$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json) Hash identifier: Zl1DqenkC7WYV68voaQN+eor4QBjgjd8eZvzjvqkgQY= Subject key identifier: 34:36:C2:91:70:29:71:53:0D:80:8C:B7:78:E7:A9:30:30:B5:1C:A6 Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Certificate serial: 019F91DB103923D708FFEABD359776BB7167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft Manifest number: 01EC Signing time: Fri 24 Jul 2026 02:01:20 +0000 Manifest this update: Fri 24 Jul 2026 02:01:20 +0000 Manifest next update: Sat 25 Jul 2026 02:01:20 +0000 Files and hashes: 1: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=) 2: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=) 3: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=) 4: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=) 5: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: Lg+Pamrfmrq1miG3Xll3pHxKaAqlHsXhdes+eMWomZI=) 6: TbZ4UxM472uZwvxUqFwV48R32GU.roa (hash: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=) 7: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=) 8: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=) 9: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=) 10: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:db:10:39:23:d7:08:ff:ea:bd:35:97:76:bb:71:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Validity Not Before: Jul 24 02:01:20 2026 GMT Not After : Jul 25 02:01:20 2026 GMT Subject: CN=3436c291702971530d808cb778e7a93030b51ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:ab:05:8a:a9:e9:2a:6d:3e:e0:75:86:eb: 7d:ff:b0:10:41:7d:2d:92:ed:4b:1b:74:0a:b6:7d: 30:ff:86:3e:98:98:a2:94:3f:97:d0:70:eb:8d:a9: 88:b8:6b:32:9f:80:b2:35:87:d6:ec:e7:57:04:dc: f2:24:65:d9:1f:c2:47:c2:45:cb:23:f4:15:79:f8: 12:50:c1:d8:67:91:95:07:7a:7f:23:4f:27:d0:a9: 48:e2:46:24:de:0b:31:d6:f1:ac:8c:d1:a7:60:3d: 53:4a:69:e3:bb:9d:84:38:67:eb:eb:fa:43:b3:26: c2:03:9d:89:ce:e8:e0:20:e1:3b:dd:27:ab:e2:d8: 17:c1:66:99:89:f2:41:67:26:cf:4d:ac:71:37:d8: e9:5c:6f:33:91:2a:16:ec:fd:e8:d0:8e:03:98:a0: ba:f2:7f:0d:c6:da:8a:82:a0:66:f9:0d:f1:06:54: 09:6b:64:a1:42:8b:06:9a:08:29:9b:59:03:17:5a: e0:b9:d6:7f:43:1f:53:97:e9:84:9e:69:e6:4b:62: 65:e1:2a:8f:77:de:20:e7:6b:c4:24:31:3d:5e:cf: 01:58:4d:eb:8d:a4:ce:31:73:87:44:17:e8:be:41: 5b:b6:15:6d:a0:70:d2:36:08:0a:21:b4:ec:5a:ca: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:C2:91:70:29:71:53:0D:80:8C:B7:78:E7:A9:30:30:B5:1C:A6 X509v3 Authority Key Identifier: keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:42:8c:55:a6:88:42:b5:4e:a2:87:90:cd:4d:ff:53:8e: 0e:76:76:a1:6b:04:dc:ff:29:85:62:54:8a:69:76:f8:0f:4c: 8d:db:04:f9:3a:f3:e2:0c:68:66:3b:f0:a6:c1:5a:e0:d2:35: a7:5c:06:50:54:5f:eb:91:52:4b:e3:ee:f7:75:c8:d8:3b:4f: 42:c9:7d:36:67:d0:d0:36:f0:f7:26:9d:ed:24:7d:5c:75:e2: 51:dc:ff:8d:f3:48:fa:0d:11:3b:96:9e:17:27:51:ff:eb:27: 7b:41:ba:d9:4d:08:9f:46:77:84:65:31:7c:74:02:dd:87:38: f8:5d:a2:04:3c:e1:c3:0b:6b:8f:1b:e8:b3:98:e4:0c:27:76: fd:12:3f:b1:7d:95:d7:ea:28:8a:91:c5:27:8b:04:76:4e:0b: 0d:d1:f2:1b:fa:fc:1f:d4:ed:2c:32:4c:77:22:db:b8:e4:dc: d1:98:fe:87:c5:c9:93:51:64:88:ff:eb:10:ea:46:7b:1f:c8: 60:98:50:16:62:b1:b8:b3:26:94:96:37:5b:f4:58:22:63:0a: 69:73:f9:54:93:4c:35:62:db:e7:5b:55:a2:44:55:56:d0:7b: cd:5e:45:fc:57:d4:0f:05:f6:b7:05:bc:02:8e:13:47:95:b5: ff:42:fd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2xA5I9cI/+q9NZd2u3FnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0 Y2FmZWIwHhcNMjYwNzI0MDIwMTIwWhcNMjYwNzI1MDIwMTIwWjAzMTEwLwYDVQQD EygzNDM2YzI5MTcwMjk3MTUzMGQ4MDhjYjc3OGU3YTkzMDMwYjUxY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZWrBYqp6SptPuB1hut9/7AQQX0t ku1LG3QKtn0w/4Y+mJiilD+X0HDrjamIuGsyn4CyNYfW7OdXBNzyJGXZH8JHwkXL I/QVefgSUMHYZ5GVB3p/I08n0KlI4kYk3gsx1vGsjNGnYD1TSmnju52EOGfr6/pD sybCA52JzujgIOE73Ser4tgXwWaZifJBZybPTaxxN9jpXG8zkSoW7P3o0I4DmKC6 8n8NxtqKgqBm+Q3xBlQJa2ShQosGmggpm1kDF1rgudZ/Qx9Tl+mEnmnmS2Jl4SqP d94g52vEJDE9Xs8BWE3rjaTOMXOHRBfovkFbthVtoHDSNggKIbTsWsoReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ2wpFwKXFTDYCMt3jnqTAwtRymMB8GA1UdIwQY MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+hCjFWm iEK1TqKHkM1N/1OODnZ2oWsE3P8phWJUiml2+A9MjdsE+Trz4gxoZjvwpsFa4NI1 p1wGUFRf65FSS+Pu93XI2DtPQsl9NmfQ0Dbw9yad7SR9XHXiUdz/jfNI+g0RO5ae FydR/+sne0G62U0In0Z3hGUxfHQC3Yc4+F2iBDzhwwtrjxvos5jkDCd2/RI/sX2V 1+ooipHFJ4sEdk4LDdHyG/r8H9TtLDJMdyLbuOTc0Zj+h8XJk1FkiP/rEOpGex/I YJhQFmKxuLMmlJY3W/RYImMKaXP5VJNMNWLb51tVokRVVtB7zV5F/FfUDwX2twW8 Ao4TR5W1/0L9tA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:53:24 2026 by rpki-client