$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: UBunvfeQ9JweqSI2l6ylhPqttgv87y/8VAeGUVUq/wg= Subject key identifier: 02:27:60:F8:A8:BF:C5:11:F4:75:35:13:98:70:86:B5:68:F7:7F:F6 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019EC3376FC3D6D62A547007A923A817FF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 19AF Signing time: Sat 13 Jun 2026 23:00:50 +0000 Manifest this update: Sat 13 Jun 2026 23:00:50 +0000 Manifest next update: Sun 14 Jun 2026 23:00:50 +0000 Files and hashes: 1: 0sdOvh4nfn0lveRxykk33cNxIIM.roa (hash: kD83I12ad3Fh1a3zjr7gmmT7/0FXYiO1h6O1pIwZPsc=) 2: 0xQr7SsuNbVkdglbPEuYeR908M4.roa (hash: OwNc5ie37GMpKkc5b6+YlsSSG7y7AT9vwxdWFk6XL+M=) 3: 30sdxKKP0ars307oYhGI6BrpG2o.roa (hash: Ivy6fMnEE31k2bYTRHxwk6l6HgInwqqeEaoOQT4ACBE=) 4: 62z-_Nd4i8kmKRcFEqTrWOYEGyQ.roa (hash: s4eIzMK2BxY+5zTpdTU6OHEC3fxJT8gAlfgpPK+B7Q8=) 5: BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa (hash: Etgsi90oMnqKxDk2sxnBlfxaINgYrLG9ZZzEIRCrPps=) 6: C2WOVwVQYwVr2nuLF8nZxh0HNso.roa (hash: dY3J82jDEAIC/rY1dL+3vS1oH5Nh7406smEXm0DFhew=) 7: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (hash: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4=) 8: PpTOr4rXJzyV-q6NiqHNVjbAYZU.roa (hash: jQEomOlSvY4s8mgJ4+q3cKFP031XgY4ZDEypZ2ab0XY=) 9: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (hash: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4=) 10: WhADIH61bkJ2leuk_zArifd_fK0.roa (hash: BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=) 11: Ygn_c8zbC36xqFlDHNWeV-WM8pU.roa (hash: CXih/mSxLCAOHxPVZ72EgZHKzViKS2T68SjIziUjdEM=) 12: k71425zZrgvZnNmix7lRrfFGz8M.roa (hash: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI=) 13: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: QCvu++71YSORRNYAs8+ysgmLlpxiReEbBAqlBGZ9Df8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c3:37:6f:c3:d6:d6:2a:54:70:07:a9:23:a8:17:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jun 13 23:00:50 2026 GMT Not After : Jun 14 23:00:50 2026 GMT Subject: CN=022760f8a8bfc511f4753513987086b568f77ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:00:fa:13:e0:21:8b:b0:6f:dc:4e:9b:42: af:4d:ab:d4:92:1e:a3:c2:fb:89:5e:31:1e:f7:69: 5c:af:ff:6c:4b:97:5d:4a:f0:13:07:76:07:65:e0: 07:72:05:bb:03:03:b0:d5:37:63:09:a3:85:93:22: bf:00:f8:cc:4c:2e:43:8d:27:5a:02:91:65:00:38: 79:28:1f:4a:2c:e3:3e:b9:59:81:78:11:06:78:70: 8f:5a:ff:ec:1f:49:c9:30:46:1e:7e:bb:f8:1c:48: c3:0d:4b:28:ec:02:99:83:88:23:d3:94:8b:25:de: ef:48:93:dc:3f:ba:6b:62:5a:8e:f7:9f:5e:6e:3c: d4:3d:2f:1a:4c:78:6e:e6:82:57:50:4c:fc:1c:34: 81:55:dd:39:35:ea:62:a7:7c:7b:2b:51:f5:2b:a3: 4f:ad:db:9b:6d:e5:12:a2:ca:03:47:50:a5:98:15: cc:e4:3e:44:a8:52:1e:12:bc:1c:e5:64:82:24:f1: bb:20:c1:5f:1f:c7:1c:17:24:01:64:d3:19:61:88: 59:dd:05:3b:98:a0:72:db:13:ba:cd:7f:f4:14:87: df:84:f5:26:ad:39:1b:bc:97:45:78:15:0c:27:5c: 41:be:9c:f7:61:7b:39:29:93:8b:77:d4:d3:98:d2: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:60:F8:A8:BF:C5:11:F4:75:35:13:98:70:86:B5:68:F7:7F:F6 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2e:f1:54:a1:0a:0e:9f:63:03:7a:93:5c:c5:55:88:28:b2: a2:31:03:38:60:38:72:10:d5:d5:f3:ce:52:41:26:1b:da:e2: 18:5c:9e:58:3a:b8:74:a9:75:b6:ac:28:c7:6c:27:76:88:e5: a9:80:fe:30:34:75:d5:fe:cc:88:3d:8c:71:d4:58:d4:37:a4: c2:f3:e5:9a:57:70:8d:a9:52:67:35:14:b7:69:0a:d8:b3:ef: 08:51:04:4b:ba:09:6b:c3:99:24:d8:d5:32:8c:5b:44:d6:c6: 7d:9e:36:f0:cd:c0:95:d6:24:57:9e:e3:8c:64:bb:a0:fc:7b: 42:07:38:05:a1:30:bb:a8:c2:53:c0:4a:63:21:b4:a9:6d:9e: ce:84:e3:d0:89:3c:09:ab:c1:4b:20:84:79:cb:b1:25:16:d5: 91:a5:76:d5:86:60:4c:87:1c:1f:f9:e8:d3:12:9e:3b:07:f1: 8f:e5:3b:de:80:de:d9:4b:bd:f1:e4:67:34:71:43:44:0b:bc: a9:96:9e:28:ea:1e:53:e8:0d:2a:59:53:00:80:f3:77:eb:4a: 76:3e:c5:d4:ea:22:67:1b:b7:3c:29:64:45:54:67:1c:ce:32: a9:57:fe:43:8b:4a:04:a8:3b:2e:24:de:f4:46:9d:48:b9:30: 20:61:72:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7DN2/D1tYqVHAHqSOoF/9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwNjEzMjMwMDUwWhcNMjYwNjE0MjMwMDUwWjAzMTEwLwYDVQQD EygwMjI3NjBmOGE4YmZjNTExZjQ3NTM1MTM5ODcwODZiNTY4Zjc3ZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNQA+hPgIYuwb9xOm0KvTavUkh6j wvuJXjEe92lcr/9sS5ddSvATB3YHZeAHcgW7AwOw1TdjCaOFkyK/APjMTC5DjSda ApFlADh5KB9KLOM+uVmBeBEGeHCPWv/sH0nJMEYefrv4HEjDDUso7AKZg4gj05SL Jd7vSJPcP7prYlqO959ebjzUPS8aTHhu5oJXUEz8HDSBVd05Nepip3x7K1H1K6NP rdubbeUSosoDR1ClmBXM5D5EqFIeErwc5WSCJPG7IMFfH8ccFyQBZNMZYYhZ3QU7 mKBy2xO6zX/0FIffhPUmrTkbvJdFeBUMJ1xBvpz3YXs5KZOLd9TTmNLCGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAInYPiov8UR9HU1E5hwhrVo93/2MB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPy7xVKEK Dp9jA3qTXMVViCiyojEDOGA4chDV1fPOUkEmG9riGFyeWDq4dKl1tqwox2wndojl qYD+MDR11f7MiD2McdRY1DekwvPlmldwjalSZzUUt2kK2LPvCFEES7oJa8OZJNjV MoxbRNbGfZ428M3AldYkV57jjGS7oPx7Qgc4BaEwu6jCU8BKYyG0qW2ezoTj0Ik8 CavBSyCEecuxJRbVkaV21YZgTIccH/no0xKeOwfxj+U73oDe2Uu98eRnNHFDRAu8 qZaeKOoeU+gNKllTAIDzd+tKdj7F1OoiZxu3PClkRVRnHM4yqVf+Q4tKBKg7LiTe 9EadSLkwIGFyuQ== -----END CERTIFICATE-----Generated at Sun Jun 14 01:34:06 2026 by rpki-client