$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: Pt6aBibqHtdOabCLcvV52xxweMZmhYOG2AOfZVCF5Js= Subject key identifier: B2:DF:AE:6A:15:44:65:21:35:24:3B:24:DD:73:D3:BC:BE:D5:96:1A Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019F8E6C2AC79ED1230C3EBF85C853A72025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 1A6C Signing time: Thu 23 Jul 2026 10:01:21 +0000 Manifest this update: Thu 23 Jul 2026 10:01:21 +0000 Manifest next update: Fri 24 Jul 2026 10:01:21 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: sT4pMVgY3DUssCKK5iZuoQCkxbfEmL2XbCbuT6uqpeI=) 2: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 3: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 4: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 5: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 6: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 7: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 8: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 9: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 10: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 11: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 12: mNyKHvh-ZzvywHbRbPxAB2YITpM.roa (hash: DMHicFuCe2CjcnqaSuEwET4bEyq4MbNuoENqwOAycio=) 13: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 14: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 15: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:6c:2a:c7:9e:d1:23:0c:3e:bf:85:c8:53:a7:20:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jul 23 10:01:21 2026 GMT Not After : Jul 24 10:01:21 2026 GMT Subject: CN=b2dfae6a1544652135243b24dd73d3bcbed5961a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:bf:83:5a:a3:af:83:b5:9e:1b:a2:ba:95: f2:ab:17:7d:9f:7e:e6:1f:65:f3:b7:92:a3:d3:4a: e6:aa:ea:5e:51:1d:06:e9:2f:e1:66:10:de:1f:f4: 09:ca:49:bb:f6:16:f5:96:3a:a1:c9:6a:83:58:ca: 62:76:3b:ab:5e:73:d4:3b:5b:66:94:41:22:76:f6: 6f:a8:6a:b5:14:f9:cd:8b:b5:85:9b:e8:d4:a2:5f: c3:77:12:48:ff:94:b5:64:37:ad:65:0d:86:ac:df: c9:ce:9a:01:6a:67:4a:49:24:af:66:cd:dc:2d:17: a6:51:e5:05:ba:5a:69:94:bf:5c:fe:87:9f:73:f5: 28:f0:60:a6:6b:15:97:09:53:f1:0f:c8:af:4b:ea: bd:2e:e3:f5:d0:64:5f:2a:e3:5a:47:31:f5:90:2a: 0d:ba:63:5a:96:76:83:4f:b0:db:5a:2f:c8:0d:17: 99:bf:3d:3c:32:ff:e1:08:de:23:63:c8:fe:a0:e6: 40:42:3b:15:c5:54:56:63:cd:e7:af:0f:ce:34:3f: de:9a:2a:bc:3e:66:0f:5a:0a:0e:f1:91:35:4a:e2: 37:23:67:1e:70:ab:d9:fa:25:a1:66:a6:af:68:73: 7c:ed:14:e8:cb:6e:48:2e:66:b0:4d:07:52:22:82: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:AE:6A:15:44:65:21:35:24:3B:24:DD:73:D3:BC:BE:D5:96:1A X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0b:b0:c8:45:19:99:14:ce:2c:8b:72:7c:b1:17:6f:bc:d4: 4b:1d:d8:09:c0:24:c4:51:b1:03:77:4c:09:a9:71:e8:92:01: 14:05:af:f8:39:f2:06:1d:49:e6:69:4d:b3:cb:e2:a4:bb:84: 01:ae:6e:e6:4c:07:87:d8:ad:60:c9:8a:3c:f0:ea:5d:c8:86: 83:2e:b2:29:af:34:2b:7a:0b:55:72:b5:fe:0c:ec:b3:6a:2d: db:bf:82:a2:5d:40:8c:3d:d0:88:d4:38:e7:f1:0b:ec:06:59: a1:28:5f:e0:10:3b:fe:20:0b:c7:86:15:b3:76:a3:a1:cb:91: 17:c9:bb:41:30:42:9f:55:ac:fd:e9:29:bd:de:9c:c3:44:1d: ae:a3:70:7e:f0:7a:aa:39:b6:3d:8d:00:25:71:83:1d:ab:16: 98:77:89:ce:07:fa:5f:2a:fc:31:55:46:f4:2b:6d:03:df:b9: 22:77:ce:3f:65:e3:6a:27:a3:42:34:2d:3f:2d:3b:78:93:68: d7:32:9f:85:fa:dd:fb:4d:ca:7c:c0:dc:44:06:f5:03:0a:c1: 58:5e:1b:06:11:09:b7:e9:92:30:5d:9a:3d:14:5f:b2:f9:8c: df:41:4d:60:ec:7b:34:7c:0c:14:7b:b7:16:78:df:f6:a1:bd: d0:af:31:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ObCrHntEjDD6/hchTpyAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwNzIzMTAwMTIxWhcNMjYwNzI0MTAwMTIxWjAzMTEwLwYDVQQD EyhiMmRmYWU2YTE1NDQ2NTIxMzUyNDNiMjRkZDczZDNiY2JlZDU5NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje2/g1qjr4O1nhuiupXyqxd9n37m H2Xzt5Kj00rmqupeUR0G6S/hZhDeH/QJykm79hb1ljqhyWqDWMpidjurXnPUO1tm lEEidvZvqGq1FPnNi7WFm+jUol/DdxJI/5S1ZDetZQ2GrN/JzpoBamdKSSSvZs3c LRemUeUFulpplL9c/oefc/Uo8GCmaxWXCVPxD8ivS+q9LuP10GRfKuNaRzH1kCoN umNalnaDT7DbWi/IDReZvz08Mv/hCN4jY8j+oOZAQjsVxVRWY83nrw/OND/emiq8 PmYPWgoO8ZE1SuI3I2cecKvZ+iWhZqavaHN87RToy25ILmawTQdSIoLHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLfrmoVRGUhNSQ7JN1z07y+1ZYaMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHguwyEUZ mRTOLItyfLEXb7zUSx3YCcAkxFGxA3dMCalx6JIBFAWv+DnyBh1J5mlNs8vipLuE Aa5u5kwHh9itYMmKPPDqXciGgy6yKa80K3oLVXK1/gzss2ot27+Col1AjD3QiNQ4 5/EL7AZZoShf4BA7/iALx4YVs3ajocuRF8m7QTBCn1Ws/ekpvd6cw0QdrqNwfvB6 qjm2PY0AJXGDHasWmHeJzgf6Xyr8MVVG9CttA9+5InfOP2XjaiejQjQtPy07eJNo 1zKfhfrd+03KfMDcRAb1AwrBWF4bBhEJt+mSMF2aPRRfsvmM30FNYOx7NHwMFHu3 Fnjf9qG90K8xZA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:51 2026 by rpki-client