$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: vPP6c0Dz0xomSsqOJe//rtfUdhiYYo5XFMnOIq6fyV8= Subject key identifier: 0D:89:DA:25:44:6B:B9:9B:13:2F:85:B8:2B:47:B2:7D:C2:43:31:5B Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019EBE1154791C06D3941C7FE58E56223C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 161D Signing time: Fri 12 Jun 2026 23:01:07 +0000 Manifest this update: Fri 12 Jun 2026 23:01:07 +0000 Manifest next update: Sat 13 Jun 2026 23:01:07 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 3: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 4: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 5: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 6: ZFC2U3uQIhdNpB72KbpGlziRc2o.roa (hash: z5uebA6QMfVds8/qjjHA8y0xgv3fGyNQU+YomK8H6Hs=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: uTOgqj/aFRm/mKrCHSPUOHDnT9Nw/dc8qBMCl2UIAsc=) 9: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (hash: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=) 10: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:11:54:79:1c:06:d3:94:1c:7f:e5:8e:56:22:3c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jun 12 23:01:07 2026 GMT Not After : Jun 13 23:01:07 2026 GMT Subject: CN=0d89da25446bb99b132f85b82b47b27dc243315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:fa:f2:2b:77:19:f5:06:f0:ac:8f:0a:28: 97:9a:4f:97:a1:80:ab:86:51:4b:8c:da:46:41:84: f5:ca:81:c3:1d:5f:b5:8f:f8:c4:fb:00:5a:35:12: 20:56:80:77:d3:16:a6:32:1a:80:6c:25:77:9d:50: 88:80:95:75:a5:c3:30:56:93:f8:53:b5:c4:f4:26: c7:11:b2:1e:a1:45:c9:a9:21:56:87:f5:8a:56:a4: 1c:59:2c:96:4c:8d:ee:0d:6f:37:4e:89:a7:99:36: 60:b4:03:96:07:e3:3b:c7:84:69:4a:66:ef:d5:ca: 63:78:cf:6f:42:c2:e8:b3:d2:4b:86:f6:84:04:d8: c4:72:1f:2e:8d:4a:fb:3c:7e:ed:2a:aa:7c:27:f7: 13:4e:37:ad:3c:49:e5:ec:7b:3d:3d:06:33:25:cf: ae:2e:bb:5f:c4:ad:6e:ac:22:04:64:b3:d4:81:2a: 9a:d7:aa:ca:d3:ce:51:f8:4b:65:c2:b1:8d:6e:96: 54:4a:99:1e:87:19:23:21:7b:2f:3e:ca:2b:c3:9f: 66:f4:02:7a:e8:bb:c7:a2:1d:e8:2e:ba:05:1c:15: 4b:89:6d:a3:4e:82:3d:34:25:7b:e3:d2:be:40:eb: 0a:e6:76:cb:f1:57:ab:34:37:13:70:8d:60:80:68: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:DA:25:44:6B:B9:9B:13:2F:85:B8:2B:47:B2:7D:C2:43:31:5B X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:b6:79:a1:94:eb:8b:d4:b3:4f:34:33:45:d1:4d:a8:2d: 20:b1:33:ea:da:b3:4e:6c:fb:de:07:bc:ef:5d:f8:fb:de:6d: b4:08:1a:b8:b5:df:87:dc:e5:d3:20:30:9b:a2:af:54:c2:cf: 0b:31:e4:28:9a:eb:85:ea:ec:7d:1b:5c:d7:e5:58:b3:91:b1: 87:d9:9f:32:21:ef:04:29:a9:b1:da:48:b5:e1:c4:92:f7:62: 0e:14:07:7d:49:2f:d5:9d:5c:73:ad:87:20:91:22:58:e5:cf: e3:d1:2b:db:1b:fc:33:44:e9:eb:b0:bb:8b:0f:2d:cc:ac:2e: e7:84:83:38:4f:5f:aa:1f:ab:97:9b:7c:b6:c1:d1:51:ad:88: 3d:1e:da:2b:c9:1d:73:84:d9:9b:73:04:f3:d1:ae:c0:9d:fa: 54:af:80:fc:f3:a2:43:a1:fc:17:b4:5b:22:bb:ff:0b:fc:55: 8e:62:a6:f2:0d:5b:e5:97:0d:d1:bf:9a:bb:3d:c3:d7:63:b8: 95:42:05:ae:fd:86:2f:45:f7:67:f3:6f:28:bc:4b:23:41:5d: 07:50:6d:e5:82:33:ca:70:69:64:07:0c:18:5b:30:9c:cf:ba: 0a:6f:64:76:23:23:6a:17:34:9c:c2:f0:ab:08:00:08:6d:15: 56:20:be:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+EVR5HAbTlBx/5Y5WIjwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwNjEyMjMwMTA3WhcNMjYwNjEzMjMwMTA3WjAzMTEwLwYDVQQD EygwZDg5ZGEyNTQ0NmJiOTliMTMyZjg1YjgyYjQ3YjI3ZGMyNDMzMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPf68it3GfUG8KyPCiiXmk+XoYCr hlFLjNpGQYT1yoHDHV+1j/jE+wBaNRIgVoB30xamMhqAbCV3nVCIgJV1pcMwVpP4 U7XE9CbHEbIeoUXJqSFWh/WKVqQcWSyWTI3uDW83TomnmTZgtAOWB+M7x4RpSmbv 1cpjeM9vQsLos9JLhvaEBNjEch8ujUr7PH7tKqp8J/cTTjetPEnl7Hs9PQYzJc+u LrtfxK1urCIEZLPUgSqa16rK085R+EtlwrGNbpZUSpkehxkjIXsvPsorw59m9AJ6 6LvHoh3oLroFHBVLiW2jToI9NCV749K+QOsK5nbL8VerNDcTcI1ggGjqEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2J2iVEa7mbEy+FuCtHsn3CQzFbMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbC2eaGU 64vUs080M0XRTagtILEz6tqzTmz73ge87134+95ttAgauLXfh9zl0yAwm6KvVMLP CzHkKJrrhersfRtc1+VYs5Gxh9mfMiHvBCmpsdpIteHEkvdiDhQHfUkv1Z1cc62H IJEiWOXP49Er2xv8M0Tp67C7iw8tzKwu54SDOE9fqh+rl5t8tsHRUa2IPR7aK8kd c4TZm3ME89GuwJ36VK+A/POiQ6H8F7RbIrv/C/xVjmKm8g1b5ZcN0b+auz3D12O4 lUIFrv2GL0X3Z/NvKLxLI0FdB1Bt5YIzynBpZAcMGFswnM+6Cm9kdiMjahc0nMLw qwgACG0VViC+fw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:21:49 2026 by rpki-client