$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: 6JDoY78+RVaybPWcgI9F8UBaor0i07geYg5icnzoKOc= Subject key identifier: BD:68:D7:3C:78:DE:6D:DC:93:74:49:4B:89:A3:BE:7F:F1:B2:AD:F2 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019F916D266B873B58E447B0784185AA7F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 19DD Signing time: Fri 24 Jul 2026 00:01:17 +0000 Manifest this update: Fri 24 Jul 2026 00:01:17 +0000 Manifest next update: Sat 25 Jul 2026 00:01:17 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: np1U7zwQwaQv+bluDWC7qGi+4TS+R55ioVoRe/ngaN0=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:26:6b:87:3b:58:e4:47:b0:78:41:85:aa:7f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jul 24 00:01:17 2026 GMT Not After : Jul 25 00:01:17 2026 GMT Subject: CN=bd68d73c78de6ddc9374494b89a3be7ff1b2adf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:04:f7:73:12:ca:2a:2e:23:4d:a4:44:87: 01:0f:73:9a:ca:7b:1c:3b:7c:3c:3b:c0:70:e7:95: 67:52:c6:6f:4a:54:06:04:da:58:bf:bf:c4:f4:cb: fc:9f:05:b2:6f:bf:d7:30:90:25:79:38:35:0e:9e: 92:e1:8d:91:91:13:17:bc:2d:90:b0:48:5a:28:e2: f5:51:75:0e:66:e2:32:cb:07:23:0a:17:d9:5b:35: ba:23:11:37:f6:d0:30:cf:bc:ec:5a:36:75:5f:18: d2:f6:01:29:ee:dd:5c:3a:61:cc:b4:0d:04:0d:0f: 02:45:cb:84:9a:b0:9b:ea:3f:23:47:3c:85:71:3b: a4:49:b8:b4:3b:3d:0d:39:38:e8:f0:63:4f:0e:a6: fc:04:07:62:ea:af:7f:5f:11:af:a8:52:f3:a3:af: 7a:5b:ef:5a:56:53:89:d4:85:95:69:65:c6:79:4b: 26:e2:ba:5b:d8:3d:87:a6:45:09:c7:2f:94:97:08: 03:f8:9c:93:b8:ce:06:c9:cd:16:0a:ac:70:c4:7b: 12:d4:4c:c3:81:ea:d3:d8:12:d5:96:d4:9a:d4:d3: 05:59:62:d6:2d:7e:eb:fa:41:62:ea:1b:ee:14:58: c6:6a:68:b2:f7:f5:c3:0e:b5:ee:39:c2:67:19:c2: 44:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:68:D7:3C:78:DE:6D:DC:93:74:49:4B:89:A3:BE:7F:F1:B2:AD:F2 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:05:c4:2e:75:bd:c1:ee:17:a9:a0:8c:3b:fe:54:d8:4c: cd:5a:98:26:58:62:96:c2:e4:9e:3a:a2:41:0d:c6:c8:61:d6: 6b:3d:3c:9f:77:ba:45:8f:f9:60:2d:b6:9b:4a:ef:86:9d:d2: a5:bb:d3:07:13:ab:12:f1:e2:87:47:f2:ac:ae:91:fc:a2:fc: 15:d5:52:74:47:d0:d6:5e:ec:90:d7:1f:7d:65:73:64:12:f2: 8d:fc:b2:e1:26:3d:09:f6:3f:24:b4:4b:08:a3:a4:f1:d3:63: 8e:6d:99:6a:d7:51:65:2f:08:7d:7c:9c:87:6f:88:51:27:0a: 9b:30:df:9d:98:95:b1:bb:18:ef:0d:b1:95:82:32:47:c4:5c: ef:11:8e:18:6a:ea:e3:66:a0:82:a9:f5:ff:e3:f1:aa:45:0f: 60:58:b5:08:1c:fb:34:37:5b:8d:23:f4:3c:ed:4b:88:bf:84: bd:dc:a7:e5:c2:d4:01:3d:21:10:29:8a:9b:c1:b6:80:b7:27: 84:5e:f0:0b:02:1d:4f:e2:cf:70:8a:2f:d6:bd:d1:9c:e6:e7: bb:07:52:e3:49:35:46:39:21:72:ee:ba:aa:7d:b7:61:91:a1: 85:9a:6d:73:5a:dd:98:8b:f0:20:00:2f:c5:72:b2:7a:13:4a: 8f:11:35:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbSZrhztY5EeweEGFqn+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNzI0MDAwMTE3WhcNMjYwNzI1MDAwMTE3WjAzMTEwLwYDVQQD EyhiZDY4ZDczYzc4ZGU2ZGRjOTM3NDQ5NGI4OWEzYmU3ZmYxYjJhZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yUE93MSyiouI02kRIcBD3Oaynsc O3w8O8Bw55VnUsZvSlQGBNpYv7/E9Mv8nwWyb7/XMJAleTg1Dp6S4Y2RkRMXvC2Q sEhaKOL1UXUOZuIyywcjChfZWzW6IxE39tAwz7zsWjZ1XxjS9gEp7t1cOmHMtA0E DQ8CRcuEmrCb6j8jRzyFcTukSbi0Oz0NOTjo8GNPDqb8BAdi6q9/XxGvqFLzo696 W+9aVlOJ1IWVaWXGeUsm4rpb2D2HpkUJxy+UlwgD+JyTuM4Gyc0WCqxwxHsS1EzD gerT2BLVltSa1NMFWWLWLX7r+kFi6hvuFFjGamiy9/XDDrXuOcJnGcJEaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1o1zx43m3ck3RJS4mjvn/xsq3yMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+QFxC51 vcHuF6mgjDv+VNhMzVqYJlhilsLknjqiQQ3GyGHWaz08n3e6RY/5YC22m0rvhp3S pbvTBxOrEvHih0fyrK6R/KL8FdVSdEfQ1l7skNcffWVzZBLyjfyy4SY9CfY/JLRL CKOk8dNjjm2ZatdRZS8IfXych2+IUScKmzDfnZiVsbsY7w2xlYIyR8Rc7xGOGGrq 42aggqn1/+PxqkUPYFi1CBz7NDdbjSP0PO1LiL+Evdyn5cLUAT0hECmKm8G2gLcn hF7wCwIdT+LPcIov1r3RnObnuwdS40k1Rjkhcu66qn23YZGhhZptc1rdmIvwIAAv xXKyehNKjxE1mQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:35 2026 by rpki-client