$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: Hjw9DOeKdGoS0lAeV7JMZjvoCsqZBsxkZlFNIeYGzCQ= Subject key identifier: 24:1A:87:FD:49:28:DC:93:5B:4E:40:E8:AA:40:A1:74:7A:49:91:66 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019EBDA31E9A8E49FDA3B10A5714030F4501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 199B Signing time: Fri 12 Jun 2026 21:00:44 +0000 Manifest this update: Fri 12 Jun 2026 21:00:44 +0000 Manifest next update: Sat 13 Jun 2026 21:00:44 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: 0DYNv6YRNByNajwioUnLcJQi/NLLPBX1WhsqnIQ4t7c=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 12: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 13: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 14: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 15: y8I8zTQVg4GxjAasyf6R5JPcs7Q.roa (hash: oJbh60u2N8b9deVtLXSwbxA5m+GH3O/bjqhIgiz7mV0=) 16: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a3:1e:9a:8e:49:fd:a3:b1:0a:57:14:03:0f:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jun 12 21:00:44 2026 GMT Not After : Jun 13 21:00:44 2026 GMT Subject: CN=241a87fd4928dc935b4e40e8aa40a1747a499166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:6c:83:1d:61:ba:a7:63:1f:8a:99:10:1d: 48:73:f1:bb:22:41:8d:1a:d7:2e:6e:70:b9:16:ba: 5f:1e:69:d6:86:e4:37:64:11:6f:1c:28:59:ec:04: 44:b3:07:64:87:c3:df:4f:47:15:ca:f6:00:30:aa: 2c:b6:0e:1b:ac:82:ab:e8:4e:83:ca:af:dc:11:cb: 67:67:cc:a8:d7:43:01:f9:9e:6f:85:e4:3f:b9:dd: 60:6b:ff:80:67:21:15:2a:e6:d3:04:06:57:44:d5: 39:ae:e9:7b:31:d5:52:41:31:b4:21:7c:bc:a5:b9: 26:c8:5a:89:80:31:49:0e:9c:20:55:d4:33:85:20: 48:32:ca:9d:49:3c:b2:bc:ad:50:db:87:b3:91:ff: bb:7d:ab:88:d5:19:53:62:5b:58:d0:40:82:eb:36: 0d:29:77:69:9c:7e:52:31:fd:7d:f9:3f:89:02:52: f9:e9:8a:6c:c2:fe:b6:f6:e9:27:a9:26:41:52:3d: aa:c9:40:55:4b:52:69:79:6c:fc:ef:e5:e5:4d:77: 5c:cd:35:0e:15:45:ea:e5:3e:9a:1e:b1:1d:ff:8f: e1:26:79:7d:16:1c:ef:7b:f5:06:68:98:01:02:39: 3c:2b:b4:69:8d:5f:23:17:a3:f6:c0:ac:ea:54:ac: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:87:FD:49:28:DC:93:5B:4E:40:E8:AA:40:A1:74:7A:49:91:66 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5b:8a:99:ae:af:ea:f7:3d:cc:6e:b1:61:ab:5a:1c:bc:79: 0b:7c:7f:ab:c3:65:06:c4:37:3b:70:bb:80:40:49:9e:b5:6d: 98:6e:fd:ee:c5:a0:ad:2d:83:15:49:39:e5:c8:c8:1d:61:a5: fe:a2:9e:05:25:81:be:20:f5:21:43:69:ab:bc:73:67:a7:fd: 5f:65:d1:db:1f:ef:4e:a8:86:2f:db:c9:e8:0c:fa:72:57:44: 63:60:46:cb:82:b8:de:9d:70:53:6c:2f:cb:12:13:2a:e6:b6: 62:58:6b:8a:4c:5a:3f:21:0c:00:a8:ba:61:fa:c6:7f:16:ab: af:97:33:ce:65:84:c2:ee:66:08:18:3e:f8:d8:0c:b0:a0:9e: b2:98:27:26:3e:38:de:1e:03:17:58:e3:e5:c5:2c:9e:21:62: 6e:75:f7:3a:f5:01:35:97:66:0e:2c:3d:56:d5:54:3c:76:f6: 63:26:88:33:20:24:ff:4e:37:7f:c9:03:4a:3d:18:57:f5:19: 92:17:a6:1b:2d:22:07:ef:0f:2c:3d:48:0c:ab:ad:05:24:00: 59:df:71:ee:1d:c0:60:e4:fd:30:b1:66:17:79:c5:a5:e6:69: 30:49:e0:1d:28:c5:4f:c9:05:ce:22:b4:93:12:d4:10:67:30: 17:cf:b2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69ox6ajkn9o7EKVxQDD0UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwNjEyMjEwMDQ0WhcNMjYwNjEzMjEwMDQ0WjAzMTEwLwYDVQQD EygyNDFhODdmZDQ5MjhkYzkzNWI0ZTQwZThhYTQwYTE3NDdhNDk5MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJZsgx1huqdjH4qZEB1Ic/G7IkGN GtcubnC5FrpfHmnWhuQ3ZBFvHChZ7AREswdkh8PfT0cVyvYAMKostg4brIKr6E6D yq/cEctnZ8yo10MB+Z5vheQ/ud1ga/+AZyEVKubTBAZXRNU5rul7MdVSQTG0IXy8 pbkmyFqJgDFJDpwgVdQzhSBIMsqdSTyyvK1Q24ezkf+7fauI1RlTYltY0ECC6zYN KXdpnH5SMf19+T+JAlL56Ypswv629uknqSZBUj2qyUBVS1JpeWz87+XlTXdczTUO FUXq5T6aHrEd/4/hJnl9Fhzve/UGaJgBAjk8K7RpjV8jF6P2wKzqVKxfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQah/1JKNyTW05A6KpAoXR6SZFmMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1uKma6v 6vc9zG6xYataHLx5C3x/q8NlBsQ3O3C7gEBJnrVtmG797sWgrS2DFUk55cjIHWGl /qKeBSWBviD1IUNpq7xzZ6f9X2XR2x/vTqiGL9vJ6Az6cldEY2BGy4K43p1wU2wv yxITKua2YlhrikxaPyEMAKi6YfrGfxarr5czzmWEwu5mCBg++NgMsKCespgnJj44 3h4DF1jj5cUsniFibnX3OvUBNZdmDiw9VtVUPHb2YyaIMyAk/043f8kDSj0YV/UZ khemGy0iB+8PLD1IDKutBSQAWd9x7h3AYOT9MLFmF3nFpeZpMEngHSjFT8kFziK0 kxLUEGcwF8+yKw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:16:03 2026 by rpki-client