$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: NSpJfHTyNPsLKcgDhuIBlq52EVSS84b7oqdr35YN+mI= Subject key identifier: B4:05:68:19:2A:D2:B0:FA:D6:9A:36:24:F2:1A:F7:BA:21:F4:4D:4D Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019F9090FB56117835C4B262A3A640EF5D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 19ED Signing time: Thu 23 Jul 2026 20:00:48 +0000 Manifest this update: Thu 23 Jul 2026 20:00:48 +0000 Manifest next update: Fri 24 Jul 2026 20:00:48 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=) 3: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: LjOtwBwwW/H3awGkgiZbltq+zxOmIg2k8HFXk9ZfdBQ=) 4: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 5: caXkdOh26Ng2luhqokI4XXlYMpU.roa (hash: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=) 6: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 7: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=) 8: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (hash: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:fb:56:11:78:35:c4:b2:62:a3:a6:40:ef:5d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jul 23 20:00:48 2026 GMT Not After : Jul 24 20:00:48 2026 GMT Subject: CN=b40568192ad2b0fad69a3624f21af7ba21f44d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:c4:55:f5:4f:7e:d3:ef:f9:94:a1:08:96: 4e:9b:92:1d:9f:d6:76:04:fe:29:a8:2d:04:74:01: 3c:71:24:c4:74:62:b8:44:0f:49:a1:ff:f9:b2:db: e2:08:24:ac:d4:4b:5e:06:7d:1c:9f:b5:14:b0:84: 03:61:70:ad:26:80:7b:df:da:b2:62:e0:6e:03:f4: c5:6f:2d:26:1f:86:45:8f:23:a4:15:45:6c:84:8d: 7f:a1:05:55:30:f3:21:61:eb:e2:a5:47:20:c2:3d: 8c:d5:a0:13:29:ef:ce:ae:d6:0c:76:e4:c8:8f:51: 16:56:f7:0c:69:03:4f:2d:b4:95:70:cf:b2:c5:3f: fa:44:2a:a9:87:6a:62:e0:49:53:6e:1d:dc:12:f1: a2:c8:9f:b3:8e:41:87:61:d0:af:59:e7:96:01:27: 7c:66:00:e7:c4:27:35:19:9b:21:15:84:9e:6c:22: cc:65:21:dd:67:e4:ce:29:8f:77:69:93:f7:fb:fe: 2c:27:75:d2:e2:1c:7e:69:4f:41:3c:a5:21:1a:7c: 69:77:1a:86:a3:02:6f:30:c0:8e:de:66:a3:06:20: 4c:f1:0a:c9:a7:f6:86:3e:c8:23:39:c0:a3:5f:5b: 39:70:ad:50:35:dd:b4:ff:22:53:a0:3e:fc:f7:fd: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:05:68:19:2A:D2:B0:FA:D6:9A:36:24:F2:1A:F7:BA:21:F4:4D:4D X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b4:7a:f4:73:15:45:72:65:ce:ee:88:58:20:ec:bf:09:c2: 3b:6e:a0:10:c4:43:2b:07:ed:58:28:33:11:41:7f:cf:d1:49: 82:48:95:90:4d:0e:25:66:60:72:3b:8b:92:f5:96:54:38:08: fa:b8:ff:0d:97:71:18:d4:d3:05:a5:3c:2b:67:cf:94:63:f7: 80:6e:a7:a0:95:5b:5d:6f:2b:c5:cb:56:4a:05:b4:e6:cd:48: 84:33:82:54:6d:79:18:52:47:f3:fd:83:bb:6c:2e:2d:e4:b0: 7a:2a:af:35:ef:c5:c5:bb:46:53:d3:35:9c:61:fc:83:31:4b: e1:b1:ca:1d:71:8a:25:c5:f6:f6:db:d1:f9:29:18:a5:3a:b3: fb:ee:26:37:5c:91:e7:bf:74:dd:f4:b5:18:5b:a1:af:11:cd: 39:03:90:84:4d:5f:e5:ea:6b:65:6d:ed:5f:35:0a:7f:10:d0: 2d:c2:73:0b:b2:ba:e4:1e:0f:f5:0c:c9:c8:18:9b:0c:f5:a2: ad:e8:7d:24:5d:17:16:0d:e4:7c:df:b3:f9:0e:74:51:fd:d8: 72:dc:6a:02:fd:2c:dd:05:ae:e5:3b:4c:a9:83:37:10:d9:6e: 65:2f:c1:95:6a:b7:34:33:f2:b5:10:b5:23:57:84:6f:b7:d9: e6:c3:84:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkPtWEXg1xLJio6ZA710lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwNzIzMjAwMDQ4WhcNMjYwNzI0MjAwMDQ4WjAzMTEwLwYDVQQD EyhiNDA1NjgxOTJhZDJiMGZhZDY5YTM2MjRmMjFhZjdiYTIxZjQ0ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjazEVfVPftPv+ZShCJZOm5Idn9Z2 BP4pqC0EdAE8cSTEdGK4RA9Jof/5stviCCSs1EteBn0cn7UUsIQDYXCtJoB739qy YuBuA/TFby0mH4ZFjyOkFUVshI1/oQVVMPMhYevipUcgwj2M1aATKe/OrtYMduTI j1EWVvcMaQNPLbSVcM+yxT/6RCqph2pi4ElTbh3cEvGiyJ+zjkGHYdCvWeeWASd8 ZgDnxCc1GZshFYSebCLMZSHdZ+TOKY93aZP3+/4sJ3XS4hx+aU9BPKUhGnxpdxqG owJvMMCO3majBiBM8QrJp/aGPsgjOcCjX1s5cK1QNd20/yJToD789/0kCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQFaBkq0rD61po2JPIa97oh9E1NMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbR69HMV RXJlzu6IWCDsvwnCO26gEMRDKwftWCgzEUF/z9FJgkiVkE0OJWZgcjuLkvWWVDgI +rj/DZdxGNTTBaU8K2fPlGP3gG6noJVbXW8rxctWSgW05s1IhDOCVG15GFJH8/2D u2wuLeSweiqvNe/FxbtGU9M1nGH8gzFL4bHKHXGKJcX29tvR+SkYpTqz++4mN1yR 57903fS1GFuhrxHNOQOQhE1f5eprZW3tXzUKfxDQLcJzC7K65B4P9QzJyBibDPWi reh9JF0XFg3kfN+z+Q50Uf3YctxqAv0s3QWu5TtMqYM3ENluZS/BlWq3NDPytRC1 I1eEb7fZ5sOE5A== -----END CERTIFICATE-----Generated at Fri Jul 24 05:52:45 2026 by rpki-client