$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: CvcR2QOEi3D4Z68grGgQTsFmEKMpkH/p0MksuZ7QDHo= Subject key identifier: A5:23:C1:DF:D8:0D:7F:EA:2B:71:11:23:A5:E0:24:80:BB:2E:6D:32 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019F92484097C18F5CC84FCAFD418196F72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 19F0 Signing time: Fri 24 Jul 2026 04:00:36 +0000 Manifest this update: Fri 24 Jul 2026 04:00:36 +0000 Manifest next update: Sat 25 Jul 2026 04:00:36 +0000 Files and hashes: 1: 1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa (hash: w5/COnwlw5ye1DaZjZ7hXRbFTAAUSFBl9a5cKLHfrqk=) 2: 8p-xzHN8JAfETL-eHdKs1LrBttU.roa (hash: ZS9tFLaAf2uUJA0HUuxCsxMlG+fGwN15fW3OEhTI1U4=) 3: E2yjjcIin_7jg0Go72UPY9AyT6A.roa (hash: n+/VXl3KasYnTbVQIWwF07TnFCAY/4EQuPzsBC6ENFY=) 4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: +8+9TISB7aqtFVGbfhLXgRiD/Yi2asZ+itIvvNHpIfM=) 5: cSTi1Lxehq5jDWakpB6HYzAw5R0.roa (hash: wqKpE+uRvges7Z2ELy3oIP2gt4HmPD2pP3WgFoILY2s=) 6: d6qcKW1msPvrkPap_anNs3nncIc.roa (hash: MeURyRJbadIj4RLZ7K71M6LgbnCBWIKCvay4NBmiSn0=) 7: djFhla4MWW9UnKS5DInUiltefD4.roa (hash: Sc+M7cslOJJhBlkRWcw8NFHW0xg8Q1EBy7lXg6dtAzg=) 8: gsUHTOql6ra3NCra3-O-Pk8H1G4.roa (hash: 8Ghx6DBEFtgP9usvPFW08DYezACf4VPCL0A1biqsI44=) 9: h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa (hash: Posoe4h9QxCnSfxoiia3nysdUx7K23dYEEIkgUc7lgM=) 10: qQkZ0fBNkjQxEBuz0kI59N7djKc.roa (hash: NFmLHMfKCgRpayRK/IC4kjzItXsX/Ql3tfEI1LLkiYo=) 11: stQaCo3UL43SwnixN1ipSeirKCk.roa (hash: AZoB1tHMtqzegT5eVvjC9FzP5F5Y0HtR0M4S42Eh7/c=) 12: vNzE5xMsU5yzGRSukoH_ztpCjao.roa (hash: HE3gn3vVBI6nPgvGdME4ssEZYBlEN8YwsdsyEiKntAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:40:97:c1:8f:5c:c8:4f:ca:fd:41:81:96:f7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jul 24 04:00:36 2026 GMT Not After : Jul 25 04:00:36 2026 GMT Subject: CN=a523c1dfd80d7fea2b711123a5e02480bb2e6d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:83:f7:2f:28:c4:fb:39:80:4e:f5:5c:aa: 58:c8:f7:9f:3c:ba:92:3b:0e:99:88:48:97:d2:1f: cf:08:fa:9f:14:1b:52:e0:1b:f7:03:ea:a7:cc:d2: 7a:07:5b:80:48:bd:17:b6:b8:46:dd:38:7c:c7:80: 36:27:d2:2e:b4:aa:22:97:96:d3:b0:9f:e7:5a:58: a2:2a:07:39:08:ff:97:2c:4a:27:17:85:91:e3:85: bc:97:f5:91:f4:cc:53:d0:98:db:17:8e:f3:6a:e7: f4:ba:1b:98:2e:b2:c6:74:3c:63:39:98:93:a2:82: 60:d4:1c:87:aa:f8:0e:b0:f0:3d:b7:19:aa:5f:41: d5:7c:f0:56:ba:20:f3:5e:d1:26:27:40:3c:c5:a4: 75:46:01:ce:0c:b6:19:bb:5b:73:32:f3:19:cf:4e: 12:22:ee:26:75:a7:e0:c3:5c:51:08:e1:c8:d6:8f: dd:e6:53:70:06:95:89:7d:e2:a6:71:c7:c1:c4:ac: 4a:f6:d2:9c:6f:c9:2b:22:cb:d2:79:f2:2f:94:75: 1e:0b:80:9b:ba:d8:16:f2:2a:21:59:1b:ef:83:91: 61:c1:12:20:d9:ea:04:54:4e:e8:67:be:a2:d8:4d: 63:ca:3c:2d:08:6c:f0:d1:5d:9f:20:f1:52:a5:9c: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:23:C1:DF:D8:0D:7F:EA:2B:71:11:23:A5:E0:24:80:BB:2E:6D:32 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:bc:03:15:be:16:00:3f:65:54:96:9d:a2:f9:8b:95:9b: e4:8c:c2:7a:ca:86:81:93:d6:72:dd:b8:53:01:23:eb:11:db: e5:fa:67:54:a2:47:82:e6:96:6d:b4:3f:fd:e5:07:66:3e:0d: b8:21:76:0c:ef:03:6b:c8:39:13:57:26:05:fa:27:8d:a7:98: 6c:69:30:7c:1b:c9:f7:37:fd:22:b5:ea:96:14:79:5f:f9:88: c5:e4:d9:28:4e:bb:05:df:70:04:50:ea:81:15:c8:5b:90:53: 98:57:46:79:13:6a:6c:57:13:6c:20:54:e2:d1:0d:6a:77:4f: 3c:59:6e:7d:0a:17:4c:f0:7a:2a:19:5a:15:92:e0:dc:c9:16: fa:e1:ee:97:a5:c1:3d:e7:ae:ed:24:76:93:72:cf:4a:e9:94: ab:3c:ff:e6:c9:be:84:91:31:b3:d0:c7:c7:81:e2:0d:98:de: 26:ae:6b:bb:1c:6d:84:a9:7d:2a:0d:2f:58:69:32:16:99:92: b5:11:ba:ba:93:10:ac:18:ff:20:8c:24:62:96:98:62:b7:c8: 35:a1:41:70:f4:7c:fb:9d:ca:a1:4c:36:e0:c1:08:95:42:f5: 76:67:9e:45:f0:77:22:9f:8c:cd:35:a7:50:97:d5:a4:44:e5: a8:e6:e5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSECXwY9cyE/K/UGBlvcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwNzI0MDQwMDM2WhcNMjYwNzI1MDQwMDM2WjAzMTEwLwYDVQQD EyhhNTIzYzFkZmQ4MGQ3ZmVhMmI3MTExMjNhNWUwMjQ4MGJiMmU2ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CSD9y8oxPs5gE71XKpYyPefPLqS Ow6ZiEiX0h/PCPqfFBtS4Bv3A+qnzNJ6B1uASL0XtrhG3Th8x4A2J9IutKoil5bT sJ/nWliiKgc5CP+XLEonF4WR44W8l/WR9MxT0JjbF47zauf0uhuYLrLGdDxjOZiT ooJg1ByHqvgOsPA9txmqX0HVfPBWuiDzXtEmJ0A8xaR1RgHODLYZu1tzMvMZz04S Iu4mdafgw1xRCOHI1o/d5lNwBpWJfeKmccfBxKxK9tKcb8krIsvSefIvlHUeC4Cb utgW8iohWRvvg5FhwRIg2eoEVE7oZ76i2E1jyjwtCGzw0V2fIPFSpZx6bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUjwd/YDX/qK3ERI6XgJIC7Lm0yMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOC8AxW+ FgA/ZVSWnaL5i5Wb5IzCesqGgZPWct24UwEj6xHb5fpnVKJHguaWbbQ//eUHZj4N uCF2DO8Da8g5E1cmBfonjaeYbGkwfBvJ9zf9IrXqlhR5X/mIxeTZKE67Bd9wBFDq gRXIW5BTmFdGeRNqbFcTbCBU4tENandPPFlufQoXTPB6KhlaFZLg3MkW+uHul6XB Peeu7SR2k3LPSumUqzz/5sm+hJExs9DHx4HiDZjeJq5ruxxthKl9Kg0vWGkyFpmS tRG6upMQrBj/IIwkYpaYYrfINaFBcPR8+53KoUw24MEIlUL1dmeeRfB3Ip+MzTWn UJfVpETlqOblJQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:33:55 2026 by rpki-client