$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: T1Rl7Yme9DaLt6Gu6n6lW9N/5Kd+l+qemaW3pnulcpg= Subject key identifier: 42:AF:07:17:24:0C:43:66:7A:AC:ED:E2:37:47:5A:25:46:1C:3F:5F Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019F90C840EC337CCEF04B8FC58AA7660AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0CE7 Signing time: Thu 23 Jul 2026 21:01:10 +0000 Manifest this update: Thu 23 Jul 2026 21:01:10 +0000 Manifest next update: Fri 24 Jul 2026 21:01:10 +0000 Files and hashes: 1: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=) 2: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=) 3: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (hash: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=) 4: 5s08qvtxu5kbTXtLwFi7v9aGHaY.roa (hash: BJGago2uFSQjoC1tJOqQgCqqprBXKW62J2ZndZct5iU=) 5: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=) 6: 8oSMyBHoEwIPUDO9cHclDhpkeow.roa (hash: br8BrA0Fp5NHYWboAPwd4lkKD7PgpYG7PV42tsZNxWo=) 7: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=) 8: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=) 9: Mmk6zLU_gv73BOtf2g3APw9lmyQ.roa (hash: qL0PMP9vArwRqpbzs+j1LZZAXvUbDkXbOFyqaLmsqDo=) 10: RjEWq6ih6-2kfI0plendbaS8Y6w.roa (hash: 2i+2TrldDE3Er0VIAbdcWVtXkE1ii9e0XPDWCNXu1QA=) 11: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=) 12: XVBftT0WblS94gHOwDDqmzJNTUE.roa (hash: Ww9qGwgMXKOJQ0gidxXnIej+KbVKkv6ARbgW+Iogp34=) 13: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=) 14: _rBqzPfjRDsJ7EEWItYo-yE9cKM.roa (hash: x3wKcrHHQjcKLemAztYhsd24sb3DtvRDQ56NuxQjYpk=) 15: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: PS29Os1HHojgRCEU/ChBPTx5olkZzS+8azNjQXPUWp8=) 16: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=) 17: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=) 18: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=) 19: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=) 20: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=) 21: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=) 22: tCiyGtakbmS-hkNH0HW8_YohxbE.roa (hash: 0kbqzbmcamtnxXVE6dSXdUJzJrO80eC7C3aPFLP4CRA=) 23: xWe4rZ63bwcir3qDRpZvUz_bMfQ.roa (hash: afhytiVMUXYxoEk76QGj46otD9O5w2WJcpzKHL2/iGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c8:40:ec:33:7c:ce:f0:4b:8f:c5:8a:a7:66:0a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jul 23 21:01:10 2026 GMT Not After : Jul 24 21:01:10 2026 GMT Subject: CN=42af0717240c43667aacede237475a25461c3f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:1c:ff:ac:e2:7d:fc:01:b5:8b:96:89:e5: 84:08:73:b6:35:6d:94:3c:3d:ff:b6:3b:11:1f:13: c9:6f:1c:47:3d:0e:bd:56:8b:89:be:21:70:87:2e: 42:0a:1a:f9:4d:ee:ad:36:39:44:f1:03:49:f9:4a: 0d:a5:fc:97:38:65:36:1a:8f:fb:d9:92:e8:6f:96: 78:f7:26:e2:cb:3b:f9:63:88:70:0a:df:4e:33:7e: 6a:56:17:2d:17:88:fa:6e:23:27:83:5b:b5:45:04: f8:78:9e:7a:f9:4e:35:56:67:f3:f0:44:b3:d0:7a: 1b:a3:f7:cf:60:d9:91:3c:db:16:76:8d:6b:12:65: 0d:b5:2a:cd:43:6b:8c:18:3d:bf:db:31:ac:e9:a9: cd:39:aa:19:fc:cc:46:07:43:d5:16:b0:57:49:a6: 41:c5:21:85:8a:df:9d:05:74:65:b4:2d:f5:a6:10: ae:0b:f3:4a:ce:da:dc:b5:5a:9a:23:15:d0:ca:12: d2:6f:97:37:28:10:10:41:ea:a4:7c:54:e6:76:f1: ba:a3:45:94:97:8e:39:81:93:b5:d0:b0:e1:7f:a2: 09:62:7a:7c:41:ca:83:c9:2b:a3:64:d3:4f:be:c3: 80:db:5f:51:18:14:be:3f:19:bd:8f:97:0d:62:32: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:07:17:24:0C:43:66:7A:AC:ED:E2:37:47:5A:25:46:1C:3F:5F X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:26:5e:93:58:2f:40:f8:8e:62:78:bd:fc:96:4b:58:14:67: fc:3a:82:8a:f9:1d:69:42:36:97:82:d6:2f:70:ef:b7:df:7f: 59:f9:23:58:7b:89:8b:4e:ee:5c:2a:e2:36:51:be:f3:d8:46: b4:bf:b2:bc:c9:6f:ab:dd:7c:37:c1:2e:ea:e3:77:eb:15:ec: 29:f9:a2:d7:7f:18:9b:fc:60:27:3f:8e:44:22:0a:61:aa:1c: 1a:b1:e3:50:67:07:d9:26:97:5a:db:1d:45:7b:6c:8c:f5:74: d1:07:9f:da:51:38:a4:9d:35:b8:f9:87:9d:18:11:74:4d:0c: ef:41:50:a8:4d:18:c1:2e:cc:cf:f2:96:73:2b:c9:c5:6a:ee: fa:ef:bc:d9:5d:4e:b7:e5:1c:d3:0b:8f:ad:94:87:6c:bf:5a: 97:5d:46:97:be:52:18:12:e4:f0:60:6f:98:96:39:33:b2:f9: 01:61:a4:62:9b:4a:41:70:f7:e9:98:00:cd:78:c6:1f:44:7a: 10:21:a8:26:71:ab:6a:31:e1:a8:98:41:f6:ec:2a:a0:71:21: 04:5b:a5:1a:93:87:48:ac:6c:54:ff:fb:de:18:04:b8:ab:9b: 31:af:e9:26:a4:5a:33:94:ad:79:c0:c5:db:c8:3f:00:1f:96: f3:e7:19:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QyEDsM3zO8EuPxYqnZgrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwNzIzMjEwMTEwWhcNMjYwNzI0MjEwMTEwWjAzMTEwLwYDVQQD Eyg0MmFmMDcxNzI0MGM0MzY2N2FhY2VkZTIzNzQ3NWEyNTQ2MWMzZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTsc/6ziffwBtYuWieWECHO2NW2U PD3/tjsRHxPJbxxHPQ69VouJviFwhy5CChr5Te6tNjlE8QNJ+UoNpfyXOGU2Go/7 2ZLob5Z49ybiyzv5Y4hwCt9OM35qVhctF4j6biMng1u1RQT4eJ56+U41Vmfz8ESz 0Hobo/fPYNmRPNsWdo1rEmUNtSrNQ2uMGD2/2zGs6anNOaoZ/MxGB0PVFrBXSaZB xSGFit+dBXRltC31phCuC/NKztrctVqaIxXQyhLSb5c3KBAQQeqkfFTmdvG6o0WU l445gZO10LDhf6IJYnp8QcqDySujZNNPvsOA219RGBS+Pxm9j5cNYjK/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKvBxckDENmeqzt4jdHWiVGHD9fMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiZek1gv QPiOYni9/JZLWBRn/DqCivkdaUI2l4LWL3Dvt99/WfkjWHuJi07uXCriNlG+89hG tL+yvMlvq918N8Eu6uN36xXsKfmi138Ym/xgJz+ORCIKYaocGrHjUGcH2SaXWtsd RXtsjPV00Qef2lE4pJ01uPmHnRgRdE0M70FQqE0YwS7Mz/KWcyvJxWru+u+82V1O t+Uc0wuPrZSHbL9al11Gl75SGBLk8GBvmJY5M7L5AWGkYptKQXD36ZgAzXjGH0R6 ECGoJnGrajHhqJhB9uwqoHEhBFulGpOHSKxsVP/73hgEuKubMa/pJqRaM5StecDF 28g/AB+W8+cZWg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:13 2026 by rpki-client