$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: 8M6z1fN/BIk67S3ds1tzUGVQq+A1pFfUSjYSZdPkUCA= Subject key identifier: F4:30:DE:32:A0:03:DA:9F:6F:B1:C0:A2:81:0B:D0:AC:55:F3:9C:F9 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019EC1EDA0017D5DA031E670A70DF12FEC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0453 Signing time: Sat 13 Jun 2026 17:00:35 +0000 Manifest this update: Sat 13 Jun 2026 17:00:35 +0000 Manifest next update: Sun 14 Jun 2026 17:00:35 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: Y6bpsQ/0wquLtEDa17v2HVXsS5vPh7tM1pHe3dcDp2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:ed:a0:01:7d:5d:a0:31:e6:70:a7:0d:f1:2f:ec:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jun 13 17:00:35 2026 GMT Not After : Jun 14 17:00:35 2026 GMT Subject: CN=f430de32a003da9f6fb1c0a2810bd0ac55f39cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:d5:e7:ef:71:9b:b9:59:b4:82:26:67:5a: af:8d:12:05:2b:a2:2d:b8:b4:c5:59:84:99:39:34: 5b:78:5c:38:d5:5e:ae:9d:cc:44:30:d3:45:9a:70: 44:2f:a8:51:82:a6:ae:41:df:d8:11:38:17:ec:8f: 10:a1:8a:34:1a:42:df:73:d9:d9:11:09:06:03:76: 6d:ed:fb:61:12:58:44:2e:c1:6a:6c:91:c6:54:d8: 77:2a:56:8a:6a:de:43:f6:76:ce:8d:5e:40:66:6c: 82:8b:dd:2d:e0:d2:07:e1:55:a9:b5:82:5c:21:7b: be:b3:bb:96:a6:8d:22:0d:4d:cf:c1:4c:43:0c:ba: a7:93:3c:7d:1e:81:9d:0b:9e:c8:d8:4e:70:2f:ad: 47:97:1f:38:3c:34:c5:0d:95:79:f7:1b:9f:6d:7c: 20:02:48:dd:71:18:77:a3:0b:6f:43:07:aa:10:ba: e4:7c:59:03:b2:c6:86:c2:06:08:bb:cf:24:53:c9: b8:fd:d8:0e:55:3f:8d:37:81:dd:4e:a1:d9:d7:60: 4c:7d:66:69:32:1a:06:fb:f2:36:79:9d:fb:fe:65: 68:a4:f9:38:e9:fe:b4:29:83:8e:28:8d:c0:8e:21: 87:d4:76:8d:53:60:ec:3d:f6:ea:81:ad:2d:1b:81: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:DE:32:A0:03:DA:9F:6F:B1:C0:A2:81:0B:D0:AC:55:F3:9C:F9 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:14:85:21:8c:c0:44:0f:f7:e5:65:2c:e4:54:85:27:53: 90:c2:d7:85:09:49:1d:f3:65:da:a3:4d:77:d4:b4:78:d0:2c: 4f:37:23:e8:86:ec:37:9f:46:fb:2e:a9:12:30:98:03:1a:51: 2e:fb:dc:72:be:20:89:79:c7:da:09:ba:4c:0b:5e:26:1c:1b: 16:fa:7a:e4:34:5d:21:14:ba:94:7b:55:67:51:dc:51:bd:d5: c2:57:fc:20:d0:b1:2b:a9:49:7c:1b:85:ee:cf:0f:e6:f2:c5: e2:59:64:5a:ea:21:34:29:51:29:dc:c2:81:1e:eb:09:c5:89: 01:0a:a9:b9:6d:0c:6f:44:38:f6:02:26:b4:39:e3:89:30:e2: 01:dd:f1:cc:47:60:21:2b:48:02:06:34:99:fd:a1:46:69:6f: f7:b6:f6:7d:e4:c1:09:8d:c8:64:e0:b9:e1:d2:48:06:64:17: d3:1c:ad:d3:53:7d:2a:1d:0d:25:05:a8:04:60:3e:ef:8d:f7: ad:2f:3d:26:0e:87:d5:75:f9:97:59:58:d6:bd:76:bd:ea:a1: e9:dc:bd:72:b0:1a:f9:4b:b9:d3:00:a2:4a:c0:03:c1:5b:25: 08:e7:0b:35:f7:07:4d:94:3a:1d:36:d3:8e:dd:fe:21:ff:a4: c9:e6:2b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7B7aABfV2gMeZwpw3xL+xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwNjEzMTcwMDM1WhcNMjYwNjE0MTcwMDM1WjAzMTEwLwYDVQQD EyhmNDMwZGUzMmEwMDNkYTlmNmZiMWMwYTI4MTBiZDBhYzU1ZjM5Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszDV5+9xm7lZtIImZ1qvjRIFK6It uLTFWYSZOTRbeFw41V6uncxEMNNFmnBEL6hRgqauQd/YETgX7I8QoYo0GkLfc9nZ EQkGA3Zt7fthElhELsFqbJHGVNh3KlaKat5D9nbOjV5AZmyCi90t4NIH4VWptYJc IXu+s7uWpo0iDU3PwUxDDLqnkzx9HoGdC57I2E5wL61Hlx84PDTFDZV59xufbXwg AkjdcRh3owtvQweqELrkfFkDssaGwgYIu88kU8m4/dgOVT+NN4HdTqHZ12BMfWZp MhoG+/I2eZ37/mVopPk46f60KYOOKI3AjiGH1HaNU2DsPfbqga0tG4G1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQw3jKgA9qfb7HAooEL0KxV85z5MB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj84UhSGM wEQP9+VlLORUhSdTkMLXhQlJHfNl2qNNd9S0eNAsTzcj6IbsN59G+y6pEjCYAxpR Lvvccr4giXnH2gm6TAteJhwbFvp65DRdIRS6lHtVZ1HcUb3Vwlf8INCxK6lJfBuF 7s8P5vLF4llkWuohNClRKdzCgR7rCcWJAQqpuW0Mb0Q49gImtDnjiTDiAd3xzEdg IStIAgY0mf2hRmlv97b2feTBCY3IZOC54dJIBmQX0xyt01N9Kh0NJQWoBGA+7433 rS89Jg6H1XX5l1lY1r12veqh6dy9crAa+Uu50wCiSsADwVslCOcLNfcHTZQ6HTbT jt3+If+kyeYrnQ== -----END CERTIFICATE-----Generated at Sat Jun 13 22:10:31 2026 by rpki-client