$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: 7hU/anUGXgHCNZMp0NjHrcfpTTMbRCrxJq9M5a+xBUg= Subject key identifier: 68:64:41:26:12:29:6D:D7:1D:2F:4E:42:CB:4F:6F:0E:0E:D3:8B:C9 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019F9248EE12E919E523BB85781ED3616180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 19DE Signing time: Fri 24 Jul 2026 04:01:20 +0000 Manifest this update: Fri 24 Jul 2026 04:01:20 +0000 Manifest next update: Sat 25 Jul 2026 04:01:20 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=) 3: F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa (hash: 91XsyO5TgXdUONYdDKhh8Ag88o0StrZQ3QWQg+w4w7o=) 4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: Ybpy/cHvs3eUKLBt4o4qbQ5IgyR5xLonZ/3hqB9b57c=) 5: GNjPKxixkcQlInXuEMN64INqg7U.roa (hash: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=) 6: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 7: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 8: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=) 9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 12: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 13: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:ee:12:e9:19:e5:23:bb:85:78:1e:d3:61:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jul 24 04:01:20 2026 GMT Not After : Jul 25 04:01:20 2026 GMT Subject: CN=6864412612296dd71d2f4e42cb4f6f0e0ed38bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:be:1c:64:23:63:aa:cf:a6:42:18:d5:e9: 37:e0:32:db:44:a1:5a:26:13:2a:24:d2:ea:f5:a7: 66:8f:b8:1d:40:3c:a6:3e:b1:2d:ce:a0:9f:c8:6b: bf:a9:ec:91:d1:c8:45:b3:d3:06:9c:c9:01:ab:74: 5b:2e:12:02:c2:0a:18:5b:1c:e5:80:11:7b:81:62: 8c:a6:41:55:0e:ce:34:72:bd:66:13:23:90:1f:0a: 55:8c:68:87:e3:0b:41:59:c8:17:6b:00:b9:02:82: 92:b9:b0:8e:03:4e:dd:69:22:ea:ce:f7:4f:80:47: e9:e6:42:00:bf:b3:95:fb:69:18:a1:6b:fe:40:0c: 4a:60:0a:62:09:e2:57:93:28:75:f4:f3:7c:dd:14: 3f:32:55:7e:34:c6:f3:e2:49:56:9e:20:81:a9:27: 96:59:ec:61:9e:3a:7c:af:b9:7f:e0:f9:69:8f:18: 5f:e3:a4:75:cc:94:9b:51:1b:d4:bd:0c:c8:55:99: 10:c4:19:51:ec:0c:b8:d1:8a:7c:cf:83:ac:66:37: 67:e1:44:05:42:b0:f1:fd:be:aa:19:be:6d:35:fe: ee:87:2d:a2:3a:75:a6:09:03:b8:d4:2f:44:48:82: 6e:21:49:0d:0f:12:e9:cf:9e:cb:b9:0c:74:2c:af: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:41:26:12:29:6D:D7:1D:2F:4E:42:CB:4F:6F:0E:0E:D3:8B:C9 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:4e:d3:59:ed:10:71:34:cc:9d:20:74:df:df:1d:6b:dd: 29:3f:e7:e2:04:bb:cc:c2:66:69:39:a2:72:b1:4a:41:67:8d: 7d:30:ee:16:6c:27:cb:e8:10:24:c2:5a:6e:a4:2b:8a:db:a8: 99:07:96:11:6e:f3:02:7d:ca:30:88:fc:65:43:a6:3a:18:21: de:49:ec:99:ea:d1:86:c2:3a:03:5e:59:30:d7:ad:62:93:a9: 88:c0:4d:fe:a2:5f:05:57:36:46:96:e5:af:9a:e4:96:51:f2: a2:1d:cb:60:55:3c:61:97:01:d6:e4:c7:d5:8f:6f:0a:3f:91: 7b:53:4f:bc:72:44:31:0e:8d:80:57:4e:9f:dd:00:4b:96:a1: a3:55:a1:b6:5e:76:02:cb:f6:d7:fb:05:95:4c:cb:31:1b:b9: ef:f5:c1:70:6f:19:12:63:17:3a:61:c8:f8:c2:9c:14:b1:5e: 40:8e:fd:1e:e5:b3:72:28:8b:8a:8c:c4:fd:56:60:e4:dc:fe: 6b:6a:e5:65:9f:cc:d2:e8:11:03:98:e8:87:bd:a4:f3:e8:f1: 11:fa:61:e9:3c:6d:96:fe:06:0c:05:4d:b7:41:e0:ac:e6:4b: 2a:9a:be:55:23:23:46:6e:73:60:ea:ca:25:d9:ae:3d:4d:cc: da:81:cf:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSO4S6RnlI7uFeB7TYWGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwNzI0MDQwMTIwWhcNMjYwNzI1MDQwMTIwWjAzMTEwLwYDVQQD Eyg2ODY0NDEyNjEyMjk2ZGQ3MWQyZjRlNDJjYjRmNmYwZTBlZDM4YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1u+HGQjY6rPpkIY1ek34DLbRKFa JhMqJNLq9admj7gdQDymPrEtzqCfyGu/qeyR0chFs9MGnMkBq3RbLhICwgoYWxzl gBF7gWKMpkFVDs40cr1mEyOQHwpVjGiH4wtBWcgXawC5AoKSubCOA07daSLqzvdP gEfp5kIAv7OV+2kYoWv+QAxKYApiCeJXkyh19PN83RQ/MlV+NMbz4klWniCBqSeW Wexhnjp8r7l/4Plpjxhf46R1zJSbURvUvQzIVZkQxBlR7Ay40Yp8z4OsZjdn4UQF QrDx/b6qGb5tNf7uhy2iOnWmCQO41C9ESIJuIUkNDxLpz57LuQx0LK/PDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhkQSYSKW3XHS9OQstPbw4O04vJMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6NO01nt EHE0zJ0gdN/fHWvdKT/n4gS7zMJmaTmicrFKQWeNfTDuFmwny+gQJMJabqQrituo mQeWEW7zAn3KMIj8ZUOmOhgh3knsmerRhsI6A15ZMNetYpOpiMBN/qJfBVc2Rpbl r5rkllHyoh3LYFU8YZcB1uTH1Y9vCj+Re1NPvHJEMQ6NgFdOn90AS5aho1Whtl52 Asv21/sFlUzLMRu57/XBcG8ZEmMXOmHI+MKcFLFeQI79HuWzciiLiozE/VZg5Nz+ a2rlZZ/M0ugRA5joh72k8+jxEfph6Txtlv4GDAVNt0HgrOZLKpq+VSMjRm5zYOrK JdmuPU3M2oHPtw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:46:59 2026 by rpki-client