$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: U/A4lMh3aMMqH97JMWvHRNqw3fPqqV8wfn4upg/BxJ8= Subject key identifier: EC:16:75:5C:C9:DD:8A:31:81:C2:0F:BB:6A:79:CB:12:BE:3B:59:D4 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019F90FF2A981E37D92A326EE761B800EDE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1A1B Signing time: Thu 23 Jul 2026 22:01:09 +0000 Manifest this update: Thu 23 Jul 2026 22:01:09 +0000 Manifest next update: Fri 24 Jul 2026 22:01:09 +0000 Files and hashes: 1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=) 2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=) 3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=) 4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=) 5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=) 6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=) 7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=) 8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=) 9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=) 10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=) 11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=) 12: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=) 13: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=) 14: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=) 15: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=) 16: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=) 17: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=) 18: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: MgzCjsrivZqIL9GxWRU1JIbKBId8IZ5rUX9XoPpn9Hk=) 19: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=) 20: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (hash: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=) 21: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=) 22: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:2a:98:1e:37:d9:2a:32:6e:e7:61:b8:00:ed:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jul 23 22:01:09 2026 GMT Not After : Jul 24 22:01:09 2026 GMT Subject: CN=ec16755cc9dd8a3181c20fbb6a79cb12be3b59d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:be:71:b1:55:cc:be:24:59:92:f8:81:f4: 69:95:69:7a:d6:cd:d2:3e:90:24:b4:5b:f9:f9:6a: 55:ad:42:2d:81:5c:34:f2:ec:9f:90:04:9d:37:69: 7f:b1:23:67:5a:da:d5:1b:a4:bd:e6:77:71:4f:9d: ec:42:67:77:88:1a:8e:b9:66:cb:5d:70:43:dd:e5: ba:69:fe:95:eb:61:a6:e8:52:3b:7a:90:fb:cf:aa: 89:69:2c:f3:36:45:25:aa:46:bc:4e:67:67:a3:50: 20:c0:c4:17:76:8c:63:fa:0d:7c:2c:dc:e3:33:b3: 9d:0a:12:9d:27:7a:86:81:62:40:29:63:98:68:c2: f9:23:1a:ca:c4:f4:b6:78:d5:c6:a6:44:e7:78:46: 92:37:77:d7:5d:4c:68:30:5c:c1:28:f0:52:6b:08: f3:5c:e9:be:d4:ba:61:4d:d2:e2:a2:57:bd:32:8f: 2d:d4:83:80:c4:a9:7a:6b:d5:39:72:17:cf:12:6b: c4:11:36:8e:16:8d:d5:5f:dd:99:1d:81:d8:02:57: fa:98:ba:b6:5f:be:e4:04:e6:17:7b:2e:72:bd:e2: 7b:61:41:91:3d:1b:51:0f:6d:d8:0f:c9:c0:4f:85: 5e:ed:2c:cb:c7:16:3d:ab:85:47:95:63:38:01:aa: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:16:75:5C:C9:DD:8A:31:81:C2:0F:BB:6A:79:CB:12:BE:3B:59:D4 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0d:bc:b5:ba:da:a4:34:e8:1c:ef:ea:c2:9c:19:99:5e:b6: a7:16:b0:17:02:6b:03:5d:68:63:a2:16:f7:2f:89:56:53:35: 1e:dc:66:e8:9f:c2:e8:a7:ff:7d:79:23:89:c8:d2:5f:98:ed: 15:c4:c3:f5:6a:8d:87:dc:60:d8:47:a3:45:c6:1e:44:96:6d: 31:f3:eb:2c:f6:f8:27:70:5d:e3:3f:12:8c:38:48:7f:a7:14: 1d:5e:33:76:2e:eb:a7:33:23:78:80:83:43:c0:50:d2:bb:b7: 50:5c:82:31:c5:9a:9e:f9:df:29:09:1f:aa:de:fc:8b:94:0b: 26:79:45:14:cb:9c:2b:c9:af:17:2c:89:36:97:7f:4f:3c:7d: bb:de:e9:23:d9:7d:3d:1f:29:3c:2f:41:24:d9:6e:28:12:82: 3c:79:e9:da:dd:37:5d:a7:c6:2b:f4:ec:c1:cb:80:23:9f:c6: a3:80:78:6f:51:df:b7:f2:d5:ae:4b:f6:25:c8:11:3c:70:5b: 42:b2:14:9b:08:e6:f5:ea:e2:68:18:a1:d5:8d:f0:86:e1:f2: 13:38:df:79:be:c2:e9:4b:48:5d:e7:2a:7d:8a:cd:9e:21:0e: 5c:81:70:7d:05:17:29:09:20:ab:0d:a9:9a:27:fc:d7:13:1d: dc:48:e8:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/yqYHjfZKjJu52G4AO3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwNzIzMjIwMTA5WhcNMjYwNzI0MjIwMTA5WjAzMTEwLwYDVQQD EyhlYzE2NzU1Y2M5ZGQ4YTMxODFjMjBmYmI2YTc5Y2IxMmJlM2I1OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32+cbFVzL4kWZL4gfRplWl61s3S PpAktFv5+WpVrUItgVw08uyfkASdN2l/sSNnWtrVG6S95ndxT53sQmd3iBqOuWbL XXBD3eW6af6V62Gm6FI7epD7z6qJaSzzNkUlqka8Tmdno1AgwMQXdoxj+g18LNzj M7OdChKdJ3qGgWJAKWOYaML5IxrKxPS2eNXGpkTneEaSN3fXXUxoMFzBKPBSawjz XOm+1LphTdLiole9Mo8t1IOAxKl6a9U5chfPEmvEETaOFo3VX92ZHYHYAlf6mLq2 X77kBOYXey5yveJ7YUGRPRtRD23YD8nAT4Ve7SzLxxY9q4VHlWM4AaopjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwWdVzJ3YoxgcIPu2p5yxK+O1nUMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg28tbra pDToHO/qwpwZmV62pxawFwJrA11oY6IW9y+JVlM1Htxm6J/C6Kf/fXkjicjSX5jt FcTD9WqNh9xg2EejRcYeRJZtMfPrLPb4J3Bd4z8SjDhIf6cUHV4zdi7rpzMjeICD Q8BQ0ru3UFyCMcWanvnfKQkfqt78i5QLJnlFFMucK8mvFyyJNpd/Tzx9u97pI9l9 PR8pPC9BJNluKBKCPHnp2t03XafGK/TswcuAI5/Go4B4b1Hft/LVrkv2JcgRPHBb QrIUmwjm9eriaBih1Y3whuHyEzjfeb7C6UtIXecqfYrNniEOXIFwfQUXKQkgqw2p mif81xMd3Ejo0Q== -----END CERTIFICATE-----Generated at Fri Jul 24 08:21:38 2026 by rpki-client