$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: e/MLuB9f8FYpIU2XLG0TFYToQ0Oqu5XPpOGwZILN5s4= Subject key identifier: D8:EC:09:6B:AE:F4:72:4C:1D:2F:A1:DD:A6:E0:32:60:A8:C4:D3:32 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019F93C9996188A1CFDD5ADC6BADF28C73AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 19D9 Signing time: Fri 24 Jul 2026 11:01:30 +0000 Manifest this update: Fri 24 Jul 2026 11:01:30 +0000 Manifest next update: Sat 25 Jul 2026 11:01:30 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: F0cuAJXK8vsVQ0O1TjnI+AupDFN/MCSu0U3uVmvCuLE=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:c9:99:61:88:a1:cf:dd:5a:dc:6b:ad:f2:8c:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jul 24 11:01:30 2026 GMT Not After : Jul 25 11:01:30 2026 GMT Subject: CN=d8ec096baef4724c1d2fa1dda6e03260a8c4d332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:b7:9c:2d:a8:7b:c2:fc:0c:99:44:5d:24: 7a:d5:b3:e2:98:9f:0a:32:3f:af:d5:01:4e:3f:8b: fd:83:c2:2b:91:36:ff:ec:5f:ca:23:69:8b:56:4b: f6:6b:58:f8:b1:85:2c:10:ab:7d:11:d4:03:37:45: 4a:1b:4c:0f:bf:cd:90:c2:7d:dd:ff:71:95:66:e3: bd:7a:08:35:74:ea:19:66:0e:36:84:53:28:06:dc: c9:6d:0a:2f:9f:ea:f9:a1:dc:67:03:b2:4e:fe:52: 74:26:59:01:69:b4:0c:df:e1:79:ae:2b:09:a7:b9: bc:7e:d8:08:27:d8:ec:3f:5f:29:ba:40:7f:72:c5: 0c:5d:7f:ac:9a:00:71:66:0b:86:83:6c:a7:90:11: 72:6a:c6:28:72:dd:5a:dc:7c:b8:66:79:d9:64:7e: a0:dd:4c:b1:6f:98:cf:4b:ce:18:61:cc:a2:a0:a5: 13:f8:98:c1:a2:d0:8b:70:17:41:75:04:0d:00:34: a6:aa:05:5e:79:c8:57:74:38:81:c3:39:14:3c:8f: 57:80:4e:0f:a1:f6:34:0c:f9:a8:02:c7:48:59:4d: df:0d:8e:dc:ce:59:e3:4b:aa:bf:2e:ed:1a:92:ff: 6d:0d:15:38:05:fe:a7:b7:c0:0b:7f:54:16:e0:89: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:09:6B:AE:F4:72:4C:1D:2F:A1:DD:A6:E0:32:60:A8:C4:D3:32 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:25:50:c9:42:eb:b5:7c:6e:e5:9f:42:e2:2a:2b:a4:ea:84: ca:2c:1b:84:16:64:4a:f5:b1:01:26:54:5c:ff:d6:d1:fe:b8: 97:bd:55:26:b7:d9:e9:ec:45:6d:5b:50:60:1c:a2:bd:ef:7a: f9:88:c8:9f:23:20:6c:1b:83:2b:4f:b6:b5:64:bd:ec:1e:8d: 55:93:37:02:da:06:60:dc:7a:14:1b:b3:ff:b4:27:8d:21:11: ae:ec:cd:d1:9d:21:7c:06:e9:4b:e3:6f:58:13:5b:89:c6:ae: 82:1f:d0:ce:52:26:f1:af:ba:e2:03:6d:54:10:5b:60:bd:9b: ba:24:49:e9:0d:a9:c8:5c:64:8a:48:df:77:70:2f:ec:d2:d9: 03:76:35:d9:72:98:04:bd:79:dd:95:98:88:fa:1d:f3:67:d3: dd:da:d8:61:af:92:40:36:c2:94:3e:8a:98:d5:80:8c:69:95: b8:5a:1b:b1:70:81:17:ee:b9:a2:ee:0f:8a:d2:af:07:89:b8: cd:16:c4:81:46:1f:2a:e6:96:e5:b9:d1:9c:28:ae:47:cc:bb: e7:31:64:7f:c5:62:39:58:d3:7c:65:1c:9c:99:15:4b:02:87: 65:aa:c8:e7:15:25:06:7d:86:b6:a0:c7:bd:91:52:63:22:c2: e9:b1:1e:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TyZlhiKHP3Vrca63yjHOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNzI0MTEwMTMwWhcNMjYwNzI1MTEwMTMwWjAzMTEwLwYDVQQD EyhkOGVjMDk2YmFlZjQ3MjRjMWQyZmExZGRhNmUwMzI2MGE4YzRkMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviC3nC2oe8L8DJlEXSR61bPimJ8K Mj+v1QFOP4v9g8IrkTb/7F/KI2mLVkv2a1j4sYUsEKt9EdQDN0VKG0wPv82Qwn3d /3GVZuO9egg1dOoZZg42hFMoBtzJbQovn+r5odxnA7JO/lJ0JlkBabQM3+F5risJ p7m8ftgIJ9jsP18pukB/csUMXX+smgBxZguGg2ynkBFyasYoct1a3Hy4ZnnZZH6g 3Uyxb5jPS84YYcyioKUT+JjBotCLcBdBdQQNADSmqgVeechXdDiBwzkUPI9XgE4P ofY0DPmoAsdIWU3fDY7czlnjS6q/Lu0akv9tDRU4Bf6nt8ALf1QW4In9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjsCWuu9HJMHS+h3abgMmCoxNMyMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCVQyULr tXxu5Z9C4iorpOqEyiwbhBZkSvWxASZUXP/W0f64l71VJrfZ6exFbVtQYByive96 +YjInyMgbBuDK0+2tWS97B6NVZM3AtoGYNx6FBuz/7QnjSERruzN0Z0hfAbpS+Nv WBNbicaugh/QzlIm8a+64gNtVBBbYL2buiRJ6Q2pyFxkikjfd3Av7NLZA3Y12XKY BL153ZWYiPod82fT3drYYa+SQDbClD6KmNWAjGmVuFobsXCBF+65ou4PitKvB4m4 zRbEgUYfKuaW5bnRnCiuR8y75zFkf8ViOVjTfGUcnJkVSwKHZarI5xUlBn2GtqDH vZFSYyLC6bEeOA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:37:52 2026 by rpki-client