$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: AaANhVNdmQD/um83g4UXMd2kXHOthGg4ZdF/CK2vRb4= Subject key identifier: C1:D0:B9:F2:EE:6F:BC:F6:F5:5E:16:59:99:60:44:4C:C3:55:80:7A Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019EBF2397393A62733424346FFFC1352BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0147 Signing time: Sat 13 Jun 2026 04:00:41 +0000 Manifest this update: Sat 13 Jun 2026 04:00:41 +0000 Manifest next update: Sun 14 Jun 2026 04:00:41 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: wJAjm5qiAv5JuUKT8Iq9N4gh/Q1dnLopno2hzHU35Fo=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:23:97:39:3a:62:73:34:24:34:6f:ff:c1:35:2b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Jun 13 04:00:41 2026 GMT Not After : Jun 14 04:00:41 2026 GMT Subject: CN=c1d0b9f2ee6fbcf6f55e16599960444cc355807a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:57:17:a5:15:a7:81:eb:5b:05:42:21:9e: f1:5d:c3:f8:a6:fe:33:aa:82:38:d0:6b:42:f6:bd: fc:0c:de:ca:f5:46:0a:de:c2:d6:5b:b8:f3:a9:97: 4b:ee:2d:d7:49:cf:1b:4e:46:15:ef:48:c6:aa:8a: 40:50:b1:d3:de:73:2b:bd:73:96:0b:5b:2f:e1:79: 19:d9:94:50:ac:ec:d5:a2:b5:53:17:ef:78:bd:47: 09:12:19:bb:03:f5:e3:74:19:47:e4:3b:14:97:2c: 8d:96:2c:fd:80:cf:c0:93:3a:cb:5c:37:47:b2:e2: d3:cc:c0:6e:0b:c5:e3:d0:01:ff:f6:a5:52:44:80: 2b:a8:3a:48:43:3b:e5:9c:cb:3c:46:92:19:57:7c: 31:3d:68:31:1c:f3:1f:eb:e0:d0:88:19:82:5c:22: 42:5e:89:1c:35:8e:88:06:f1:02:1c:e1:2c:28:61: 9d:76:20:0a:90:e1:98:ca:69:87:ae:71:83:75:ba: a6:94:12:7b:e8:af:74:5c:56:56:b1:19:0d:a1:4e: ec:f5:d8:4f:16:dc:ce:ca:92:c4:5c:d6:8a:07:f1: 4c:31:35:06:5e:94:4f:66:79:33:a8:56:ae:e2:18: 20:fa:ee:25:cc:af:63:b6:40:ca:5d:6b:9e:83:b1: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:B9:F2:EE:6F:BC:F6:F5:5E:16:59:99:60:44:4C:C3:55:80:7A X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:df:29:b5:05:5e:8d:68:fa:f3:1b:4f:92:2d:bb:77:fe: ec:85:59:81:62:15:51:60:87:7d:19:e5:09:b6:ba:44:3b:e6: f1:72:59:be:ef:79:20:90:2b:0f:0b:78:f1:9e:6a:41:2f:cc: d6:03:d9:ed:22:eb:c2:a8:91:77:05:c7:37:32:d4:58:ae:1d: 2a:83:b4:16:82:a8:4f:16:7d:20:f3:c2:36:32:e1:d1:fd:0a: 10:17:e8:64:d4:52:8a:3b:8b:b9:cf:b4:4e:69:13:76:12:9c: 6a:62:b6:b5:cd:ba:d5:b7:39:42:75:64:49:81:6a:02:9d:9d: b5:a1:46:6e:73:aa:22:a2:54:dc:68:cb:6a:23:cf:db:86:61: 83:29:27:33:a7:c0:f3:c3:f4:cb:6b:72:7f:f3:c8:85:16:79: 95:6a:a9:e4:f7:7b:4e:0b:da:e2:ce:50:9a:f4:8d:ce:d9:30: a2:e8:23:34:da:4b:8e:07:34:b4:fd:6d:6e:62:a8:e0:29:a4: 1f:38:95:f7:d9:69:62:94:9e:ab:34:78:78:8b:d3:ba:bf:54: 3b:22:b9:f0:ca:3e:b6:89:36:c9:b7:8c:7c:f4:bc:88:b4:39: 81:3c:fe:29:e9:9d:c6:92:5f:d5:e4:05:10:30:f5:74:52:3c: 50:11:0d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/I5c5OmJzNCQ0b//BNSvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNjEzMDQwMDQxWhcNMjYwNjE0MDQwMDQxWjAzMTEwLwYDVQQD EyhjMWQwYjlmMmVlNmZiY2Y2ZjU1ZTE2NTk5OTYwNDQ0Y2MzNTU4MDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pFXF6UVp4HrWwVCIZ7xXcP4pv4z qoI40GtC9r38DN7K9UYK3sLWW7jzqZdL7i3XSc8bTkYV70jGqopAULHT3nMrvXOW C1sv4XkZ2ZRQrOzVorVTF+94vUcJEhm7A/XjdBlH5DsUlyyNliz9gM/AkzrLXDdH suLTzMBuC8Xj0AH/9qVSRIArqDpIQzvlnMs8RpIZV3wxPWgxHPMf6+DQiBmCXCJC XokcNY6IBvECHOEsKGGddiAKkOGYymmHrnGDdbqmlBJ76K90XFZWsRkNoU7s9dhP FtzOypLEXNaKB/FMMTUGXpRPZnkzqFau4hgg+u4lzK9jtkDKXWueg7G+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHQufLub7z29V4WWZlgREzDVYB6MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9LfKbUF Xo1o+vMbT5Itu3f+7IVZgWIVUWCHfRnlCba6RDvm8XJZvu95IJArDwt48Z5qQS/M 1gPZ7SLrwqiRdwXHNzLUWK4dKoO0FoKoTxZ9IPPCNjLh0f0KEBfoZNRSijuLuc+0 TmkTdhKcamK2tc261bc5QnVkSYFqAp2dtaFGbnOqIqJU3GjLaiPP24ZhgyknM6fA 88P0y2tyf/PIhRZ5lWqp5Pd7Tgva4s5QmvSNztkwougjNNpLjgc0tP1tbmKo4Cmk HziV99lpYpSeqzR4eIvTur9UOyK58Mo+tok2ybeMfPS8iLQ5gTz+KemdxpJf1eQF EDD1dFI8UBEN/g== -----END CERTIFICATE-----Generated at Sat Jun 13 08:16:18 2026 by rpki-client