$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: UMMb3aPmCR4f0dEq2ftJvQShcIsaf85dLC/2Ty7WBY8= Subject key identifier: 7B:7A:EB:2D:76:73:2B:B3:72:A4:A3:51:1B:F4:F7:D6:B7:C9:F0:E4 Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 019F90C81EA078E6179F00918787E5A4FC38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 0145 Signing time: Thu 23 Jul 2026 21:01:01 +0000 Manifest this update: Thu 23 Jul 2026 21:01:01 +0000 Manifest next update: Fri 24 Jul 2026 21:01:01 +0000 Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: i5XZvUoLD79xX99poOWRWh7BvbnwMFhvhVPRu/daJcc=) 3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 5: b3e-kztK16dNJ4hjcUxvpEGWdz0.roa (hash: 8EZoV6vzVeuipBhh3IecuZX3yaL/9h5v2euKRytgqTI=) 6: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (hash: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=) 7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 8: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 9: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 10: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 11: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c8:1e:a0:78:e6:17:9f:00:91:87:87:e5:a4:fc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Jul 23 21:01:01 2026 GMT Not After : Jul 24 21:01:01 2026 GMT Subject: CN=7b7aeb2d76732bb372a4a3511bf4f7d6b7c9f0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:f2:28:7f:bd:bb:bb:06:2f:5c:81:cb:e2: e3:4a:73:e3:98:95:36:7c:45:97:80:f7:ef:3d:25: 6b:53:c7:6b:89:cc:e0:0b:f4:e8:24:4b:c5:13:c7: 7b:fe:50:53:63:0e:a0:2f:f6:18:da:19:16:a0:da: d5:ca:43:f0:a5:5f:e4:ee:f1:af:f3:cf:ad:6e:11: 53:ab:32:bf:3e:db:6b:5e:2b:4e:30:d7:a8:c4:dc: 43:9d:4d:df:78:f4:69:b3:58:00:c7:1a:58:7d:7b: b6:7c:66:00:cb:31:32:46:74:29:da:03:59:6a:88: c0:cf:91:ee:32:ad:dd:b5:54:c6:4f:29:97:a1:08: 07:0c:97:74:46:22:7e:cb:bf:21:b3:b3:b6:9f:91: 5a:e1:11:7d:ac:ff:1f:7a:fc:8f:60:47:f6:2a:33: d6:79:ee:db:54:2b:87:81:84:6e:7a:fe:3d:fa:6b: c0:72:8c:42:75:50:68:06:f4:9a:2b:8e:60:19:90: e6:91:91:3c:07:d0:4a:d7:24:89:b6:1d:c2:58:b7: 8b:89:48:34:ee:9e:34:ab:2c:3b:55:25:20:65:ec: d6:de:1f:6f:d1:54:89:13:e4:2f:0b:5c:85:ed:87: 7c:4d:b8:94:be:98:2b:71:75:39:8b:e9:bd:a2:2f: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:EB:2D:76:73:2B:B3:72:A4:A3:51:1B:F4:F7:D6:B7:C9:F0:E4 X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:2f:24:69:f9:ef:3f:c0:55:f5:0c:ea:a0:1e:e2:bd:7f: 21:f5:a2:67:b8:fc:92:00:31:80:de:25:d0:73:f9:d7:b7:e3: 95:02:dc:76:d2:83:1d:c9:e0:15:c0:f1:66:3d:de:3f:bb:21: ed:fc:5d:06:6f:6c:02:ac:e7:43:f8:a9:04:6a:87:04:e3:9f: b8:97:66:de:94:1f:a7:dd:b9:61:3f:e2:c2:38:5a:98:c9:d2: d0:66:f1:43:69:02:0c:71:fc:fd:2a:94:a4:0a:7c:c5:ee:69: 1c:4d:7c:bd:c0:bf:a3:9e:98:55:fa:bb:8a:eb:9f:d7:e2:4c: e2:bf:cb:2f:b0:23:92:a7:a2:7e:46:90:23:b4:27:80:e7:34: 7c:ca:e2:55:cf:3a:07:be:a8:fe:a0:7c:fe:ba:7f:cb:68:52: 41:50:46:a2:63:05:0b:62:8f:4c:b4:1f:c6:e1:79:41:e9:f7: 61:96:5e:43:c9:76:a4:b7:70:fd:b0:48:53:2b:b2:8f:94:99: f8:27:ed:ce:3f:d8:de:7e:c0:63:9d:6f:91:ea:e8:ab:63:28: 52:1a:39:9e:de:16:74:28:e8:d9:c0:21:1d:1d:01:25:a4:ee: ff:92:2e:17:5e:ae:31:5a:7a:f1:73:53:d6:dc:50:0f:09:e1: 54:cf:db:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QyB6geOYXnwCRh4flpPw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYwNzIzMjEwMTAxWhcNMjYwNzI0MjEwMTAxWjAzMTEwLwYDVQQD Eyg3YjdhZWIyZDc2NzMyYmIzNzJhNGEzNTExYmY0ZjdkNmI3YzlmMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiLyKH+9u7sGL1yBy+LjSnPjmJU2 fEWXgPfvPSVrU8driczgC/ToJEvFE8d7/lBTYw6gL/YY2hkWoNrVykPwpV/k7vGv 88+tbhFTqzK/PttrXitOMNeoxNxDnU3fePRps1gAxxpYfXu2fGYAyzEyRnQp2gNZ aojAz5HuMq3dtVTGTymXoQgHDJd0RiJ+y78hs7O2n5Fa4RF9rP8fevyPYEf2KjPW ee7bVCuHgYRuev49+mvAcoxCdVBoBvSaK45gGZDmkZE8B9BK1ySJth3CWLeLiUg0 7p40qyw7VSUgZezW3h9v0VSJE+QvC1yF7Yd8TbiUvpgrcXU5i+m9oi9LuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt66y12cyuzcqSjURv099a3yfDkMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW0vJGn5 7z/AVfUM6qAe4r1/IfWiZ7j8kgAxgN4l0HP517fjlQLcdtKDHcngFcDxZj3eP7sh 7fxdBm9sAqznQ/ipBGqHBOOfuJdm3pQfp925YT/iwjhamMnS0GbxQ2kCDHH8/SqU pAp8xe5pHE18vcC/o56YVfq7iuuf1+JM4r/LL7AjkqeifkaQI7QngOc0fMriVc86 B76o/qB8/rp/y2hSQVBGomMFC2KPTLQfxuF5Qen3YZZeQ8l2pLdw/bBIUyuyj5SZ +Cftzj/Y3n7AY51vkeroq2MoUho5nt4WdCjo2cAhHR0BJaTu/5IuF16uMVp68XNT 1txQDwnhVM/b3A== -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:28 2026 by rpki-client