$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: aIJJfZMP11cJDIUPbL5OF/fa8ONR5vCPi4vMI6+r2Go= Subject key identifier: 24:7B:93:9E:9C:B7:2A:81:01:19:98:AD:E6:ED:32:74:3F:91:BE:C0 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019F91DB1C16D0796B0BC96791D04B3A89F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0D21 Signing time: Fri 24 Jul 2026 02:01:23 +0000 Manifest this update: Fri 24 Jul 2026 02:01:23 +0000 Manifest next update: Sat 25 Jul 2026 02:01:23 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: AauYTCzqQwPYypxNfLus9r4+TZxWqwOm6aG0CHIah94=) 15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:db:1c:16:d0:79:6b:0b:c9:67:91:d0:4b:3a:89:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jul 24 02:01:23 2026 GMT Not After : Jul 25 02:01:23 2026 GMT Subject: CN=247b939e9cb72a81011998ade6ed32743f91bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:bc:d4:7c:7b:fd:88:9d:d6:f9:01:71:24: 79:05:4f:42:8b:76:46:1d:c6:ca:ee:e4:3f:24:b9: b5:17:e6:e2:98:93:45:c7:db:57:64:fd:d7:f7:d2: 70:ee:0d:d4:40:46:09:db:e7:1a:64:8b:5e:1d:f4: fb:05:19:c7:13:5d:b3:28:97:5e:28:33:0d:1c:4b: 0e:c7:b0:8c:9c:49:da:72:00:14:ec:1e:b4:dc:d4: 96:68:db:91:4d:c3:72:a9:7b:d2:da:6b:e8:b0:4e: ae:bc:26:5a:0f:7a:b2:56:d1:df:12:70:8e:bd:5d: 78:af:ff:25:c9:b5:b3:ca:72:a0:db:85:2a:94:2e: 82:80:0e:0b:78:88:94:0a:19:f2:14:d2:8c:57:9d: fc:f0:5b:28:12:ac:35:50:fd:d3:aa:26:db:8e:3d: f1:1a:f8:5d:8f:ab:ca:5e:21:b7:73:56:a1:76:5b: b2:2d:90:7e:37:35:ef:fb:06:4c:16:8b:20:7f:40: a6:93:de:93:f5:75:60:4e:93:c9:dc:ce:1e:73:31: e4:34:a5:6d:b5:b1:38:5c:22:13:d5:61:91:40:fe: 5e:f3:e5:0c:b2:b6:60:8b:52:f0:f3:9b:96:30:b8: dd:e3:a4:f3:22:39:75:1c:a9:06:d3:80:58:a5:6e: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7B:93:9E:9C:B7:2A:81:01:19:98:AD:E6:ED:32:74:3F:91:BE:C0 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f3:35:41:5b:0b:81:76:81:a0:9a:82:7e:a4:df:0e:37:41: 63:65:dd:8a:5c:8b:94:5f:f8:40:37:74:7f:97:74:6e:78:59: 11:6a:a2:ce:88:a9:53:36:45:e9:2e:13:26:be:ab:9e:78:a6: 30:4a:32:8e:bf:69:0e:2c:4b:36:b0:ca:8e:42:d0:55:5e:cd: 30:a5:2c:60:d9:b1:75:a3:e1:13:ee:df:24:07:77:bc:ff:49: cf:68:ed:93:d8:14:a9:84:f8:75:a2:91:f2:70:e8:72:80:a6: f4:2a:50:38:04:a8:4a:72:4c:95:54:69:5c:dc:d1:94:3d:d8: 70:83:c5:cf:b7:75:24:13:bf:2d:ad:2f:51:23:2d:46:c6:ea: d6:5e:ba:46:7c:07:bd:4a:42:7f:44:bb:a4:92:00:5a:f2:b3: 86:2a:be:00:54:e2:75:ba:8c:9b:64:79:61:62:4d:de:ff:9b: f8:2d:a7:d7:7d:c1:70:b7:62:94:ec:a8:1c:8c:4e:be:34:9c: 93:05:fa:a7:24:1c:28:bb:52:af:b4:e2:9b:60:2d:7d:41:19: 4c:4b:c7:aa:b2:ff:cd:cb:0c:d1:27:2f:1d:4b:f0:e0:4f:63: 7e:f3:26:4e:7a:8c:f7:49:03:05:23:ac:b4:06:e3:e7:a8:c6: 09:e6:db:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2xwW0HlrC8lnkdBLOon1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwNzI0MDIwMTIzWhcNMjYwNzI1MDIwMTIzWjAzMTEwLwYDVQQD EygyNDdiOTM5ZTljYjcyYTgxMDExOTk4YWRlNmVkMzI3NDNmOTFiZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmu81Hx7/Yid1vkBcSR5BU9Ci3ZG HcbK7uQ/JLm1F+bimJNFx9tXZP3X99Jw7g3UQEYJ2+caZIteHfT7BRnHE12zKJde KDMNHEsOx7CMnEnacgAU7B603NSWaNuRTcNyqXvS2mvosE6uvCZaD3qyVtHfEnCO vV14r/8lybWzynKg24UqlC6CgA4LeIiUChnyFNKMV5388FsoEqw1UP3Tqibbjj3x Gvhdj6vKXiG3c1ahdluyLZB+NzXv+wZMFosgf0Cmk96T9XVgTpPJ3M4eczHkNKVt tbE4XCIT1WGRQP5e8+UMsrZgi1Lw85uWMLjd46TzIjl1HKkG04BYpW4x6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR7k56ctyqBARmYrebtMnQ/kb7AMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/M1QVsL gXaBoJqCfqTfDjdBY2XdilyLlF/4QDd0f5d0bnhZEWqizoipUzZF6S4TJr6rnnim MEoyjr9pDixLNrDKjkLQVV7NMKUsYNmxdaPhE+7fJAd3vP9Jz2jtk9gUqYT4daKR 8nDocoCm9CpQOASoSnJMlVRpXNzRlD3YcIPFz7d1JBO/La0vUSMtRsbq1l66RnwH vUpCf0S7pJIAWvKzhiq+AFTidbqMm2R5YWJN3v+b+C2n133BcLdilOyoHIxOvjSc kwX6pyQcKLtSr7Tim2AtfUEZTEvHqrL/zcsM0ScvHUvw4E9jfvMmTnqM90kDBSOs tAbj56jGCebbXw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:38 2026 by rpki-client