$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: vlFjv0ZyRxf9+hliiqQX+rBZmRy1ErmZyH+OlBE+B7w= Subject key identifier: F8:4D:E7:43:6E:DB:13:9F:02:D7:34:71:10:56:18:28:38:D5:E8:FB Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019F8EA2BC9AD1EE3543E1BF4FCCF9CB4D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 19D5 Signing time: Thu 23 Jul 2026 11:00:57 +0000 Manifest this update: Thu 23 Jul 2026 11:00:57 +0000 Manifest next update: Fri 24 Jul 2026 11:00:57 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: lFSG1oTtPy9nQ0t7wAEw/pCpsVEfLt5YN3VP7tc/eV8=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:bc:9a:d1:ee:35:43:e1:bf:4f:cc:f9:cb:4d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jul 23 11:00:57 2026 GMT Not After : Jul 24 11:00:57 2026 GMT Subject: CN=f84de7436edb139f02d734711056182838d5e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:10:31:c5:fc:53:90:40:0a:9f:ef:ca:8b: 04:4b:27:42:30:92:1b:27:9a:62:53:86:82:5d:fb: 51:7b:4b:3f:ee:8b:a2:1b:93:4e:9b:48:8c:24:12: 1e:11:a3:83:6e:b6:df:27:0b:67:df:7e:5c:26:ea: 29:44:a7:e3:00:77:2d:14:7e:5a:4e:a6:05:74:15: fe:86:78:4f:d5:59:e2:be:13:9b:9b:ba:ff:9a:a6: 35:e4:68:e3:b7:f9:fc:94:18:e0:71:d0:c3:5c:39: a0:f9:88:41:cf:24:f5:d9:ec:c7:1c:9c:6d:e6:e0: 2a:25:0a:34:15:dd:39:68:b1:08:35:25:e6:08:66: 05:02:bb:2e:e4:43:37:74:22:f6:9f:93:9f:bb:42: 70:75:ef:da:8a:8a:1d:97:81:01:75:1e:99:e4:bf: a7:7e:ed:26:18:f4:3d:a2:a3:ce:e6:80:01:64:6c: b9:c8:84:5b:dc:f4:ce:0c:c3:f2:d2:a8:84:6e:b8: 4a:35:d0:4f:37:3c:de:87:ae:1a:b9:c4:a7:6d:13: 99:09:f7:c3:6c:5b:6d:63:25:e0:b7:d9:5b:b5:a5: 87:cf:da:94:bb:d1:bb:ab:b6:b1:35:41:92:27:9d: 3d:93:1c:36:85:f0:68:60:53:a0:ff:da:e8:06:8d: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4D:E7:43:6E:DB:13:9F:02:D7:34:71:10:56:18:28:38:D5:E8:FB X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:96:90:3e:e4:58:7f:28:b1:71:32:db:05:43:6b:b6:6f:3f: e9:92:6b:40:48:20:8f:3f:49:d8:c7:3b:44:f4:d0:25:ba:ea: f6:53:d9:28:d8:22:ef:f3:05:81:53:e2:5e:98:52:69:36:6c: b2:9b:64:a2:59:96:15:03:e0:65:2a:03:19:3c:a4:30:ee:19: 4b:8c:cc:f7:b1:c2:bd:f9:29:ba:94:43:d0:99:0b:86:ec:eb: 93:14:ef:bc:ef:38:ca:7a:17:b7:96:7c:e6:1f:ff:63:81:c0: f3:98:7f:17:3f:72:70:c6:ea:37:e0:ad:23:2a:25:76:44:34: e4:2f:eb:52:8b:17:ed:49:35:00:db:ce:d4:52:6e:12:0f:b2: 16:ea:b4:6b:92:1f:03:b2:fe:66:07:ff:78:79:42:dd:cd:c8: 42:1c:12:ee:10:d4:91:82:d7:76:15:39:fe:aa:ff:07:70:e5: b4:85:e5:5b:49:85:58:14:f2:47:6e:9c:34:2f:4b:5a:e0:12: 9f:ca:6c:d5:88:94:18:9e:54:f4:eb:24:1e:88:38:52:ab:a7: 49:36:f2:87:a8:9d:af:d5:9a:2c:f3:f6:c2:92:c8:19:40:63: 85:4b:02:07:8e:a6:35:7d:20:37:a8:c4:fc:8b:8c:c2:e8:9a: 10:77:b8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Oorya0e41Q+G/T8z5y00+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNzIzMTEwMDU3WhcNMjYwNzI0MTEwMDU3WjAzMTEwLwYDVQQD EyhmODRkZTc0MzZlZGIxMzlmMDJkNzM0NzExMDU2MTgyODM4ZDVlOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk8QMcX8U5BACp/vyosESydCMJIb J5piU4aCXftRe0s/7ouiG5NOm0iMJBIeEaODbrbfJwtn335cJuopRKfjAHctFH5a TqYFdBX+hnhP1VnivhObm7r/mqY15Gjjt/n8lBjgcdDDXDmg+YhBzyT12ezHHJxt 5uAqJQo0Fd05aLEINSXmCGYFArsu5EM3dCL2n5Ofu0Jwde/aioodl4EBdR6Z5L+n fu0mGPQ9oqPO5oABZGy5yIRb3PTODMPy0qiEbrhKNdBPNzzeh64aucSnbROZCffD bFttYyXgt9lbtaWHz9qUu9G7q7axNUGSJ509kxw2hfBoYFOg/9roBo1mzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhN50Nu2xOfAtc0cRBWGCg41ej7MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZaQPuRY fyixcTLbBUNrtm8/6ZJrQEggjz9J2Mc7RPTQJbrq9lPZKNgi7/MFgVPiXphSaTZs sptkolmWFQPgZSoDGTykMO4ZS4zM97HCvfkpupRD0JkLhuzrkxTvvO84ynoXt5Z8 5h//Y4HA85h/Fz9ycMbqN+CtIyoldkQ05C/rUosX7Uk1ANvO1FJuEg+yFuq0a5If A7L+Zgf/eHlC3c3IQhwS7hDUkYLXdhU5/qr/B3DltIXlW0mFWBTyR26cNC9LWuAS n8ps1YiUGJ5U9OskHog4UqunSTbyh6idr9WaLPP2wpLIGUBjhUsCB46mNX0gN6jE /IuMwuiaEHe4lQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:43 2026 by rpki-client