$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: HSbWfmuQ8j+Thphg1lythNFtELz30l81sLyrJW4GSgk= Subject key identifier: 92:9B:60:11:38:F9:83:F1:82:01:B2:CA:19:2A:CF:25:B7:3B:36:C1 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019F9022FE3852C8D825DC697026A08A34BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 19DB Signing time: Thu 23 Jul 2026 18:00:40 +0000 Manifest this update: Thu 23 Jul 2026 18:00:40 +0000 Manifest next update: Fri 24 Jul 2026 18:00:40 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: hM7/Ad8nXGDmT6OAwtyivx8zuyJU4XwfKgXzOKMTnVo=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:fe:38:52:c8:d8:25:dc:69:70:26:a0:8a:34:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jul 23 18:00:40 2026 GMT Not After : Jul 24 18:00:40 2026 GMT Subject: CN=929b601138f983f18201b2ca192acf25b73b36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:45:6a:28:d5:93:d4:90:88:49:ad:0a:85: cd:87:7a:8e:3d:e8:c6:c2:29:2f:4f:8f:a5:62:56: 91:e1:f6:aa:69:9c:c3:df:2c:73:4f:2f:01:04:0c: 1c:e7:95:f3:6a:a6:5d:b2:2a:a2:76:1b:6b:c9:97: b9:81:52:5b:e2:87:1c:2d:c7:a1:04:c2:1c:47:52: b3:cf:87:33:33:cc:78:0c:5b:f3:fe:81:cc:50:53: b5:44:09:c2:41:23:d2:bf:34:a4:b6:27:8f:89:2b: 2b:20:94:d7:9f:7f:7b:59:59:7b:42:5e:e0:cd:02: 9b:b1:8f:55:bb:72:f0:1c:e5:f8:84:36:f2:93:3b: 57:f7:ca:b6:c9:e1:56:5f:94:41:ca:4c:3f:79:ab: 2d:a0:2e:37:cc:65:68:39:fd:5e:cd:dc:2b:0f:7c: 7a:04:75:21:22:91:d3:bc:9b:ae:1f:34:fc:b1:cf: ec:1d:0e:b8:69:03:02:93:5c:00:a7:2e:77:6d:09: 39:5a:30:63:97:d6:46:bb:ac:dc:6f:08:02:b6:c1: 6a:6f:f0:e9:0a:ad:59:24:eb:ea:15:75:ac:c3:7e: 42:ac:7b:52:e9:33:79:10:37:d6:3a:1f:80:ba:5a: d7:bd:e2:98:35:0c:b9:48:e3:41:5c:a8:84:d7:c9: 17:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9B:60:11:38:F9:83:F1:82:01:B2:CA:19:2A:CF:25:B7:3B:36:C1 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ba:66:74:85:f7:87:89:39:22:64:1e:ea:fc:81:2b:b5:3e: 58:43:f2:e0:9f:82:fd:76:b0:6b:25:9e:67:88:97:57:91:88: a5:cc:64:80:ae:6a:31:37:e7:98:52:4e:9b:d7:c6:1e:93:97: 0a:64:b9:cc:8b:b0:ea:9a:6d:bc:5c:0e:31:01:35:fa:d1:5b: f2:83:5d:e4:9a:e8:f4:aa:09:29:89:d2:59:81:8f:5a:81:1c: e9:b7:27:8b:a9:18:10:38:52:3e:90:73:88:e5:7a:7a:de:19: c9:de:6a:d0:17:96:c0:e5:c0:c5:cd:e7:06:ac:2f:2f:fa:6a: 96:3c:7d:26:85:c1:b6:72:db:27:7a:d0:cd:d7:b3:00:23:a7: a8:ae:3d:44:aa:a8:9b:fb:42:5e:1d:0e:63:14:ee:63:df:38: 1d:f5:8d:52:c7:c1:3b:e3:1e:0e:02:00:10:a3:12:04:ec:ce: da:57:d9:3c:44:b4:5e:b5:2f:ff:96:f9:ea:ed:aa:cd:d0:d7: dc:5d:66:33:38:96:18:0f:23:4a:35:d4:e3:54:7e:bb:b7:e1: 62:35:40:cd:b5:f0:c5:b8:06:e1:4e:4f:99:18:d4:dd:d5:b1: 8f:46:ae:71:45:d3:36:51:47:a0:fe:25:f2:53:32:57:06:43: 66:ec:b7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIv44UsjYJdxpcCagijS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNzIzMTgwMDQwWhcNMjYwNzI0MTgwMDQwWjAzMTEwLwYDVQQD Eyg5MjliNjAxMTM4Zjk4M2YxODIwMWIyY2ExOTJhY2YyNWI3M2IzNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlhFaijVk9SQiEmtCoXNh3qOPejG wikvT4+lYlaR4faqaZzD3yxzTy8BBAwc55XzaqZdsiqidhtryZe5gVJb4occLceh BMIcR1Kzz4czM8x4DFvz/oHMUFO1RAnCQSPSvzSktiePiSsrIJTXn397WVl7Ql7g zQKbsY9Vu3LwHOX4hDbykztX98q2yeFWX5RBykw/eastoC43zGVoOf1ezdwrD3x6 BHUhIpHTvJuuHzT8sc/sHQ64aQMCk1wApy53bQk5WjBjl9ZGu6zcbwgCtsFqb/Dp Cq1ZJOvqFXWsw35CrHtS6TN5EDfWOh+AulrXveKYNQy5SONBXKiE18kXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKbYBE4+YPxggGyyhkqzyW3OzbBMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLpmdIX3 h4k5ImQe6vyBK7U+WEPy4J+C/XawayWeZ4iXV5GIpcxkgK5qMTfnmFJOm9fGHpOX CmS5zIuw6pptvFwOMQE1+tFb8oNd5Jro9KoJKYnSWYGPWoEc6bcni6kYEDhSPpBz iOV6et4Zyd5q0BeWwOXAxc3nBqwvL/pqljx9JoXBtnLbJ3rQzdezACOnqK49RKqo m/tCXh0OYxTuY984HfWNUsfBO+MeDgIAEKMSBOzO2lfZPES0XrUv/5b56u2qzdDX 3F1mMziWGA8jSjXU41R+u7fhYjVAzbXwxbgG4U5PmRjU3dWxj0aucUXTNlFHoP4l 8lMyVwZDZuy3TA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:59 2026 by rpki-client