$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: kvUZS0BY/QgDawo2J6AAF+9oKCqRDlNxTr5e7Piv+pw= Subject key identifier: 06:18:28:B2:26:DB:A3:EC:E9:86:AE:7C:1C:CD:6E:8B:95:C1:C2:18 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019F91DA99FE9C6939F98ED7E499006963F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 16D7 Signing time: Fri 24 Jul 2026 02:00:50 +0000 Manifest this update: Fri 24 Jul 2026 02:00:50 +0000 Manifest next update: Sat 25 Jul 2026 02:00:50 +0000 Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=) 2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=) 3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=) 4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=) 5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=) 6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=) 7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=) 8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=) 9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=) 10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=) 11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=) 12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=) 13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: bia1TiPqyZ0lQ3edmBeRHJr8xYSVCYlvAHO75tKsSWs=) 14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=) 15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=) 16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=) 17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=) 18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:99:fe:9c:69:39:f9:8e:d7:e4:99:00:69:63:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jul 24 02:00:50 2026 GMT Not After : Jul 25 02:00:50 2026 GMT Subject: CN=061828b226dba3ece986ae7c1ccd6e8b95c1c218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:66:c5:c1:40:4e:e0:07:2c:1d:e6:dd:8a: 64:f7:ba:d6:25:20:52:84:ff:b6:fe:16:51:be:3e: 83:e2:02:41:10:ec:0e:6d:83:0c:75:ee:79:4c:34: 75:64:ab:fd:4c:40:de:c3:0c:09:e3:88:28:39:2d: 22:90:ee:2a:81:2b:15:73:ae:e4:20:ca:d8:c8:ee: 07:57:1e:4c:3b:5e:32:fc:6c:f3:ba:cf:c1:fb:4b: 1f:19:b8:d4:fc:3b:8e:1a:94:fd:90:87:08:a2:f2: 65:be:93:43:7f:64:9e:8b:94:f6:69:b2:3a:fe:80: d6:80:5d:cf:0a:7c:f3:10:c3:c2:3e:72:73:ff:98: e1:8b:90:aa:75:6f:ba:4b:4e:8c:2a:c2:d1:aa:bb: db:95:b5:46:b2:a3:6f:09:e8:4c:ef:27:a2:fa:ee: 09:76:25:3b:16:a4:6a:b1:10:8b:19:76:e7:09:2f: e8:29:89:35:82:bd:92:76:f2:55:a1:bc:03:8d:98: 20:1e:7f:47:e5:38:17:15:08:94:39:a4:13:c8:6a: 0b:96:17:cd:1e:f9:86:a5:1b:37:45:4d:bd:9d:b2: 6f:b1:e9:b3:68:3f:2b:61:a6:7c:02:87:3b:f9:b0: c2:20:b8:e3:5a:2d:3d:83:4a:2f:02:2a:75:ad:a2: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:18:28:B2:26:DB:A3:EC:E9:86:AE:7C:1C:CD:6E:8B:95:C1:C2:18 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ca:a0:21:79:cb:9f:38:e0:a8:6c:e2:7a:f1:f4:79:29:19: 0f:a1:a3:9f:d0:9a:67:a0:d1:07:49:ed:04:1b:1f:b2:06:57: 2b:3e:1f:b6:54:4f:6b:8a:00:f0:c9:c1:78:f0:23:de:ea:ac: 21:01:37:3f:56:2f:ba:86:d3:5d:b0:f2:0b:28:bd:97:ad:29: de:ba:e1:0a:5e:cd:e3:a4:a0:28:35:06:b6:a1:15:1d:cf:a6: de:90:98:b1:46:34:ad:2c:53:d9:db:e0:fe:80:87:c8:7b:aa: a2:c9:d0:f2:63:db:27:34:2d:29:06:91:50:75:20:20:7d:5f: 9d:cc:76:a8:bd:da:93:ad:9a:36:41:9c:0b:73:68:96:66:be: d9:6b:dc:1a:cc:4d:53:6f:aa:06:60:94:9d:f9:67:bb:b2:79: 89:ea:52:4e:f1:1c:e3:4c:37:fe:94:56:1f:f5:fe:fa:61:2b: 03:55:6a:96:c7:af:a0:5d:0d:48:b6:6f:21:03:de:7f:71:b5: 28:c5:15:48:b5:64:00:e5:c3:72:9a:50:32:e4:40:23:88:c7: d8:0e:0f:5f:c1:aa:30:7b:84:53:6f:56:b2:1a:cf:37:4e:ed: c2:73:8d:cf:28:6e:c0:bd:9d:88:81:a2:ae:15:2a:7d:cf:e6: d5:9d:1b:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2pn+nGk5+Y7X5JkAaWP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwNzI0MDIwMDUwWhcNMjYwNzI1MDIwMDUwWjAzMTEwLwYDVQQD EygwNjE4MjhiMjI2ZGJhM2VjZTk4NmFlN2MxY2NkNmU4Yjk1YzFjMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAlmxcFATuAHLB3m3Ypk97rWJSBS hP+2/hZRvj6D4gJBEOwObYMMde55TDR1ZKv9TEDewwwJ44goOS0ikO4qgSsVc67k IMrYyO4HVx5MO14y/Gzzus/B+0sfGbjU/DuOGpT9kIcIovJlvpNDf2Sei5T2abI6 /oDWgF3PCnzzEMPCPnJz/5jhi5CqdW+6S06MKsLRqrvblbVGsqNvCehM7yei+u4J diU7FqRqsRCLGXbnCS/oKYk1gr2SdvJVobwDjZggHn9H5TgXFQiUOaQTyGoLlhfN HvmGpRs3RU29nbJvsemzaD8rYaZ8Aoc7+bDCILjjWi09g0ovAip1raKbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYYKLIm26Ps6YaufBzNbouVwcIYMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMqgIXnL nzjgqGzievH0eSkZD6Gjn9CaZ6DRB0ntBBsfsgZXKz4ftlRPa4oA8MnBePAj3uqs IQE3P1YvuobTXbDyCyi9l60p3rrhCl7N46SgKDUGtqEVHc+m3pCYsUY0rSxT2dvg /oCHyHuqosnQ8mPbJzQtKQaRUHUgIH1fncx2qL3ak62aNkGcC3Nolma+2WvcGsxN U2+qBmCUnflnu7J5iepSTvEc40w3/pRWH/X++mErA1VqlsevoF0NSLZvIQPef3G1 KMUVSLVkAOXDcppQMuRAI4jH2A4PX8GqMHuEU29WshrPN07twnONzyhuwL2diIGi rhUqfc/m1Z0b9g== -----END CERTIFICATE-----Generated at Fri Jul 24 05:48:40 2026 by rpki-client