$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 2G0UkbRzoz6me7EnbPrZTn6tYJpEX86Wc/Cx+L1Py+k= Subject key identifier: A6:54:13:48:A2:E6:ED:31:2D:BE:FB:0D:89:54:4D:31:03:C5:3D:5D Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019F90FF889A68067D879C1784597C6C7212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0D2B Signing time: Thu 23 Jul 2026 22:01:33 +0000 Manifest this update: Thu 23 Jul 2026 22:01:33 +0000 Manifest next update: Fri 24 Jul 2026 22:01:33 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: kvPJnwOQY7gEH5vS9GImtyYaphOstqg+wOPC2j6PkX4=) 4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 9: lu5yurSkT9e_Taok7SCt_R26FuY.roa (hash: CeXf6vw9DkbZGqczzaPxh8skoxIspZwWkZW0SRU+ELM=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:88:9a:68:06:7d:87:9c:17:84:59:7c:6c:72:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jul 23 22:01:33 2026 GMT Not After : Jul 24 22:01:33 2026 GMT Subject: CN=a6541348a2e6ed312dbefb0d89544d3103c53d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:54:9f:47:fc:1b:ea:93:a2:ee:4d:5d:3c: d1:bc:25:85:24:92:d5:6f:e4:5b:94:8a:ec:8e:7c: c0:3d:a6:f8:3f:9b:ee:db:be:1e:84:7e:03:c9:35: 5f:4f:a7:d3:2e:d9:47:27:d2:42:f6:95:5d:1d:6f: cd:d0:ef:b8:d1:86:6b:b7:ad:0e:89:3c:fd:57:be: 29:62:59:79:a8:c9:26:78:c4:e8:5e:a4:2f:a3:a6: a4:e0:d1:da:52:b9:d5:0f:f5:3a:88:6b:4e:ce:52: b0:72:53:1a:95:62:8c:5e:86:e0:8c:6c:84:0c:01: 3e:73:a9:7a:04:c9:df:cf:2b:22:db:8b:9c:04:fc: 0f:2a:a1:9e:2e:fa:57:ad:74:50:e8:85:c4:76:92: 5b:bd:c2:e0:00:d4:e9:70:24:04:e6:c4:70:8a:b8: 25:ea:5c:5a:be:4b:18:3d:65:d2:c6:70:67:c4:e9: b3:81:f1:3e:97:7d:50:41:45:5f:e4:3f:56:03:4f: 03:c1:0f:c5:72:28:83:28:a5:4c:36:cb:4e:49:8f: ea:83:d8:85:bb:08:13:b4:15:82:87:1b:a5:d3:3a: a6:c9:dc:40:da:99:fe:91:98:0e:4e:fa:e8:5f:19: 75:87:45:85:4c:b0:55:14:db:81:76:3c:c2:93:f2: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:54:13:48:A2:E6:ED:31:2D:BE:FB:0D:89:54:4D:31:03:C5:3D:5D X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f3:5e:ca:45:fc:8e:56:97:37:e5:0f:5a:75:51:a8:05:f5: 5a:7d:60:09:6f:fe:80:ac:61:6e:8d:c3:e6:b6:5a:92:4e:ac: 34:15:c5:27:64:55:d9:0b:d1:b4:56:5f:fe:0b:3d:ff:d0:4c: ae:cd:69:e5:ac:74:c2:12:99:df:55:85:b0:2e:34:58:8a:ee: 2b:48:a1:9e:da:0b:88:88:57:ec:f3:58:db:75:29:9f:f4:39: 5a:94:68:49:64:56:53:a2:1c:8b:3c:e5:f1:10:e0:56:5d:e9: a0:ec:43:fd:24:a2:dd:99:00:8c:4f:11:d0:d9:db:95:75:c0: 6e:fc:d2:55:96:58:98:54:dc:1d:7b:b9:8b:ae:9e:0e:6e:7c: 8b:ef:65:e9:83:63:ac:65:d1:15:74:d2:80:74:e6:b8:0e:ca: 5e:f2:89:c3:78:c7:a5:5b:5c:62:d0:0d:9e:db:27:6e:e5:e3: 44:43:7c:50:e1:d6:fa:54:ac:19:d9:da:c6:80:47:b9:8b:7c: b9:5f:b9:0c:e6:14:83:7d:7a:35:5c:1e:ea:11:14:23:cb:ad: 23:13:f3:a3:1c:dc:a6:23:77:a2:10:c6:23:41:a8:51:14:82: 7c:b0:fd:b2:e8:6f:b9:db:f5:19:2e:57:91:1c:93:d3:72:43: 9f:70:c3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/4iaaAZ9h5wXhFl8bHISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwNzIzMjIwMTMzWhcNMjYwNzI0MjIwMTMzWjAzMTEwLwYDVQQD EyhhNjU0MTM0OGEyZTZlZDMxMmRiZWZiMGQ4OTU0NGQzMTAzYzUzZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKBUn0f8G+qTou5NXTzRvCWFJJLV b+RblIrsjnzAPab4P5vu274ehH4DyTVfT6fTLtlHJ9JC9pVdHW/N0O+40YZrt60O iTz9V74pYll5qMkmeMToXqQvo6ak4NHaUrnVD/U6iGtOzlKwclMalWKMXobgjGyE DAE+c6l6BMnfzysi24ucBPwPKqGeLvpXrXRQ6IXEdpJbvcLgANTpcCQE5sRwirgl 6lxavksYPWXSxnBnxOmzgfE+l31QQUVf5D9WA08DwQ/FciiDKKVMNstOSY/qg9iF uwgTtBWChxul0zqmydxA2pn+kZgOTvroXxl1h0WFTLBVFNuBdjzCk/IPAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZUE0ii5u0xLb77DYlUTTEDxT1dMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvNeykX8 jlaXN+UPWnVRqAX1Wn1gCW/+gKxhbo3D5rZakk6sNBXFJ2RV2QvRtFZf/gs9/9BM rs1p5ax0whKZ31WFsC40WIruK0ihntoLiIhX7PNY23Upn/Q5WpRoSWRWU6Icizzl 8RDgVl3poOxD/SSi3ZkAjE8R0NnblXXAbvzSVZZYmFTcHXu5i66eDm58i+9l6YNj rGXRFXTSgHTmuA7KXvKJw3jHpVtcYtANntsnbuXjREN8UOHW+lSsGdnaxoBHuYt8 uV+5DOYUg316NVwe6hEUI8utIxPzoxzcpiN3ohDGI0GoURSCfLD9suhvudv1GS5X kRyT03JDn3DDHg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:39:20 2026 by rpki-client