject key identifier: 06:F6:8E:21:6E:BE:D4:81:71:10:D7:BE:C3:CF:B1:18:DE:3C:97:6C Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019EBF23BAC4455EC82E695229DBB1F68CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 0147 Signing time: Sat 13 Jun 2026 04:00:50 +0000 Manifest this update: Sat 13 Jun 2026 04:00:50 +0000 Manifest next update: Sun 14 Jun 2026 04:00:50 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: mnre3iOBP/Ov9DYKY+Gr5iCP9vSbUcUPQFU/oVRHPwo=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:23:ba:c4:45:5e:c8:2e:69:52:29:db:b1:f6:8c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Jun 13 04:00:50 2026 GMT Not After : Jun 14 04:00:50 2026 GMT Subject: CN=06f68e216ebed4817110d7bec3cfb118de3c976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:42:74:36:2e:c8:3a:4e:9b:ae:7b:42:e9: af:c4:29:cb:ea:d0:24:e7:e1:15:5e:4c:8a:26:f1: bf:d9:44:13:a2:a0:b6:5e:ad:24:3f:a1:82:00:33: ef:e6:c3:89:8a:ca:49:a1:f7:d4:16:f2:11:c4:23: c2:33:77:e8:b4:d3:d5:a9:ca:a2:a0:e9:fd:3f:0c: c0:e0:cd:36:49:da:50:40:05:c0:42:75:09:20:bb: 52:3f:f6:1a:b6:6c:a2:2f:44:a1:57:54:ac:c1:61: d7:7f:8f:43:6b:f9:b3:b8:2e:43:c2:cf:36:39:85: fe:13:45:a4:ac:47:cb:34:6a:c6:8f:b9:70:28:ad: 00:44:4a:9d:55:4e:67:f4:66:de:48:79:00:2b:de: 0c:cb:6e:89:01:38:ca:8b:d2:f5:c8:0a:c1:cf:a9: 6c:8a:07:5b:a2:71:d0:8d:15:e6:02:39:ac:f9:92: 4a:26:0e:14:1a:21:b3:fa:7b:73:1f:ef:22:af:1e: 61:17:d5:3a:a5:41:87:c4:14:40:5d:12:f3:2e:f1: b1:14:58:0a:73:75:86:cd:d1:25:dd:b4:a5:8e:05: d8:74:8a:ee:85:6f:41:d6:e8:93:20:11:24:ad:7c: 9e:4b:f3:d4:3f:c0:b9:80:99:0d:a7:c5:bc:46:38: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:8E:21:6E:BE:D4:81:71:10:D7:BE:C3:CF:B1:18:DE:3C:97:6C X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0a:21:f4:44:dd:8e:4f:dd:90:fc:18:29:64:11:3f:34:81: df:bd:97:45:e9:cd:3d:a8:6a:6e:e0:92:c5:b3:95:a9:4b:a3: 73:2e:ec:25:e3:cd:08:e8:2d:3b:41:a0:a2:19:e1:c4:68:3c: cf:35:24:51:98:44:00:af:ce:66:ef:ee:32:4e:68:ac:4c:a7: ce:7e:38:e0:48:0c:89:aa:c9:12:5d:bc:34:59:77:91:8c:27: 65:43:cf:7a:a1:f8:ea:88:7f:6b:73:6c:f8:95:9b:6c:b1:c4: b5:68:1d:54:97:3a:d8:92:cd:21:db:df:2b:2c:57:57:fd:f4: b7:c7:24:0b:f5:19:bf:46:8c:b8:6e:6b:da:07:c0:21:5a:91: df:da:f8:01:dd:38:68:a8:9b:0a:b1:66:24:43:b5:c0:7d:88: 52:9e:96:8a:67:44:95:0e:52:90:61:78:03:06:41:8e:44:5a: 8b:ca:4a:61:d2:c3:1f:8c:bd:a1:b9:bb:dc:2c:d9:fa:ba:68: 1d:e0:b7:70:6b:2a:ef:7c:ea:3d:0b:0b:13:55:ca:dc:cd:2b: d6:65:81:2e:7e:bb:0c:24:20:35:90:8a:fe:ba:32:d0:7f:80: f0:3a:0a:a2:51:a0:08:08:4f:59:0c:54:66:88:c1:b4:0f:8f: 85:b2:17:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/I7rERV7ILmlSKdux9oy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNjEzMDQwMDUwWhcNMjYwNjE0MDQwMDUwWjAzMTEwLwYDVQQD EygwNmY2OGUyMTZlYmVkNDgxNzExMGQ3YmVjM2NmYjExOGRlM2M5NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifpCdDYuyDpOm657QumvxCnL6tAk 5+EVXkyKJvG/2UQToqC2Xq0kP6GCADPv5sOJispJoffUFvIRxCPCM3fotNPVqcqi oOn9PwzA4M02SdpQQAXAQnUJILtSP/YatmyiL0ShV1SswWHXf49Da/mzuC5Dws82 OYX+E0WkrEfLNGrGj7lwKK0AREqdVU5n9GbeSHkAK94My26JATjKi9L1yArBz6ls igdbonHQjRXmAjms+ZJKJg4UGiGz+ntzH+8irx5hF9U6pUGHxBRAXRLzLvGxFFgK c3WGzdEl3bSljgXYdIruhW9B1uiTIBEkrXyeS/PUP8C5gJkNp8W8RjgbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAb2jiFuvtSBcRDXvsPPsRjePJdsMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAoh9ETd jk/dkPwYKWQRPzSB372XRenNPahqbuCSxbOVqUujcy7sJePNCOgtO0GgohnhxGg8 zzUkUZhEAK/OZu/uMk5orEynzn444EgMiarJEl28NFl3kYwnZUPPeqH46oh/a3Ns +JWbbLHEtWgdVJc62JLNIdvfKyxXV/30t8ckC/UZv0aMuG5r2gfAIVqR39r4Ad04 aKibCrFmJEO1wH2IUp6WimdElQ5SkGF4AwZBjkRai8pKYdLDH4y9obm73CzZ+rpo HeC3cGsq73zqPQsLE1XK3M0r1mWBLn67DCQgNZCK/roy0H+A8DoKolGgCAhPWQxU ZojBtA+PhbIX1A== -----END CERTIFICATE-----Generated at Sat Jun 13 09:58:34 2026 by rpki-client