$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: guT7SxPaOj2OS9D+udjo1b++JP6kt1DedxeBe9EO+8g= Subject key identifier: 22:89:3D:90:4E:D1:CF:94:7E:A3:DC:D7:F4:1F:1F:2D:B7:75:E3:BF Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019F8F10E836577E349F49ED56DBEB93CB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0418 Signing time: Thu 23 Jul 2026 13:01:17 +0000 Manifest this update: Thu 23 Jul 2026 13:01:17 +0000 Manifest next update: Fri 24 Jul 2026 13:01:17 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: mu5F3D2hvejFqxW/ie5jNCMCcg8I7HeP/pPlcM+JdzQ=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 7: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 8: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (hash: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=) 9: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 10: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 11: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 12: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 13: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 14: juRzxVJwarhIfSklgOiQQRJcr-Q.roa (hash: MRCpSk5iY23hustIzHxvVTRKj+fIV+g79/vD2SakhjU=) 15: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 16: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 17: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:10:e8:36:57:7e:34:9f:49:ed:56:db:eb:93:cb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jul 23 13:01:17 2026 GMT Not After : Jul 24 13:01:17 2026 GMT Subject: CN=22893d904ed1cf947ea3dcd7f41f1f2db775e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:77:5d:60:0d:c5:4d:2a:7d:2c:fc:ca:67: ec:64:35:42:6b:a7:c9:ef:17:f5:52:4c:8a:b7:8a: b8:4a:73:f1:3a:4c:21:e5:eb:ea:73:70:bd:d2:3a: dd:37:f1:bc:7e:34:54:d6:59:0d:e3:15:9e:d9:d2: db:d0:d2:37:b0:76:62:27:02:8a:81:64:91:4b:11: 8e:db:5d:a0:6a:f0:98:df:7c:06:22:c9:fd:b8:ac: 55:33:70:f8:ad:0f:7a:c7:98:67:c8:fb:db:d9:5d: 2f:70:47:31:a6:0a:01:d3:c4:fa:e9:1f:e1:d6:49: ce:fe:8d:2e:49:08:29:9a:a8:26:c3:e2:91:e4:f7: 8e:1d:4f:8e:99:9e:a7:4e:eb:5d:35:35:9a:21:12: 9d:aa:8b:b1:66:af:7c:cd:3e:29:e0:f6:87:7e:b8: 71:ce:3e:af:4c:94:d7:92:f7:61:ee:c5:11:31:d8: ec:ed:a6:c5:96:15:09:13:b9:19:a7:69:93:6e:67: c1:58:a8:1e:85:b6:cd:ee:5a:9f:89:d9:e4:ec:bc: c2:e4:6d:b3:37:64:5e:40:df:44:da:fc:a9:b3:42: 71:a1:d7:95:c9:5c:c0:88:b7:a7:26:83:5e:00:96: 7f:0d:fc:92:22:9e:1d:d8:07:32:66:54:10:c5:c1: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:3D:90:4E:D1:CF:94:7E:A3:DC:D7:F4:1F:1F:2D:B7:75:E3:BF X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b9:2f:48:8c:d1:d9:1a:3b:80:42:ae:bc:cf:04:b8:e9:a4: 82:bf:31:71:dc:26:1f:b4:c9:b5:4a:40:65:29:91:38:b6:85: e5:6c:15:b8:96:7c:ec:58:4c:9b:39:c2:22:1d:7e:d6:f4:cd: f8:8d:98:1d:9c:58:7b:2e:f7:8e:5f:1f:d6:3e:26:87:32:0c: 88:6e:a6:f6:bc:a0:d3:18:89:5f:8f:2b:28:32:81:4c:7a:17: f5:49:25:4c:d5:6c:98:57:c4:60:c2:35:c4:05:19:5a:14:92: 2e:0a:d2:36:11:12:88:7a:36:d6:03:15:cc:c9:ab:5d:19:ae: 7f:2b:bb:f6:a5:2b:ec:da:5b:3c:90:92:76:6d:99:23:e3:45: 48:a6:d7:11:95:f4:1e:99:b8:1f:b2:5d:1f:ff:92:58:89:85: bd:5d:04:21:23:7f:7a:2f:37:c4:30:98:e7:14:23:7b:86:e6: c8:b2:6f:ab:f3:c4:29:df:87:dd:d6:3c:52:5e:44:b3:1a:8e: 7c:16:2d:17:65:f0:2b:f4:47:e9:03:a6:25:8d:66:dc:aa:a9: d4:77:90:5c:a0:17:90:8e:b4:2a:4b:b8:33:8d:ea:03:3f:0a: 28:44:d7:fb:9a:05:34:2e:3a:15:5c:20:96:dd:d7:08:b7:c0: 52:6d:76:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PEOg2V340n0ntVtvrk8tzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNzIzMTMwMTE3WhcNMjYwNzI0MTMwMTE3WjAzMTEwLwYDVQQD EygyMjg5M2Q5MDRlZDFjZjk0N2VhM2RjZDdmNDFmMWYyZGI3NzVlM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu93XWANxU0qfSz8ymfsZDVCa6fJ 7xf1UkyKt4q4SnPxOkwh5evqc3C90jrdN/G8fjRU1lkN4xWe2dLb0NI3sHZiJwKK gWSRSxGO212gavCY33wGIsn9uKxVM3D4rQ96x5hnyPvb2V0vcEcxpgoB08T66R/h 1knO/o0uSQgpmqgmw+KR5PeOHU+OmZ6nTutdNTWaIRKdqouxZq98zT4p4PaHfrhx zj6vTJTXkvdh7sURMdjs7abFlhUJE7kZp2mTbmfBWKgehbbN7lqfidnk7LzC5G2z N2ReQN9E2vyps0JxodeVyVzAiLenJoNeAJZ/DfySIp4d2AcyZlQQxcFbLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKJPZBO0c+UfqPc1/QfHy23deO/MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLkvSIzR 2Ro7gEKuvM8EuOmkgr8xcdwmH7TJtUpAZSmROLaF5WwVuJZ87FhMmznCIh1+1vTN +I2YHZxYey73jl8f1j4mhzIMiG6m9ryg0xiJX48rKDKBTHoX9UklTNVsmFfEYMI1 xAUZWhSSLgrSNhESiHo21gMVzMmrXRmufyu79qUr7NpbPJCSdm2ZI+NFSKbXEZX0 Hpm4H7JdH/+SWImFvV0EISN/ei83xDCY5xQje4bmyLJvq/PEKd+H3dY8Ul5EsxqO fBYtF2XwK/RH6QOmJY1m3Kqp1HeQXKAXkI60Kku4M43qAz8KKETX+5oFNC46FVwg lt3XCLfAUm122w== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:55 2026 by rpki-client