$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: fN+Psq1IseY9sCFxb1fjeDNY82a5wKXjnyI4SR4Kmic= Subject key identifier: 20:4E:99:B0:53:31:7B:FB:77:D9:D0:EE:08:4A:99:A7:C0:75:DE:9F Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019F905A651B17253300D7EDE38E00748958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1A21 Signing time: Thu 23 Jul 2026 19:01:10 +0000 Manifest this update: Thu 23 Jul 2026 19:01:10 +0000 Manifest next update: Fri 24 Jul 2026 19:01:10 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 5: SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa (hash: +j3Mg1YpvNctOKMzdM7wBvBFuUBEVAhKLDjbpjHSOx8=) 6: VPQt47Xnz82JpZu2--PpS6TpQSE.roa (hash: /z4TE//g7cZ6wLmxy4l6fCA7OUMKDasI818H1kAMzhg=) 7: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 8: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 9: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 10: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 11: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 12: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 13: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 14: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 15: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: ZJMPizasW1LXrEy8BbtfxsxCYJv+m/xXCJyVqG766E8=) 16: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 17: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:65:1b:17:25:33:00:d7:ed:e3:8e:00:74:89:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jul 23 19:01:10 2026 GMT Not After : Jul 24 19:01:10 2026 GMT Subject: CN=204e99b053317bfb77d9d0ee084a99a7c075de9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:d5:6b:5c:fe:15:5c:9d:fc:a5:aa:ff:da: 04:89:6c:ed:72:28:86:d8:f2:5f:89:8b:d8:40:62: 7c:ea:a0:9b:0c:ff:1e:0e:10:c9:e5:96:31:b8:ae: ac:e2:d8:b6:ca:e4:b8:b4:af:32:72:4c:d1:51:ae: e8:60:e3:e0:6a:15:fd:b6:54:fa:61:3f:06:14:f6: 0a:d3:ea:32:0b:ff:6d:79:1c:4d:be:24:86:cd:c9: 95:ba:5f:ab:4c:70:61:64:26:a4:d5:c4:c1:0e:3c: 46:ef:4d:61:fe:f3:bd:97:33:1e:57:74:6d:01:ec: f7:95:40:38:e4:a1:31:07:e9:7f:e2:b0:39:3c:55: 30:b6:6b:cd:11:ad:00:c5:67:fa:d9:b8:6f:70:b3: 9e:e2:ab:e3:04:76:17:a1:e0:aa:a2:61:a3:2e:59: 86:9b:6f:13:b9:fb:03:cf:64:7c:2e:3e:1f:9e:cd: 62:5a:6e:48:92:0a:d5:75:a1:0d:11:52:8d:09:e8: 11:68:bd:ed:53:43:87:9b:e6:ed:67:82:d5:75:64: ed:48:c6:14:20:6e:b6:24:4a:9e:cc:aa:f4:67:c7: 11:e7:d2:db:3a:02:ca:8e:40:7d:91:b8:42:70:f0: a3:6a:60:d5:43:7a:ed:ef:e6:cf:11:ed:5f:79:8a: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:99:B0:53:31:7B:FB:77:D9:D0:EE:08:4A:99:A7:C0:75:DE:9F X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ee:97:2b:6a:2a:08:15:14:13:24:c1:f7:3e:80:60:e4:f2: c1:53:0d:4c:c7:42:a4:56:67:1f:a2:95:48:42:e9:43:35:29: 63:f1:a7:f9:1a:68:08:69:3c:20:5d:c9:dd:f0:40:d5:ea:8c: b8:ea:92:d6:9c:ee:a2:07:ff:d5:f6:cc:a1:95:fa:53:43:2f: 0a:b9:c7:e7:81:26:36:be:af:fe:42:21:dd:e3:85:fb:91:87: 7b:0b:2a:d2:ac:b4:3c:7c:18:c0:2d:4e:80:a3:8e:aa:e2:b2: e9:ec:a9:3c:b2:35:c5:be:a6:20:08:79:a0:63:1c:4d:d6:3d: 84:3a:79:1e:77:ae:95:b5:01:ec:60:10:23:17:66:09:63:ad: 8b:ea:99:d4:6c:76:3c:36:e6:62:e2:04:79:8d:c5:cb:e8:a4: 93:aa:1b:27:fd:9c:bf:2d:4b:23:fc:ae:bc:03:e6:c9:6f:c6: 9c:37:80:65:ee:d6:1c:21:8d:6e:10:06:4c:17:80:fa:38:4f: 63:bb:b4:55:61:32:1d:98:b9:1f:e0:f4:7d:b9:7e:b2:3a:68: 7c:20:f4:1b:b2:28:99:38:51:29:82:f5:76:d3:81:36:76:df: 8b:aa:41:51:f2:78:f8:eb:9c:8f:a1:39:70:16:0e:df:53:22: 99:c9:14:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWmUbFyUzANft444AdIlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwNzIzMTkwMTEwWhcNMjYwNzI0MTkwMTEwWjAzMTEwLwYDVQQD EygyMDRlOTliMDUzMzE3YmZiNzdkOWQwZWUwODRhOTlhN2MwNzVkZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hLVa1z+FVyd/KWq/9oEiWztciiG 2PJfiYvYQGJ86qCbDP8eDhDJ5ZYxuK6s4ti2yuS4tK8yckzRUa7oYOPgahX9tlT6 YT8GFPYK0+oyC/9teRxNviSGzcmVul+rTHBhZCak1cTBDjxG701h/vO9lzMeV3Rt Aez3lUA45KExB+l/4rA5PFUwtmvNEa0AxWf62bhvcLOe4qvjBHYXoeCqomGjLlmG m28TufsDz2R8Lj4fns1iWm5IkgrVdaENEVKNCegRaL3tU0OHm+btZ4LVdWTtSMYU IG62JEqezKr0Z8cR59LbOgLKjkB9kbhCcPCjamDVQ3rt7+bPEe1feYq7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBOmbBTMXv7d9nQ7ghKmafAdd6fMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+6XK2oq CBUUEyTB9z6AYOTywVMNTMdCpFZnH6KVSELpQzUpY/Gn+RpoCGk8IF3J3fBA1eqM uOqS1pzuogf/1fbMoZX6U0MvCrnH54EmNr6v/kIh3eOF+5GHewsq0qy0PHwYwC1O gKOOquKy6eypPLI1xb6mIAh5oGMcTdY9hDp5HneulbUB7GAQIxdmCWOti+qZ1Gx2 PDbmYuIEeY3Fy+ikk6obJ/2cvy1LI/yuvAPmyW/GnDeAZe7WHCGNbhAGTBeA+jhP Y7u0VWEyHZi5H+D0fbl+sjpofCD0G7IomThRKYL1dtOBNnbfi6pBUfJ4+Oucj6E5 cBYO31MimckU0Q== -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:23 2026 by rpki-client