$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: 7O7qcQ2F3Qs5Hb3aHjY1I6RS3L9wCUt6bUwa4W8w6Os= Subject key identifier: 8A:86:11:1D:45:EE:8E:2E:DC:72:30:13:C1:4C:E8:81:AD:91:95:48 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019F916CD7D0263642F7239F8BA3443E0DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 13CE Signing time: Fri 24 Jul 2026 00:00:57 +0000 Manifest this update: Fri 24 Jul 2026 00:00:57 +0000 Manifest next update: Sat 25 Jul 2026 00:00:57 +0000 Files and hashes: 1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=) 2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=) 3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=) 4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=) 5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=) 6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=) 7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=) 8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=) 9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=) 10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=) 11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=) 12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: MU1iNSv0C5utnDQ2BMteBttK/9W1/PSpm/wxh02VAeU=) 13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=) 14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=) 15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:d7:d0:26:36:42:f7:23:9f:8b:a3:44:3e:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jul 24 00:00:57 2026 GMT Not After : Jul 25 00:00:57 2026 GMT Subject: CN=8a86111d45ee8e2edc723013c14ce881ad919548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:ea:f3:8c:5a:6e:13:96:e5:0b:94:aa:62: 84:e8:ae:a5:5b:1f:dc:a0:16:e6:da:3c:88:8c:a2: fe:ba:48:35:97:07:2a:05:87:f5:08:05:8b:04:6e: 79:d3:54:f2:a9:2c:66:c3:d6:c1:1f:f2:28:5e:65: 8e:f2:a5:11:25:81:33:88:19:d9:cc:09:be:b2:82: b3:86:c0:cb:1a:2a:6b:e8:3a:ff:fb:bb:b0:2f:01: 63:ff:39:85:c5:d8:21:59:61:11:0a:99:76:0f:a0: 08:fb:7d:b8:09:aa:b1:0e:e8:95:dd:d9:75:04:ea: ff:23:31:ed:c8:25:73:77:4e:0e:14:c0:8c:2f:39: 10:a2:65:fc:bb:a3:11:9b:ae:55:92:df:96:2c:f4: 3f:42:aa:27:fd:af:d3:da:99:68:22:97:4d:d0:33: 5e:79:94:a7:48:ef:1c:67:cb:36:ea:08:9c:bb:b1: 78:ce:9f:5f:ba:fb:56:53:1c:16:a7:6e:b7:89:bd: 3d:53:6c:11:36:41:98:ba:c3:0e:cb:a3:33:e7:09: d2:42:51:99:b7:db:3e:9a:6a:55:d7:3a:e0:8a:56: 42:f6:9f:37:69:3c:75:28:6f:a2:d0:5c:21:a6:f1: 89:66:78:ef:3d:0c:92:41:59:ea:cf:d3:bc:80:c9: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:11:1D:45:EE:8E:2E:DC:72:30:13:C1:4C:E8:81:AD:91:95:48 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ce:14:46:45:d0:a3:2e:c7:7f:ea:9d:1a:80:6c:3f:b1:bc: 55:d3:31:0e:e2:06:b0:8f:dd:a6:2f:32:18:69:f2:c5:08:de: 39:ed:4d:91:6c:52:e2:af:c1:e2:49:51:27:a4:c6:75:e5:42: 20:1f:79:6c:60:f0:2d:d7:bd:e4:8f:83:3e:6a:0b:fe:8c:81: 59:83:7e:9e:04:e0:73:42:a7:ae:78:9b:75:39:ce:e2:63:1d: ff:81:1f:14:00:4c:7b:99:8d:c7:1b:77:cf:a7:bd:af:57:78: b4:ac:ce:d3:c9:bb:c9:1b:11:79:21:90:d2:95:2c:52:45:55: 64:7d:93:d7:31:dd:f4:90:94:5a:f0:79:46:0d:ac:fd:5a:3d: c8:56:3e:da:ed:06:ca:28:51:c6:be:a1:8b:34:54:24:56:c9: 9c:e6:b7:8f:4d:66:1d:fa:77:34:d2:e6:ea:7c:4c:e1:4a:b1: 5c:fb:bc:9c:4c:7f:a5:1f:9d:72:fb:4f:d3:70:cc:48:46:d9: bf:c0:df:30:97:7d:1e:84:f0:4b:a2:98:16:d7:7f:c5:95:42: 57:cf:78:28:20:fc:18:0e:a5:53:e6:20:86:14:49:3f:e9:96: c1:ac:57:0a:34:c8:68:0b:34:00:76:a7:8d:6e:15:3a:68:e8: d4:b7:0e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbNfQJjZC9yOfi6NEPg3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwNzI0MDAwMDU3WhcNMjYwNzI1MDAwMDU3WjAzMTEwLwYDVQQD Eyg4YTg2MTExZDQ1ZWU4ZTJlZGM3MjMwMTNjMTRjZTg4MWFkOTE5NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMXq84xabhOW5QuUqmKE6K6lWx/c oBbm2jyIjKL+ukg1lwcqBYf1CAWLBG5501TyqSxmw9bBH/IoXmWO8qURJYEziBnZ zAm+soKzhsDLGipr6Dr/+7uwLwFj/zmFxdghWWERCpl2D6AI+324CaqxDuiV3dl1 BOr/IzHtyCVzd04OFMCMLzkQomX8u6MRm65Vkt+WLPQ/Qqon/a/T2ploIpdN0DNe eZSnSO8cZ8s26gicu7F4zp9fuvtWUxwWp263ib09U2wRNkGYusMOy6Mz5wnSQlGZ t9s+mmpV1zrgilZC9p83aTx1KG+i0FwhpvGJZnjvPQySQVnqz9O8gMk97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqGER1F7o4u3HIwE8FM6IGtkZVIMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM4URkXQ oy7Hf+qdGoBsP7G8VdMxDuIGsI/dpi8yGGnyxQjeOe1NkWxS4q/B4klRJ6TGdeVC IB95bGDwLde95I+DPmoL/oyBWYN+ngTgc0KnrnibdTnO4mMd/4EfFABMe5mNxxt3 z6e9r1d4tKzO08m7yRsReSGQ0pUsUkVVZH2T1zHd9JCUWvB5Rg2s/Vo9yFY+2u0G yihRxr6hizRUJFbJnOa3j01mHfp3NNLm6nxM4UqxXPu8nEx/pR+dcvtP03DMSEbZ v8DfMJd9HoTwS6KYFtd/xZVCV894KCD8GA6lU+YghhRJP+mWwaxXCjTIaAs0AHan jW4VOmjo1LcOLA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:05 2026 by rpki-client