$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: aff1BWPOSByTPHerf7tIFk1tKUwklNfR8Q+JXDNyX2w= Subject key identifier: 69:52:29:B6:64:BB:B6:B1:72:BA:B9:3E:4D:F8:0B:25:DC:F7:AF:6E Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019F9248E9A794EE29CFC088BF8A4E50F209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 040A Signing time: Fri 24 Jul 2026 04:01:19 +0000 Manifest this update: Fri 24 Jul 2026 04:01:19 +0000 Manifest next update: Sat 25 Jul 2026 04:01:19 +0000 Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=) 2: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=) 3: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: JWWiep3jx+3JzsCQkFRJsolAQud6YqW2jZouEFxEXoI=) 4: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=) 5: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=) 6: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=) 7: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=) 8: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=) 9: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=) 10: mGbAQxmjiNdAu-Zs5G32dsHWBXE.roa (hash: JMUztoBnvYlG5WEaZWtEODvt69OyGAw7D5VrIEI87vM=) 11: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=) 12: xkBXp7rwmSNtGrPWn7O7LK3eIPc.roa (hash: ruZb0fyLFNIK8oCJZQCr0uOvP96aIH6PYR41YcREAHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:e9:a7:94:ee:29:cf:c0:88:bf:8a:4e:50:f2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jul 24 04:01:19 2026 GMT Not After : Jul 25 04:01:19 2026 GMT Subject: CN=695229b664bbb6b172bab93e4df80b25dcf7af6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:b5:dd:c2:8e:20:df:20:bc:f8:d4:3f:6d: 65:74:34:db:cf:8a:2b:88:8a:f5:8e:a3:2a:0e:9d: dc:67:27:ab:50:4f:30:32:49:5b:55:ac:f7:81:f6: 25:16:af:72:49:83:06:8b:22:9e:bf:fa:47:8f:21: ac:e5:d6:a1:07:d7:51:1e:af:9f:67:3f:b3:81:99: 39:e4:37:04:c3:95:c8:7b:43:af:99:42:ba:e8:b2: 74:4c:be:55:7b:88:76:47:73:c8:be:c4:48:5f:38: 3b:56:d0:5a:f7:13:5f:1d:c6:67:af:95:97:12:db: 1d:dd:a2:0e:0b:a4:cb:c2:ec:f6:21:9f:58:e4:23: 7a:17:73:44:27:d9:91:2b:ab:6d:40:25:0d:5b:61: 8a:73:27:5f:51:38:dc:0b:27:0a:b7:00:89:23:8e: ce:f1:34:47:46:da:7f:71:d0:d6:5e:4b:f0:fe:b5: 2b:8c:ef:62:3d:f1:4a:9d:b5:9a:1f:c3:71:28:a8: f4:c6:78:01:89:6a:6a:e6:eb:b3:5c:ac:22:2f:54: 55:7d:d0:a3:40:14:f2:b1:d7:e9:97:76:04:9d:74: da:c8:5e:04:0c:ce:ef:f8:af:c6:50:34:a0:a5:17: d4:b4:21:ff:29:89:77:63:79:f2:c2:5f:6f:62:db: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:52:29:B6:64:BB:B6:B1:72:BA:B9:3E:4D:F8:0B:25:DC:F7:AF:6E X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e4:6a:bd:75:bb:81:82:2b:73:66:60:bd:d7:12:cc:a8:77: 12:c6:24:78:da:95:3c:4b:ee:68:24:94:5c:15:35:ef:41:32: b7:a1:4c:47:80:13:4a:15:1e:13:3b:48:6f:a0:5d:82:5e:97: df:d2:e5:69:8c:dc:f3:17:43:4f:71:dd:94:06:6c:68:c9:93: 29:e7:d1:c5:5d:8a:8e:aa:fa:79:dc:39:42:e4:81:f3:2b:99: 60:c6:7d:f6:2e:56:39:9b:ce:36:f8:ad:a4:ff:4c:fb:07:23: eb:45:83:02:39:ae:90:d8:c3:c3:d4:00:a3:40:40:66:08:1b: 7e:da:68:cb:48:a3:ef:69:02:75:ee:3e:0d:80:44:65:67:91: 3a:61:30:8f:78:17:6e:88:e2:d8:b7:2e:95:e7:ad:27:b7:22: 09:48:bc:02:b8:60:ff:e6:1c:9b:29:d3:19:ae:f5:65:d3:d7: 21:67:06:5f:37:a3:cf:10:ea:e2:41:a1:9b:67:81:a7:ea:2c: 04:1e:76:50:be:2a:38:1a:e4:f6:dc:17:3e:1a:8e:86:44:8b: dc:ec:73:7c:ac:e0:5b:2b:74:29:d0:d9:32:82:7e:5f:b5:17: 45:b9:ec:8e:0b:e2:44:42:a0:2e:41:c4:7c:69:74:d5:df:9a: 42:be:00:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSOmnlO4pz8CIv4pOUPIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwNzI0MDQwMTE5WhcNMjYwNzI1MDQwMTE5WjAzMTEwLwYDVQQD Eyg2OTUyMjliNjY0YmJiNmIxNzJiYWI5M2U0ZGY4MGIyNWRjZjdhZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uy13cKOIN8gvPjUP21ldDTbz4or iIr1jqMqDp3cZyerUE8wMklbVaz3gfYlFq9ySYMGiyKev/pHjyGs5dahB9dRHq+f Zz+zgZk55DcEw5XIe0OvmUK66LJ0TL5Ve4h2R3PIvsRIXzg7VtBa9xNfHcZnr5WX Etsd3aIOC6TLwuz2IZ9Y5CN6F3NEJ9mRK6ttQCUNW2GKcydfUTjcCycKtwCJI47O 8TRHRtp/cdDWXkvw/rUrjO9iPfFKnbWaH8NxKKj0xngBiWpq5uuzXKwiL1RVfdCj QBTysdfpl3YEnXTayF4EDM7v+K/GUDSgpRfUtCH/KYl3Y3nywl9vYtsLawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlSKbZku7axcrq5Pk34CyXc969uMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaORqvXW7 gYIrc2ZgvdcSzKh3EsYkeNqVPEvuaCSUXBU170Eyt6FMR4ATShUeEztIb6Bdgl6X 39LlaYzc8xdDT3HdlAZsaMmTKefRxV2Kjqr6edw5QuSB8yuZYMZ99i5WOZvONvit pP9M+wcj60WDAjmukNjDw9QAo0BAZggbftpoy0ij72kCde4+DYBEZWeROmEwj3gX boji2LculeetJ7ciCUi8Arhg/+YcmynTGa71ZdPXIWcGXzejzxDq4kGhm2eBp+os BB52UL4qOBrk9twXPhqOhkSL3OxzfKzgWyt0KdDZMoJ+X7UXRbnsjgviREKgLkHE fGl01d+aQr4A7g== -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:48 2026 by rpki-client