$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: 3dRtIJk9Zz0JASEWNTxVo30eR9Om5tXw1T2yrnfwjH4= Subject key identifier: 8E:AC:6A:7A:FB:F0:77:E4:4A:9B:B6:A6:F0:AC:86:F8:6B:3B:0D:F8 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019F9436B2253B00E57AF530B1BB50D6B1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 19DF Signing time: Fri 24 Jul 2026 13:00:40 +0000 Manifest this update: Fri 24 Jul 2026 13:00:40 +0000 Manifest next update: Sat 25 Jul 2026 13:00:40 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=) 3: F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa (hash: 91XsyO5TgXdUONYdDKhh8Ag88o0StrZQ3QWQg+w4w7o=) 4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: J/DV+nXhlhM3ViQdQpls323gLJzh35XtwVG8tgBV8Ak=) 5: GNjPKxixkcQlInXuEMN64INqg7U.roa (hash: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=) 6: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 7: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 8: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=) 9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 12: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 13: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:94:36:b2:25:3b:00:e5:7a:f5:30:b1:bb:50:d6:b1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jul 24 13:00:40 2026 GMT Not After : Jul 25 13:00:40 2026 GMT Subject: CN=8eac6a7afbf077e44a9bb6a6f0ac86f86b3b0df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:ae:40:01:27:c1:12:f3:aa:da:87:7f:98: 26:6d:55:b9:c6:4a:7b:03:95:9e:e0:d1:bf:9f:af: 5b:9b:92:4a:93:2d:81:a3:54:87:2a:17:80:10:4f: 74:fb:b7:a5:f0:e1:e9:3e:f0:d2:ae:ea:a0:e9:49: 24:c4:b9:72:6d:db:3b:97:de:ef:6b:a6:fc:11:7d: e9:82:a0:52:45:be:90:95:ce:fa:b7:eb:e8:98:8b: 98:3f:7f:c5:2d:c8:d1:1c:a0:35:4b:b7:13:55:b0: bd:c1:f9:5b:04:11:fe:28:d4:e4:5a:54:c4:95:97: 4f:1d:33:07:4d:b2:e2:ec:e2:21:aa:f4:a7:e4:d1: ff:bf:42:a2:82:ee:cd:fb:99:90:b8:18:6c:c6:a7: 5f:91:4c:72:ca:f5:f1:85:f2:68:8a:6a:d3:bd:14: 78:65:42:f4:1f:e3:e4:d6:ee:37:62:36:90:9e:a6: 81:7c:e6:37:01:c4:bc:78:b5:ad:9b:6d:0d:2c:41: 4b:68:b9:82:f4:22:d6:06:a2:0c:11:99:8c:a8:eb: 4a:a3:85:ae:64:30:e2:ac:8e:b5:35:17:5f:75:0e: b8:a2:a8:76:5f:58:9d:d2:16:04:03:c8:a1:93:de: f5:ef:c7:fd:b3:98:74:f1:bb:ec:7f:aa:be:c8:37: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:6A:7A:FB:F0:77:E4:4A:9B:B6:A6:F0:AC:86:F8:6B:3B:0D:F8 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f5:fd:e8:d3:7a:c7:bd:52:af:57:77:61:3c:36:0d:65:5b: 42:71:ff:09:7a:43:44:60:7d:1f:00:a6:1f:aa:71:2a:59:08: db:27:49:e1:90:88:04:b1:e7:7d:e1:af:5b:e7:2f:14:70:c5: a5:44:c2:b4:1c:97:3a:20:bd:4f:4e:d7:67:54:23:a7:eb:ea: d4:6f:11:23:c3:c9:24:d4:fd:f0:20:31:6a:fd:79:ae:cf:7a: d6:99:f8:b8:4e:30:f7:00:60:59:07:3e:61:49:8b:fe:91:13: f5:42:0b:96:a5:a7:a7:87:87:df:51:7b:25:fe:39:b5:35:1e: d2:a4:d9:11:08:18:b7:4f:7a:87:6b:81:ff:1a:cf:f8:79:04: 7a:cd:89:90:2e:30:a3:6c:d2:25:5e:56:d4:61:32:d4:f0:c0: e7:ed:9c:b5:57:ff:b1:c1:da:56:ff:7e:d2:b4:74:07:40:7c: eb:63:8a:f9:27:e1:86:3d:f0:b8:4f:f6:73:e0:af:f1:6d:e9: a6:13:04:3b:07:87:8b:05:14:b3:69:d9:b8:e1:07:be:6b:be: 94:28:76:15:4b:fc:d5:85:45:50:77:77:67:0c:de:4c:bf:ec: 27:88:3a:b1:4a:df:27:be:ec:a1:dc:8a:74:ff:ba:c2:5e:a6: 94:58:1a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+UNrIlOwDlevUwsbtQ1rG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwNzI0MTMwMDQwWhcNMjYwNzI1MTMwMDQwWjAzMTEwLwYDVQQD Eyg4ZWFjNmE3YWZiZjA3N2U0NGE5YmI2YTZmMGFjODZmODZiM2IwZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CuuQAEnwRLzqtqHf5gmbVW5xkp7 A5We4NG/n69bm5JKky2Bo1SHKheAEE90+7el8OHpPvDSruqg6UkkxLlybds7l97v a6b8EX3pgqBSRb6Qlc76t+vomIuYP3/FLcjRHKA1S7cTVbC9wflbBBH+KNTkWlTE lZdPHTMHTbLi7OIhqvSn5NH/v0Kigu7N+5mQuBhsxqdfkUxyyvXxhfJoimrTvRR4 ZUL0H+Pk1u43YjaQnqaBfOY3AcS8eLWtm20NLEFLaLmC9CLWBqIMEZmMqOtKo4Wu ZDDirI61NRdfdQ64oqh2X1id0hYEA8ihk97178f9s5h08bvsf6q+yDdcTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6sanr78HfkSpu2pvCshvhrOw34MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvX96NN6 x71Sr1d3YTw2DWVbQnH/CXpDRGB9HwCmH6pxKlkI2ydJ4ZCIBLHnfeGvW+cvFHDF pUTCtByXOiC9T07XZ1Qjp+vq1G8RI8PJJNT98CAxav15rs961pn4uE4w9wBgWQc+ YUmL/pET9UILlqWnp4eH31F7Jf45tTUe0qTZEQgYt096h2uB/xrP+HkEes2JkC4w o2zSJV5W1GEy1PDA5+2ctVf/scHaVv9+0rR0B0B862OK+Sfhhj3wuE/2c+Cv8W3p phMEOweHiwUUs2nZuOEHvmu+lCh2FUv81YVFUHd3ZwzeTL/sJ4g6sUrfJ77sodyK dP+6wl6mlFgaGw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:31 2026 by rpki-client