$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: gJhlG0ezXkrGwZ3LVmcwKo+Um11MjKzZg4FlGddeTp8= Subject key identifier: 22:69:A0:5C:85:0A:68:5A:58:A4:65:73:10:6A:FE:34:1A:9E:D4:C7 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019F90907C880539ADC307C72B9A96765CB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1968 Signing time: Thu 23 Jul 2026 20:00:15 +0000 Manifest this update: Thu 23 Jul 2026 20:00:15 +0000 Manifest next update: Fri 24 Jul 2026 20:00:15 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: Oenk6/hVJMW4VPVxWyfvnCqwju9UEmrT3RjHmgCmKhQ=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:7c:88:05:39:ad:c3:07:c7:2b:9a:96:76:5c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jul 23 20:00:15 2026 GMT Not After : Jul 24 20:00:15 2026 GMT Subject: CN=2269a05c850a685a58a46573106afe341a9ed4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:43:a8:52:39:98:1e:c6:4f:e5:b8:70:6f: 73:53:e2:9b:a4:75:dd:37:e4:7d:ff:24:15:16:e5: 6f:60:fc:45:66:1c:c9:63:bd:4b:32:c5:f5:18:62: 6f:41:62:be:a6:37:a1:b4:f4:0f:a6:bc:a3:e6:88: 49:d3:08:12:e9:88:8b:50:3d:8d:c1:45:56:d3:69: 4e:8d:02:69:2e:bb:9e:e5:1b:db:ca:4d:af:5b:7b: f6:41:e8:31:20:0c:fc:fd:fd:de:5d:da:a3:2d:e9: 6b:b9:27:9b:28:f4:db:19:39:a3:cc:fb:1e:83:b1: af:19:e2:9f:1f:38:82:42:70:49:9b:ac:c2:29:c2: 30:e1:ae:0d:da:27:93:c7:44:43:26:54:b4:0b:d8: e2:fb:56:2d:93:6a:e5:c2:83:d6:8c:7d:3c:cb:cd: 1c:b5:aa:ef:0d:a3:8d:11:76:27:7d:9f:e4:61:87: 2b:49:0e:53:53:23:52:67:23:8f:fb:21:f7:e1:5b: a5:f4:af:4e:56:e3:3b:52:c1:32:dd:09:d1:a9:4f: 22:fa:a6:24:d1:df:f5:ab:07:a6:96:8b:30:3c:f0: 1f:34:73:54:b3:12:e8:77:58:47:ef:d2:fe:40:c3: 80:b4:9e:b6:c2:23:4b:16:71:e3:a4:b6:9e:33:5c: a5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:A0:5C:85:0A:68:5A:58:A4:65:73:10:6A:FE:34:1A:9E:D4:C7 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a8:f3:8c:a9:71:65:0c:da:6f:1c:ec:a1:89:6c:e6:4f:22: 38:0b:ab:68:96:43:6f:3a:8d:4a:83:08:69:d9:b8:b0:b7:ef: 4a:e2:a1:72:cf:08:bd:3a:24:1f:af:41:84:80:16:6c:d5:41: 38:c0:59:35:bb:d1:cd:d8:bb:35:57:aa:3f:cc:8d:48:4b:b6: e1:c0:cc:99:9f:3e:0d:6e:99:25:3c:7c:4a:df:7b:0e:c9:95: 4c:00:77:12:8f:62:cf:64:d5:46:68:12:ca:aa:d3:68:15:ed: b8:ed:e0:66:f6:2c:bb:27:7b:d9:5e:a4:c3:a5:91:51:4e:3d: ab:80:a4:55:41:85:69:cc:06:01:00:08:82:f6:05:31:ca:1e: a3:df:96:3d:2e:93:4d:a0:78:0e:b1:9c:ff:ea:a8:de:31:57: 50:c3:53:dd:1a:fd:df:0c:b4:04:6d:5c:09:c4:45:78:cd:85: 40:fe:7a:e6:16:97:89:23:de:b9:f6:fc:a7:4f:88:7c:14:7e: 71:86:c2:90:ae:b1:7f:c9:7d:a2:80:85:d6:fb:93:0f:88:85: d3:af:0b:f0:9f:ea:2d:2a:d2:f5:d3:a5:6c:e4:e8:af:b8:e1: 89:65:61:eb:93:b7:b3:4f:de:94:e6:3f:2c:4e:09:b0:57:53: e8:58:aa:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkHyIBTmtwwfHK5qWdlyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNzIzMjAwMDE1WhcNMjYwNzI0MjAwMDE1WjAzMTEwLwYDVQQD EygyMjY5YTA1Yzg1MGE2ODVhNThhNDY1NzMxMDZhZmUzNDFhOWVkNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xNDqFI5mB7GT+W4cG9zU+KbpHXd N+R9/yQVFuVvYPxFZhzJY71LMsX1GGJvQWK+pjehtPQPpryj5ohJ0wgS6YiLUD2N wUVW02lOjQJpLrue5Rvbyk2vW3v2QegxIAz8/f3eXdqjLelruSebKPTbGTmjzPse g7GvGeKfHziCQnBJm6zCKcIw4a4N2ieTx0RDJlS0C9ji+1Ytk2rlwoPWjH08y80c tarvDaONEXYnfZ/kYYcrSQ5TUyNSZyOP+yH34Vul9K9OVuM7UsEy3QnRqU8i+qYk 0d/1qwemloswPPAfNHNUsxLod1hH79L+QMOAtJ62wiNLFnHjpLaeM1ylOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJpoFyFCmhaWKRlcxBq/jQantTHMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdajzjKlx ZQzabxzsoYls5k8iOAuraJZDbzqNSoMIadm4sLfvSuKhcs8IvTokH69BhIAWbNVB OMBZNbvRzdi7NVeqP8yNSEu24cDMmZ8+DW6ZJTx8St97DsmVTAB3Eo9iz2TVRmgS yqrTaBXtuO3gZvYsuyd72V6kw6WRUU49q4CkVUGFacwGAQAIgvYFMcoeo9+WPS6T TaB4DrGc/+qo3jFXUMNT3Rr93wy0BG1cCcRFeM2FQP565haXiSPeufb8p0+IfBR+ cYbCkK6xf8l9ooCF1vuTD4iF068L8J/qLSrS9dOlbOTor7jhiWVh65O3s0/elOY/ LE4JsFdT6FiqMg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:52 2026 by rpki-client