$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: gBm+5mo24bV4i7nXxwTgUl282a/Uq2RgnDjf1sLRVqw= Subject key identifier: 21:6D:45:B7:C7:CB:3B:60:66:A7:FA:17:C4:2B:FD:CD:65:66:F9:56 Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 019F916C69C3FC811645408E96148A6DE082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: 40 Signing time: Fri 24 Jul 2026 00:00:29 +0000 Manifest this update: Fri 24 Jul 2026 00:00:29 +0000 Manifest next update: Sat 25 Jul 2026 00:00:29 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: xjkKL3/zVTb2UYudAABwOYbMHAQ9bkuwzurwnPrT6Ug=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:69:c3:fc:81:16:45:40:8e:96:14:8a:6d:e0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Jul 24 00:00:29 2026 GMT Not After : Jul 25 00:00:29 2026 GMT Subject: CN=216d45b7c7cb3b6066a7fa17c42bfdcd6566f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:e4:2b:1b:72:cb:66:ce:79:e7:56:79:0d: 63:4a:06:64:6d:1b:be:04:f8:9e:c7:84:63:f7:50: 2f:16:9f:3e:a9:43:e4:d8:89:52:2c:00:eb:e6:18: 6f:86:54:51:dd:b6:9c:10:d9:93:98:fb:07:e0:b2: 15:90:81:e5:5e:be:48:c5:b6:97:09:54:7b:b9:35: ea:f1:01:56:ea:9f:a0:2b:e5:2e:4e:ff:8c:14:b3: 4f:46:10:1a:a6:c1:55:91:09:f4:5d:7e:30:bd:ab: b6:8c:b1:6f:0e:8a:70:21:9e:2d:6a:43:a5:f0:dd: 30:a1:00:32:6d:53:76:f2:eb:47:a7:15:2a:ca:35: ec:0d:89:31:c0:ae:a0:0a:bb:ec:2d:d0:00:ea:d5: f8:41:c1:d2:17:55:7a:3d:2b:66:65:8f:5b:db:50: ee:33:06:fa:00:4b:f4:86:d5:9b:d0:00:7b:9a:fa: eb:75:85:b4:32:e1:55:d7:67:f1:bd:0b:b6:25:e5: 3f:33:e7:f1:06:c2:4d:42:01:b6:78:cb:72:96:44: bb:c6:f3:96:e3:4c:c0:7d:29:6d:8b:75:46:8c:ae: 2d:5f:96:97:f3:57:dd:42:a6:6d:0e:e4:7e:4f:3a: 90:58:ce:51:98:3c:09:9c:9a:d8:32:34:57:e5:72: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:45:B7:C7:CB:3B:60:66:A7:FA:17:C4:2B:FD:CD:65:66:F9:56 X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d5:18:bf:db:c7:e4:b9:9a:38:36:eb:d4:41:cb:36:e6:95: ec:96:5f:92:17:63:3c:ed:1a:40:0c:1c:b4:e4:73:19:c0:1c: 41:33:08:6f:dc:38:b8:0d:b3:19:e6:04:d4:3e:04:0c:57:55: 67:bc:21:9a:28:3b:09:c2:9d:db:e8:a9:c5:66:0a:7f:64:fb: 6e:5d:af:53:9e:b4:22:3d:56:e4:1f:46:55:67:d8:a5:df:05: c3:0e:bb:b5:d6:71:0c:a8:2d:27:ea:f1:11:56:b3:eb:16:f2: ca:2d:8b:3b:95:2f:2a:28:37:de:24:65:e3:c9:43:96:4a:d5: a8:ea:59:a2:bb:5b:c0:7d:04:0a:56:8a:20:0a:a7:6b:ff:d1: 95:ec:e8:57:96:b0:6a:d3:73:6b:f8:11:6c:c6:7d:f7:ed:08: 79:e2:99:4b:67:b2:a2:f0:a2:f7:e2:aa:2d:fa:28:e6:3e:b5: cd:3c:cb:51:a9:38:d6:90:d3:88:fe:d5:a2:1a:0c:2f:4e:a6: 84:ba:ac:ed:7e:75:ba:16:1c:a2:a4:0c:c9:66:9e:17:9f:fe: 89:5b:0b:6e:08:29:cb:fb:c0:67:fd:8d:6c:e5:65:a3:9d:2a: 46:bd:4a:15:80:98:e4:0a:93:30:ac:d2:dd:b4:d3:f1:35:90: a5:84:43:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbGnD/IEWRUCOlhSKbeCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwNzI0MDAwMDI5WhcNMjYwNzI1MDAwMDI5WjAzMTEwLwYDVQQD EygyMTZkNDViN2M3Y2IzYjYwNjZhN2ZhMTdjNDJiZmRjZDY1NjZmOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPkKxtyy2bOeedWeQ1jSgZkbRu+ BPiex4Rj91AvFp8+qUPk2IlSLADr5hhvhlRR3bacENmTmPsH4LIVkIHlXr5IxbaX CVR7uTXq8QFW6p+gK+UuTv+MFLNPRhAapsFVkQn0XX4wvau2jLFvDopwIZ4takOl 8N0woQAybVN28utHpxUqyjXsDYkxwK6gCrvsLdAA6tX4QcHSF1V6PStmZY9b21Du Mwb6AEv0htWb0AB7mvrrdYW0MuFV12fxvQu2JeU/M+fxBsJNQgG2eMtylkS7xvOW 40zAfSlti3VGjK4tX5aX81fdQqZtDuR+TzqQWM5RmDwJnJrYMjRX5XIPUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFtRbfHyztgZqf6F8Qr/c1lZvlWMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtUYv9vH 5LmaODbr1EHLNuaV7JZfkhdjPO0aQAwctORzGcAcQTMIb9w4uA2zGeYE1D4EDFdV Z7whmig7CcKd2+ipxWYKf2T7bl2vU560Ij1W5B9GVWfYpd8Fww67tdZxDKgtJ+rx EVaz6xbyyi2LO5UvKig33iRl48lDlkrVqOpZortbwH0EClaKIAqna//RlezoV5aw atNza/gRbMZ99+0IeeKZS2eyovCi9+KqLfoo5j61zTzLUak41pDTiP7VohoML06m hLqs7X51uhYcoqQMyWaeF5/+iVsLbggpy/vAZ/2NbOVlo50qRr1KFYCY5AqTMKzS 3bTT8TWQpYRDoA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:07:51 2026 by rpki-client