$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: KLVtSea1duLaLXIc57ublRf3gLM77tbSvyd5OpOxV8s= Subject key identifier: 51:D4:3E:EB:49:3F:65:65:B6:5A:6B:E1:D9:CB:36:FB:2B:A9:7D:BC Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019F8F47720035DB052916801BCC61E15820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 11E5 Signing time: Thu 23 Jul 2026 14:00:51 +0000 Manifest this update: Thu 23 Jul 2026 14:00:51 +0000 Manifest next update: Fri 24 Jul 2026 14:00:51 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: VZQ1FREMEto4g2aPvOz9OY65rHJ0Xb1x4VDlly2xCHk=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=) 12: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 13: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:72:00:35:db:05:29:16:80:1b:cc:61:e1:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jul 23 14:00:51 2026 GMT Not After : Jul 24 14:00:51 2026 GMT Subject: CN=51d43eeb493f6565b65a6be1d9cb36fb2ba97dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:b7:cf:8e:b4:05:3c:63:aa:a3:ee:0b:6e: e7:5b:3b:89:01:74:35:3d:73:50:3c:39:bc:35:93: 10:5d:d9:30:66:28:d7:1a:0f:df:1a:c6:95:f7:4e: b5:7a:f5:35:f8:63:35:96:23:a6:99:59:10:54:bc: ba:2a:c6:2a:af:e0:4c:d8:f7:8b:15:24:3c:95:07: 67:79:5c:37:f8:be:90:24:e1:5f:c6:e2:85:a5:ec: d8:17:7b:07:de:5f:b6:11:67:ae:53:6e:6b:8e:13: 65:38:74:55:b1:43:1c:e6:43:b7:5f:1a:28:61:0a: 13:26:27:19:ce:cc:db:5e:0d:1c:e5:b3:dc:83:f7: 8a:2c:73:d7:41:42:6d:dd:41:7f:44:cd:05:08:e2: 0f:c8:33:bb:ad:04:8a:4f:14:ac:8f:e5:b2:e7:60: 12:09:27:21:46:60:b3:7f:ae:df:75:0a:5e:e7:4d: c6:98:13:42:21:ff:a5:ed:29:83:4e:9d:00:fa:26: 59:c3:d6:b7:9c:fc:ca:b6:d9:c2:90:c0:ed:c6:37: ac:a6:3b:09:d0:4a:92:a1:54:6b:df:bf:43:4f:22: ef:3d:44:4d:b5:29:e7:b8:61:4c:9a:9b:a1:84:19: 2c:ae:4c:f4:df:dd:01:21:7c:e9:9d:1d:ad:18:9b: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D4:3E:EB:49:3F:65:65:B6:5A:6B:E1:D9:CB:36:FB:2B:A9:7D:BC X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:35:d0:73:44:fa:08:f3:d7:97:39:bd:8a:2a:4f:c3:1b: a3:ac:e1:63:b1:2c:0c:14:52:1a:3e:6d:1f:8c:82:83:37:70: 7e:b6:ce:60:5c:a8:e6:e1:ed:4e:1f:47:d1:1e:14:1f:92:98: 32:bd:de:a2:ee:2d:4d:eb:ca:c9:32:fc:f5:b5:ff:36:d6:2b: 0b:3f:3a:f0:5e:7e:ce:d0:85:ad:f2:7d:53:f0:f3:99:54:46: 97:d8:8b:63:4f:15:94:6d:d4:76:1d:30:10:4b:b2:90:79:04: 69:88:9f:e5:61:59:f1:24:bd:fd:ff:5b:4c:0d:f7:76:de:f7: b4:fb:9d:e1:51:ce:e4:6d:40:17:35:0b:2c:0e:75:3e:25:a8: a9:dd:16:74:f9:7d:fa:bc:2d:bc:f7:d5:3b:9f:0a:ab:f1:e4: a2:b2:04:6c:2b:38:8a:53:77:62:9f:a3:2d:86:f4:4e:3b:e3: ad:2a:57:82:09:9a:ce:20:bc:71:b2:89:b3:46:87:08:f2:b6: 7c:72:ad:5a:ce:9a:b0:63:f1:15:92:a4:59:c0:8d:d6:c6:e7: 05:f6:e4:e2:b0:91:7b:64:7d:7f:b7:1b:87:81:aa:4d:66:54: fa:24:03:13:3c:b4:87:c8:86:d9:17:8f:54:f1:6f:14:75:d3: 4d:b4:47:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR3IANdsFKRaAG8xh4VggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwNzIzMTQwMDUxWhcNMjYwNzI0MTQwMDUxWjAzMTEwLwYDVQQD Eyg1MWQ0M2VlYjQ5M2Y2NTY1YjY1YTZiZTFkOWNiMzZmYjJiYTk3ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVO3z460BTxjqqPuC27nWzuJAXQ1 PXNQPDm8NZMQXdkwZijXGg/fGsaV9061evU1+GM1liOmmVkQVLy6KsYqr+BM2PeL FSQ8lQdneVw3+L6QJOFfxuKFpezYF3sH3l+2EWeuU25rjhNlOHRVsUMc5kO3Xxoo YQoTJicZzszbXg0c5bPcg/eKLHPXQUJt3UF/RM0FCOIPyDO7rQSKTxSsj+Wy52AS CSchRmCzf67fdQpe503GmBNCIf+l7SmDTp0A+iZZw9a3nPzKttnCkMDtxjespjsJ 0EqSoVRr379DTyLvPURNtSnnuGFMmpuhhBksrkz0390BIXzpnR2tGJvLUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHUPutJP2Vltlpr4dnLNvsrqX28MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdH410HNE +gjz15c5vYoqT8Mbo6zhY7EsDBRSGj5tH4yCgzdwfrbOYFyo5uHtTh9H0R4UH5KY Mr3eou4tTevKyTL89bX/NtYrCz868F5+ztCFrfJ9U/DzmVRGl9iLY08VlG3Udh0w EEuykHkEaYif5WFZ8SS9/f9bTA33dt73tPud4VHO5G1AFzULLA51PiWoqd0WdPl9 +rwtvPfVO58Kq/HkorIEbCs4ilN3Yp+jLYb0TjvjrSpXggmaziC8cbKJs0aHCPK2 fHKtWs6asGPxFZKkWcCN1sbnBfbk4rCRe2R9f7cbh4GqTWZU+iQDEzy0h8iG2ReP VPFvFHXTTbRH2w== -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:15 2026 by rpki-client