$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: 3xO///LvPOSw8qThCMpxAQAlergKYQrJumWyTi06n88= Subject key identifier: 35:A9:75:4F:4A:57:22:21:79:61:37:49:71:B3:AF:7E:16:E0:FF:CC Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019F91A3C441A7859DDEE37A90B008DF6BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 16EE Signing time: Fri 24 Jul 2026 01:00:56 +0000 Manifest this update: Fri 24 Jul 2026 01:00:56 +0000 Manifest next update: Sat 25 Jul 2026 01:00:56 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=) 3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: +WcJlM7UPhr2E0/KM8OeEBiH0JHe7fBxtlP4wk2Z+es=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:c4:41:a7:85:9d:de:e3:7a:90:b0:08:df:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jul 24 01:00:56 2026 GMT Not After : Jul 25 01:00:56 2026 GMT Subject: CN=35a9754f4a5722217961374971b3af7e16e0ffcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:3c:c4:e5:81:f6:3d:0c:15:18:3c:44:a3: c5:c3:76:5a:66:d4:62:c5:dd:df:a8:0b:21:9a:3d: 13:53:5b:fb:62:34:59:13:74:82:a5:d5:77:8d:64: e9:de:c7:cf:05:dd:d1:c9:be:79:09:b1:0b:f6:86: 81:f5:ff:aa:12:fe:3a:bb:fb:d5:ae:d2:3a:d3:50: 60:a4:b9:27:88:ee:e4:b5:10:84:52:9b:64:f6:43: bc:2a:da:1e:98:ea:1a:71:8e:c3:f7:79:86:93:5b: f7:fa:5f:36:eb:52:52:03:c9:a2:95:1f:23:79:b5: 5d:de:4e:73:20:d8:58:5d:b3:f0:7a:dd:06:b4:a3: 67:e6:5c:4d:27:50:6e:fb:58:40:0c:c2:98:f4:23: 77:b4:ce:89:8a:e9:0c:df:49:89:59:c8:57:91:10: 3c:d3:2d:e1:9d:42:f9:6d:da:91:dc:14:c5:03:68: 69:5f:f4:ae:9e:74:d2:d3:aa:87:3b:34:25:fa:5c: 5c:63:76:00:ca:9c:43:6e:8e:14:6b:07:f8:62:de: 37:87:cd:d3:1b:97:3f:31:d8:fd:68:5b:bd:27:09: 32:92:5a:3a:bf:dc:aa:12:0c:b2:35:81:88:31:0a: 4e:31:59:ea:e2:37:4f:6f:31:ad:d7:68:5f:45:fa: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:75:4F:4A:57:22:21:79:61:37:49:71:B3:AF:7E:16:E0:FF:CC X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1e:22:ed:5a:69:7f:94:c2:f6:f8:3e:0b:46:9b:8f:88:51: 05:9c:34:30:5a:eb:7c:4f:7e:3b:68:a6:ef:77:01:68:a5:96: 4a:d0:73:3d:fb:10:40:b4:7e:3c:78:a3:76:a1:f1:a7:0f:a8: 21:70:46:55:2e:5e:a9:0d:47:fe:32:27:69:d9:59:55:17:72: ab:89:a3:bb:87:7d:4b:09:68:ca:12:59:ff:f8:54:17:f7:7f: fb:0a:31:5b:e8:4a:f6:54:83:b1:d4:70:78:45:0b:96:62:c4: e9:08:16:4c:4f:53:d5:a3:b7:1a:d1:c4:75:9a:75:3f:e6:6d: f7:87:f9:4c:7d:27:b0:4e:8c:4c:a9:4d:17:22:87:03:fa:f6: 82:1c:6f:25:39:e9:e7:d9:0a:a8:80:59:b2:2b:87:59:13:fa: d6:2a:00:a1:fb:cc:f7:e1:bb:67:ea:64:1a:0f:54:1a:d4:a7: 1b:0a:8b:d2:f5:d8:88:c3:ba:e8:78:5c:10:3c:02:49:8b:72: c1:d2:9b:0f:47:1f:6b:62:ae:2d:87:5f:19:fe:7a:67:bf:57: 87:af:ad:e4:2c:ae:68:6b:0a:c0:af:d9:31:b3:c4:29:78:f6: bd:60:62:ff:97:23:dd:6d:b1:a2:2e:a8:e4:78:53:56:5e:47: e5:49:9e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro8RBp4Wd3uN6kLAI32vTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwNzI0MDEwMDU2WhcNMjYwNzI1MDEwMDU2WjAzMTEwLwYDVQQD EygzNWE5NzU0ZjRhNTcyMjIxNzk2MTM3NDk3MWIzYWY3ZTE2ZTBmZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG88xOWB9j0MFRg8RKPFw3ZaZtRi xd3fqAshmj0TU1v7YjRZE3SCpdV3jWTp3sfPBd3Ryb55CbEL9oaB9f+qEv46u/vV rtI601BgpLkniO7ktRCEUptk9kO8KtoemOoacY7D93mGk1v3+l8261JSA8milR8j ebVd3k5zINhYXbPwet0GtKNn5lxNJ1Bu+1hADMKY9CN3tM6JiukM30mJWchXkRA8 0y3hnUL5bdqR3BTFA2hpX/SunnTS06qHOzQl+lxcY3YAypxDbo4Uawf4Yt43h83T G5c/Mdj9aFu9Jwkyklo6v9yqEgyyNYGIMQpOMVnq4jdPbzGt12hfRfpUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWpdU9KVyIheWE3SXGzr34W4P/MMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx4i7Vpp f5TC9vg+C0abj4hRBZw0MFrrfE9+O2im73cBaKWWStBzPfsQQLR+PHijdqHxpw+o IXBGVS5eqQ1H/jInadlZVRdyq4mju4d9SwloyhJZ//hUF/d/+woxW+hK9lSDsdRw eEULlmLE6QgWTE9T1aO3GtHEdZp1P+Zt94f5TH0nsE6MTKlNFyKHA/r2ghxvJTnp 59kKqIBZsiuHWRP61ioAofvM9+G7Z+pkGg9UGtSnGwqL0vXYiMO66HhcEDwCSYty wdKbD0cfa2KuLYdfGf56Z79Xh6+t5CyuaGsKwK/ZMbPEKXj2vWBi/5cj3W2xoi6o 5HhTVl5H5UmeMg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:58 2026 by rpki-client