$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: b+yCvKFmisdf/h3ZSTRYWF+tUd5K9lwsnOzplf8tKZo= Subject key identifier: 12:FF:28:AA:72:BC:2F:19:A0:8F:2B:D9:6D:78:92:B7:3F:E9:5C:80 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019F92B63A944C782DA11589231823897AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 100C Signing time: Fri 24 Jul 2026 06:00:43 +0000 Manifest this update: Fri 24 Jul 2026 06:00:43 +0000 Manifest next update: Sat 25 Jul 2026 06:00:43 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: tmsUxGoPMxQUchUWZ8E2fmxQLi3VDOX8FSSASgVQ8Cg=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:b6:3a:94:4c:78:2d:a1:15:89:23:18:23:89:7a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jul 24 06:00:43 2026 GMT Not After : Jul 25 06:00:43 2026 GMT Subject: CN=12ff28aa72bc2f19a08f2bd96d7892b73fe95c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:ee:53:37:49:f1:9c:1a:19:2f:f3:c7:4f: fb:1f:07:a4:1b:16:ae:70:a7:19:38:d9:06:7f:8c: 11:5b:21:0b:6d:b6:ce:8b:78:a1:a5:9e:81:01:0b: f5:39:c9:59:59:ac:c5:9a:d4:57:b8:e4:bb:58:e3: b5:19:a0:07:48:33:92:98:8c:d1:58:f5:e4:42:b8: 6d:df:6e:11:b2:c1:21:a1:6f:a2:08:87:01:8c:76: c8:3b:3c:9c:12:66:c4:3c:2a:d5:10:7b:23:33:6a: 25:ef:bd:d4:0a:46:3f:29:c8:34:dc:20:52:25:a9: 0b:75:60:e2:a9:c5:9e:14:24:65:33:aa:c5:36:64: 57:70:2f:94:dc:c2:63:5b:7f:0b:79:21:95:a8:c9: 7b:8d:fb:b1:25:ea:81:47:c9:fb:c1:d4:c0:97:13: b0:01:61:ae:3c:bf:93:bd:c3:91:3c:15:86:3b:e0: 2a:b8:6e:95:89:56:6f:e4:19:e5:59:d2:c7:20:3a: 79:0f:26:a1:e4:a8:aa:a6:a8:e3:3b:91:b7:a1:fb: 15:f7:59:b7:f9:27:3e:37:19:a2:c3:2f:a0:dd:2e: cc:55:85:0b:89:55:59:d2:27:15:1f:9d:eb:c1:55: c7:84:41:d7:78:9f:2b:91:ab:99:75:0d:32:8f:02: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:28:AA:72:BC:2F:19:A0:8F:2B:D9:6D:78:92:B7:3F:E9:5C:80 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:15:76:40:92:07:c9:0c:e6:16:b6:9a:14:19:ec:24:c1:37: c9:7d:dd:47:92:9c:60:0b:de:60:18:ac:4d:6a:09:26:52:74: 7b:44:59:9c:4b:7a:31:d2:1f:03:25:c4:2e:e0:b8:57:c8:eb: 29:15:43:19:88:aa:33:f3:fd:13:b9:19:c3:81:d8:25:ed:80: 35:c2:cd:f2:aa:d0:ef:03:c3:4e:6c:46:26:46:9f:fa:96:2b: ab:79:f8:e3:9b:a7:fa:4e:bf:b5:0e:ed:14:a6:1c:01:33:8e: d6:51:95:8c:07:67:f9:30:10:bd:df:25:71:05:f2:04:15:cc: 0c:af:48:09:0c:4d:10:cc:92:ae:6e:a3:7c:cd:f5:4c:ed:d6: 16:f5:b5:b3:fc:53:ff:38:3c:ff:32:f1:f4:09:e5:81:77:ee: 23:cf:a8:8b:c1:10:e5:c3:7a:5f:d0:fc:8c:d1:d1:07:8d:29: 77:ed:35:34:17:cd:ae:6c:6f:ce:6d:d7:04:d7:72:08:ad:8a: 32:e0:82:7e:a6:3e:42:50:d0:09:73:ed:af:9c:f8:34:9e:80: 25:6c:73:b3:35:2b:5e:e5:f9:25:64:fb:ff:73:d7:f6:16:57: 50:ab:db:4b:c8:e9:28:4e:1e:9f:86:e9:92:f2:c8:e3:1a:fb: 51:8c:55:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+StjqUTHgtoRWJIxgjiXruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwNzI0MDYwMDQzWhcNMjYwNzI1MDYwMDQzWjAzMTEwLwYDVQQD EygxMmZmMjhhYTcyYmMyZjE5YTA4ZjJiZDk2ZDc4OTJiNzNmZTk1YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfuUzdJ8ZwaGS/zx0/7HwekGxau cKcZONkGf4wRWyELbbbOi3ihpZ6BAQv1OclZWazFmtRXuOS7WOO1GaAHSDOSmIzR WPXkQrht324RssEhoW+iCIcBjHbIOzycEmbEPCrVEHsjM2ol773UCkY/Kcg03CBS JakLdWDiqcWeFCRlM6rFNmRXcC+U3MJjW38LeSGVqMl7jfuxJeqBR8n7wdTAlxOw AWGuPL+TvcORPBWGO+AquG6ViVZv5BnlWdLHIDp5Dyah5KiqpqjjO5G3ofsV91m3 +Sc+Nxmiwy+g3S7MVYULiVVZ0icVH53rwVXHhEHXeJ8rkauZdQ0yjwJJQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL/KKpyvC8ZoI8r2W14krc/6VyAMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxV2QJIH yQzmFraaFBnsJME3yX3dR5KcYAveYBisTWoJJlJ0e0RZnEt6MdIfAyXELuC4V8jr KRVDGYiqM/P9E7kZw4HYJe2ANcLN8qrQ7wPDTmxGJkaf+pYrq3n445un+k6/tQ7t FKYcATOO1lGVjAdn+TAQvd8lcQXyBBXMDK9ICQxNEMySrm6jfM31TO3WFvW1s/xT /zg8/zLx9AnlgXfuI8+oi8EQ5cN6X9D8jNHRB40pd+01NBfNrmxvzm3XBNdyCK2K MuCCfqY+QlDQCXPtr5z4NJ6AJWxzszUrXuX5JWT7/3PX9hZXUKvbS8jpKE4en4bp kvLI4xr7UYxVpg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:29 2026 by rpki-client