$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: sOP8tgojlqH/NiiAPIGQHKw26fR/YfqqLhU3DopLacY= Subject key identifier: A6:4E:48:0E:46:4D:37:69:67:F8:01:41:BE:7F:B9:3D:91:07:56:69 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019EBDA2A9F065A514695A051C2D6B4703E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1659 Signing time: Fri 12 Jun 2026 21:00:14 +0000 Manifest this update: Fri 12 Jun 2026 21:00:14 +0000 Manifest next update: Sat 13 Jun 2026 21:00:14 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: TtIdsCHm4/NhL1zIrAi5AurSs6yTDSEqQBZTxGl3e0c=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CHKjkCg5N9vFNaCNgIesrQr9mCY.roa (hash: BIyhhDOAMY1KH1JPN0lS/kQcXKOd7TBPeaLnBETqopY=) 5: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 6: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a2:a9:f0:65:a5:14:69:5a:05:1c:2d:6b:47:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jun 12 21:00:14 2026 GMT Not After : Jun 13 21:00:14 2026 GMT Subject: CN=a64e480e464d376967f80141be7fb93d91075669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:16:ae:74:9e:08:22:be:28:10:c9:a8:53: 41:c2:ab:0c:87:86:fa:e6:05:f9:c0:45:4b:50:1e: a1:b0:4d:b7:de:2e:b9:19:f0:6c:2e:a5:10:12:84: 58:74:d6:cb:2e:b5:79:c6:a1:92:9a:ca:54:79:e4: 7f:bb:3e:18:45:8b:3c:30:54:f7:a2:68:f5:57:a2: fa:5f:49:05:a5:a3:66:cf:ef:1e:85:f8:af:00:10: dc:29:31:57:10:04:73:d4:f5:9a:37:67:0f:89:59: 1b:4d:df:37:69:f0:c7:25:c0:5a:ad:39:a0:03:c0: ba:b0:45:f1:99:f3:33:fa:4d:97:1f:a2:5b:fa:a8: c4:dd:bc:5e:aa:1d:da:8e:cc:c0:00:ce:27:8c:fd: 69:79:61:41:49:94:a5:31:1a:9a:e7:3e:c2:df:db: d1:b6:81:a6:88:46:0f:aa:db:4f:2e:7c:f3:bb:39: b3:9d:40:19:5a:c6:54:a8:6f:0b:95:9e:1e:27:a5: 27:2a:ff:b6:21:3f:1a:ef:33:a1:cb:51:34:01:6a: 04:e0:9a:c1:37:87:af:89:5b:3a:51:1c:91:b4:ff: 1a:57:9e:8d:78:06:aa:bc:b7:10:17:8b:ec:88:53: f3:96:01:98:96:d6:c6:b2:f5:cb:d9:80:f8:0f:1b: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4E:48:0E:46:4D:37:69:67:F8:01:41:BE:7F:B9:3D:91:07:56:69 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1f:ec:09:d8:2b:4f:3d:a3:27:ac:46:aa:99:a8:78:15:3d: 41:f0:a0:d6:35:60:39:a0:1e:ae:a5:29:1b:12:6a:4e:f3:bb: 3b:db:1c:2c:aa:b3:02:0a:b4:98:40:c5:dc:3b:25:4a:82:4b: dd:83:b8:7d:cf:8e:5d:48:bd:0e:6d:aa:80:11:0f:b6:58:b1: 57:2f:0e:29:d9:26:49:a3:8c:5c:43:5d:88:0a:d4:8e:69:9f: 40:d8:16:39:c0:4f:66:2b:05:64:61:21:c0:49:44:a0:b5:49: d3:48:7b:ba:44:2b:c1:ea:e2:b3:2e:66:35:5e:d1:b6:19:ef: 81:92:f3:ad:10:89:1b:40:71:91:ee:e6:65:2b:65:2d:2b:46: 9b:3b:f2:f0:86:af:5f:7e:48:fc:19:1e:7f:e7:61:33:50:89: 42:4d:e2:c0:74:39:d6:94:42:12:f0:30:cd:4a:ad:13:70:e3: 81:dc:13:52:d5:d2:fa:6c:b6:91:cc:fc:7d:8e:d5:f6:b3:74: 1a:33:8c:1c:d9:2a:5b:80:3b:f3:b6:33:e9:12:07:e9:26:fc: a1:98:b9:11:05:5f:b0:b4:87:7e:84:ce:de:78:03:11:d7:67: 5b:a9:84:9c:86:af:37:d3:8d:ac:55:c9:45:0d:b9:98:64:76: 2e:ef:f5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69oqnwZaUUaVoFHC1rRwPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNjEyMjEwMDE0WhcNMjYwNjEzMjEwMDE0WjAzMTEwLwYDVQQD EyhhNjRlNDgwZTQ2NGQzNzY5NjdmODAxNDFiZTdmYjkzZDkxMDc1NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjAWrnSeCCK+KBDJqFNBwqsMh4b6 5gX5wEVLUB6hsE233i65GfBsLqUQEoRYdNbLLrV5xqGSmspUeeR/uz4YRYs8MFT3 omj1V6L6X0kFpaNmz+8ehfivABDcKTFXEARz1PWaN2cPiVkbTd83afDHJcBarTmg A8C6sEXxmfMz+k2XH6Jb+qjE3bxeqh3ajszAAM4njP1peWFBSZSlMRqa5z7C39vR toGmiEYPqttPLnzzuzmznUAZWsZUqG8LlZ4eJ6UnKv+2IT8a7zOhy1E0AWoE4JrB N4eviVs6URyRtP8aV56NeAaqvLcQF4vsiFPzlgGYltbGsvXL2YD4DxvvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZOSA5GTTdpZ/gBQb5/uT2RB1ZpMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB/sCdgr Tz2jJ6xGqpmoeBU9QfCg1jVgOaAerqUpGxJqTvO7O9scLKqzAgq0mEDF3DslSoJL 3YO4fc+OXUi9Dm2qgBEPtlixVy8OKdkmSaOMXENdiArUjmmfQNgWOcBPZisFZGEh wElEoLVJ00h7ukQrwerisy5mNV7RthnvgZLzrRCJG0Bxke7mZStlLStGmzvy8Iav X35I/Bkef+dhM1CJQk3iwHQ51pRCEvAwzUqtE3DjgdwTUtXS+my2kcz8fY7V9rN0 GjOMHNkqW4A787Yz6RIH6Sb8oZi5EQVfsLSHfoTO3ngDEddnW6mEnIavN9ONrFXJ RQ25mGR2Lu/1EA== -----END CERTIFICATE-----Generated at Sat Jun 13 07:30:50 2026 by rpki-client