$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: TBzDy9jP/63ST+9nv5Nl/NfBk3xF3Qjfn8SNk8WYA+8= Subject key identifier: 5E:51:27:5C:B1:C1:74:A3:69:D8:C5:B4:9E:74:C0:B0:DB:6E:8A:0A Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 019F927F8109F627E2EB39140103A4CF5D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 0A04 Signing time: Fri 24 Jul 2026 05:00:57 +0000 Manifest this update: Fri 24 Jul 2026 05:00:57 +0000 Manifest next update: Sat 25 Jul 2026 05:00:57 +0000 Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=) 2: 1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa (hash: s09l3XLrS1nG2HYt50hW4zF2T2VLAEk4Mtf1043eyYs=) 3: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=) 4: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=) 5: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=) 6: DgRXfU03npME4V1AwAX0ThBtZQ0.roa (hash: 28zui3LwnRaze+dAHIDUkVVoknpCffM0WP9r0d8Uduw=) 7: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: VBsmqRaVco7DzHXT8VL7bUDsoMHofo+fsCgYmckx8hE=) 8: MW-Of09W86VTd-ehIdYpnjmPXXs.roa (hash: LD0GodrBLFRUB6lFsPKkTSv+4sIk7vBheqeA3m5nPOo=) 9: RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa (hash: vYRw7atU1j7YPp403PSxl0yUcReYPk7klM3aD3yLz8o=) 10: XfaQx2F1DQ7dZJr9-a__hDM5coI.roa (hash: Uj4xi+1RpyiVvP8zoS4JaQonnJeBy+gzjAcazMu9DFA=) 11: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=) 12: bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa (hash: 18rUuCK206j5Kf25J505Px18ULYGnExtH3WZ9ccpOUo=) 13: ihH2jmcAzRuRb0DXObKEK01lyBE.roa (hash: 8lNi9w5SpA0dQSPNcnFbf41In6HTCs+i7pcqGwmC+bY=) 14: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:81:09:f6:27:e2:eb:39:14:01:03:a4:cf:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Jul 24 05:00:57 2026 GMT Not After : Jul 25 05:00:57 2026 GMT Subject: CN=5e51275cb1c174a369d8c5b49e74c0b0db6e8a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:02:de:98:a8:7a:fd:4c:ec:db:8c:65:70: 09:4d:42:f8:8f:ba:40:e7:77:08:f1:3b:8c:f6:1f: 00:c2:8c:8a:ff:e9:90:37:e6:4b:7b:33:fe:5f:91: 1c:ff:2b:2d:90:84:de:3c:e3:ff:5c:77:c1:cf:26: f2:95:0f:bb:9a:f3:4b:f1:78:be:60:49:0c:2c:ef: fe:88:7f:9e:40:06:3c:64:64:09:a3:b1:2d:ba:3b: 41:ae:52:e0:fd:83:e4:18:e7:2d:bd:d2:49:7c:8f: e2:da:37:8d:68:4c:19:81:56:59:02:01:dc:bc:b5: f3:3d:98:5e:76:f1:a5:78:bd:e9:f1:9b:64:3b:05: ef:a3:e5:80:2e:43:02:a8:94:60:fc:58:38:93:9e: 6a:0e:fd:4b:f7:98:23:c3:44:7f:f4:c2:ba:e8:6b: 4a:30:96:a1:bd:b3:21:47:7d:ae:18:a3:c2:1f:57: b3:5a:ec:a7:2f:44:95:b0:f2:86:40:ae:d3:3d:19: c7:c8:4a:14:13:55:77:8b:c1:ac:b4:67:5b:4c:5d: 93:2b:76:5e:c5:e0:a9:7a:f4:e6:1f:f7:fa:b6:44: a0:5f:eb:6b:16:61:4d:46:ef:87:52:1e:ff:86:06: 30:f1:8a:c1:63:c7:86:1a:ba:40:f3:47:59:4f:bb: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:51:27:5C:B1:C1:74:A3:69:D8:C5:B4:9E:74:C0:B0:DB:6E:8A:0A X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f9:1e:72:cf:2d:86:d8:ff:d5:c0:34:68:b3:e9:3f:db:4f: 1e:89:8d:03:8b:d7:b0:df:09:f2:72:26:40:8a:d7:19:15:53: ff:d8:65:f1:3b:90:24:bc:5d:cd:aa:7e:d5:5b:58:9a:4e:a6: d3:b0:fb:3c:93:29:e1:4b:28:f3:b6:57:8e:c6:c8:4c:95:24: d7:cb:92:d0:e1:a6:b5:df:ff:90:d9:29:88:05:a5:b0:33:e3: dd:4d:f5:86:d3:42:5b:89:ad:b4:ad:71:d7:cc:79:53:c9:3b: 45:58:8c:cb:a2:ac:66:52:45:c2:c1:71:b6:46:99:4d:9c:e7: 78:25:a8:39:76:05:0b:c5:8e:84:cf:55:48:ec:c9:c4:8f:7a: 9f:63:83:10:a8:21:d9:6f:d7:15:6c:77:8e:72:1a:f2:43:d0: 87:1b:f7:b4:1a:5e:df:bc:62:db:43:72:33:84:03:2c:9f:96: 57:f6:63:21:c8:99:60:b0:b6:57:0f:81:2f:d2:ba:9a:29:dd: 71:5c:85:bb:3f:27:4b:c2:81:d7:10:95:c3:53:6b:ef:0d:83: 3f:71:06:20:ca:51:77:c2:b8:78:98:2e:d2:39:e3:68:0d:df: e3:a4:e3:9e:ce:86:11:ef:26:04:bd:c6:e4:75:a4:10:75:2c: 59:16:72:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Sf4EJ9ifi6zkUAQOkz12QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwNzI0MDUwMDU3WhcNMjYwNzI1MDUwMDU3WjAzMTEwLwYDVQQD Eyg1ZTUxMjc1Y2IxYzE3NGEzNjlkOGM1YjQ5ZTc0YzBiMGRiNmU4YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO4C3pioev1M7NuMZXAJTUL4j7pA 53cI8TuM9h8AwoyK/+mQN+ZLezP+X5Ec/ystkITePOP/XHfBzybylQ+7mvNL8Xi+ YEkMLO/+iH+eQAY8ZGQJo7EtujtBrlLg/YPkGOctvdJJfI/i2jeNaEwZgVZZAgHc vLXzPZhedvGleL3p8ZtkOwXvo+WALkMCqJRg/Fg4k55qDv1L95gjw0R/9MK66GtK MJahvbMhR32uGKPCH1ezWuynL0SVsPKGQK7TPRnHyEoUE1V3i8GstGdbTF2TK3Ze xeCpevTmH/f6tkSgX+trFmFNRu+HUh7/hgYw8YrBY8eGGrpA80dZT7sQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5RJ1yxwXSjadjFtJ50wLDbbooKMB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/kecs8t htj/1cA0aLPpP9tPHomNA4vXsN8J8nImQIrXGRVT/9hl8TuQJLxdzap+1VtYmk6m 07D7PJMp4Uso87ZXjsbITJUk18uS0OGmtd//kNkpiAWlsDPj3U31htNCW4mttK1x 18x5U8k7RViMy6KsZlJFwsFxtkaZTZzneCWoOXYFC8WOhM9VSOzJxI96n2ODEKgh 2W/XFWx3jnIa8kPQhxv3tBpe37xi20NyM4QDLJ+WV/ZjIciZYLC2Vw+BL9K6mind cVyFuz8nS8KB1xCVw1Nr7w2DP3EGIMpRd8K4eJgu0jnjaA3f46Tjns6GEe8mBL3G 5HWkEHUsWRZy9A== -----END CERTIFICATE-----Generated at Fri Jul 24 06:35:14 2026 by rpki-client