$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: lECnjTiswqP9M/DQrKkQ962jJnNF796JqQ8or6EbHKw= Subject key identifier: F6:7F:E6:84:65:7B:DC:EB:E0:87:4B:F8:53:82:C3:70:E1:34:98:9C Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019E1BD923E5943300F0F47CBD2774FD68AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 016F Signing time: Tue 12 May 2026 11:01:15 +0000 Manifest this update: Tue 12 May 2026 11:01:15 +0000 Manifest next update: Wed 13 May 2026 11:01:15 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: PVJgDng3bi4P4acTBOn5eA7OiV6WAVGg3ZaUkVN7HL4=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 9: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 10: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 11: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 12: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 13: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d9:23:e5:94:33:00:f0:f4:7c:bd:27:74:fd:68:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: May 12 11:01:15 2026 GMT Not After : May 13 11:01:15 2026 GMT Subject: CN=f67fe684657bdcebe0874bf85382c370e134989c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:c2:f6:ac:7a:13:be:51:43:eb:01:fe:71: 22:c0:46:e7:15:e3:8f:28:0a:f5:3d:6c:20:04:5a: 6f:55:cb:06:11:80:f0:27:42:0b:86:f5:00:30:fd: 55:55:bc:f3:2e:ed:c4:f7:90:dc:fe:c7:39:22:2a: 5e:f6:ba:c0:3a:e5:7a:bc:87:e0:fe:0c:a7:63:b0: 3b:9c:e3:fa:81:e4:33:cf:dc:98:44:41:6d:67:16: f2:d1:f1:9e:d7:f5:95:f7:39:4c:0a:19:14:9d:73: da:51:a5:b6:54:74:a1:17:6b:3a:78:bd:16:63:c8: 87:41:7d:f0:6b:d7:dc:cc:9e:e8:f7:bd:71:1e:78: 9b:4f:e4:92:86:cf:9b:ea:a3:e6:b5:7c:b8:2b:1b: a7:c7:22:33:19:7a:c3:00:2d:2e:b0:e8:9c:06:af: 6f:b3:28:83:60:05:66:ec:29:92:5e:5b:74:97:06: 6c:31:59:3e:91:53:f2:87:e1:2c:18:56:43:da:93: 73:8f:f4:71:39:80:1f:75:a2:ca:c2:47:c2:eb:e7: e1:db:86:dd:71:05:d4:eb:35:f2:d4:65:30:95:e2: 32:1f:4e:67:f6:60:15:1b:ae:8b:2d:35:ce:cf:8c: a2:43:21:6e:de:5a:a2:fc:0b:47:73:f1:9f:8b:14: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7F:E6:84:65:7B:DC:EB:E0:87:4B:F8:53:82:C3:70:E1:34:98:9C X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:92:69:ec:86:ec:7d:e6:bb:24:c8:45:29:41:e1:13:cf:bb: 65:e2:cc:32:c3:97:d5:36:c8:4f:32:eb:cb:63:72:72:33:05: 5e:56:f6:f8:e3:0d:4a:eb:0c:7c:79:b6:35:42:b3:40:b9:43: a3:09:be:25:94:df:85:3f:41:b4:95:a7:00:d7:cb:de:de:7b: 4d:8b:43:6f:dd:02:7f:25:38:9a:4d:1d:8a:8c:1c:6b:73:31: 43:8b:da:c4:78:3c:f3:6d:5e:e0:45:63:2c:4f:c1:a5:02:98: c5:10:e6:12:4f:ce:3f:90:e7:6e:86:aa:32:cd:25:40:d0:ca: 30:ca:40:6d:1f:ce:2a:18:d5:97:2f:44:d5:9f:8e:fe:68:ed: 60:86:eb:3c:d7:22:b9:f9:05:41:f5:1d:e7:a4:51:cf:7f:ed: bc:f4:81:dc:9e:7e:84:93:1e:1f:62:c4:9d:00:d2:f9:46:ed: fb:24:c8:7a:6a:a5:01:09:75:d9:2e:d1:11:63:1e:78:d8:01: 6f:2d:28:77:8a:4d:6b:55:f5:81:2c:00:f4:f2:a1:e9:32:cf: 82:a5:39:36:fd:87:56:cc:b5:03:40:f0:ce:1b:78:2c:5c:48: 1b:5f:3f:38:ff:d6:7a:b0:b1:ee:4e:73:7c:50:52:96:97:a0: 33:91:c8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2SPllDMA8PR8vSd0/WivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwNTEyMTEwMTE1WhcNMjYwNTEzMTEwMTE1WjAzMTEwLwYDVQQD EyhmNjdmZTY4NDY1N2JkY2ViZTA4NzRiZjg1MzgyYzM3MGUxMzQ5ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukLC9qx6E75RQ+sB/nEiwEbnFeOP KAr1PWwgBFpvVcsGEYDwJ0ILhvUAMP1VVbzzLu3E95Dc/sc5Iipe9rrAOuV6vIfg /gynY7A7nOP6geQzz9yYREFtZxby0fGe1/WV9zlMChkUnXPaUaW2VHShF2s6eL0W Y8iHQX3wa9fczJ7o971xHnibT+SShs+b6qPmtXy4KxunxyIzGXrDAC0usOicBq9v syiDYAVm7CmSXlt0lwZsMVk+kVPyh+EsGFZD2pNzj/RxOYAfdaLKwkfC6+fh24bd cQXU6zXy1GUwleIyH05n9mAVG66LLTXOz4yiQyFu3lqi/AtHc/GfixRIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ/5oRle9zr4IdL+FOCw3DhNJicMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZJp7Ibs fea7JMhFKUHhE8+7ZeLMMsOX1TbITzLry2NycjMFXlb2+OMNSusMfHm2NUKzQLlD owm+JZTfhT9BtJWnANfL3t57TYtDb90CfyU4mk0diowca3MxQ4vaxHg8821e4EVj LE/BpQKYxRDmEk/OP5DnboaqMs0lQNDKMMpAbR/OKhjVly9E1Z+O/mjtYIbrPNci ufkFQfUd56RRz3/tvPSB3J5+hJMeH2LEnQDS+Ubt+yTIemqlAQl12S7REWMeeNgB by0od4pNa1X1gSwA9PKh6TLPgqU5Nv2HVsy1A0Dwzht4LFxIG18/OP/WerCx7k5z fFBSlpegM5HI8Q== -----END CERTIFICATE-----Generated at Tue May 12 22:28:09 2026 by rpki-client