$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: Vs3F5KaSohy18lAmugTZbmqoB4rvMEUFWdGFv0GSs88= Subject key identifier: 82:52:29:9E:FE:15:2C:F6:22:A9:C8:87:62:D6:59:1B:E5:31:F3:03 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019F927F75E02128291AF28A63861E300A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 19D5 Signing time: Fri 24 Jul 2026 05:00:54 +0000 Manifest this update: Fri 24 Jul 2026 05:00:54 +0000 Manifest next update: Sat 25 Jul 2026 05:00:54 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: AaqIi6tDDBqTfT08R+3CxSpQcNzv5pyapdJIXbRvlDE=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:75:e0:21:28:29:1a:f2:8a:63:86:1e:30:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jul 24 05:00:54 2026 GMT Not After : Jul 25 05:00:54 2026 GMT Subject: CN=8252299efe152cf622a9c88762d6591be531f303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:ae:e9:05:b9:31:12:87:ab:50:dd:27:3d: e6:17:0a:82:a8:9e:94:f8:66:66:6e:e0:7d:01:6e: 9a:66:28:67:77:43:65:31:a5:82:ec:4b:df:90:a7: fb:68:18:dc:c1:40:f3:ba:c7:19:ef:b4:76:8d:41: f7:0b:41:83:9f:56:63:f5:36:1e:8d:aa:3b:45:c3: f5:5a:49:af:c1:75:23:71:60:cd:96:0f:fe:cb:fe: d6:5a:f5:5f:39:01:a5:a2:13:1f:2a:ac:47:e1:cb: a0:b6:be:b0:51:ef:3f:2c:51:f9:d5:f5:7e:95:77: cb:cf:41:57:4f:2c:39:14:b0:c6:1b:e4:8f:09:6d: 4e:23:58:87:93:fd:f0:16:b6:b4:cd:d6:ba:5f:c0: 8e:31:40:63:cd:64:94:50:70:ee:b0:74:eb:55:1c: 2d:d4:b8:e0:26:79:db:f3:da:d3:5e:dc:e2:e1:91: b7:1e:cc:39:02:26:4c:d3:60:54:42:31:a7:92:38: a5:ad:d3:2b:a4:be:e9:f3:1b:cd:a0:5b:22:e9:84: 50:a0:0f:38:19:d6:12:93:55:ae:bb:36:ed:4d:f9: bc:b4:7d:9c:46:1d:bf:56:64:6c:69:6d:47:4a:7c: df:34:2a:a4:96:dc:a5:f7:72:c0:b8:72:5f:28:8f: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:52:29:9E:FE:15:2C:F6:22:A9:C8:87:62:D6:59:1B:E5:31:F3:03 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:17:68:d6:ba:c0:a3:99:7d:03:cd:c2:d2:03:8c:e0:22:20: 57:8e:b6:2b:7b:a8:91:1b:2e:62:69:23:44:02:c8:b0:1d:d6: 0a:9c:2c:c8:b1:ef:86:8d:4d:29:da:9e:93:2c:b4:b5:de:60: 57:1b:10:ed:b6:46:bb:fc:65:0b:ad:db:b7:c0:d3:74:66:5c: de:e6:a0:f1:77:71:22:fb:d2:fc:d3:c9:60:3e:5c:71:d5:fa: 36:93:a8:fb:20:2c:b4:8d:69:e8:43:16:fd:79:6e:f6:9a:4f: c3:d1:8a:a5:5a:65:0d:45:eb:05:5f:2f:f6:56:a0:76:52:25: 7f:6e:2d:f3:b9:25:1b:4d:4e:90:0e:9e:4b:5f:da:e4:22:3b: fe:c0:10:c2:f5:ca:69:45:f0:f1:1c:3c:a5:a4:1f:89:e1:c7: d4:9e:a0:24:2b:09:e7:2d:db:f3:9e:c1:bb:63:45:0e:39:f5: bc:9c:f1:44:42:7f:1b:9a:cb:27:a1:c7:92:4e:27:d2:70:f2: 7d:51:21:ba:57:e5:f8:98:7c:40:e6:87:b2:95:7b:39:d0:74: 5a:7b:b5:4b:21:59:0d:e0:c5:f5:bc:09:34:45:46:e5:8c:c2: a3:e3:ed:66:84:7b:be:37:a3:b0:0b:b9:5e:ec:8a:0c:28:96: 59:32:08:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Sf3XgISgpGvKKY4YeMAqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNzI0MDUwMDU0WhcNMjYwNzI1MDUwMDU0WjAzMTEwLwYDVQQD Eyg4MjUyMjk5ZWZlMTUyY2Y2MjJhOWM4ODc2MmQ2NTkxYmU1MzFmMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jyu6QW5MRKHq1DdJz3mFwqCqJ6U +GZmbuB9AW6aZihnd0NlMaWC7EvfkKf7aBjcwUDzuscZ77R2jUH3C0GDn1Zj9TYe jao7RcP1WkmvwXUjcWDNlg/+y/7WWvVfOQGlohMfKqxH4cugtr6wUe8/LFH51fV+ lXfLz0FXTyw5FLDGG+SPCW1OI1iHk/3wFra0zda6X8COMUBjzWSUUHDusHTrVRwt 1LjgJnnb89rTXtzi4ZG3Hsw5AiZM02BUQjGnkjilrdMrpL7p8xvNoFsi6YRQoA84 GdYSk1WuuzbtTfm8tH2cRh2/VmRsaW1HSnzfNCqkltyl93LAuHJfKI9sNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJSKZ7+FSz2IqnIh2LWWRvlMfMDMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxdo1rrA o5l9A83C0gOM4CIgV462K3uokRsuYmkjRALIsB3WCpwsyLHvho1NKdqekyy0td5g VxsQ7bZGu/xlC63bt8DTdGZc3uag8XdxIvvS/NPJYD5ccdX6NpOo+yAstI1p6EMW /Xlu9ppPw9GKpVplDUXrBV8v9lagdlIlf24t87klG01OkA6eS1/a5CI7/sAQwvXK aUXw8Rw8paQfieHH1J6gJCsJ5y3b857Bu2NFDjn1vJzxREJ/G5rLJ6HHkk4n0nDy fVEhulfl+Jh8QOaHspV7OdB0Wnu1SyFZDeDF9bwJNEVG5YzCo+PtZoR7vjejsAu5 XuyKDCiWWTIIRw== -----END CERTIFICATE-----Generated at Fri Jul 24 12:12:26 2026 by rpki-client