$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: H2W0dPylAwhNOqICQwtbhx3EQ6X9b2DrUmQkCiGgeR4= Subject key identifier: 11:49:2A:D2:A2:93:6E:3C:DC:44:5F:86:F4:6F:CE:DA:9F:5B:10:1A Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019F8F7E0A3B878B7E47D97EF71E2FD820B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1A32 Signing time: Thu 23 Jul 2026 15:00:29 +0000 Manifest this update: Thu 23 Jul 2026 15:00:29 +0000 Manifest next update: Fri 24 Jul 2026 15:00:29 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: kTxlRZMGMH0pR0e7LkXWzVOGG/zciYAZy6/CpeywkzM=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:0a:3b:87:8b:7e:47:d9:7e:f7:1e:2f:d8:20:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jul 23 15:00:29 2026 GMT Not After : Jul 24 15:00:29 2026 GMT Subject: CN=11492ad2a2936e3cdc445f86f46fceda9f5b101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:55:8b:1e:18:47:51:95:ec:41:46:a7:3e: 73:7b:49:49:67:90:d8:9f:94:64:2f:25:f7:39:9e: d9:e4:ab:09:15:3e:1d:6a:51:5b:2c:95:19:66:bc: 18:53:b0:5d:8e:0f:b5:c8:ad:f7:e6:02:69:03:35: be:c5:c9:72:f9:e0:16:e8:8d:75:2a:00:05:9b:c2: 02:20:42:60:3d:02:95:1c:ba:10:9e:97:a9:92:8f: d6:9f:51:8d:1a:4a:31:d5:bc:00:54:6f:34:69:32: 19:09:96:da:97:b3:ea:cf:03:92:79:b0:8f:1d:05: b8:13:7d:c5:28:98:c1:ce:da:f1:80:a7:8d:2a:45: 29:24:de:d5:31:35:4e:b3:df:14:b3:fa:d3:31:e3: 9b:16:06:a6:c8:21:ea:25:5c:d0:bd:59:7f:3f:3b: 6e:fb:47:45:7b:24:b9:92:30:e3:9b:9a:62:86:c8: 1d:2f:b3:c2:a7:8c:52:4a:05:ad:48:36:2f:bb:b2: 16:5b:72:8f:63:ee:3d:83:f1:95:bc:0e:8c:5a:8f: 96:db:ea:61:6c:58:02:50:95:d0:42:93:a7:f6:66: c3:b4:8b:cf:53:ef:84:12:41:d2:78:06:52:c6:c7: 62:57:0a:61:2e:90:2c:58:ec:4d:5c:fe:6c:f4:34: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:49:2A:D2:A2:93:6E:3C:DC:44:5F:86:F4:6F:CE:DA:9F:5B:10:1A X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:08:d4:ce:ec:f0:86:f3:6d:62:ce:64:db:b3:1b:42:2c:a9: b3:fc:94:f6:53:e5:f6:9b:45:d5:c1:ca:f1:50:12:03:8a:29: a2:a8:40:d7:17:ec:95:a1:c6:e1:e3:36:c7:6d:dc:fc:c0:e2: c5:cd:a6:33:06:30:de:a1:59:16:67:15:db:ee:07:d5:3d:c1: f5:5d:2a:83:60:7c:b8:30:69:4f:35:b6:1f:cc:e7:c9:c4:d3: d9:43:38:db:37:8d:c3:a6:b1:6b:4d:40:82:41:03:ed:dd:a2: f5:99:80:cb:cb:d4:26:b1:d6:5d:7f:c4:86:2b:62:2d:7f:29: 06:a6:02:36:8c:7a:09:01:bf:7a:3a:0a:70:e5:ac:a9:e5:37: d1:b9:af:66:60:76:d3:77:9f:9e:a8:09:7b:07:c5:c3:7a:d1: 58:eb:c0:20:4f:13:48:8f:ee:79:3a:99:02:80:ed:03:e8:4d: 66:3e:b7:f5:01:ef:e0:d1:77:d3:1a:0c:3c:0c:4b:16:8d:86: 03:da:69:54:be:58:2e:4d:4b:df:fb:8c:1a:ad:15:da:1d:4a: d9:e5:dd:af:62:6e:da:92:0a:d2:20:e2:cb:1f:e5:6c:d7:d0: 0b:4f:66:d5:f7:2d:7a:b5:7e:0a:f0:7d:bf:c4:f1:39:10:6d: 6d:af:a7:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pfgo7h4t+R9l+9x4v2CC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwNzIzMTUwMDI5WhcNMjYwNzI0MTUwMDI5WjAzMTEwLwYDVQQD EygxMTQ5MmFkMmEyOTM2ZTNjZGM0NDVmODZmNDZmY2VkYTlmNWIxMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PdVix4YR1GV7EFGpz5ze0lJZ5DY n5RkLyX3OZ7Z5KsJFT4dalFbLJUZZrwYU7Bdjg+1yK335gJpAzW+xcly+eAW6I11 KgAFm8ICIEJgPQKVHLoQnpepko/Wn1GNGkox1bwAVG80aTIZCZbal7PqzwOSebCP HQW4E33FKJjBztrxgKeNKkUpJN7VMTVOs98Us/rTMeObFgamyCHqJVzQvVl/Pztu +0dFeyS5kjDjm5pihsgdL7PCp4xSSgWtSDYvu7IWW3KPY+49g/GVvA6MWo+W2+ph bFgCUJXQQpOn9mbDtIvPU++EEkHSeAZSxsdiVwphLpAsWOxNXP5s9DSf0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFJKtKik2483ERfhvRvztqfWxAaMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAjUzuzw hvNtYs5k27MbQiyps/yU9lPl9ptF1cHK8VASA4opoqhA1xfslaHG4eM2x23c/MDi xc2mMwYw3qFZFmcV2+4H1T3B9V0qg2B8uDBpTzW2H8znycTT2UM42zeNw6axa01A gkED7d2i9ZmAy8vUJrHWXX/EhitiLX8pBqYCNox6CQG/ejoKcOWsqeU30bmvZmB2 03efnqgJewfFw3rRWOvAIE8TSI/ueTqZAoDtA+hNZj639QHv4NF30xoMPAxLFo2G A9ppVL5YLk1L3/uMGq0V2h1K2eXdr2Ju2pIK0iDiyx/lbNfQC09m1fcterV+CvB9 v8TxORBtba+nDw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:13:03 2026 by rpki-client