$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: 1+3DVjmxQPZLCltDbifWySFB2GEzmzeEoJ64C1ZFj6I= Subject key identifier: 47:BB:31:C4:0D:39:B8:29:6D:9E:B7:A4:6A:E6:C5:14:3B:9B:FD:5A Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 019F916D4FDA56430DABEC2D9790BB7B1B0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: 40 Signing time: Fri 24 Jul 2026 00:01:27 +0000 Manifest this update: Fri 24 Jul 2026 00:01:27 +0000 Manifest next update: Sat 25 Jul 2026 00:01:27 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 6: UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa (hash: 2N6GN/Syp2xg8awpUyCZ72kT72P3AjcfpXuKHfUafHk=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: UWDzCy3x6xuDmiQ+acKat3/m5dA28PWXodol6pQ0Rtc=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:4f:da:56:43:0d:ab:ec:2d:97:90:bb:7b:1b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Jul 24 00:01:27 2026 GMT Not After : Jul 25 00:01:27 2026 GMT Subject: CN=47bb31c40d39b8296d9eb7a46ae6c5143b9bfd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:a3:9d:e4:ca:89:26:a3:fc:b4:c9:6b:65: a3:7d:36:b0:47:1d:c8:41:0a:79:48:70:cc:5a:83: fb:cb:e7:68:35:e5:1c:b1:15:15:79:37:d6:19:33: c8:08:ba:3f:21:85:e9:93:fc:e3:38:e9:35:a0:c1: 2e:d9:35:3a:49:69:13:6a:05:7d:ef:d2:7d:30:14: 85:12:1d:14:ff:17:93:02:4f:dd:80:42:ec:19:d7: ed:ee:4f:fe:88:87:c3:60:4a:fd:2e:60:47:f6:44: a1:bb:35:d4:6d:26:ce:be:ff:41:4a:40:55:0a:70: 8f:25:0d:3c:27:d9:03:67:ed:d7:61:96:b2:53:23: e4:7f:1a:d0:d8:2d:c7:f2:cc:ab:57:94:6a:98:6a: 43:9b:33:d3:e8:e5:e5:f3:5e:ce:f3:5f:69:70:be: af:04:fd:3b:cc:63:32:e6:2f:22:d1:c2:f1:33:35: fe:81:39:38:5c:2a:fb:4f:c7:d8:af:0c:7d:05:0f: d2:bf:a0:69:6c:9f:e1:15:2a:d1:84:74:ae:13:b4: b2:9a:9b:57:1c:dd:08:c0:09:b2:48:6e:bc:f9:08: 3d:ed:08:1d:0f:d3:d5:0f:76:88:28:0c:77:ae:46: bf:e9:61:46:eb:ca:8a:42:7e:82:00:62:8a:9e:cc: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BB:31:C4:0D:39:B8:29:6D:9E:B7:A4:6A:E6:C5:14:3B:9B:FD:5A X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:a8:4a:92:00:c1:47:3d:f0:58:e3:c4:ca:4d:42:2b:89: e9:5e:39:d9:38:8c:eb:a4:63:1d:7e:72:ad:cd:04:8b:22:73: 99:26:78:dd:49:85:c5:4c:1a:fb:74:a8:2c:9c:bf:1c:cf:fd: 42:2c:7a:ea:29:0b:9e:00:b3:38:08:38:ce:66:9b:f7:d3:28: c2:04:79:6a:b9:91:b7:6e:60:1b:15:fd:f9:41:c3:3e:68:5d: 19:68:6e:21:05:5e:35:05:ee:4c:60:50:4e:a5:82:a4:b0:11: e0:a6:f8:b2:bb:2d:e0:7a:a8:9c:c5:51:79:3a:32:8c:e5:3d: 72:56:b9:4c:4f:57:04:a7:32:eb:99:5a:ac:52:68:b3:29:ac: 72:dc:21:54:2b:b1:24:f1:00:cf:27:2e:ed:5f:1d:f2:17:6a: b8:10:47:71:84:c6:c2:f5:0f:5d:de:2a:62:1b:a9:f5:c0:46: 91:60:f3:26:e7:eb:1d:a2:83:a2:a0:ad:3e:b3:cc:24:33:45: e3:97:5c:a1:76:a6:7f:8e:46:48:42:84:e0:f3:74:11:7b:91: 23:56:74:0e:24:c0:ce:cb:19:c4:8f:cd:b4:f3:7f:5b:12:74: 18:2a:e2:a8:2e:65:de:95:22:95:ea:91:de:21:30:d1:18:c6: cd:b6:39:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbU/aVkMNq+wtl5C7exsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYwNzI0MDAwMTI3WhcNMjYwNzI1MDAwMTI3WjAzMTEwLwYDVQQD Eyg0N2JiMzFjNDBkMzliODI5NmQ5ZWI3YTQ2YWU2YzUxNDNiOWJmZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYWjneTKiSaj/LTJa2WjfTawRx3I QQp5SHDMWoP7y+doNeUcsRUVeTfWGTPICLo/IYXpk/zjOOk1oMEu2TU6SWkTagV9 79J9MBSFEh0U/xeTAk/dgELsGdft7k/+iIfDYEr9LmBH9kShuzXUbSbOvv9BSkBV CnCPJQ08J9kDZ+3XYZayUyPkfxrQ2C3H8syrV5RqmGpDmzPT6OXl817O819pcL6v BP07zGMy5i8i0cLxMzX+gTk4XCr7T8fYrwx9BQ/Sv6BpbJ/hFSrRhHSuE7SymptX HN0IwAmySG68+Qg97QgdD9PVD3aIKAx3rka/6WFG68qKQn6CAGKKnszlzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe7McQNObgpbZ63pGrmxRQ7m/1aMB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHuoSpIA wUc98FjjxMpNQiuJ6V452TiM66RjHX5yrc0EiyJzmSZ43UmFxUwa+3SoLJy/HM/9 Qix66ikLngCzOAg4zmab99MowgR5armRt25gGxX9+UHDPmhdGWhuIQVeNQXuTGBQ TqWCpLAR4Kb4srst4HqonMVReToyjOU9cla5TE9XBKcy65larFJosymsctwhVCux JPEAzycu7V8d8hdquBBHcYTGwvUPXd4qYhup9cBGkWDzJufrHaKDoqCtPrPMJDNF 45dcoXamf45GSEKE4PN0EXuRI1Z0DiTAzssZxI/NtPN/WxJ0GCriqC5l3pUileqR 3iEw0RjGzbY5Ew== -----END CERTIFICATE-----Generated at Fri Jul 24 05:00:03 2026 by rpki-client