$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json) Hash identifier: U2NAUVcpj6BVoQkTnmld2iH++iysRZuE3+HPrqcDkRY= Subject key identifier: D0:AE:84:CC:0E:15:CF:06:81:A1:FE:2B:1C:57:30:DC:1E:23:D5:05 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019F93FFB33403B6727EC8EDFB2B49668E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft Manifest number: 19F1 Signing time: Fri 24 Jul 2026 12:00:36 +0000 Manifest this update: Fri 24 Jul 2026 12:00:36 +0000 Manifest next update: Sat 25 Jul 2026 12:00:36 +0000 Files and hashes: 1: CDdW7nCuQzH6NAMjfPJaFceRmv8.roa (hash: 3y28X5gdOE3EjaGMFkwpZSr7meiX5mPuhbh7+VXJVdg=) 2: G2oy9MliYxCpxhRDwqB22e8obwg.roa (hash: VPY8AAaHFFlT33kAMy/oBSq57d3fL0GWckyh4nCVABM=) 3: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=) 4: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=) 5: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: hz1bj9dS//UQhJ1oV0/A5sfor9RFQHS5/Vx7GU176N4=) 6: doO-DYqobZmFvdLcd-K-qxcr84E.roa (hash: 7zGwklkpyjE5YZHV1coBMWX3WdDjVnJMXK20a6+4lgI=) 7: e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa (hash: N1xgKMxZ6JNLp0L0Qd+l/YBBESUI4Q2awE17GKoo6Lc=) 8: gZMt62YXB3fOXlkUgEoT0ISZk38.roa (hash: 7CvKQ04ac0nYoFEHRru1nH3qJSkBG+4xElv372aI5mM=) 9: ijx72sOLkdFwyQPnNALm-uXb8bM.roa (hash: kfeWR9mNoEB+1dBFEGtvr8qeUJFz99AzeH22Swmzpw8=) 10: xfymiOaGkXDgwwLlqKOQEGSsXN8.roa (hash: LUf079Ipr2cYBKWBVKbcSJUL/8hC//aGHxyeNjrF6jE=) 11: xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa (hash: lYAG9LJCT1e4qcqagtD7wUdtWmWH2kRZheOBDzQ9ReE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:ff:b3:34:03:b6:72:7e:c8:ed:fb:2b:49:66:8e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Jul 24 12:00:36 2026 GMT Not After : Jul 25 12:00:36 2026 GMT Subject: CN=d0ae84cc0e15cf0681a1fe2b1c5730dc1e23d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:e0:10:ac:ca:8d:b1:8f:55:3e:5f:b5:0b: 04:ba:6d:d9:ce:17:b5:d2:9a:0a:98:8b:9b:5a:68: cb:96:c8:9b:28:ed:ce:bb:9d:ce:2d:30:e2:53:35: 49:22:58:98:d7:7d:71:95:73:6d:17:b7:1e:a0:dc: 6a:c7:cc:50:05:84:51:ea:6f:ab:c0:0b:6f:45:a4: 9f:f1:5f:15:c1:d0:9f:14:40:3a:24:c4:75:fc:89: ba:7f:ef:70:8c:b3:d2:92:a3:54:26:22:68:b4:7e: 39:03:ac:93:50:e3:21:ba:87:20:06:86:aa:51:91: e9:76:40:b9:ec:dc:88:09:1b:de:05:a2:5b:ec:4f: b1:4d:ea:d8:46:8e:46:42:7d:0b:aa:43:ef:c5:cd: 0e:1f:e9:2c:5f:b0:40:44:96:64:dd:d8:a3:07:1e: 42:ec:f1:f0:d5:e8:d9:a0:05:8d:6b:ac:e7:a6:2b: 40:14:fd:d8:0b:2e:25:ee:8f:eb:86:1c:fe:92:e4: 4b:0a:6e:66:2f:dd:04:ab:67:01:4b:d4:5a:16:80: b6:8d:e7:11:6c:ca:37:ce:64:bd:8b:1f:0a:3d:93: e2:1d:f8:c7:31:9b:40:44:5c:7a:bf:e0:d2:f6:f9: 55:07:50:9b:58:94:5a:59:32:87:80:b8:44:3e:6e: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AE:84:CC:0E:15:CF:06:81:A1:FE:2B:1C:57:30:DC:1E:23:D5:05 X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7c:db:76:66:16:ad:d8:8a:f8:bc:eb:85:a3:bc:10:aa:03: 60:f7:c7:c5:54:b3:e7:1f:4e:4c:5a:7a:18:b1:46:f4:94:61: aa:88:85:78:30:70:94:ca:39:e4:1c:03:2c:52:c0:f2:ac:22: a5:e5:d3:0a:1b:a0:53:94:be:3f:39:04:aa:48:3d:a3:d2:ff: 0a:2d:e9:e3:2b:57:cd:f7:ed:9d:7c:6a:1a:18:b9:c6:7c:6b: 7c:c9:9e:a8:c5:85:f1:cb:64:f9:9b:d5:b5:88:20:c6:b5:ca: 66:08:62:5a:d0:46:e4:aa:f0:d6:51:60:a4:50:0b:97:b8:f5: ac:b1:39:39:ee:53:16:12:04:2a:12:9d:81:96:18:16:fc:51: e5:49:5d:2c:2e:35:86:b7:1c:36:92:89:a3:6f:20:a5:3c:83: 44:6d:45:91:d4:0e:b0:cd:d1:49:91:94:19:9c:06:85:d4:b0: 9d:25:11:1c:f4:b1:2b:13:85:47:37:2a:e7:49:ae:fe:73:77: 71:d9:50:6b:d4:dd:ff:a0:1d:66:9f:fb:9a:52:51:46:a2:66: 8d:67:03:93:69:97:4e:a7:a4:b3:49:b2:45:82:42:aa:0a:b8: 5a:da:96:a9:32:3e:71:2a:7b:e2:c3:5a:b5:f1:7e:b9:22:01: 92:01:f4:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+T/7M0A7Zyfsjt+ytJZo6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwNzI0MTIwMDM2WhcNMjYwNzI1MTIwMDM2WjAzMTEwLwYDVQQD EyhkMGFlODRjYzBlMTVjZjA2ODFhMWZlMmIxYzU3MzBkYzFlMjNkNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfgEKzKjbGPVT5ftQsEum3Zzhe1 0poKmIubWmjLlsibKO3Ou53OLTDiUzVJIliY131xlXNtF7ceoNxqx8xQBYRR6m+r wAtvRaSf8V8VwdCfFEA6JMR1/Im6f+9wjLPSkqNUJiJotH45A6yTUOMhuocgBoaq UZHpdkC57NyICRveBaJb7E+xTerYRo5GQn0LqkPvxc0OH+ksX7BARJZk3dijBx5C 7PHw1ejZoAWNa6znpitAFP3YCy4l7o/rhhz+kuRLCm5mL90Eq2cBS9RaFoC2jecR bMo3zmS9ix8KPZPiHfjHMZtARFx6v+DS9vlVB1CbWJRaWTKHgLhEPm4XnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCuhMwOFc8GgaH+KxxXMNweI9UFMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXzbdmYW rdiK+LzrhaO8EKoDYPfHxVSz5x9OTFp6GLFG9JRhqoiFeDBwlMo55BwDLFLA8qwi peXTChugU5S+PzkEqkg9o9L/Ci3p4ytXzfftnXxqGhi5xnxrfMmeqMWF8ctk+ZvV tYggxrXKZghiWtBG5Krw1lFgpFALl7j1rLE5Oe5TFhIEKhKdgZYYFvxR5UldLC41 hrccNpKJo28gpTyDRG1FkdQOsM3RSZGUGZwGhdSwnSURHPSxKxOFRzcq50mu/nN3 cdlQa9Td/6AdZp/7mlJRRqJmjWcDk2mXTqeks0myRYJCqgq4WtqWqTI+cSp74sNa tfF+uSIBkgH0yg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:40:58 2026 by rpki-client