$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: Rn7N8WKuzFvaxreMAiJ7fm1hca4ekkZ2LAo0YWqg5Ug= Subject key identifier: 6E:3A:49:4C:E7:E0:FB:BE:A6:A3:8D:ED:4B:CF:2C:35:E6:9D:B9:EA Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019F905AB5E941D26A11A034D862E168B5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 19D2 Signing time: Thu 23 Jul 2026 19:01:31 +0000 Manifest this update: Thu 23 Jul 2026 19:01:31 +0000 Manifest next update: Fri 24 Jul 2026 19:01:31 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: MHvQYC4YjxD3qYKLXOGFu0GKj2xA7QZbdejb/sAHE5E=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 6: ksti9Cz-YWGrPG3nUQtWw4iwXW8.roa (hash: QXzCZnDrQ2SXERmOPrfezHiPL5LdEJk0j9fQC6saTKg=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa (hash: 9EEvX12mvolHxSL/Y8mliHI1ROhGnZ9siBUYGBNhM2A=) 10: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:b5:e9:41:d2:6a:11:a0:34:d8:62:e1:68:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jul 23 19:01:31 2026 GMT Not After : Jul 24 19:01:31 2026 GMT Subject: CN=6e3a494ce7e0fbbea6a38ded4bcf2c35e69db9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:95:88:a5:fa:b8:0b:2a:00:ce:2a:45:fd: 4c:4e:08:a0:6b:aa:9a:48:eb:6a:8f:19:8f:0a:17: aa:90:97:22:e8:ad:b4:20:0e:24:b6:7c:2c:dd:f5: c8:41:6f:42:6d:8d:09:76:d1:f6:4f:b9:85:10:51: bb:06:2e:24:ec:4b:75:a9:3c:6c:eb:d8:2f:62:e0: e3:55:86:8d:47:81:e3:35:e2:43:db:0a:c6:a9:00: fa:c9:bd:0d:ae:9f:54:f1:a8:9f:66:c0:53:5f:07: 69:4c:e1:6a:4b:3e:23:7d:4b:fe:3d:88:fd:98:3f: 2e:c8:ea:e6:c6:fa:d7:fe:09:c7:1d:ee:91:9e:00: 54:20:1d:3d:98:07:7d:58:7d:f6:b4:54:d4:ee:d9: ef:61:51:c6:dc:f0:c1:22:6e:81:05:a9:dd:d3:4b: ee:c3:b9:0a:b2:62:95:fa:e7:22:ea:7a:ac:be:32: 96:7e:63:d1:ac:12:8a:dc:e8:a1:04:d5:6a:0b:52: 70:65:58:b1:33:6c:da:9f:cd:70:15:c5:f5:f4:51: 93:a2:a6:db:32:79:e4:01:28:f9:5f:1a:c5:6b:c9: 0c:9e:20:77:94:79:81:93:8f:f8:94:3a:d9:57:ea: d9:e7:ae:a6:5c:b8:78:17:9b:42:10:f8:ba:b8:fd: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3A:49:4C:E7:E0:FB:BE:A6:A3:8D:ED:4B:CF:2C:35:E6:9D:B9:EA X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2e:7c:d5:50:8a:85:d4:ee:6f:f3:01:11:f4:a9:2d:26:e2: be:b6:db:bb:5f:d4:64:9d:71:46:f0:23:81:26:ae:69:61:71: b8:30:29:af:9f:cb:3b:38:26:84:dd:92:48:fd:17:0a:cf:f7: b6:88:86:1d:51:7f:55:f0:0b:70:ba:dd:a7:34:c7:da:c1:b5: 6c:51:f4:d3:cf:d9:1c:fe:33:a7:40:03:de:e0:ad:92:1e:00: 64:97:10:80:4a:6d:24:b4:3e:3e:d1:6e:55:12:9b:f9:6d:5a: 52:24:8f:49:95:c2:58:af:7f:20:4b:00:8f:3c:81:63:0d:af: 58:93:b3:99:d6:35:c1:2c:74:e8:8a:34:bf:97:35:ce:7d:46: 1e:9c:e6:55:cc:e0:f1:f4:12:83:f2:a9:7f:9b:15:8b:ba:f9: 91:f1:7f:dd:fa:93:42:7a:11:ed:e8:2c:dd:b3:f7:33:e6:89: 22:bd:7d:b8:7f:21:be:86:b2:f7:c0:90:b6:9c:ac:49:98:cf: 11:ba:7b:fc:53:10:86:1a:9d:2c:04:16:3a:a6:26:a1:2f:71: 0f:3b:ec:a1:f9:64:36:04:3f:d8:02:d3:04:75:5e:16:f0:c7: 21:c8:2e:5d:57:50:e0:73:7f:d2:f8:14:e2:11:53:2a:dc:e2: fb:59:24:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWrXpQdJqEaA02GLhaLWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwNzIzMTkwMTMxWhcNMjYwNzI0MTkwMTMxWjAzMTEwLwYDVQQD Eyg2ZTNhNDk0Y2U3ZTBmYmJlYTZhMzhkZWQ0YmNmMmMzNWU2OWRiOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFiViKX6uAsqAM4qRf1MTgiga6qa SOtqjxmPCheqkJci6K20IA4ktnws3fXIQW9CbY0JdtH2T7mFEFG7Bi4k7Et1qTxs 69gvYuDjVYaNR4HjNeJD2wrGqQD6yb0Nrp9U8aifZsBTXwdpTOFqSz4jfUv+PYj9 mD8uyOrmxvrX/gnHHe6RngBUIB09mAd9WH32tFTU7tnvYVHG3PDBIm6BBand00vu w7kKsmKV+uci6nqsvjKWfmPRrBKK3OihBNVqC1JwZVixM2zan81wFcX19FGToqbb MnnkASj5XxrFa8kMniB3lHmBk4/4lDrZV+rZ566mXLh4F5tCEPi6uP1/BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG46SUzn4Pu+pqON7UvPLDXmnbnqMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy581VCK hdTub/MBEfSpLSbivrbbu1/UZJ1xRvAjgSauaWFxuDApr5/LOzgmhN2SSP0XCs/3 toiGHVF/VfALcLrdpzTH2sG1bFH008/ZHP4zp0AD3uCtkh4AZJcQgEptJLQ+PtFu VRKb+W1aUiSPSZXCWK9/IEsAjzyBYw2vWJOzmdY1wSx06Io0v5c1zn1GHpzmVczg 8fQSg/Kpf5sVi7r5kfF/3fqTQnoR7egs3bP3M+aJIr19uH8hvoay98CQtpysSZjP Ebp7/FMQhhqdLAQWOqYmoS9xDzvsoflkNgQ/2ALTBHVeFvDHIcguXVdQ4HN/0vgU 4hFTKtzi+1kknA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:04 2026 by rpki-client