$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: HQAQaZTn8zkKRQNum7TK2lmS6O+5LXVwfjn8upH70jw= Subject key identifier: F6:3A:95:B1:B6:D9:2B:23:9C:E0:C7:E6:B6:9D:0C:5E:1C:18:B1:C9 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019F8F7E3E81D43B32611E3FCAC22FFB8EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1A02 Signing time: Thu 23 Jul 2026 15:00:43 +0000 Manifest this update: Thu 23 Jul 2026 15:00:43 +0000 Manifest next update: Fri 24 Jul 2026 15:00:43 +0000 Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=) 2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=) 3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=) 4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=) 5: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=) 6: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=) 7: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=) 8: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=) 9: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=) 10: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=) 11: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=) 12: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=) 13: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=) 14: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=) 15: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=) 16: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=) 17: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 0EdDzPCp1VXB8PSlsyXGbdYm6F0CdwQUADY61Jy/u1I=) 18: ozxuboQujXdiImUQ23259rgJxTU.roa (hash: mUzByNgDOakmOWXkp+P9oysXEw/ks3+fUkO7YTuj2Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:3e:81:d4:3b:32:61:1e:3f:ca:c2:2f:fb:8e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jul 23 15:00:43 2026 GMT Not After : Jul 24 15:00:43 2026 GMT Subject: CN=f63a95b1b6d92b239ce0c7e6b69d0c5e1c18b1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:32:b5:89:f3:b0:c2:7e:9c:3b:7d:4e:7a: b5:bf:33:21:c5:12:e9:30:c1:fb:32:3a:30:df:69: ed:8a:ec:91:2a:8d:65:44:ab:02:1f:8d:ed:6d:34: 63:53:62:f2:de:78:96:e8:20:fb:83:7f:ba:61:63: 70:67:ed:1a:9c:5c:66:4d:b3:9d:03:96:8a:57:63: f5:3b:83:ea:5a:7b:45:84:c0:d7:e6:92:67:5e:03: 6a:54:c7:9c:0f:a4:f5:36:40:d6:45:0e:23:86:12: c8:f4:db:1f:b4:f4:fb:23:ff:b3:b9:42:4e:14:95: 34:61:c4:74:31:3b:bb:7b:d6:02:ae:53:94:66:74: fc:a5:86:c2:d9:0c:21:3e:2c:ee:67:5c:6a:8d:7c: e8:1b:11:69:ae:83:7d:6f:d8:82:8b:38:25:d9:63: 5b:7a:91:30:e0:2b:2c:7f:72:ec:90:83:72:39:a1: f5:c1:3c:34:8f:e7:48:72:8a:9d:d7:1f:b8:39:14: e3:26:01:d3:96:8a:45:9c:ab:5d:2e:c7:8d:9d:66: 83:56:92:0b:f3:65:f6:fa:e4:ac:5b:57:b2:0e:84: 01:50:e9:86:70:d3:08:2f:9d:b9:d2:e5:a0:2b:9c: 5a:f3:7a:1a:c6:95:84:b2:42:9b:d4:7b:a5:b9:0c: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3A:95:B1:B6:D9:2B:23:9C:E0:C7:E6:B6:9D:0C:5E:1C:18:B1:C9 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:76:5c:12:54:35:e9:aa:f3:9a:af:53:1d:ab:f9:81:8e: a0:e2:a4:96:ac:6c:4e:6f:49:0f:52:b8:d0:82:cd:12:32:7e: 93:4c:ba:74:a0:53:41:de:ea:04:b3:20:37:83:2e:d0:a1:f5: bc:69:8f:05:8c:d5:11:30:11:98:9f:8c:82:26:60:93:27:c3: f5:c1:a6:3d:98:b2:0c:45:f0:c1:03:e1:2f:54:b0:47:96:5a: 5e:d4:85:7c:78:b8:54:57:66:db:cd:20:74:61:0d:20:f9:be: 35:a6:f5:ea:81:92:2c:df:da:47:7c:69:20:d9:2e:38:45:3b: 27:bd:97:29:17:99:e9:44:c4:0e:c2:c9:f2:75:96:3c:ad:75: f2:1c:b7:c2:e5:4f:ba:8f:a7:4d:22:b3:60:64:62:31:02:ad: b7:b1:4c:68:50:d4:3e:37:34:09:b0:ab:f2:26:28:5f:7c:e0: 6a:45:d6:09:b5:aa:4d:4c:1e:a0:c9:f1:b4:cf:7d:c3:5f:7c: a2:1f:9d:93:8c:85:34:61:34:79:66:bf:f3:5d:02:f6:15:f1: a2:2d:0f:5a:88:92:95:ad:71:22:90:a6:c8:42:21:6e:99:f7: b4:37:0d:bb:bc:2e:17:6a:d6:a1:2d:22:84:f3:ac:6c:9d:9e: 52:7c:b2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pfj6B1DsyYR4/ysIv+461MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwNzIzMTUwMDQzWhcNMjYwNzI0MTUwMDQzWjAzMTEwLwYDVQQD EyhmNjNhOTViMWI2ZDkyYjIzOWNlMGM3ZTZiNjlkMGM1ZTFjMThiMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kUytYnzsMJ+nDt9Tnq1vzMhxRLp MMH7Mjow32ntiuyRKo1lRKsCH43tbTRjU2Ly3niW6CD7g3+6YWNwZ+0anFxmTbOd A5aKV2P1O4PqWntFhMDX5pJnXgNqVMecD6T1NkDWRQ4jhhLI9NsftPT7I/+zuUJO FJU0YcR0MTu7e9YCrlOUZnT8pYbC2QwhPizuZ1xqjXzoGxFproN9b9iCizgl2WNb epEw4Cssf3LskINyOaH1wTw0j+dIcoqd1x+4ORTjJgHTlopFnKtdLseNnWaDVpIL 82X2+uSsW1eyDoQBUOmGcNMIL5250uWgK5xa83oaxpWEskKb1HuluQwl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY6lbG22SsjnODH5radDF4cGLHJMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9R2XBJU Nemq85qvUx2r+YGOoOKklqxsTm9JD1K40ILNEjJ+k0y6dKBTQd7qBLMgN4Mu0KH1 vGmPBYzVETARmJ+MgiZgkyfD9cGmPZiyDEXwwQPhL1SwR5ZaXtSFfHi4VFdm280g dGENIPm+Nab16oGSLN/aR3xpINkuOEU7J72XKReZ6UTEDsLJ8nWWPK118hy3wuVP uo+nTSKzYGRiMQKtt7FMaFDUPjc0CbCr8iYoX3zgakXWCbWqTUweoMnxtM99w198 oh+dk4yFNGE0eWa/810C9hXxoi0PWoiSla1xIpCmyEIhbpn3tDcNu7wuF2rWoS0i hPOsbJ2eUnyygw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:57:58 2026 by rpki-client