$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: ekUOKI2d8Gbf3c0OCbx5abyYtkNIX9sAAQruSGybLFc= Subject key identifier: F0:11:52:01:DF:9E:A7:F2:AB:6E:F1:AC:E6:6E:98:C9:C7:53:80:2D Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 019F9090C8783F476F774DCC7573B3DF0897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 014D Signing time: Thu 23 Jul 2026 20:00:35 +0000 Manifest this update: Thu 23 Jul 2026 20:00:35 +0000 Manifest next update: Fri 24 Jul 2026 20:00:35 +0000 Files and hashes: 1: 19UOCWKK4FAiGbvGJG5kxsDMJ_8.roa (hash: w6SS0Lj91tIg6RJx2kbnjFRnAKrUr5Bp3JesWHPQF7U=) 2: 7dS3f87b8rClIQfQDt7ZrLOCFN0.roa (hash: jtFM+HhYEhIeATKc9POq4FW4Qi1yjd0neVJZ42IO2dk=) 3: EOYuq-N-rljnSKK6-AdsiYeEJ4E.roa (hash: 0ClAECfZy+07C6UFRDS3kRbp9F1kRxfmXvcjT8j5d7Q=) 4: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 5: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (hash: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=) 6: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 7: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=) 8: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 9: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 10: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: 9mY7BLa3rucgFyRINS4aKL80LNpHwXLzenZB+g2u94U=) 11: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=) 12: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:c8:78:3f:47:6f:77:4d:cc:75:73:b3:df:08:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Jul 23 20:00:35 2026 GMT Not After : Jul 24 20:00:35 2026 GMT Subject: CN=f0115201df9ea7f2ab6ef1ace66e98c9c753802d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:16:97:68:b7:32:aa:98:c7:86:89:eb:1a: 26:ce:5e:42:55:a9:6a:3e:f4:de:70:ab:4d:9a:1e: da:68:63:13:b5:2e:ed:42:1b:88:68:31:74:69:88: 3e:35:3a:66:d4:b3:91:79:40:45:6e:d8:6e:e1:67: 65:26:54:b0:5b:ae:ab:48:00:6c:15:bd:a0:92:7f: 1d:33:33:1d:56:fe:4b:bd:71:34:6a:01:50:97:86: f2:4d:12:2c:78:60:cc:bb:a0:06:fc:73:38:12:41: 0a:2d:49:e7:49:98:d8:5b:39:71:91:00:31:04:6e: eb:15:52:4d:bb:06:32:48:74:f0:6e:9f:54:90:b0: 88:43:67:21:a1:96:0e:57:49:68:7a:f1:e8:ef:84: 3e:a6:1d:0d:84:ba:82:d5:b6:d4:bc:67:8a:a6:02: c0:54:bb:ff:af:e4:c2:6d:15:0a:5c:65:08:c3:7a: db:60:64:81:57:02:db:24:da:64:55:e7:6b:7a:44: b4:0f:3f:42:5d:da:da:34:2a:6d:fb:b9:2c:44:84: ad:8d:82:d3:08:45:ba:d9:25:bf:6b:8d:4b:6c:14: c0:a9:c3:4e:c1:f2:58:10:d9:dc:cd:4e:2e:96:8f: 0a:36:f0:1d:10:09:92:e4:22:e2:34:49:89:73:ab: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:11:52:01:DF:9E:A7:F2:AB:6E:F1:AC:E6:6E:98:C9:C7:53:80:2D X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5e:f2:10:3d:f3:60:75:e4:3c:d6:3a:b5:4a:fe:71:d8:d3: 2b:e7:24:86:66:ee:ee:cf:65:a2:75:6b:35:83:1d:9f:86:3a: 14:eb:ea:69:3d:ff:6a:e7:f5:1a:6d:22:03:f1:fa:9d:22:c5: 65:2c:27:24:5a:02:27:7d:e9:6c:4d:95:ea:b2:68:bb:b5:ea: d6:45:76:22:22:1a:78:d2:9c:59:e3:db:c2:b5:41:78:5e:9c: f5:34:59:cd:39:d9:69:98:3f:b4:e3:89:f7:ac:6e:7f:1b:94: c3:fe:eb:e2:66:4b:fb:fb:c8:2a:09:34:9a:70:a7:9f:4b:df: 62:b3:37:89:5b:59:f3:76:3e:4d:d5:63:d2:2b:31:7d:9b:11: d9:2b:39:1a:ec:fd:cb:aa:cd:42:c7:51:9a:65:82:cb:b6:32: b3:c1:f4:62:e3:7b:32:63:64:19:b3:b1:a6:61:a1:db:61:1e: fc:e7:8c:7f:4d:9c:3f:64:55:76:d9:50:f4:f3:81:54:53:18: 90:3e:ac:92:d3:43:55:36:bf:93:a7:e9:21:cd:29:e0:99:4a: c6:5c:49:ca:52:cb:ae:4e:49:39:82:fa:8a:66:15:3c:27:ea: 29:5e:df:73:7d:e4:67:dc:dd:72:03:2a:ac:cf:13:13:4c:c6: d3:a9:45:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkMh4P0dvd03MdXOz3wiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwNzIzMjAwMDM1WhcNMjYwNzI0MjAwMDM1WjAzMTEwLwYDVQQD EyhmMDExNTIwMWRmOWVhN2YyYWI2ZWYxYWNlNjZlOThjOWM3NTM4MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcWl2i3MqqYx4aJ6xomzl5CValq PvTecKtNmh7aaGMTtS7tQhuIaDF0aYg+NTpm1LOReUBFbthu4WdlJlSwW66rSABs Fb2gkn8dMzMdVv5LvXE0agFQl4byTRIseGDMu6AG/HM4EkEKLUnnSZjYWzlxkQAx BG7rFVJNuwYySHTwbp9UkLCIQ2choZYOV0loevHo74Q+ph0NhLqC1bbUvGeKpgLA VLv/r+TCbRUKXGUIw3rbYGSBVwLbJNpkVedrekS0Dz9CXdraNCpt+7ksRIStjYLT CEW62SW/a41LbBTAqcNOwfJYENnczU4ulo8KNvAdEAmS5CLiNEmJc6u2IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPARUgHfnqfyq27xrOZumMnHU4AtMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI17yED3z YHXkPNY6tUr+cdjTK+ckhmbu7s9lonVrNYMdn4Y6FOvqaT3/auf1Gm0iA/H6nSLF ZSwnJFoCJ33pbE2V6rJou7Xq1kV2IiIaeNKcWePbwrVBeF6c9TRZzTnZaZg/tOOJ 96xufxuUw/7r4mZL+/vIKgk0mnCnn0vfYrM3iVtZ83Y+TdVj0isxfZsR2Ss5Guz9 y6rNQsdRmmWCy7Yys8H0YuN7MmNkGbOxpmGh22Ee/OeMf02cP2RVdtlQ9POBVFMY kD6sktNDVTa/k6fpIc0p4JlKxlxJylLLrk5JOYL6imYVPCfqKV7fc33kZ9zdcgMq rM8TE0zG06lFxw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:42:12 2026 by rpki-client