$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: EEAJD7EJT1L4rFmUEG3GW9KMZ9Kt1TeDTHdEUbWEA+o= Subject key identifier: 8B:19:6D:13:0E:F9:B9:76:4B:F7:60:95:FF:89:1D:34:C3:0E:3C:3E Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019F8FEBD9AB3DCCCCCF341D310509618CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 19DA Signing time: Thu 23 Jul 2026 17:00:26 +0000 Manifest this update: Thu 23 Jul 2026 17:00:26 +0000 Manifest next update: Fri 24 Jul 2026 17:00:26 +0000 Files and hashes: 1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=) 2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: e9LNPfYO+YlUGeinnvz+jjAx2sgGXHJ0uPwHw7uyjog=) 3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=) 4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=) 5: Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa (hash: UXNLfN4yk/bOhc93qSx+KAzobQ1bu0Nj3leNruG+aAI=) 6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=) 7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=) 8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=) 9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=) 10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=) 11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:eb:d9:ab:3d:cc:cc:cf:34:1d:31:05:09:61:8c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jul 23 17:00:26 2026 GMT Not After : Jul 24 17:00:26 2026 GMT Subject: CN=8b196d130ef9b9764bf76095ff891d34c30e3c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:11:ff:89:a9:0a:ad:01:f1:38:3a:0b:64: ea:fd:20:f6:13:f9:f6:59:2f:58:73:c5:10:d0:6c: 84:b5:07:ca:48:d1:f9:16:f7:81:0e:68:f3:60:bf: 19:76:74:ba:65:d7:35:24:46:16:81:59:00:e5:63: a4:76:b9:67:47:09:f1:02:dc:35:19:d1:e7:f9:7c: 79:42:c7:e4:d0:ef:d3:7e:7d:a9:d6:b4:c8:ea:68: e1:96:ef:da:f9:85:d9:50:3e:ee:35:de:80:13:a7: e4:4b:5e:e3:aa:e0:c8:f7:1a:e2:ce:c7:50:67:c8: 83:a4:cf:f4:14:43:c3:e8:66:a1:1c:61:b8:e2:fe: b9:cb:84:78:da:e4:84:b9:65:a5:45:38:12:67:cd: 05:d8:d2:0b:0f:5d:da:22:46:ed:6c:75:89:59:dd: 7e:55:b0:c1:31:2f:a9:10:37:3b:22:1e:2f:e2:01: 68:62:4f:67:12:7c:15:3a:eb:a3:88:d4:2a:45:49: be:82:cb:9f:7d:21:3c:f8:11:cd:5a:e2:48:a8:6a: 5d:4c:e1:39:14:4f:b7:a5:af:24:b2:38:05:eb:65: c9:4b:29:4f:86:b1:2f:d5:ae:d0:1c:28:35:01:db: 31:f6:8d:6f:d0:01:8a:ba:8a:ff:66:b1:8c:36:b8: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:6D:13:0E:F9:B9:76:4B:F7:60:95:FF:89:1D:34:C3:0E:3C:3E X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d5:08:39:41:50:96:2c:fa:9b:a3:f7:14:49:09:3f:27:28: 7c:cb:e7:83:58:4f:52:21:52:a3:2f:d9:82:4e:8f:23:5b:68: a1:14:44:2d:4e:b6:44:2d:ef:bc:96:59:94:a2:59:3c:7a:ee: 3c:ab:34:d9:3f:5d:61:57:d7:d8:de:15:43:d8:39:33:73:ff: f9:fc:3d:ec:d4:41:93:94:aa:5f:57:1b:a6:2f:95:ea:26:be: 56:a0:e0:7b:43:56:cf:88:f8:3c:0c:84:97:47:04:ac:61:67: 2f:74:fa:15:cb:1c:15:75:56:64:81:5a:42:85:d2:f4:de:7f: 4d:d1:c4:de:4f:e7:ed:81:23:f8:0a:10:ba:c1:9b:f0:9c:fd: f1:42:c5:ea:40:b4:cb:b4:c8:05:d4:8d:95:03:63:03:d4:54: 89:f2:1f:30:cc:a4:f2:8c:f4:23:3c:d7:bd:69:7c:a4:24:08: 48:af:0f:e3:98:95:30:ba:a7:e0:02:be:2c:9d:6d:b1:90:bf: 5b:76:a1:c8:49:1c:5c:bd:d0:f8:76:37:1b:f6:e7:e5:19:b7: 8d:e3:65:cb:05:71:08:fd:ad:35:0c:67:d1:50:2b:68:1b:99: 4f:09:53:3e:f6:99:4f:36:f1:31:43:2d:25:82:1a:83:e1:3e: e8:4f:06:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P69mrPczMzzQdMQUJYYzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwNzIzMTcwMDI2WhcNMjYwNzI0MTcwMDI2WjAzMTEwLwYDVQQD Eyg4YjE5NmQxMzBlZjliOTc2NGJmNzYwOTVmZjg5MWQzNGMzMGUzYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYR/4mpCq0B8Tg6C2Tq/SD2E/n2 WS9Yc8UQ0GyEtQfKSNH5FveBDmjzYL8ZdnS6Zdc1JEYWgVkA5WOkdrlnRwnxAtw1 GdHn+Xx5Qsfk0O/Tfn2p1rTI6mjhlu/a+YXZUD7uNd6AE6fkS17jquDI9xrizsdQ Z8iDpM/0FEPD6GahHGG44v65y4R42uSEuWWlRTgSZ80F2NILD13aIkbtbHWJWd1+ VbDBMS+pEDc7Ih4v4gFoYk9nEnwVOuujiNQqRUm+gsuffSE8+BHNWuJIqGpdTOE5 FE+3pa8ksjgF62XJSylPhrEv1a7QHCg1Adsx9o1v0AGKuor/ZrGMNrj7DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsZbRMO+bl2S/dglf+JHTTDDjw+MB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9UIOUFQ liz6m6P3FEkJPycofMvng1hPUiFSoy/Zgk6PI1tooRRELU62RC3vvJZZlKJZPHru PKs02T9dYVfX2N4VQ9g5M3P/+fw97NRBk5SqX1cbpi+V6ia+VqDge0NWz4j4PAyE l0cErGFnL3T6FcscFXVWZIFaQoXS9N5/TdHE3k/n7YEj+AoQusGb8Jz98ULF6kC0 y7TIBdSNlQNjA9RUifIfMMyk8oz0IzzXvWl8pCQISK8P45iVMLqn4AK+LJ1tsZC/ W3ahyEkcXL3Q+HY3G/bn5Rm3jeNlywVxCP2tNQxn0VAraBuZTwlTPvaZTzbxMUMt JYIag+E+6E8Geg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:53:27 2026 by rpki-client