$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json) Hash identifier: Fllv6rFtyOleGnqP3ny7uC+BJrQm3at/DI70YJziqXI= Subject key identifier: 8F:B8:10:1E:1F:1B:9B:8B:8F:81:75:A4:F5:10:FF:B1:0E:D0:A4:36 Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019F9059F9E2E63F0D66A874BBF20A085EF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft Manifest number: 1A04 Signing time: Thu 23 Jul 2026 19:00:43 +0000 Manifest this update: Thu 23 Jul 2026 19:00:43 +0000 Manifest next update: Fri 24 Jul 2026 19:00:43 +0000 Files and hashes: 1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=) 2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=) 3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: G5kjw6e8O4Ybuupk0bzH442ccPKONnZOpu4SLrnlfoQ=) 4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=) 5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=) 6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=) 7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=) 8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=) 9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=) 10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:59:f9:e2:e6:3f:0d:66:a8:74:bb:f2:0a:08:5e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Jul 23 19:00:43 2026 GMT Not After : Jul 24 19:00:43 2026 GMT Subject: CN=8fb8101e1f1b9b8b8f8175a4f510ffb10ed0a436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:b1:c9:25:a5:78:3f:e1:38:9e:9b:c8:b7: 6e:5b:1f:86:07:4c:6e:00:be:7b:ed:e2:be:74:6d: 63:8b:62:93:63:55:c0:cc:a8:a6:c9:33:36:ba:83: 1b:0c:ca:a5:12:4e:97:c4:e0:b7:71:a1:e7:9f:fc: de:8c:8c:ad:55:55:f6:8e:9b:83:e5:15:0d:6c:bf: 93:84:12:ec:fa:89:6e:85:4a:af:b5:19:0b:56:0b: 9e:e2:38:0a:48:0e:6f:03:bd:99:00:85:28:b0:b7: 18:9b:b2:8b:d1:c5:77:d6:ce:f6:55:eb:01:91:77: 7d:a3:60:33:b5:45:d9:1a:79:54:cc:05:24:e1:aa: 75:8f:0a:5a:a3:f2:37:af:55:a1:8b:59:2c:cd:1f: 21:53:74:4b:c8:39:0e:3e:0b:24:08:cf:94:52:b7: d9:c2:8c:0f:da:7e:b6:58:e3:4b:ec:20:18:b1:ab: 80:68:74:8c:48:27:7c:57:1b:73:ee:fc:fd:e8:df: f2:9e:a4:a2:1b:87:1c:17:69:c6:e4:cc:a5:9a:d2: 46:64:fe:8e:52:b0:3c:19:7f:1c:d9:0c:2c:17:5f: 17:81:2a:b0:c3:8b:0d:8e:5e:4a:09:3d:21:2c:76: fa:df:fa:a0:dd:13:f1:30:b9:12:20:2e:4f:84:d2: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:10:1E:1F:1B:9B:8B:8F:81:75:A4:F5:10:FF:B1:0E:D0:A4:36 X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:20:13:64:b2:c3:3b:89:7f:30:a7:f3:da:43:e6:7c:5f:09: 32:85:e5:75:07:50:7d:94:78:29:74:d7:10:8d:77:ed:63:58: 12:3f:38:7f:95:8f:34:3c:0f:d4:c2:a1:56:69:fd:30:b5:ae: 0d:8b:1e:99:0e:00:57:d0:d3:de:b1:5b:8d:66:e9:58:48:04: b3:2e:a6:73:bc:13:21:ca:83:46:0f:c9:e1:4b:c2:66:cc:43: 6a:d7:b2:5e:8a:22:63:fc:e7:15:05:8f:ee:ee:7e:26:91:59: fd:fe:f0:f8:6d:a8:b4:b8:3b:90:31:13:5e:6d:c2:ce:89:72: 47:a9:08:71:3b:3a:69:a8:0f:3d:6d:f1:d2:09:1d:62:96:5d: 7a:11:32:ea:72:9f:98:28:72:a3:2c:e7:0c:df:3a:fa:0c:d9: db:c4:29:74:80:e5:ec:ac:74:69:63:d3:61:92:63:8b:dd:e7: e3:43:46:a6:32:86:80:9b:ca:5a:7c:21:e1:41:4d:ce:41:c1: c0:34:17:73:d9:dc:8a:66:67:12:3a:93:4b:31:79:24:ff:d8: 59:ae:f5:1b:1c:3b:db:4e:e9:fb:66:19:75:c7:63:c7:59:ed: f7:7f:fa:63:22:21:c9:d3:d6:6e:9f:9b:11:30:c8:59:3a:e1: 6f:40:5f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWfni5j8NZqh0u/IKCF7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjYwNzIzMTkwMDQzWhcNMjYwNzI0MTkwMDQzWjAzMTEwLwYDVQQD Eyg4ZmI4MTAxZTFmMWI5YjhiOGY4MTc1YTRmNTEwZmZiMTBlZDBhNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSxySWleD/hOJ6byLduWx+GB0xu AL577eK+dG1ji2KTY1XAzKimyTM2uoMbDMqlEk6XxOC3caHnn/zejIytVVX2jpuD 5RUNbL+ThBLs+oluhUqvtRkLVgue4jgKSA5vA72ZAIUosLcYm7KL0cV31s72VesB kXd9o2AztUXZGnlUzAUk4ap1jwpao/I3r1Whi1kszR8hU3RLyDkOPgskCM+UUrfZ wowP2n62WONL7CAYsauAaHSMSCd8Vxtz7vz96N/ynqSiG4ccF2nG5MylmtJGZP6O UrA8GX8c2QwsF18XgSqww4sNjl5KCT0hLHb63/qg3RPxMLkSIC5PhNI8dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+4EB4fG5uLj4F1pPUQ/7EO0KQ2MB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyATZLLD O4l/MKfz2kPmfF8JMoXldQdQfZR4KXTXEI137WNYEj84f5WPNDwP1MKhVmn9MLWu DYsemQ4AV9DT3rFbjWbpWEgEsy6mc7wTIcqDRg/J4UvCZsxDateyXooiY/znFQWP 7u5+JpFZ/f7w+G2otLg7kDETXm3CzolyR6kIcTs6aagPPW3x0gkdYpZdehEy6nKf mChyoyznDN86+gzZ28QpdIDl7Kx0aWPTYZJji93n40NGpjKGgJvKWnwh4UFNzkHB wDQXc9ncimZnEjqTSzF5JP/YWa71Gxw7207p+2YZdcdjx1nt93/6YyIhydPWbp+b ETDIWTrhb0BfzA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:34:50 2026 by rpki-client