$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: Acu0kCKwjKs4T1876vxfciJ48Rr9nDJkW+RYii8+g5E= Subject key identifier: 58:F4:79:6A:B7:BF:B6:85:00:B7:C0:8E:BD:9E:B9:87:B8:FD:22:5E Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019F92EDABD13114324A5AA6D495A9104375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 19F9 Signing time: Fri 24 Jul 2026 07:01:17 +0000 Manifest this update: Fri 24 Jul 2026 07:01:17 +0000 Manifest next update: Sat 25 Jul 2026 07:01:17 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: Pr4mDq76semd9HzVIDKeDMYvVQQ.roa (hash: FDZv7C+onU2+GR6E81dEXEL21YIE7+gux++CAkqFZL8=) 6: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 7: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 8: jua4hKlutOS31SwhNWPcizeoJNk.roa (hash: GsUfbWZJBpTbGNz+qcdiYy4Y57UODYIplssHp/VIRYc=) 9: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: vOHaKyiR5Wnq4CQVpPCbw2J1jpZe/GCisxDYmbkWILQ=) 11: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 12: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:ed:ab:d1:31:14:32:4a:5a:a6:d4:95:a9:10:43:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jul 24 07:01:17 2026 GMT Not After : Jul 25 07:01:17 2026 GMT Subject: CN=58f4796ab7bfb68500b7c08ebd9eb987b8fd225e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:50:38:9e:7d:2f:09:33:26:53:fd:84:39: c5:66:3b:ba:28:40:52:ec:f8:c9:3d:df:e2:8b:2f: 9b:f7:e6:2c:8f:7b:b7:f5:e1:ea:d8:36:f4:86:7a: d2:95:59:2f:e5:46:41:5d:c5:42:05:18:df:0b:b7: f5:fb:1b:04:f9:3e:c0:87:17:74:58:9b:40:d0:4f: 28:bc:a4:7e:64:2e:6f:cd:1d:96:63:7c:b5:0c:64: ea:96:60:5c:49:dd:f6:72:fc:83:cd:f7:f4:68:c3: e1:0f:75:78:f3:3a:00:8d:6e:77:86:f6:d6:d2:fd: 93:c8:6f:1c:c8:e3:94:fa:d4:de:c4:88:be:74:c9: be:8c:61:36:0e:b5:91:b3:08:a3:4d:81:8d:a2:4b: 45:18:cf:07:5c:ca:3f:01:03:b7:c5:ce:5b:c9:7f: 74:57:07:68:13:1f:55:f8:27:5d:43:e7:a3:de:44: 0f:18:37:1d:05:99:5d:41:92:82:74:41:96:ce:26: 1d:a2:20:7d:ab:8f:0f:66:da:d3:d6:bb:94:59:83: 33:cd:97:42:c5:ce:ed:cb:57:99:8e:12:88:c0:e3: 6e:d5:21:fb:b3:d7:50:62:1a:86:dd:66:7d:6d:9b: 63:c0:47:08:77:b9:d9:e5:d8:d5:08:28:2f:04:e1: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F4:79:6A:B7:BF:B6:85:00:B7:C0:8E:BD:9E:B9:87:B8:FD:22:5E X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2d:7d:12:36:6d:3c:dc:a8:1c:b5:7d:5b:96:1f:4f:42:4d: d0:75:63:71:ef:9c:3d:33:55:7f:d3:4d:98:d6:70:7a:7e:48: 65:d2:a1:14:79:ff:0f:f4:3b:35:48:95:85:d3:0e:aa:a5:d3: 8a:4a:77:d4:75:83:1a:c6:6c:e7:41:8f:6f:9b:df:e7:ad:c3: 63:eb:14:88:52:42:bf:ae:d4:cb:b1:5d:08:fe:05:1b:35:b3: 78:ef:87:f6:74:4b:96:4d:a0:b9:1b:8a:ba:c5:a6:cd:00:c2: 35:68:58:a7:2b:9e:56:bd:bf:f9:72:ad:4a:1b:f9:0d:cd:04: 3d:aa:36:8d:c1:66:b4:fb:f0:f5:40:0e:34:f2:a7:16:d3:e9: d0:36:b3:ec:90:58:86:10:ea:5c:f7:73:24:9b:e1:6a:69:4b: dd:c7:87:8f:a4:a3:db:e4:93:ae:8c:e0:14:4a:13:8c:be:1d: a8:e0:2f:8f:55:ff:1f:c4:14:8c:4a:3a:1a:01:db:23:d3:87: 07:6c:f3:d8:56:74:43:41:fb:c4:2e:16:5c:6d:49:a1:0a:1f: 8a:c7:58:3c:4e:57:1f:52:cf:ed:b4:a9:d3:e7:38:aa:fb:ad: 4e:d9:ef:b3:13:c0:25:38:87:87:7e:86:0e:52:e9:dd:52:12: 83:02:7d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+S7avRMRQySlqm1JWpEEN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwNzI0MDcwMTE3WhcNMjYwNzI1MDcwMTE3WjAzMTEwLwYDVQQD Eyg1OGY0Nzk2YWI3YmZiNjg1MDBiN2MwOGViZDllYjk4N2I4ZmQyMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45tQOJ59LwkzJlP9hDnFZju6KEBS 7PjJPd/iiy+b9+Ysj3u39eHq2Db0hnrSlVkv5UZBXcVCBRjfC7f1+xsE+T7Ahxd0 WJtA0E8ovKR+ZC5vzR2WY3y1DGTqlmBcSd32cvyDzff0aMPhD3V48zoAjW53hvbW 0v2TyG8cyOOU+tTexIi+dMm+jGE2DrWRswijTYGNoktFGM8HXMo/AQO3xc5byX90 VwdoEx9V+CddQ+ej3kQPGDcdBZldQZKCdEGWziYdoiB9q48PZtrT1ruUWYMzzZdC xc7ty1eZjhKIwONu1SH7s9dQYhqG3WZ9bZtjwEcId7nZ5djVCCgvBOHaUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj0eWq3v7aFALfAjr2euYe4/SJeMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC19EjZt PNyoHLV9W5YfT0JN0HVjce+cPTNVf9NNmNZwen5IZdKhFHn/D/Q7NUiVhdMOqqXT ikp31HWDGsZs50GPb5vf563DY+sUiFJCv67Uy7FdCP4FGzWzeO+H9nRLlk2guRuK usWmzQDCNWhYpyueVr2/+XKtShv5Dc0EPao2jcFmtPvw9UAONPKnFtPp0Daz7JBY hhDqXPdzJJvhamlL3ceHj6Sj2+STrozgFEoTjL4dqOAvj1X/H8QUjEo6GgHbI9OH B2zz2FZ0Q0H7xC4WXG1JoQofisdYPE5XH1LP7bSp0+c4qvutTtnvsxPAJTiHh36G DlLp3VISgwJ9RQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:04:26 2026 by rpki-client