$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: JfI00+XIS4IJsGP8yRvv3O45NrNM2fNTlT2J5ofjocg= Subject key identifier: 09:E5:58:FD:E8:9A:F2:6C:A7:B9:60:7C:37:99:28:11:C1:DA:59:FD Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019F8F47A0E6DAD2AEBD1092377212D680AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 0C40 Signing time: Thu 23 Jul 2026 14:01:03 +0000 Manifest this update: Thu 23 Jul 2026 14:01:03 +0000 Manifest next update: Fri 24 Jul 2026 14:01:03 +0000 Files and hashes: 1: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=) 2: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=) 3: NLcVYv7QX8TzU3KtiBGBznThjOY.roa (hash: zcrKX9GnGSrAQghL6HOZ1jKtZzfy7mUWqAXuCLC1AoU=) 4: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: 5mDCX1ALolQqqTuQGypvb+Y8XwtstMn2nb8+wQInslM=) 5: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=) 6: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=) 7: hXEB9XP2yhZznym4ssuOJ6ab6W8.roa (hash: FYoOBKdFN63+lXqVp+9wmvdBHhpUdp8aqAZ/D3+OIIc=) 8: k7kKv6wuSKhleW2ZaqCRlyTOnqg.roa (hash: vHAo540aOlLXcMUBuG2BeP/L+cRzc7W2l6L3IJqazT4=) 9: npKzb3PFUxX4Bw57jliQikbaLcw.roa (hash: M9IdE7WGGhfZFQSXJAA+dif3VflTqRbAIN9CrkGm2Uw=) 10: pvc-B_3QixFPowWlmBysdManies.roa (hash: smzWblNFTzaELYi0qGSnhdt1o2cjyEz4ffgvHQy8gQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:a0:e6:da:d2:ae:bd:10:92:37:72:12:d6:80:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jul 23 14:01:03 2026 GMT Not After : Jul 24 14:01:03 2026 GMT Subject: CN=09e558fde89af26ca7b9607c37992811c1da59fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:9d:22:3e:8c:c9:92:32:01:70:1b:38:9d: 7a:e1:d7:ca:7d:d9:43:c6:eb:32:90:be:75:56:87: aa:1e:05:0a:a8:ab:2b:b2:43:08:95:15:39:55:68: 92:b9:a9:aa:b8:b0:e0:7c:db:93:6e:b0:0d:63:fb: 5d:84:62:0a:0d:ad:15:eb:8c:79:b9:c1:c2:1d:8e: 9a:f6:3c:71:84:3a:d0:f6:85:0f:8b:77:4c:0a:50: 3b:9b:85:23:79:65:64:be:de:ab:54:44:cb:46:b6: 76:7e:42:51:ba:d5:49:42:d8:34:de:2a:e6:e5:52: 3f:64:d0:d5:db:47:b4:5a:1c:ab:98:df:03:97:34: db:3a:f8:88:f8:39:9b:fe:54:8f:89:4a:ad:4d:ec: 8e:27:1a:2c:43:d7:4e:eb:33:7b:21:a2:61:2d:5f: 61:1b:1e:e9:30:3d:22:4c:cc:74:44:67:d3:c7:92: 31:fa:44:0a:65:ac:d1:96:1f:6a:36:bc:1f:b7:f2: f5:d5:89:59:c2:fd:a2:d2:8f:8d:74:56:91:cf:53: ef:82:fa:1e:75:9f:88:5b:75:90:4f:76:ed:75:61: 94:2b:dc:df:b1:f6:47:96:84:bd:4a:f0:e4:5f:5a: 3d:7d:da:57:ef:64:58:dd:14:5b:92:1a:38:5c:4b: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:58:FD:E8:9A:F2:6C:A7:B9:60:7C:37:99:28:11:C1:DA:59:FD X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e9:e8:92:8c:e0:4a:0f:18:79:1f:82:2c:a3:5e:a6:d1:df: ba:aa:22:31:19:f2:4b:97:67:7e:39:34:cb:8e:cc:30:d1:d9: c6:d5:6d:69:7c:5b:cb:4d:3a:93:e1:8c:83:74:6f:a6:68:94: 63:5d:0a:b2:38:b9:08:2b:c1:d6:12:e2:9a:3e:bc:3d:94:79: c3:a6:76:97:11:d2:49:ce:1e:15:99:ed:65:57:35:6b:c5:2a: 22:ed:6c:25:77:a9:a4:11:c5:0c:60:33:67:a2:e2:eb:ac:9d: 7f:4a:5c:7c:3f:9f:a0:78:9d:ab:a8:04:b6:43:eb:5d:74:2b: cf:58:de:c8:d9:0a:65:ba:2d:ff:9c:88:bf:93:41:2e:01:7f: 96:bc:63:5a:bf:6c:cf:56:d4:91:b2:36:b9:1e:8b:2e:ce:78: f0:ac:09:2b:f6:fb:de:97:66:4f:51:09:2c:ed:5b:7f:d6:ae: fe:6e:cf:3c:f9:01:c8:6e:d4:d3:f2:ce:1c:45:89:13:66:b8: 77:7c:59:58:22:1c:43:5a:c7:b8:fc:67:a4:f5:9e:94:6d:36: b7:0f:a1:0d:eb:8d:9d:e5:40:dc:2c:8e:29:aa:d1:6a:67:13: 0e:6c:f0:dd:24:31:8b:18:51:1e:b9:47:64:3a:d7:36:70:5b: af:76:5f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR6Dm2tKuvRCSN3IS1oCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwNzIzMTQwMTAzWhcNMjYwNzI0MTQwMTAzWjAzMTEwLwYDVQQD EygwOWU1NThmZGU4OWFmMjZjYTdiOTYwN2MzNzk5MjgxMWMxZGE1OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaGdIj6MyZIyAXAbOJ164dfKfdlD xusykL51VoeqHgUKqKsrskMIlRU5VWiSuamquLDgfNuTbrANY/tdhGIKDa0V64x5 ucHCHY6a9jxxhDrQ9oUPi3dMClA7m4UjeWVkvt6rVETLRrZ2fkJRutVJQtg03irm 5VI/ZNDV20e0WhyrmN8DlzTbOviI+Dmb/lSPiUqtTeyOJxosQ9dO6zN7IaJhLV9h Gx7pMD0iTMx0RGfTx5Ix+kQKZazRlh9qNrwft/L11YlZwv2i0o+NdFaRz1Pvgvoe dZ+IW3WQT3btdWGUK9zfsfZHloS9SvDkX1o9fdpX72RY3RRbkho4XEu1xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnlWP3omvJsp7lgfDeZKBHB2ln9MB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOnokozg Sg8YeR+CLKNeptHfuqoiMRnyS5dnfjk0y47MMNHZxtVtaXxby006k+GMg3RvpmiU Y10Ksji5CCvB1hLimj68PZR5w6Z2lxHSSc4eFZntZVc1a8UqIu1sJXeppBHFDGAz Z6Li66ydf0pcfD+foHidq6gEtkPrXXQrz1jeyNkKZbot/5yIv5NBLgF/lrxjWr9s z1bUkbI2uR6LLs548KwJK/b73pdmT1EJLO1bf9au/m7PPPkByG7U0/LOHEWJE2a4 d3xZWCIcQ1rHuPxnpPWelG02tw+hDeuNneVA3CyOKarRamcTDmzw3SQxixhRHrlH ZDrXNnBbr3ZfSA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:18:02 2026 by rpki-client