$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: buGj8E9Gz9pnef/DqlvnNdo5Wh4wIk+/cASPbt3ydb0= Subject key identifier: BF:38:B5:1B:FA:CF:1D:3E:54:63:29:B1:CC:72:3F:C4:E0:56:E8:EC Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019F92B5D87C00E377AB26D7646F3B560222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 19F1 Signing time: Fri 24 Jul 2026 06:00:18 +0000 Manifest this update: Fri 24 Jul 2026 06:00:18 +0000 Manifest next update: Sat 25 Jul 2026 06:00:18 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 0Va2x4Qd63us7kRWmkpIgs4VavE.roa (hash: mlH17TsTBWEMs6AwiTvf9MSqSgOdSNOB7ebIvjxdVCU=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 5: CxwFpKnVRB1YipI_w1rOdL2Rr_0.roa (hash: Sqj7uyxBPWvN499fr3Zl2IE3H+X3USQ46cvMPtYbWbI=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: yA+5Jo/fU2sdE0+4MHNboBU6dol4c18zdUrgYVd5hz0=) 7: ZVNRgss5mTKJwhbB1mo1GGQyJRE.roa (hash: HjXOusJwIaZmZ+GD57QVPopBj5EraNR3jwZ+HMzM4p0=) 8: bEXar_PDdc_u4-EMnGh7tX0LHVg.roa (hash: tWOJsXIwz8NLZyOMtnHMC60APgOJn7JZ0y3xyIP4Gu4=) 9: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 10: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (hash: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=) 11: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 12: uEnRng83DMivtU9u64kgfGid_Hs.roa (hash: vmYhF39wCahPYTq1VZ0x6GUk7X7pQ26ryeKoN/cfjf4=) 13: xEmv6iMzO6ox8HZNasxgI207Ico.roa (hash: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 06:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:b5:d8:7c:00:e3:77:ab:26:d7:64:6f:3b:56:02:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jul 24 06:00:18 2026 GMT Not After : Jul 25 06:00:18 2026 GMT Subject: CN=bf38b51bfacf1d3e546329b1cc723fc4e056e8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:e4:e6:ff:1d:1d:10:54:ce:bf:75:af:db: c1:b5:5b:db:51:11:73:5c:8f:57:e0:7d:20:59:90: a6:6d:32:23:5e:82:48:e1:44:70:ee:ff:d1:07:57: 0c:50:5a:80:8b:ca:ec:6e:a7:7a:6d:37:fa:36:91: 50:90:57:f2:f7:77:2b:19:ea:5e:0b:af:a0:91:3b: 1d:d6:26:3d:09:99:8d:e6:87:26:6c:33:eb:e2:37: 8d:10:b8:1b:6f:10:3d:cc:3d:75:7b:d8:8e:8c:58: cd:10:15:1f:d5:56:71:60:56:56:38:69:36:7d:8d: 48:67:8b:27:68:2f:8c:e7:79:bc:20:8d:aa:e5:a9: 39:f5:30:10:54:5d:08:ba:c3:49:25:ab:f8:3d:dd: 65:dd:04:f7:9d:03:d0:04:94:ef:f9:ab:22:03:76: bb:76:a6:27:d4:cc:53:c0:36:06:52:b3:8c:b0:2e: ad:bf:94:35:14:2f:95:8d:6d:cb:e5:20:ce:55:51: b1:07:c1:8c:cc:cd:0c:ad:b8:ce:0e:ba:e2:24:df: 45:a2:4e:9c:25:df:08:25:8c:43:09:e9:7d:8d:c2: b0:e9:22:50:8d:4a:f8:a3:a3:98:50:5d:8c:d4:b4: 2a:5d:cc:c0:59:90:2b:d9:4b:62:67:a5:26:68:30: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:B5:1B:FA:CF:1D:3E:54:63:29:B1:CC:72:3F:C4:E0:56:E8:EC X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ff:2e:ad:84:eb:3c:f0:a9:0e:eb:aa:a7:c1:e7:b7:3e:3d: 56:bf:34:41:6d:68:b2:f9:d6:68:f7:24:31:ad:5e:21:04:fb: 84:97:56:2d:18:fb:26:38:8a:54:1c:95:ca:d7:45:4a:00:41: ba:47:dc:86:1f:ed:ae:8a:0e:5a:f8:c3:1e:72:81:f9:07:04: f4:f8:37:1c:7e:0d:a5:29:38:b4:aa:4a:29:ee:65:e3:71:aa: df:f1:a2:77:5b:0a:fb:90:ff:9e:04:32:d5:9c:39:76:9e:a7: eb:09:ef:96:a1:42:5a:71:0a:c2:4f:77:60:a2:e7:3c:07:be: fe:9c:d1:4a:a7:c6:5c:da:0d:b8:5a:3d:85:e0:f2:57:77:6e: f4:42:f5:77:1d:ba:8d:46:07:de:c6:46:23:b5:8f:0b:06:9d: 4d:22:7d:5c:a9:30:86:fd:b0:b6:d8:1d:28:f3:b4:e6:8f:af: a6:e7:4e:37:fe:71:01:97:41:af:a7:cc:9d:3c:6d:ba:fe:cc: 12:f0:14:2d:81:3e:a0:96:25:ba:39:46:45:40:0b:7b:6e:6c: 32:f4:e5:c5:83:bb:7c:91:f4:48:58:42:5f:2f:7e:d9:09:65: d0:20:6d:7e:1a:c2:53:3a:e6:b0:96:31:d4:9d:1e:93:a2:36: d9:e0:2d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Stdh8AON3qybXZG87VgIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwNzI0MDYwMDE4WhcNMjYwNzI1MDYwMDE4WjAzMTEwLwYDVQQD EyhiZjM4YjUxYmZhY2YxZDNlNTQ2MzI5YjFjYzcyM2ZjNGUwNTZlOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaLk5v8dHRBUzr91r9vBtVvbURFz XI9X4H0gWZCmbTIjXoJI4URw7v/RB1cMUFqAi8rsbqd6bTf6NpFQkFfy93crGepe C6+gkTsd1iY9CZmN5ocmbDPr4jeNELgbbxA9zD11e9iOjFjNEBUf1VZxYFZWOGk2 fY1IZ4snaC+M53m8II2q5ak59TAQVF0IusNJJav4Pd1l3QT3nQPQBJTv+asiA3a7 dqYn1MxTwDYGUrOMsC6tv5Q1FC+VjW3L5SDOVVGxB8GMzM0MrbjODrriJN9Fok6c Jd8IJYxDCel9jcKw6SJQjUr4o6OYUF2M1LQqXczAWZAr2UtiZ6UmaDAnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL84tRv6zx0+VGMpscxyP8TgVujsMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/8urYTr PPCpDuuqp8Hntz49Vr80QW1osvnWaPckMa1eIQT7hJdWLRj7JjiKVByVytdFSgBB ukfchh/trooOWvjDHnKB+QcE9Pg3HH4NpSk4tKpKKe5l43Gq3/Gid1sK+5D/ngQy 1Zw5dp6n6wnvlqFCWnEKwk93YKLnPAe+/pzRSqfGXNoNuFo9heDyV3du9EL1dx26 jUYH3sZGI7WPCwadTSJ9XKkwhv2wttgdKPO05o+vpudON/5xAZdBr6fMnTxtuv7M EvAULYE+oJYlujlGRUALe25sMvTlxYO7fJH0SFhCXy9+2Qll0CBtfhrCUzrmsJYx 1J0ek6I22eAtOw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:13:37 2026 by rpki-client