$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: +PUaF3pzBN5o61sILOqZvsUxat7qaeaaSde5VB4Pz1Y= Subject key identifier: D9:58:02:FD:CA:26:62:D8:FD:F6:FE:45:4E:85:10:CE:CA:6B:DE:3C Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019F8FEC11581BBD1BD0561B0FCF6117065C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1533 Signing time: Thu 23 Jul 2026 17:00:40 +0000 Manifest this update: Thu 23 Jul 2026 17:00:40 +0000 Manifest next update: Fri 24 Jul 2026 17:00:40 +0000 Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=) 2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 6: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 7: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 8: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: EMExi1raASM0lMB18NK6qUiUsEGb4fZbnLILFpgHmV0=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:11:58:1b:bd:1b:d0:56:1b:0f:cf:61:17:06:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jul 23 17:00:40 2026 GMT Not After : Jul 24 17:00:40 2026 GMT Subject: CN=d95802fdca2662d8fdf6fe454e8510ceca6bde3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:c9:4e:bb:ae:a1:7c:a1:fa:12:dd:64:3c: 5b:56:1b:5e:75:43:93:27:11:23:70:52:65:e1:b7: af:a2:17:21:d3:ae:fc:9c:8d:be:0f:cf:5d:04:9c: df:23:c1:2b:64:87:d3:8a:e6:43:8f:a2:6d:69:36: 24:ce:75:4f:ca:d3:ec:54:c0:4c:70:84:4f:32:19: 48:a4:df:fd:5e:c0:8c:56:5d:bf:a4:a3:43:29:55: c7:3b:3a:aa:80:14:43:2a:a5:4d:1b:45:8e:21:8f: b5:a1:b5:3a:19:47:30:e0:0f:6c:94:48:a2:c2:a8: a7:2f:e9:35:a9:30:cb:ab:c4:59:98:aa:be:70:7f: 4a:ad:be:35:56:09:12:21:c8:49:c7:8f:15:43:c2: e4:2a:a9:c3:a2:ec:e3:aa:b7:39:d3:cd:af:97:2b: 89:24:e3:73:a4:aa:7d:c8:bd:74:94:b4:f2:12:68: ce:7e:a5:a6:ea:9b:b3:a8:b4:0c:a6:19:5e:e6:b1: f1:23:a5:fe:03:48:8b:2b:67:76:92:57:f9:55:df: d5:bc:f7:0a:7b:23:39:b0:c8:b6:3a:2b:4c:17:1b: 4b:69:f2:8a:ed:4f:10:88:8e:aa:f7:a3:b6:b3:da: bc:7f:79:13:27:ba:10:d2:93:3f:01:4d:25:53:20: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:58:02:FD:CA:26:62:D8:FD:F6:FE:45:4E:85:10:CE:CA:6B:DE:3C X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:16:de:a0:d7:3a:0b:f5:33:be:40:97:6e:e2:56:33:88:0f: a3:e8:f3:75:79:a7:9a:6d:0f:11:63:6e:6f:b1:09:f4:3b:3a: 44:1a:8c:cf:fb:f3:03:73:37:21:db:3a:67:bf:0c:40:3b:5e: a6:64:6a:fb:6c:4f:47:ae:f5:2b:c7:2d:8a:db:59:7a:35:cd: ae:ec:b9:26:3f:0a:b3:e4:8c:05:60:0d:9f:34:f5:f0:a5:c3: e5:d3:98:23:fd:5c:7f:b8:7a:23:e9:63:37:a1:f3:69:7b:73: 85:3f:3d:a7:af:4f:68:c7:17:fc:4c:7c:d0:4a:f7:d7:a0:8c: 22:b1:1c:e1:63:f7:73:b7:5f:b1:66:e9:e3:06:8e:0d:c0:8f: e3:8a:98:8f:75:23:00:af:7e:25:1e:75:6e:80:5a:02:33:d4: 7c:7c:1a:5d:66:51:9f:dc:22:23:b4:ee:e1:b8:ea:bf:bf:97: 14:80:63:fe:53:1f:33:70:ae:6c:07:a1:9a:ca:5d:31:6c:b2: 0c:56:17:7a:5e:f0:28:cf:6a:bc:ab:8d:98:d3:d1:1d:53:2f: 08:c6:3e:ac:0f:e7:03:6f:ab:32:49:07:88:ff:42:51:8a:da: c8:e8:4e:94:b1:a1:b8:2d:02:a9:c2:09:42:16:03:84:3b:c3: 19:61:68:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7BFYG70b0FYbD89hFwZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNzIzMTcwMDQwWhcNMjYwNzI0MTcwMDQwWjAzMTEwLwYDVQQD EyhkOTU4MDJmZGNhMjY2MmQ4ZmRmNmZlNDU0ZTg1MTBjZWNhNmJkZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJDJTruuoXyh+hLdZDxbVhtedUOT JxEjcFJl4bevohch0678nI2+D89dBJzfI8ErZIfTiuZDj6JtaTYkznVPytPsVMBM cIRPMhlIpN/9XsCMVl2/pKNDKVXHOzqqgBRDKqVNG0WOIY+1obU6GUcw4A9slEii wqinL+k1qTDLq8RZmKq+cH9Krb41VgkSIchJx48VQ8LkKqnDouzjqrc5082vlyuJ JONzpKp9yL10lLTyEmjOfqWm6puzqLQMphle5rHxI6X+A0iLK2d2klf5Vd/VvPcK eyM5sMi2OitMFxtLafKK7U8QiI6q96O2s9q8f3kTJ7oQ0pM/AU0lUyCVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlYAv3KJmLY/fb+RU6FEM7Ka948MB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRbeoNc6 C/UzvkCXbuJWM4gPo+jzdXmnmm0PEWNub7EJ9Ds6RBqMz/vzA3M3Ids6Z78MQDte pmRq+2xPR671K8ctittZejXNruy5Jj8Ks+SMBWANnzT18KXD5dOYI/1cf7h6I+lj N6HzaXtzhT89p69PaMcX/Ex80Er316CMIrEc4WP3c7dfsWbp4waODcCP44qYj3Uj AK9+JR51boBaAjPUfHwaXWZRn9wiI7Tu4bjqv7+XFIBj/lMfM3CubAehmspdMWyy DFYXel7wKM9qvKuNmNPRHVMvCMY+rA/nA2+rMkkHiP9CUYrayOhOlLGhuC0CqcIJ QhYDhDvDGWFozA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:15:41 2026 by rpki-client