$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: i7b77Hl5H3GWx6GTyh9T4LbINUjt7WxrCW9ejp+3FtI= Subject key identifier: AF:AC:CF:50:35:F4:90:F2:9E:0C:08:89:FB:0A:74:0A:06:B4:EB:32 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019F90C802CECA0D60CD6F95E4A375632529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 19CA Signing time: Thu 23 Jul 2026 21:00:54 +0000 Manifest this update: Thu 23 Jul 2026 21:00:54 +0000 Manifest next update: Fri 24 Jul 2026 21:00:54 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: CI9A2AZ39rq9TPaDUHA2iDzz7o5ZlaC/mVNbvZ8mdLM=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c8:02:ce:ca:0d:60:cd:6f:95:e4:a3:75:63:25:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jul 23 21:00:54 2026 GMT Not After : Jul 24 21:00:54 2026 GMT Subject: CN=afaccf5035f490f29e0c0889fb0a740a06b4eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c7:31:67:78:62:6e:5e:d2:cc:37:19:90:f8: 74:33:a2:dd:f9:3f:4d:6e:10:03:06:e7:c9:c6:be: ee:05:97:0e:ad:97:3a:9d:d1:43:d6:34:29:cb:3e: 9c:ce:b5:99:71:38:d8:b2:fe:25:e1:94:53:7e:ae: 61:48:04:9a:e2:20:06:76:1f:05:79:28:3e:cb:f8: 82:80:23:ba:a5:a4:71:7b:f2:c8:4a:41:77:a7:58: 65:51:8c:1d:06:52:e6:db:29:e3:21:36:b7:30:14: 99:bc:cc:69:6f:39:53:4e:f9:d5:dc:11:5f:fd:cd: 5b:4b:b2:7f:a4:f1:18:c9:dc:59:74:3b:53:51:24: 1b:a0:b6:7f:47:44:5b:77:aa:0f:6a:c3:be:89:a2: 6f:03:02:96:9f:03:ec:9d:09:16:2c:b4:c2:16:bd: a3:fa:c7:3b:5d:ab:f2:f8:d1:e6:53:85:94:bc:58: ce:ba:e5:a7:d5:5c:88:e9:3c:a9:1c:43:38:cb:56: f4:40:b8:db:bd:91:71:ca:5c:68:77:8b:dd:10:38: f3:e2:7f:5e:cb:e2:56:1f:22:46:6e:9e:d5:13:b0: 84:2e:ac:79:b3:11:31:f7:4c:8a:52:e1:92:49:25: 61:76:9d:42:9e:d5:32:4c:6a:91:2c:3a:30:76:83: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:CF:50:35:F4:90:F2:9E:0C:08:89:FB:0A:74:0A:06:B4:EB:32 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:71:96:38:ed:10:c1:e8:8c:d6:f5:e2:ac:39:60:d5:5f:cd: b7:01:bb:4a:84:00:50:33:fd:a3:24:fe:4b:64:4a:04:52:dd: cc:bc:73:c3:4b:47:b3:9e:cb:b5:42:bb:4d:64:bf:4f:64:08: 22:f9:11:18:a8:77:56:2a:db:74:70:8f:dd:56:d1:4a:76:9b: d5:94:b7:3e:40:81:82:a8:d6:a0:3e:fb:88:41:ce:a7:8b:3f: e1:a2:11:2c:88:43:9d:42:33:36:15:73:33:88:75:74:99:41: d1:8b:b3:e2:c7:c5:c4:2e:91:63:ff:15:79:20:48:c9:66:a5: 68:51:72:7d:eb:49:ec:90:d2:ba:80:8d:06:43:b2:a4:3b:06: 1f:b1:d1:22:69:14:5b:3f:ff:21:5c:2c:5b:84:ff:e0:b5:de: 83:85:1f:ea:77:81:e3:be:83:3b:b9:04:8a:b2:a9:88:11:e6: 13:16:2c:0c:c4:36:cc:b2:df:95:12:59:7d:d6:c9:63:72:cf: 2f:75:09:ba:7c:b4:a9:e6:18:d3:53:a5:34:fa:68:df:bc:50: 62:5e:4e:b1:e1:89:a3:b7:e5:d0:85:ee:a3:42:55:86:df:6f: e9:44:13:3b:35:c8:8c:9a:90:29:7e:b0:9a:52:76:43:7d:fd: d5:5c:0a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QyALOyg1gzW+V5KN1YyUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNzIzMjEwMDU0WhcNMjYwNzI0MjEwMDU0WjAzMTEwLwYDVQQD EyhhZmFjY2Y1MDM1ZjQ5MGYyOWUwYzA4ODlmYjBhNzQwYTA2YjRlYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88cxZ3hibl7SzDcZkPh0M6Ld+T9N bhADBufJxr7uBZcOrZc6ndFD1jQpyz6czrWZcTjYsv4l4ZRTfq5hSASa4iAGdh8F eSg+y/iCgCO6paRxe/LISkF3p1hlUYwdBlLm2ynjITa3MBSZvMxpbzlTTvnV3BFf /c1bS7J/pPEYydxZdDtTUSQboLZ/R0Rbd6oPasO+iaJvAwKWnwPsnQkWLLTCFr2j +sc7Xavy+NHmU4WUvFjOuuWn1VyI6TypHEM4y1b0QLjbvZFxylxod4vdEDjz4n9e y+JWHyJGbp7VE7CELqx5sxEx90yKUuGSSSVhdp1CntUyTGqRLDowdoOC1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+sz1A19JDyngwIifsKdAoGtOsyMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3GWOO0Q weiM1vXirDlg1V/NtwG7SoQAUDP9oyT+S2RKBFLdzLxzw0tHs57LtUK7TWS/T2QI IvkRGKh3VirbdHCP3VbRSnab1ZS3PkCBgqjWoD77iEHOp4s/4aIRLIhDnUIzNhVz M4h1dJlB0Yuz4sfFxC6RY/8VeSBIyWalaFFyfetJ7JDSuoCNBkOypDsGH7HRImkU Wz//IVwsW4T/4LXeg4Uf6neB476DO7kEirKpiBHmExYsDMQ2zLLflRJZfdbJY3LP L3UJuny0qeYY01OlNPpo37xQYl5OseGJo7fl0IXuo0JVht9v6UQTOzXIjJqQKX6w mlJ2Q3391VwKOg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:06:31 2026 by rpki-client