$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json) Hash identifier: GMZMmJeDsVfTbTQ+gAoGh9gNcLWTbwxaAtYphM2jsGw= Subject key identifier: D1:DE:CA:4F:34:6E:87:C1:CD:C5:8C:C1:57:22:12:3B:EE:44:6B:BC Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019F90599D7546489A47C39CFCDBBCE247C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft Manifest number: 19F0 Signing time: Thu 23 Jul 2026 19:00:19 +0000 Manifest this update: Thu 23 Jul 2026 19:00:19 +0000 Manifest next update: Fri 24 Jul 2026 19:00:19 +0000 Files and hashes: 1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=) 2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: mQeUQVP2gew3vPBqRpIoC6xNQCD6SeQufaQl92piDaI=) 3: H1KxXkqZfOMz2T0T89-BrBE5VBs.roa (hash: 5203tsZCts099zZy2toRHEDTl1Xyfa7Z86N2Mg2UGgg=) 4: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (hash: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=) 5: T3bly-tZ9XID-SOloXwH3hTsc_E.roa (hash: aeV/m0RLRp31h+Weu05/IHsjHV2WSBXJFEz0Mww+iyc=) 6: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=) 7: X0L_WIFrHSaQewTifeIRhTrccl4.roa (hash: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=) 8: hVqZbaQ8MeHQybRpaRLjUblswSg.roa (hash: pSX41/t7TR6ni7qxXv88Dsw/Pbc7wwCKoNbXNgfg/qs=) 9: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (hash: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=) 10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:59:9d:75:46:48:9a:47:c3:9c:fc:db:bc:e2:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Jul 23 19:00:19 2026 GMT Not After : Jul 24 19:00:19 2026 GMT Subject: CN=d1deca4f346e87c1cdc58cc15722123bee446bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:e1:2a:56:69:5d:57:9e:09:03:ab:c0:ab: 09:4a:0a:a7:6a:de:98:63:9c:25:01:91:6c:90:21: f5:85:05:5c:cb:88:f8:72:2d:0c:bf:ef:3c:46:4d: 90:1b:69:40:6d:b7:41:30:31:56:2e:90:3a:49:a3: 1a:a8:8f:86:98:d5:26:3d:b7:8e:46:14:fc:cb:79: 2f:67:03:30:cf:71:b5:24:21:8a:bc:1a:ef:c6:11: d9:0c:a5:56:63:30:b8:6f:75:1c:28:d8:b6:f4:df: 9c:27:99:f1:a9:fb:fd:75:75:b5:2f:1e:ab:95:18: f6:3b:c1:d7:82:23:9a:30:74:8e:ee:66:d8:ba:5e: 7c:7d:d4:9c:6d:c9:c4:8c:f8:29:8f:61:47:c2:1c: 0e:50:28:eb:08:b5:35:ca:5b:28:cc:27:fd:f2:12: 2b:d4:b1:f4:97:c2:75:b0:c3:cd:d7:37:21:89:ab: 7d:49:36:a0:5f:48:32:c2:88:d9:40:4e:58:23:68: cd:37:b6:6d:63:a6:fc:59:84:61:d5:6a:bf:45:c5: de:6f:c2:72:c4:78:d7:85:70:cb:b6:5f:1e:88:31: d3:a9:f7:97:c9:1e:55:47:da:90:51:b7:a6:5e:60: 72:c6:ae:5f:26:8b:f9:50:5f:da:ba:aa:15:a9:ea: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:CA:4F:34:6E:87:C1:CD:C5:8C:C1:57:22:12:3B:EE:44:6B:BC X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:69:64:19:84:58:e5:8d:53:18:b9:e2:99:2d:7f:1e:64: 5c:16:b8:2e:1d:ba:23:e4:67:e6:db:13:60:f2:5c:8d:29:1f: 04:58:24:15:e6:6c:40:40:22:c7:d2:b0:f2:c1:38:72:35:0d: b6:b4:16:1d:ff:d0:5c:5a:85:49:45:79:49:9e:ef:a5:48:0d: d2:94:d1:f5:2d:9a:cb:06:d2:80:f0:1c:1b:07:54:bf:9a:aa: ba:d5:e6:f2:62:54:8d:e5:9f:62:40:36:d7:4f:82:2c:b0:9d: 8b:c1:c2:f4:de:11:0e:4a:1b:2f:44:ca:bc:3a:36:c5:b2:48: 75:d0:2d:07:40:35:e5:8f:55:67:a2:d5:c8:cb:b0:d7:0e:b7: 83:aa:be:84:59:1e:06:57:6e:76:12:18:38:db:54:bd:e4:3d: a4:1f:7f:74:cd:83:cf:c8:87:b6:91:9a:a8:ca:8e:4f:10:25: 0f:b4:5f:df:1d:85:57:3e:0d:ec:89:38:f9:38:cb:03:bd:1a: ea:86:d1:f5:81:38:d6:39:a7:ba:66:16:5e:8e:8a:46:71:20: 47:cd:04:0b:c4:1e:f9:6d:d9:ac:39:c4:e2:e6:f8:e2:7a:e8: 67:20:f0:b5:93:8b:b7:02:30:54:34:c9:a2:95:4d:0c:e9:1c: 2b:92:2e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWZ11RkiaR8Oc/Nu84kfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjYwNzIzMTkwMDE5WhcNMjYwNzI0MTkwMDE5WjAzMTEwLwYDVQQD EyhkMWRlY2E0ZjM0NmU4N2MxY2RjNThjYzE1NzIyMTIzYmVlNDQ2YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxXhKlZpXVeeCQOrwKsJSgqnat6Y Y5wlAZFskCH1hQVcy4j4ci0Mv+88Rk2QG2lAbbdBMDFWLpA6SaMaqI+GmNUmPbeO RhT8y3kvZwMwz3G1JCGKvBrvxhHZDKVWYzC4b3UcKNi29N+cJ5nxqfv9dXW1Lx6r lRj2O8HXgiOaMHSO7mbYul58fdScbcnEjPgpj2FHwhwOUCjrCLU1ylsozCf98hIr 1LH0l8J1sMPN1zchiat9STagX0gywojZQE5YI2jNN7ZtY6b8WYRh1Wq/RcXeb8Jy xHjXhXDLtl8eiDHTqfeXyR5VR9qQUbemXmByxq5fJov5UF/auqoVqep0hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHeyk80bofBzcWMwVciEjvuRGu8MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+BpZBmE WOWNUxi54pktfx5kXBa4Lh26I+Rn5tsTYPJcjSkfBFgkFeZsQEAix9Kw8sE4cjUN trQWHf/QXFqFSUV5SZ7vpUgN0pTR9S2aywbSgPAcGwdUv5qqutXm8mJUjeWfYkA2 10+CLLCdi8HC9N4RDkobL0TKvDo2xbJIddAtB0A15Y9VZ6LVyMuw1w63g6q+hFke BldudhIYONtUveQ9pB9/dM2Dz8iHtpGaqMqOTxAlD7Rf3x2FVz4N7Ik4+TjLA70a 6obR9YE41jmnumYWXo6KRnEgR80EC8Qe+W3ZrDnE4ub44nroZyDwtZOLtwIwVDTJ opVNDOkcK5IuzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:11 2026 by rpki-client