$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: /KkAW7QLuDD1tlaX317YnonU09tvnC0l+l9qDr+MfOw= Subject key identifier: 2A:9A:9C:7D:44:7A:ED:CB:43:9E:5A:BF:5E:4C:25:7A:42:AB:0E:C4 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019F8FB5900DC378783F15C4C71FC27A19E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1A02 Signing time: Thu 23 Jul 2026 16:01:08 +0000 Manifest this update: Thu 23 Jul 2026 16:01:08 +0000 Manifest next update: Fri 24 Jul 2026 16:01:08 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: IeoR4sxAN4KkTipfOrBbxGGGLQJiUv7v2R874sY7kn4=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: tldfbdi2KX3t4BcCVx6VGGK3iyo.roa (hash: Fi4d+ISfAotrj39E0racwhFRU+l4o+QEW3BSrZlvaV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:90:0d:c3:78:78:3f:15:c4:c7:1f:c2:7a:19:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jul 23 16:01:08 2026 GMT Not After : Jul 24 16:01:08 2026 GMT Subject: CN=2a9a9c7d447aedcb439e5abf5e4c257a42ab0ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:3e:f9:b0:6d:3c:66:04:c8:4d:4a:2d:40: 96:df:54:46:c1:cb:d5:e6:4b:27:0d:d0:06:9a:e8: 0c:c5:8f:bd:19:87:68:35:e2:ed:81:5a:30:7c:75: ad:5a:10:7c:f9:79:63:7d:e9:94:e0:65:fd:61:22: 81:a3:1f:d4:29:2c:63:fd:6a:37:49:f1:f7:7d:16: 1b:98:48:be:5a:10:19:e2:61:0e:a2:96:99:65:b8: 1f:28:5c:79:87:20:20:9d:8c:40:04:9e:15:11:24: 91:67:5e:f5:c4:fe:21:13:c5:1d:03:53:df:6c:10: 26:15:d0:46:19:44:52:26:18:9c:6d:9b:b6:90:44: 49:14:d1:f7:9c:17:a1:e5:e1:73:e1:4d:84:b5:ae: 35:98:a1:79:d2:af:49:8b:14:eb:c3:f1:fe:b4:f9: 00:a9:37:13:b2:93:17:35:df:7e:cd:99:99:6b:6d: ab:31:98:2f:45:e9:c2:75:95:51:65:f1:b2:d1:e0: c0:ac:04:28:bb:a8:d6:4c:20:ae:0e:d3:73:a0:3f: 1b:2f:d6:7b:04:cb:3c:2d:6c:90:60:98:6c:5d:40: b8:a5:a3:28:fe:ec:8d:a5:88:7e:bc:d2:39:c5:14: b9:3f:81:45:09:fb:5b:6f:0c:a7:9b:07:da:ac:53: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:9C:7D:44:7A:ED:CB:43:9E:5A:BF:5E:4C:25:7A:42:AB:0E:C4 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bb:fb:bf:da:31:db:fb:be:a4:24:c3:47:3f:ba:d5:a6:b9: fe:9f:17:5b:82:d9:e7:21:bd:da:93:9b:1e:db:5b:f0:97:b1: 8c:61:c4:9e:67:7e:3e:37:31:cc:02:66:20:ce:c8:22:b3:94: ac:84:62:cf:be:a3:93:6e:07:93:1b:a4:96:eb:e4:6f:fc:25: 53:24:05:3a:f8:f7:db:c2:88:6e:6f:dd:a6:d3:70:f2:fa:d3: 41:8f:d1:02:90:e2:a9:ff:41:83:db:ec:b9:ee:2a:a8:46:c4: 2d:30:c9:f4:83:29:1f:34:9c:95:b1:41:0b:da:17:09:f8:34: 17:69:2e:5b:01:23:6c:7e:2f:22:8c:15:9a:43:ce:67:56:d2: 31:8b:b5:c6:ea:b7:50:1c:a2:58:87:80:04:fb:03:11:b4:04: 34:37:ed:4e:7e:9e:16:03:dc:b1:a2:0b:0c:fd:a5:51:ca:89: 0e:c3:62:84:87:0e:6a:57:2e:3c:57:35:ba:71:20:ec:ab:1f: 51:d2:3f:58:05:27:18:cf:2b:ed:5a:4f:15:b3:64:2e:2e:27: cb:bf:50:71:27:54:49:d8:9c:bc:2c:5a:0b:ec:3d:d4:5a:22: c4:ff:fc:c8:92:2c:8e:1d:68:ce:01:60:81:65:84:d3:b3:1d: 1f:37:0f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtZANw3h4PxXExx/CehnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwNzIzMTYwMTA4WhcNMjYwNzI0MTYwMTA4WjAzMTEwLwYDVQQD EygyYTlhOWM3ZDQ0N2FlZGNiNDM5ZTVhYmY1ZTRjMjU3YTQyYWIwZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA200++bBtPGYEyE1KLUCW31RGwcvV 5ksnDdAGmugMxY+9GYdoNeLtgVowfHWtWhB8+XljfemU4GX9YSKBox/UKSxj/Wo3 SfH3fRYbmEi+WhAZ4mEOopaZZbgfKFx5hyAgnYxABJ4VESSRZ171xP4hE8UdA1Pf bBAmFdBGGURSJhicbZu2kERJFNH3nBeh5eFz4U2Eta41mKF50q9JixTrw/H+tPkA qTcTspMXNd9+zZmZa22rMZgvRenCdZVRZfGy0eDArAQou6jWTCCuDtNzoD8bL9Z7 BMs8LWyQYJhsXUC4paMo/uyNpYh+vNI5xRS5P4FFCftbbwynmwfarFPzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqanH1Eeu3LQ55av15MJXpCqw7EMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLv7v9ox 2/u+pCTDRz+61aa5/p8XW4LZ5yG92pObHttb8JexjGHEnmd+PjcxzAJmIM7IIrOU rIRiz76jk24Hkxukluvkb/wlUyQFOvj328KIbm/dptNw8vrTQY/RApDiqf9Bg9vs ue4qqEbELTDJ9IMpHzSclbFBC9oXCfg0F2kuWwEjbH4vIowVmkPOZ1bSMYu1xuq3 UByiWIeABPsDEbQENDftTn6eFgPcsaILDP2lUcqJDsNihIcOalcuPFc1unEg7Ksf UdI/WAUnGM8r7VpPFbNkLi4ny79QcSdUSdicvCxaC+w91FoixP/8yJIsjh1ozgFg gWWE07MdHzcP8A== -----END CERTIFICATE-----Generated at Thu Jul 23 22:54:30 2026 by rpki-client