$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: 8DpsqNBFB9Cj4HOoDD3bLRlYuvcUJafDlQXRy2ZILi8= Subject key identifier: 49:7C:8D:27:92:B8:64:8E:B0:CA:FE:38:40:C4:65:70:BD:BF:4E:5F Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019F90FE7E25D7AA22FEE68779EC4C1ADDAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 16EC Signing time: Thu 23 Jul 2026 22:00:25 +0000 Manifest this update: Thu 23 Jul 2026 22:00:25 +0000 Manifest next update: Fri 24 Jul 2026 22:00:25 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: 5Rqhq/YHDuekbRKXvMIQdnXPPI4RDCEW3OkCT7/ktpE=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 16: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:7e:25:d7:aa:22:fe:e6:87:79:ec:4c:1a:dd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jul 23 22:00:25 2026 GMT Not After : Jul 24 22:00:25 2026 GMT Subject: CN=497c8d2792b8648eb0cafe3840c46570bdbf4e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:ef:31:5f:5e:80:a8:f7:c7:be:58:7c:c4: 81:11:00:91:82:2f:7f:e5:ea:bc:fd:f8:c0:2d:fb: 91:df:fc:51:7c:c6:8a:93:23:59:6b:c4:0c:e5:ec: 6f:3e:9f:bb:1c:5c:68:e9:4d:a9:c7:54:5d:4f:c7: d9:71:85:11:42:38:e2:bd:43:bc:4d:98:6d:a8:a8: ee:e7:57:39:fb:61:74:ff:8c:24:d6:65:c5:9e:7d: b0:d4:51:6b:fd:01:0a:eb:0b:17:9e:d0:d6:c3:62: b9:29:1e:d1:25:d9:eb:58:3a:1b:56:7e:9c:24:dd: 7a:20:1f:6a:47:3d:c3:1d:15:bf:78:4a:83:8d:af: 44:b9:2a:57:d8:77:2f:2e:4d:3a:dd:a4:96:de:11: 36:e2:e3:0d:b0:bf:57:74:13:f7:8e:f6:70:af:2d: 77:65:ea:bd:51:2f:16:68:b6:ef:ba:65:bd:e4:c5: 9e:ea:9f:c2:f9:12:b5:d7:bd:8a:7c:7a:dd:a8:f8: ea:bc:1d:2c:b4:e5:2c:f5:86:1d:29:42:23:f8:05: 70:aa:a8:40:63:ed:af:19:a2:98:bc:3d:7c:51:3e: ef:02:39:7b:83:3b:89:36:9b:35:a7:76:9e:31:ea: a4:df:94:c9:47:7f:e4:f4:b3:90:0c:7d:f1:15:fe: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7C:8D:27:92:B8:64:8E:B0:CA:FE:38:40:C4:65:70:BD:BF:4E:5F X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:67:55:a2:77:e3:25:ab:40:64:c5:b1:c8:7c:81:83:12:6a: 58:5d:68:56:1c:f4:75:33:65:8a:7d:15:4d:4e:91:a1:ba:24: d6:2d:96:be:9f:f2:43:70:93:52:8f:2a:21:04:0b:0e:5c:25: ed:c4:0e:08:f0:ca:97:a2:0b:87:03:70:b2:46:83:ee:c7:ed: 9e:15:1c:de:d8:35:fa:cd:ec:e5:6a:28:c2:df:a6:13:ae:c9: d8:4e:5f:e5:56:a2:c2:05:c5:5c:8e:de:78:d2:26:d2:25:f1: ae:fe:40:83:46:21:77:6a:02:d6:32:73:be:31:5a:41:42:f7: ef:d8:df:06:8e:ff:c0:db:92:17:01:c3:8f:c6:2c:85:f1:86: 69:6a:21:4b:59:85:c6:5e:43:d4:d6:02:61:92:e1:f5:ed:af: a8:e1:91:7a:eb:fc:17:af:b2:cb:52:24:3e:4a:e6:17:6d:29: d4:6e:13:fd:8f:17:26:2d:ad:95:a3:09:b6:f0:ec:04:1d:ee: de:52:b4:7d:d3:b5:29:0a:07:96:af:a9:45:68:1e:41:d9:c7: 1c:35:5f:e1:7c:df:70:f5:ac:b6:5e:99:b2:d4:88:1c:73:a9: 02:21:be:b1:d6:7c:ae:d6:8c:7b:d1:16:0c:ca:8b:7e:1e:41: b5:c4:e5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/n4l16oi/uaHeexMGt2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwNzIzMjIwMDI1WhcNMjYwNzI0MjIwMDI1WjAzMTEwLwYDVQQD Eyg0OTdjOGQyNzkyYjg2NDhlYjBjYWZlMzg0MGM0NjU3MGJkYmY0ZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9fvMV9egKj3x75YfMSBEQCRgi9/ 5eq8/fjALfuR3/xRfMaKkyNZa8QM5exvPp+7HFxo6U2px1RdT8fZcYURQjjivUO8 TZhtqKju51c5+2F0/4wk1mXFnn2w1FFr/QEK6wsXntDWw2K5KR7RJdnrWDobVn6c JN16IB9qRz3DHRW/eEqDja9EuSpX2HcvLk063aSW3hE24uMNsL9XdBP3jvZwry13 Zeq9US8WaLbvumW95MWe6p/C+RK1172KfHrdqPjqvB0stOUs9YYdKUIj+AVwqqhA Y+2vGaKYvD18UT7vAjl7gzuJNps1p3aeMeqk35TJR3/k9LOQDH3xFf7fUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl8jSeSuGSOsMr+OEDEZXC9v05fMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2dVonfj JatAZMWxyHyBgxJqWF1oVhz0dTNlin0VTU6Robok1i2Wvp/yQ3CTUo8qIQQLDlwl 7cQOCPDKl6ILhwNwskaD7sftnhUc3tg1+s3s5Woowt+mE67J2E5f5VaiwgXFXI7e eNIm0iXxrv5Ag0Yhd2oC1jJzvjFaQUL379jfBo7/wNuSFwHDj8YshfGGaWohS1mF xl5D1NYCYZLh9e2vqOGReuv8F6+yy1IkPkrmF20p1G4T/Y8XJi2tlaMJtvDsBB3u 3lK0fdO1KQoHlq+pRWgeQdnHHDVf4XzfcPWstl6ZstSIHHOpAiG+sdZ8rtaMe9EW DMqLfh5BtcTlsg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:04 2026 by rpki-client