$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: FZS8oiixcU8dbKIoSLu5TqGGzu4WPRoqJv5i7hPCg78= Subject key identifier: D3:6C:17:82:32:76:59:F4:29:79:F1:1B:E2:07:0A:AB:3E:EF:F0:C8 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019F8FEBB3191F7994F1A9D44DA9DF719B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 190E Signing time: Thu 23 Jul 2026 17:00:16 +0000 Manifest this update: Thu 23 Jul 2026 17:00:16 +0000 Manifest next update: Fri 24 Jul 2026 17:00:16 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 3: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 4: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: S4fQra7FyBw6bk4R_f3Q2_hJKXI.roa (hash: RRFhdOKlXoVTT56pkyBH3PAGnDc0y17VQSEe9gDkJk4=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: MkQE55U5ZGsdzceNGsDCy4SiEXdDD4/XHp/vfnk2Qnk=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:eb:b3:19:1f:79:94:f1:a9:d4:4d:a9:df:71:9b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jul 23 17:00:16 2026 GMT Not After : Jul 24 17:00:16 2026 GMT Subject: CN=d36c1782327659f42979f11be2070aab3eeff0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:37:ef:7a:8a:80:12:4d:ad:61:80:7e:7f: f9:73:55:6f:ac:c7:96:cf:e8:be:49:45:ee:f8:e2: e4:4c:33:46:d9:a4:e9:04:8e:95:83:97:57:7f:c9: da:68:d5:9e:44:4f:af:18:80:59:c9:87:20:51:2b: fd:26:d0:f3:12:33:b3:39:19:ce:c4:cc:b6:31:46: 04:61:f7:cc:dd:02:be:7f:76:32:10:2e:63:91:17: b1:4f:d0:f3:82:42:47:b0:b4:58:e9:24:83:34:c9: 96:f2:cd:56:56:d6:2f:08:67:ea:aa:ed:3f:96:47: c5:82:4c:f6:b5:d4:2e:40:9c:2f:b3:bf:52:e7:b5: d8:04:f6:ed:2d:50:1a:db:46:33:78:d5:2a:09:68: c2:27:96:d1:ae:ed:60:08:92:6d:b1:0f:39:c4:b2: 58:1d:46:92:c2:5c:f8:5e:48:4f:1d:5d:d6:d6:c0: a8:0c:82:eb:67:3c:7b:34:a0:5b:55:5d:ae:ed:47: 49:3c:a1:f1:28:b4:5b:ba:57:a7:33:b5:ea:88:35: 3c:cd:0f:11:fd:a8:cc:a4:05:11:98:04:f5:38:00: 17:00:a7:3b:fa:b2:10:2e:66:0e:b0:f9:ad:f1:d9: 36:a9:24:14:fa:10:c7:d4:77:90:82:6a:de:1a:ca: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6C:17:82:32:76:59:F4:29:79:F1:1B:E2:07:0A:AB:3E:EF:F0:C8 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:34:e7:40:7b:90:e6:d7:d8:fc:1b:dc:3b:29:05:fd:2d:75: c2:bc:07:81:66:6a:dd:a5:39:47:42:e9:1a:69:fe:cd:a4:4a: d1:99:c2:ad:b5:1c:07:9f:84:19:78:f0:77:dd:e4:f1:e7:35: e1:af:92:2f:b4:65:ef:73:7c:33:dd:30:00:7d:d1:bb:c5:00: cd:c1:69:26:20:92:98:47:40:50:a2:52:c8:5e:61:ee:87:e0: 1c:da:ee:0a:a0:0f:43:3c:9d:44:d1:5c:c4:59:f3:0a:f5:ea: 11:b7:c1:78:e0:d9:a2:c7:cf:bf:1f:f8:9c:5e:79:47:d0:f6: 56:1a:f8:2e:2c:c0:a3:af:4d:34:8e:72:b3:52:3b:d0:e3:e8: cb:1f:ee:73:fb:f3:fd:21:02:2b:52:72:13:77:53:d7:04:3a: 79:d9:2f:7f:4f:c9:13:05:56:e2:0b:91:ed:85:ec:e9:d8:a4: 44:99:95:5b:ca:09:1a:d9:37:10:29:5d:fc:c8:90:06:8e:77: e0:79:d3:d3:b9:3d:22:b7:5b:b0:f3:e0:36:19:a8:bb:bc:ea: 99:6d:27:fe:c9:d0:57:1f:ec:85:4a:c6:7c:2d:34:ad:66:a1: 70:54:70:a1:94:ef:58:e6:d7:6f:8d:70:6d:16:47:4f:dd:a9: 88:17:73:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P67MZH3mU8anUTanfcZstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNzIzMTcwMDE2WhcNMjYwNzI0MTcwMDE2WjAzMTEwLwYDVQQD EyhkMzZjMTc4MjMyNzY1OWY0Mjk3OWYxMWJlMjA3MGFhYjNlZWZmMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLA373qKgBJNrWGAfn/5c1VvrMeW z+i+SUXu+OLkTDNG2aTpBI6Vg5dXf8naaNWeRE+vGIBZyYcgUSv9JtDzEjOzORnO xMy2MUYEYffM3QK+f3YyEC5jkRexT9DzgkJHsLRY6SSDNMmW8s1WVtYvCGfqqu0/ lkfFgkz2tdQuQJwvs79S57XYBPbtLVAa20YzeNUqCWjCJ5bRru1gCJJtsQ85xLJY HUaSwlz4XkhPHV3W1sCoDILrZzx7NKBbVV2u7UdJPKHxKLRbulenM7XqiDU8zQ8R /ajMpAURmAT1OAAXAKc7+rIQLmYOsPmt8dk2qSQU+hDH1HeQgmreGspZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNsF4Iydln0KXnxG+IHCqs+7/DIMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzTnQHuQ 5tfY/BvcOykF/S11wrwHgWZq3aU5R0LpGmn+zaRK0ZnCrbUcB5+EGXjwd93k8ec1 4a+SL7Rl73N8M90wAH3Ru8UAzcFpJiCSmEdAUKJSyF5h7ofgHNruCqAPQzydRNFc xFnzCvXqEbfBeODZosfPvx/4nF55R9D2Vhr4LizAo69NNI5ys1I70OPoyx/uc/vz /SECK1JyE3dT1wQ6edkvf0/JEwVW4guR7YXs6dikRJmVW8oJGtk3ECld/MiQBo53 4HnT07k9IrdbsPPgNhmou7zqmW0n/snQVx/shUrGfC00rWahcFRwoZTvWObXb41w bRZHT92piBdz0w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:12:20 2026 by rpki-client