$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: f30OLb9SM6JNFNLoCLbLJNLdNOJSgYhKSPQiW1z2bsw= Subject key identifier: 58:61:67:15:B7:56:06:3C:6E:E1:1A:A6:0E:7D:65:A1:E5:6B:60:CC Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019F93C935116F02760E526B388699F1AEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1A1B Signing time: Fri 24 Jul 2026 11:01:04 +0000 Manifest this update: Fri 24 Jul 2026 11:01:04 +0000 Manifest next update: Sat 25 Jul 2026 11:01:04 +0000 Files and hashes: 1: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 2: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 3: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 4: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 5: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 6: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 7: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 8: A1Sn2zSUbNP7tg_tCQPhQ2GabPo.roa (hash: Y1xrHO7mpChPGsPDqY7/o0HC8lbKL4Hj7HnmDQ8IpHY=) 9: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 10: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 11: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 12: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 13: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 14: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 15: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 16: MFjK1TdR2-EWSFy7AA-7itO08_A.roa (hash: 4bC2aj689nlbVmXthWCOX8uRipnLTQKmP66UYi+2xP8=) 17: WM5LG-fnu91VKfL9mtzuLq5EpX0.roa (hash: Fjhlzc33AyWtb0YGnkyn0RPTDS6aEVoPK1yfkJtVCyU=) 18: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 19: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 20: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 21: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 22: euYDIHjNOElKG9xyIjVvLMgwbp0.roa (hash: ckqC95VvdwpQ5J6I9qWWAJjmtLx1boikxydqGEik3aw=) 23: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 24: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 25: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 26: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 27: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 28: q87YasPi0P-A4RG5sPV3wuAufYQ.roa (hash: kJZPr94cnSfkBS7GDeJfwaSpjY+FpnvEJHJB2hPmYoo=) 29: r6L-LOAJal8uHDRb_CYkXODg1eI.roa (hash: aCR0n6oC/E6XKOlk59ckRsddz1GnAenTV0tVYHytF9I=) 30: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 31: sosLhbhkTvBUhOU75DldwucY6Bg.roa (hash: RsdZKseQ5cZTMhfbgKgzdRVtC3Oz1kE+VOIzvDaMuWg=) 32: uaYE5V2zqlkxFilciFUOq7CjWZw.roa (hash: PCiK7eyJf1Lc5VeA8orNlbLV1UFE7CUmS9PTtgP0Kig=) 33: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 34: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: 5nlAfoDTPcGH4TH+Fdd9Y8TtULx+TdaYg/CVai5Pvxg=) 35: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 36: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 37: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 38: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 39: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:c9:35:11:6f:02:76:0e:52:6b:38:86:99:f1:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jul 24 11:01:04 2026 GMT Not After : Jul 25 11:01:04 2026 GMT Subject: CN=58616715b756063c6ee11aa60e7d65a1e56b60cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:24:e1:9d:cf:db:78:01:30:10:59:7a:7e: 9d:06:2e:af:98:5d:54:f6:de:98:d5:df:1c:f8:5b: 5e:db:a2:24:dd:8b:9b:ee:da:d8:e7:12:bf:c2:6e: 83:2f:ae:1d:fd:f6:46:f5:5e:df:81:0a:36:2f:bb: ce:55:c7:4a:67:4e:3b:5d:29:55:dc:dc:60:fe:f6: d6:49:aa:10:7f:17:8c:f3:6e:b5:03:57:e8:fa:51: 1a:73:cb:39:34:f9:09:79:ac:df:43:c3:a7:be:48: 4d:c2:9d:3b:e7:49:a7:72:ab:17:6d:5a:e9:06:2e: a8:89:fa:43:a5:d1:a8:ae:49:52:3b:4b:76:86:55: 93:3c:ad:a6:b1:4d:b4:a9:fd:55:fd:1b:81:02:f0: 38:b3:ae:51:4d:82:b1:ee:aa:b6:42:af:b2:23:c4: ec:5f:fa:8c:e7:94:b8:6e:68:b3:a6:29:57:98:8b: d4:bc:a4:c2:dc:49:66:1b:e2:8e:d2:cf:64:b9:91: bb:d7:36:2c:8c:dc:a9:8c:df:64:be:34:3f:de:4b: ce:57:d9:aa:d4:51:9b:2d:22:20:47:a3:f7:d7:7f: f0:6f:6e:a7:22:96:84:f4:67:eb:55:68:6b:9d:37: 72:90:97:d5:02:6f:b4:9e:6e:0d:3f:1c:3a:6f:f8: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:67:15:B7:56:06:3C:6E:E1:1A:A6:0E:7D:65:A1:E5:6B:60:CC X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:80:af:ab:29:da:1e:48:68:45:12:c8:a7:5c:f2:f6:1c: 70:2e:f5:db:4f:c7:1e:90:45:50:2a:2a:50:7b:35:7a:56:96: 0d:b6:fc:0c:39:b9:57:84:48:1d:a3:97:e6:db:a2:9e:74:21: 4d:78:c8:e3:fd:9c:3c:f7:af:5c:fc:78:14:dc:84:26:13:c4: 01:68:6c:d8:7d:39:63:81:e0:d9:34:9b:31:14:63:20:a5:71: fd:96:41:f6:2e:90:8e:54:f4:2c:c2:bf:3d:aa:2f:22:7c:cd: e5:94:ce:f0:fe:54:33:87:6c:0a:ae:e0:8f:97:48:92:fc:6c: ee:bb:24:89:f9:2a:5c:4e:a5:11:84:f0:ab:88:e2:b5:21:5f: 79:37:51:f4:ac:c2:61:5f:44:ba:4e:5e:eb:22:87:fe:51:6b: 4f:d3:29:4d:e0:ca:a8:23:24:dc:63:a0:fb:a9:ff:8a:7f:4d: 0a:c1:41:36:38:62:64:e8:7b:fb:52:9e:1d:a7:1e:af:b3:18: 83:7e:54:52:e9:1b:c3:2b:9b:4b:a7:aa:1b:e5:cd:4a:d5:d2: 58:49:51:e4:80:ac:21:10:e8:3e:f7:15:80:df:9f:8b:66:6b: 24:cb:18:45:86:b7:ac:8b:92:ea:0e:fb:30:8c:2c:12:de:9d: 2b:3d:f3:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TyTURbwJ2DlJrOIaZ8a75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwNzI0MTEwMTA0WhcNMjYwNzI1MTEwMTA0WjAzMTEwLwYDVQQD Eyg1ODYxNjcxNWI3NTYwNjNjNmVlMTFhYTYwZTdkNjVhMWU1NmI2MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8k4Z3P23gBMBBZen6dBi6vmF1U 9t6Y1d8c+Fte26Ik3Yub7trY5xK/wm6DL64d/fZG9V7fgQo2L7vOVcdKZ047XSlV 3Nxg/vbWSaoQfxeM8261A1fo+lEac8s5NPkJeazfQ8OnvkhNwp0750mncqsXbVrp Bi6oifpDpdGorklSO0t2hlWTPK2msU20qf1V/RuBAvA4s65RTYKx7qq2Qq+yI8Ts X/qM55S4bmizpilXmIvUvKTC3ElmG+KO0s9kuZG71zYsjNypjN9kvjQ/3kvOV9mq 1FGbLSIgR6P313/wb26nIpaE9GfrVWhrnTdykJfVAm+0nm4NPxw6b/hHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhhZxW3VgY8buEapg59ZaHla2DMMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUCAr6sp 2h5IaEUSyKdc8vYccC7120/HHpBFUCoqUHs1elaWDbb8DDm5V4RIHaOX5tuinnQh TXjI4/2cPPevXPx4FNyEJhPEAWhs2H05Y4Hg2TSbMRRjIKVx/ZZB9i6QjlT0LMK/ PaovInzN5ZTO8P5UM4dsCq7gj5dIkvxs7rskifkqXE6lEYTwq4jitSFfeTdR9KzC YV9Euk5e6yKH/lFrT9MpTeDKqCMk3GOg+6n/in9NCsFBNjhiZOh7+1KeHacer7MY g35UUukbwyubS6eqG+XNStXSWElR5ICsIRDoPvcVgN+fi2ZrJMsYRYa3rIuS6g77 MIwsEt6dKz3zqw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:35:34 2026 by rpki-client