$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: KqDy47qfMClOOadpd+GDyVwpIygPEcbBz8eH8Ze9lHg= Subject key identifier: B8:DF:5C:72:15:87:FE:9E:6D:80:F5:C9:10:8C:6B:CB:D6:54:72:02 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019F91DA37C307ADB2089EEDB1DD860BCCB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0274 Signing time: Fri 24 Jul 2026 02:00:25 +0000 Manifest this update: Fri 24 Jul 2026 02:00:25 +0000 Manifest next update: Sat 25 Jul 2026 02:00:25 +0000 Files and hashes: 1: 0S1k7oej5a99BP84IOy__5DkxkE.roa (hash: IggpAgfGH+QD4AgyQAEhhw+NI28xcrqCtMio8IcVXtA=) 2: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 3: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: 3Hitq2kmCvkIZgL2/uWP9C5371FsKDhL8Jp51AjuVMU=) 4: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 5: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 6: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 7: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 8: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 9: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 10: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 11: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 12: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:37:c3:07:ad:b2:08:9e:ed:b1:dd:86:0b:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jul 24 02:00:25 2026 GMT Not After : Jul 25 02:00:25 2026 GMT Subject: CN=b8df5c721587fe9e6d80f5c9108c6bcbd6547202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:d5:c1:33:74:58:b9:b1:0f:20:90:f4:2d: 66:48:e6:80:21:d0:76:88:d4:63:e6:10:30:73:d3: 17:90:2e:2e:d8:fd:f8:aa:63:05:8e:68:5c:af:14: 0a:01:2a:22:31:8d:0a:ed:fb:04:33:68:67:65:ce: 00:df:9b:4d:69:84:1d:4d:66:15:df:8c:04:31:17: ac:d1:31:3f:02:a2:20:28:39:32:1c:45:cf:06:62: 65:74:00:8c:31:e8:02:9d:f7:84:98:b1:f7:7a:90: 3a:b6:65:4f:e3:69:62:1e:90:32:8e:4b:45:66:f6: c0:72:fa:7d:6c:d6:33:9d:b0:a3:18:44:dc:08:b1: 0c:ca:ae:d2:6a:ac:60:df:b4:3d:1b:0b:6e:40:c0: 14:7d:f2:79:76:82:4d:bd:eb:f1:c4:c9:3c:bd:92: 60:b9:47:5d:45:71:8f:c7:31:11:48:48:08:a0:2f: c1:88:6a:b1:cd:33:17:99:1f:15:73:f8:d2:26:bf: e5:06:d8:ec:36:50:60:90:cd:3d:79:cb:7d:6e:15: 94:79:50:7e:06:98:5a:cb:65:4f:73:a6:6c:5d:5f: 51:85:39:22:a3:43:43:30:98:b5:86:cc:88:b1:58: 68:7e:1c:d4:94:09:94:d6:67:3f:d0:7d:4a:d7:df: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:5C:72:15:87:FE:9E:6D:80:F5:C9:10:8C:6B:CB:D6:54:72:02 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7b:4b:14:ef:bf:16:33:8d:df:e7:6b:53:cd:d1:12:4e:89: 54:d5:88:d3:18:86:61:b1:3d:81:99:40:1d:5c:a9:4c:3d:63: b2:f8:b8:e6:b8:35:a6:2e:7d:9d:e9:82:a2:79:d1:bf:b6:fc: ca:4d:44:1e:3c:28:f6:b9:db:1c:0b:32:66:65:ac:a3:09:9a: 66:a7:1e:7a:e1:07:84:9b:65:4c:ef:7f:23:24:79:48:ec:ac: 55:a6:b3:c8:c8:86:f5:6f:6f:19:86:81:9c:d9:d6:15:40:b4: 6a:06:c3:87:e4:f2:bd:9b:a6:5c:e4:0c:e7:53:b8:b8:1e:b9: 50:34:27:de:b8:17:ef:4d:3d:e3:ba:62:d3:7b:04:24:fe:dc: 97:9c:ad:44:1b:39:db:34:52:bb:17:a9:f2:00:1b:ea:f1:64: 3e:c4:48:02:5b:24:03:b7:86:35:48:9a:06:ab:12:38:c5:be: f4:43:6a:73:eb:89:02:44:f5:f7:f7:e8:95:14:81:a3:bb:0e: 85:87:a7:08:54:54:d9:19:57:02:6e:7f:b8:72:0a:20:4e:06: 82:80:80:fa:b2:ea:89:b1:d8:25:72:3b:bf:b4:0c:38:e8:db: 7c:e2:08:01:ee:55:26:46:4b:4d:14:d4:ad:c4:a5:b3:da:ee: 8c:b5:6c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2jfDB62yCJ7tsd2GC8ywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwNzI0MDIwMDI1WhcNMjYwNzI1MDIwMDI1WjAzMTEwLwYDVQQD EyhiOGRmNWM3MjE1ODdmZTllNmQ4MGY1YzkxMDhjNmJjYmQ2NTQ3MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/VwTN0WLmxDyCQ9C1mSOaAIdB2 iNRj5hAwc9MXkC4u2P34qmMFjmhcrxQKASoiMY0K7fsEM2hnZc4A35tNaYQdTWYV 34wEMRes0TE/AqIgKDkyHEXPBmJldACMMegCnfeEmLH3epA6tmVP42liHpAyjktF ZvbAcvp9bNYznbCjGETcCLEMyq7Saqxg37Q9GwtuQMAUffJ5doJNvevxxMk8vZJg uUddRXGPxzERSEgIoC/BiGqxzTMXmR8Vc/jSJr/lBtjsNlBgkM09ect9bhWUeVB+ Bphay2VPc6ZsXV9RhTkio0NDMJi1hsyIsVhofhzUlAmU1mc/0H1K19/gZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjfXHIVh/6ebYD1yRCMa8vWVHICMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHtLFO+/ FjON3+drU83REk6JVNWI0xiGYbE9gZlAHVypTD1jsvi45rg1pi59nemConnRv7b8 yk1EHjwo9rnbHAsyZmWsowmaZqceeuEHhJtlTO9/IyR5SOysVaazyMiG9W9vGYaB nNnWFUC0agbDh+TyvZumXOQM51O4uB65UDQn3rgX700947pi03sEJP7cl5ytRBs5 2zRSuxep8gAb6vFkPsRIAlskA7eGNUiaBqsSOMW+9ENqc+uJAkT19/folRSBo7sO hYenCFRU2RlXAm5/uHIKIE4GgoCA+rLqibHYJXI7v7QMOOjbfOIIAe5VJkZLTRTU rcSls9rujLVsNg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:32:58 2026 by rpki-client