$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: m8UYuu8N68m4rtPDAH69KKCOX97CZt8+VZ2GX5NXByc= Subject key identifier: 1E:76:81:4D:F5:32:1C:3E:CF:AA:8F:19:78:4F:7E:CE:37:5C:A2:09 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019F8FB4EDCD9CE807895600C764474D88E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 11B6 Signing time: Thu 23 Jul 2026 16:00:26 +0000 Manifest this update: Thu 23 Jul 2026 16:00:26 +0000 Manifest next update: Fri 24 Jul 2026 16:00:26 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: 9d9b7ngCfBXn0BZvHGUbIYai3SU.roa (hash: S8rO+x/b1TlI/ds8zRuEobXNGIIkOXMHVIgQZ5JbD+g=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: YrS-zU0gb2gsRDyFXkO54VCWxkM.roa (hash: VPnOry+i0fDjtn98ZDInnQWI3+XyaS04/h6hsFSIigk=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: KxT4FA5sZ47gyOocZiw+bH4SYmgunQIE7u/hKLWLEeg=) 9: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b4:ed:cd:9c:e8:07:89:56:00:c7:64:47:4d:88:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jul 23 16:00:26 2026 GMT Not After : Jul 24 16:00:26 2026 GMT Subject: CN=1e76814df5321c3ecfaa8f19784f7ece375ca209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:1c:d7:fe:8e:1b:5e:cf:70:c1:e4:63:f4: b8:99:d9:35:59:11:3a:3b:fc:b2:e9:2f:7b:10:e2: 72:d9:c1:e1:0b:51:08:45:c5:ca:8f:a0:51:18:54: 34:53:3d:b9:41:8d:1b:64:71:e4:a2:e3:6a:7e:80: a0:fa:20:ac:48:4f:37:37:67:af:d5:45:33:77:0d: 01:55:ac:b5:9c:bd:22:9a:b6:43:8c:60:1d:2f:ee: 89:20:7b:9d:e1:a4:c0:21:40:e2:d6:40:a5:ca:60: 13:84:a1:99:f5:1f:b8:1d:f7:cd:d6:b8:bd:d2:b6: fc:ac:4b:c9:02:01:16:e6:55:d8:cb:ce:33:3f:e2: e8:48:8b:32:47:08:59:42:b5:e2:9c:75:ac:77:b0: e1:97:46:cd:cf:13:44:39:82:43:b4:77:18:a5:76: 63:dd:a5:1c:1b:1d:29:05:6b:ee:fa:0d:b5:59:11: c3:6f:fb:67:60:a7:68:a6:2e:80:a2:91:93:dc:d2: 44:5c:93:ae:e6:b8:59:d4:6a:48:ef:23:57:b2:fc: 1a:9d:94:0b:2c:c8:b7:47:f6:f6:5e:25:22:06:c8: 68:87:f9:a7:d4:4a:ee:cd:be:c4:8c:96:03:68:d5: c5:69:da:1b:09:99:df:09:d4:a8:31:8a:22:3d:6b: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:81:4D:F5:32:1C:3E:CF:AA:8F:19:78:4F:7E:CE:37:5C:A2:09 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:ef:ea:39:b4:62:a7:51:7d:a9:46:df:9a:30:2e:f0:45: 8f:20:bd:31:91:b7:16:f9:ff:ea:bd:c8:78:7a:ef:51:11:41: 4f:74:41:94:a8:9d:79:ff:b8:50:01:6e:09:4a:30:56:8b:2c: 3e:d9:6c:c8:04:4a:66:00:35:39:e9:c3:00:ac:76:a3:e9:60: 2e:7a:64:13:99:3e:2d:60:6b:85:29:74:d2:a5:3a:ff:8a:2f: 66:8c:3c:47:4a:14:6d:44:f3:1b:5f:ba:40:a1:3c:40:e6:68: ac:16:3f:c5:e3:8f:33:cd:d0:94:6f:42:dd:dd:35:b9:9b:6e: 36:62:7c:2c:43:9c:f8:7e:87:89:f9:b1:65:2c:07:28:59:3b: 80:53:3b:8b:89:77:11:99:0a:af:d2:95:f2:52:64:96:bb:b8: 31:fe:52:3c:4a:7d:69:8c:04:ba:c7:5a:51:88:16:c6:e2:e8: b3:5a:1b:7d:e4:45:01:58:91:53:ed:fb:26:c6:a5:99:8f:7b: d4:88:23:5c:37:92:99:cd:48:66:14:15:d6:bf:cd:50:eb:8d: 1d:7c:99:a2:b1:be:79:41:30:76:f0:9c:32:1c:0f:66:11:bd: 22:d4:98:12:63:da:48:c0:35:ad:ac:50:37:b2:4b:23:e9:3b: d6:44:30:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtO3NnOgHiVYAx2RHTYjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNzIzMTYwMDI2WhcNMjYwNzI0MTYwMDI2WjAzMTEwLwYDVQQD EygxZTc2ODE0ZGY1MzIxYzNlY2ZhYThmMTk3ODRmN2VjZTM3NWNhMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucwc1/6OG17PcMHkY/S4mdk1WRE6 O/yy6S97EOJy2cHhC1EIRcXKj6BRGFQ0Uz25QY0bZHHkouNqfoCg+iCsSE83N2ev 1UUzdw0BVay1nL0imrZDjGAdL+6JIHud4aTAIUDi1kClymAThKGZ9R+4HffN1ri9 0rb8rEvJAgEW5lXYy84zP+LoSIsyRwhZQrXinHWsd7Dhl0bNzxNEOYJDtHcYpXZj 3aUcGx0pBWvu+g21WRHDb/tnYKdopi6AopGT3NJEXJOu5rhZ1GpI7yNXsvwanZQL LMi3R/b2XiUiBshoh/mn1Eruzb7EjJYDaNXFadobCZnfCdSoMYoiPWuPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB52gU31Mhw+z6qPGXhPfs43XKIJMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhofv6jm0 YqdRfalG35owLvBFjyC9MZG3Fvn/6r3IeHrvURFBT3RBlKidef+4UAFuCUowVoss PtlsyARKZgA1OenDAKx2o+lgLnpkE5k+LWBrhSl00qU6/4ovZow8R0oUbUTzG1+6 QKE8QOZorBY/xeOPM83QlG9C3d01uZtuNmJ8LEOc+H6HifmxZSwHKFk7gFM7i4l3 EZkKr9KV8lJklru4Mf5SPEp9aYwEusdaUYgWxuLos1obfeRFAViRU+37JsalmY97 1IgjXDeSmc1IZhQV1r/NUOuNHXyZorG+eUEwdvCcMhwPZhG9ItSYEmPaSMA1raxQ N7JLI+k71kQwvg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:39 2026 by rpki-client