$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: b3QVuvvTGtqGobxcNwv7Lj0986jfHH6OYhbrMbvRLxs= Subject key identifier: AA:DA:72:9C:AC:11:CF:DE:A2:EF:8B:56:6F:97:19:A0:1F:5E:4A:7F Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019F91A3B0C96C226682021D2E72650BB1E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 19D7 Signing time: Fri 24 Jul 2026 01:00:51 +0000 Manifest this update: Fri 24 Jul 2026 01:00:51 +0000 Manifest next update: Sat 25 Jul 2026 01:00:51 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 7: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 8: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: lsXrdMKLfywwp3l2ags7yxNM4WrZcfYv5lsCtAuR5iI=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:b0:c9:6c:22:66:82:02:1d:2e:72:65:0b:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jul 24 01:00:51 2026 GMT Not After : Jul 25 01:00:51 2026 GMT Subject: CN=aada729cac11cfdea2ef8b566f9719a01f5e4a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:13:8f:c1:2e:e2:35:58:70:d9:3e:a7:9f: 03:f0:f0:d5:99:3d:7e:d3:ba:be:7d:e2:84:d6:dc: 48:61:9c:6a:c2:e8:60:e6:d0:fb:75:a7:05:28:3d: 48:8b:21:2f:bf:47:d8:a1:bc:60:29:e3:3b:72:55: 43:9a:e0:cb:a7:96:1e:81:37:26:25:47:cb:2b:b7: a0:63:45:ad:f7:f2:42:20:33:aa:49:b9:c0:b1:d3: 33:93:f0:d1:ea:fe:38:a0:48:fb:d0:63:54:94:b0: c9:87:05:32:50:5e:d7:ea:1c:d4:6b:3c:b0:7d:ed: 84:bc:19:b9:33:93:d4:70:7c:ba:a9:ef:93:ce:fb: 22:45:74:0b:9e:a1:04:89:1b:b7:12:5c:13:a6:67: 21:08:ed:9f:86:46:9f:5a:ce:13:14:b9:33:2d:22: 04:6e:27:81:73:3d:37:a0:db:db:28:a2:19:20:2e: 15:22:a7:2b:ec:54:84:73:06:32:97:85:a9:50:7d: 73:b4:a0:e6:b0:dc:4e:a9:5a:f4:d5:51:ff:08:b3: 97:a1:43:f1:1d:b4:43:b7:b9:64:2e:51:91:41:51: f8:7e:bc:0c:f3:d4:73:e6:1d:b9:7c:9a:26:0f:0f: fb:19:1a:80:f7:f5:8c:fe:d9:07:80:fe:94:f8:9e: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:72:9C:AC:11:CF:DE:A2:EF:8B:56:6F:97:19:A0:1F:5E:4A:7F X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:71:39:99:8f:98:df:b4:21:d8:f4:1e:81:c7:75:92:26:5f: 47:97:cf:a2:8b:9d:7e:d5:d0:0e:72:b5:9f:c3:96:13:1d:ed: 8f:aa:61:af:86:13:d5:59:f2:3d:0e:6d:c9:5a:16:9e:76:e2: ea:41:b2:1d:36:8d:c9:b4:70:60:09:07:c0:39:10:33:ae:cf: 77:0f:00:03:10:a8:0e:d6:f8:1f:a1:5c:29:47:34:59:eb:ab: b5:39:0f:56:3b:81:17:92:f4:b3:c9:55:58:3b:a3:31:32:4b: 3a:b0:ce:e7:f4:6c:96:09:9f:43:aa:7d:e7:46:0b:aa:3c:6d: fe:66:d1:55:6e:c7:23:ef:d6:b5:cd:c6:de:9a:a3:87:45:ba: 01:a4:ae:09:ef:63:ab:2d:d6:18:08:d3:f6:7e:69:3c:97:db: d9:a9:6f:4a:b5:43:9e:c4:43:77:cd:f1:03:16:78:b9:ec:7f: 01:4c:42:4d:6d:c8:5e:93:82:e6:65:af:62:02:5c:3c:7e:2a: 90:d4:fa:60:7e:ad:4d:fa:72:6c:38:c7:8a:f6:00:eb:af:7f: 09:18:1c:76:64:d9:4f:2c:e4:77:78:23:fe:8f:50:a3:90:59: 83:52:7b:5e:c0:ca:fa:d6:bc:65:0d:01:e9:d4:3b:68:3a:fa: 5f:fd:c3:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro7DJbCJmggIdLnJlC7HgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwNzI0MDEwMDUxWhcNMjYwNzI1MDEwMDUxWjAzMTEwLwYDVQQD EyhhYWRhNzI5Y2FjMTFjZmRlYTJlZjhiNTY2Zjk3MTlhMDFmNWU0YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0ITj8Eu4jVYcNk+p58D8PDVmT1+ 07q+feKE1txIYZxqwuhg5tD7dacFKD1IiyEvv0fYobxgKeM7clVDmuDLp5YegTcm JUfLK7egY0Wt9/JCIDOqSbnAsdMzk/DR6v44oEj70GNUlLDJhwUyUF7X6hzUazyw fe2EvBm5M5PUcHy6qe+TzvsiRXQLnqEEiRu3ElwTpmchCO2fhkafWs4TFLkzLSIE bieBcz03oNvbKKIZIC4VIqcr7FSEcwYyl4WpUH1ztKDmsNxOqVr01VH/CLOXoUPx HbRDt7lkLlGRQVH4frwM89Rz5h25fJomDw/7GRqA9/WM/tkHgP6U+J7VtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKracpysEc/eou+LVm+XGaAfXkp/MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInE5mY+Y 37Qh2PQegcd1kiZfR5fPooudftXQDnK1n8OWEx3tj6phr4YT1VnyPQ5tyVoWnnbi 6kGyHTaNybRwYAkHwDkQM67Pdw8AAxCoDtb4H6FcKUc0WeurtTkPVjuBF5L0s8lV WDujMTJLOrDO5/RslgmfQ6p950YLqjxt/mbRVW7HI+/Wtc3G3pqjh0W6AaSuCe9j qy3WGAjT9n5pPJfb2alvSrVDnsRDd83xAxZ4uex/AUxCTW3IXpOC5mWvYgJcPH4q kNT6YH6tTfpybDjHivYA669/CRgcdmTZTyzkd3gj/o9Qo5BZg1J7XsDK+ta8ZQ0B 6dQ7aDr6X/3DVg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:09 2026 by rpki-client