$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: Otsy1BLY1ih3HC7rTbbn6jh7p4+1G1aHOLJ8GrpenNw= Subject key identifier: 24:67:11:0D:E6:CB:3F:94:98:06:85:88:7B:FC:9A:01:FF:A8:0D:5A Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019F8EA274B1835FC5AD83EE2B07DC3BFAF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0F08 Signing time: Thu 23 Jul 2026 11:00:38 +0000 Manifest this update: Thu 23 Jul 2026 11:00:38 +0000 Manifest next update: Fri 24 Jul 2026 11:00:38 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 3: CcVgFG7BZonjVWr4-H-FOyJB6rU.asa (hash: laUwrqbn5y+IuSKtz7iff3aTwLc/uHIZOpDttjq0UN0=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: BVI3uVz5aHE5ceYbRozhZuZVDVBodl3Oxf40M9XmNfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:74:b1:83:5f:c5:ad:83:ee:2b:07:dc:3b:fa:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jul 23 11:00:38 2026 GMT Not After : Jul 24 11:00:38 2026 GMT Subject: CN=2467110de6cb3f94980685887bfc9a01ffa80d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:51:e4:9a:3f:f3:05:d0:2f:a6:19:c9:24:59: 27:dc:01:d5:97:12:4e:b9:da:aa:03:d7:18:11:f5: 77:c5:d4:7f:4a:8e:26:e9:a7:8c:4f:f1:73:6d:5c: 8e:12:b0:a8:2d:cd:dc:c8:57:f7:9c:fe:6d:93:d2: 47:bd:81:3f:64:e5:62:89:ee:06:52:df:da:9d:1e: 5f:c9:05:bd:b9:6e:04:7e:be:b1:47:57:55:13:bf: 4e:6d:a4:bc:ef:7d:45:4b:fb:0c:80:03:a2:45:9e: 53:0d:d0:9a:34:88:b1:f5:b0:07:57:2d:a4:a2:9a: 17:84:ea:3b:ff:ad:86:eb:82:d6:d7:24:97:c3:53: f3:a7:61:12:60:de:90:c8:02:a9:21:b8:f1:87:b4: 8e:b1:5e:5a:58:86:74:1b:a2:71:0e:fe:83:8c:c7: 5f:a4:d5:3d:01:e0:90:73:39:f0:a2:6b:50:57:91: ad:d5:ed:6d:47:00:72:83:d9:6a:c6:50:c2:01:b4: e4:13:db:64:0a:01:c3:1e:de:56:99:f2:ee:13:df: 96:ce:2b:d6:23:7c:f5:be:a1:41:39:13:9a:4a:25: 20:74:e7:9d:d6:49:48:c7:03:3c:48:a8:a6:18:dc: c8:f1:b8:6b:68:50:6a:00:b6:64:95:97:54:e7:e1: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:67:11:0D:E6:CB:3F:94:98:06:85:88:7B:FC:9A:01:FF:A8:0D:5A X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cd:30:1d:45:20:be:88:62:a8:69:3a:9f:b0:1b:f2:db:49: 87:4a:02:4b:30:9b:bb:aa:99:81:bf:31:da:f1:26:39:ad:b9: 5f:b5:9c:66:78:0b:a0:5d:05:0f:8e:44:9b:bb:9a:f8:ae:a5: 37:8d:db:cb:ef:52:87:a6:9d:ae:a6:5c:fe:c1:8f:d1:33:59: a8:da:8e:24:40:76:db:91:c4:db:b9:bc:8f:d7:15:52:31:64: 42:6f:3e:ab:99:f5:7f:9c:2b:0f:88:19:ca:de:0c:65:8e:57: 14:e6:9f:7e:28:59:a8:bf:6a:07:c3:c0:0d:17:0e:1a:c9:ee: fe:94:d6:b8:66:17:24:2d:c9:80:de:52:b0:82:89:c7:e2:5d: d4:3b:b6:d1:48:06:61:88:33:1d:f3:d7:ce:03:70:c2:ed:69: 88:fa:ff:9b:2d:06:44:d6:ff:8b:c3:1a:82:fa:d7:66:7a:11: cb:fa:c1:d2:87:7a:d8:09:a3:31:f6:7a:d7:42:70:ca:11:6a: 14:61:8b:10:f6:9b:b6:34:7f:75:c0:d0:45:04:3f:b9:91:24: 74:5c:c7:18:66:15:21:a6:76:3c:db:b5:76:93:f4:f3:02:86: ad:cf:af:f9:22:fe:97:10:61:4a:bc:4f:3f:20:1e:eb:34:c2: 13:4b:75:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OonSxg1/FrYPuKwfcO/r2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNzIzMTEwMDM4WhcNMjYwNzI0MTEwMDM4WjAzMTEwLwYDVQQD EygyNDY3MTEwZGU2Y2IzZjk0OTgwNjg1ODg3YmZjOWEwMWZmYTgwZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VHkmj/zBdAvphnJJFkn3AHVlxJO udqqA9cYEfV3xdR/So4m6aeMT/FzbVyOErCoLc3cyFf3nP5tk9JHvYE/ZOViie4G Ut/anR5fyQW9uW4Efr6xR1dVE79ObaS8731FS/sMgAOiRZ5TDdCaNIix9bAHVy2k opoXhOo7/62G64LW1ySXw1Pzp2ESYN6QyAKpIbjxh7SOsV5aWIZ0G6JxDv6DjMdf pNU9AeCQcznwomtQV5Gt1e1tRwByg9lqxlDCAbTkE9tkCgHDHt5WmfLuE9+WzivW I3z1vqFBOROaSiUgdOed1klIxwM8SKimGNzI8bhraFBqALZklZdU5+E9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRnEQ3myz+UmAaFiHv8mgH/qA1aMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjc0wHUUg vohiqGk6n7Ab8ttJh0oCSzCbu6qZgb8x2vEmOa25X7WcZngLoF0FD45Em7ua+K6l N43by+9Sh6adrqZc/sGP0TNZqNqOJEB225HE27m8j9cVUjFkQm8+q5n1f5wrD4gZ yt4MZY5XFOaffihZqL9qB8PADRcOGsnu/pTWuGYXJC3JgN5SsIKJx+Jd1Du20UgG YYgzHfPXzgNwwu1piPr/my0GRNb/i8MagvrXZnoRy/rB0od62AmjMfZ610JwyhFq FGGLEPabtjR/dcDQRQQ/uZEkdFzHGGYVIaZ2PNu1dpP08wKGrc+v+SL+lxBhSrxP PyAe6zTCE0t1Zw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:46 2026 by rpki-client