$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: mDphMjN66rc32aWSu0Qm5dVbkhesKLvXBNhDa/A5HSw= Subject key identifier: FC:DB:F9:16:FC:22:4C:C9:3D:FB:91:E4:17:49:5C:C7:91:71:BF:58 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019F91DACB9E212394E3C3B6B90621F520C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0887 Signing time: Fri 24 Jul 2026 02:01:02 +0000 Manifest this update: Fri 24 Jul 2026 02:01:02 +0000 Manifest next update: Sat 25 Jul 2026 02:01:02 +0000 Files and hashes: 1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=) 2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: ZUyKJnV9fDnbkaxLvQKOMG2+KQHtEUjTslmx2OrPRZU=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=) 6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=) 7: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 8: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 9: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 10: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=) 11: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=) 12: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=) 13: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 14: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=) 15: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:cb:9e:21:23:94:e3:c3:b6:b9:06:21:f5:20:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jul 24 02:01:02 2026 GMT Not After : Jul 25 02:01:02 2026 GMT Subject: CN=fcdbf916fc224cc93dfb91e417495cc79171bf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:19:70:8e:e2:a3:fa:b3:0b:d1:d6:a4:08: f7:e9:b1:b7:21:8a:b8:2c:8b:d9:0c:e7:16:6e:28: 32:d6:9f:c2:be:f5:83:39:98:de:49:1a:df:23:f1: 33:eb:6a:85:7d:a8:94:60:31:2b:d0:68:2a:43:d8: 02:d5:c5:6f:6f:18:46:e2:b4:4b:95:d2:1d:e1:1f: 4e:b4:e6:c5:9d:8a:a1:f5:35:00:8f:57:51:16:64: b3:02:8f:d3:1c:a7:2e:a0:ef:44:c1:c3:92:eb:d3: 35:8e:53:90:50:86:94:8c:08:fd:5a:a1:3b:97:97: e8:ef:4a:56:a0:5d:44:af:36:42:f1:7c:4d:04:cd: ac:bc:a4:c4:68:33:71:08:df:ad:a1:0d:44:86:b5: d1:8a:99:fb:22:5b:06:cc:f8:36:3b:0f:af:2f:25: 6b:e1:ee:8b:dc:4d:fd:3c:87:33:a0:1a:c0:41:bb: 77:53:b5:13:7e:78:38:e0:22:31:ee:86:e2:15:3c: 26:54:1e:c8:f1:ee:18:e2:b9:58:2d:e0:11:75:40: 83:d2:f2:64:51:b0:ab:92:98:4b:34:d5:81:c0:6e: ee:89:2c:a4:62:25:b1:c1:28:32:dc:ee:8c:9e:74: 5e:62:68:3d:73:fa:81:13:0c:a1:09:2d:1d:c5:bd: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DB:F9:16:FC:22:4C:C9:3D:FB:91:E4:17:49:5C:C7:91:71:BF:58 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:14:78:78:24:c7:8a:cf:b4:28:d6:6d:27:6b:a1:87:24: 3c:f9:ea:21:b7:53:0a:af:39:d5:3a:8e:b9:86:0a:a7:00:af: 27:fd:07:14:22:ef:52:66:da:44:f4:61:fb:b6:66:e8:fd:a5: 9c:64:cf:6b:1f:ed:e2:fa:15:40:d8:fd:97:8f:02:84:ca:7e: 03:f6:10:78:be:ad:51:af:db:93:26:68:45:75:d7:0d:5e:85: 0d:f0:75:63:62:76:ea:66:b6:0c:9f:2b:fb:b5:a0:9d:17:8a: 1a:2d:67:cb:f3:cf:f0:75:23:95:a1:a1:d5:66:06:e7:ed:d7: 08:1a:5c:d3:f3:46:31:1e:03:04:98:25:2c:78:0d:f0:54:98: b1:ef:ec:aa:f5:ac:0e:ca:47:25:80:87:aa:89:43:74:14:4f: b1:17:34:05:01:08:f6:06:16:f8:c5:5a:71:0b:3a:74:88:a5: cf:f7:58:65:ef:3a:f1:4d:ff:f2:16:1b:a6:ae:82:b9:e8:87: ee:61:f0:81:5f:33:1c:c4:e0:12:a3:28:f5:3a:23:e9:89:0e: db:e3:56:3a:d8:4f:62:59:eb:c1:3e:fa:29:87:3a:9d:19:c9: 6e:54:8d:b8:26:24:9c:dd:d7:50:fa:e5:e0:a8:69:26:20:c5: 1a:90:4c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2sueISOU48O2uQYh9SDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwNzI0MDIwMTAyWhcNMjYwNzI1MDIwMTAyWjAzMTEwLwYDVQQD EyhmY2RiZjkxNmZjMjI0Y2M5M2RmYjkxZTQxNzQ5NWNjNzkxNzFiZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscIZcI7io/qzC9HWpAj36bG3IYq4 LIvZDOcWbigy1p/CvvWDOZjeSRrfI/Ez62qFfaiUYDEr0GgqQ9gC1cVvbxhG4rRL ldId4R9OtObFnYqh9TUAj1dRFmSzAo/THKcuoO9EwcOS69M1jlOQUIaUjAj9WqE7 l5fo70pWoF1ErzZC8XxNBM2svKTEaDNxCN+toQ1EhrXRipn7IlsGzPg2Ow+vLyVr 4e6L3E39PIczoBrAQbt3U7UTfng44CIx7obiFTwmVB7I8e4Y4rlYLeARdUCD0vJk UbCrkphLNNWBwG7uiSykYiWxwSgy3O6MnnReYmg9c/qBEwyhCS0dxb0fXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzb+Rb8IkzJPfuR5BdJXMeRcb9YMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiYUeHgk x4rPtCjWbSdroYckPPnqIbdTCq851TqOuYYKpwCvJ/0HFCLvUmbaRPRh+7Zm6P2l nGTPax/t4voVQNj9l48ChMp+A/YQeL6tUa/bkyZoRXXXDV6FDfB1Y2J26ma2DJ8r +7WgnReKGi1ny/PP8HUjlaGh1WYG5+3XCBpc0/NGMR4DBJglLHgN8FSYse/sqvWs DspHJYCHqolDdBRPsRc0BQEI9gYW+MVacQs6dIilz/dYZe868U3/8hYbpq6CueiH 7mHwgV8zHMTgEqMo9Toj6YkO2+NWOthPYlnrwT76KYc6nRnJblSNuCYknN3XUPrl 4KhpJiDFGpBMDw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:02:22 2026 by rpki-client