$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: EP6y5F3ElWEZu9zEDSIS73A3STAnDMTfgKHMWc10NlI= Subject key identifier: F7:30:8E:E9:69:BF:24:BA:31:1C:17:75:59:2B:26:C1:C8:E4:50:C4 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019F90FF099CE734407D10AF056C4E683925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 19D6 Signing time: Thu 23 Jul 2026 22:01:00 +0000 Manifest this update: Thu 23 Jul 2026 22:01:00 +0000 Manifest next update: Fri 24 Jul 2026 22:01:00 +0000 Files and hashes: 1: 1-bX4q69pD6P9iDL_MBjXApDUUoA.roa (hash: Kde578ne8/gKQezBhfcD4rTCARaf5d1vuhecNygX/Nk=) 2: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (hash: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs=) 3: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 4: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 5: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: faD3SCiIZyViW+cZqCHEupwLv1VHRg/UaU4LBlz7Ags=) 6: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 7: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 8: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:09:9c:e7:34:40:7d:10:af:05:6c:4e:68:39:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jul 23 22:01:00 2026 GMT Not After : Jul 24 22:01:00 2026 GMT Subject: CN=f7308ee969bf24ba311c1775592b26c1c8e450c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:8f:96:86:0f:0d:1d:24:0e:69:cb:df:f7: a3:40:9f:b2:31:bc:41:fe:c3:89:78:62:00:c1:d0: b4:48:f1:e8:cf:61:40:46:ad:df:7e:bd:8d:0f:44: d7:de:f9:06:82:0f:45:99:72:99:aa:f3:16:99:e2: 8b:2d:30:4b:61:b8:ac:4a:72:37:94:2f:4e:78:03: 52:26:c0:bb:65:a0:da:42:12:a9:fc:61:0d:d8:b0: 59:0c:b6:fa:af:67:f8:70:66:95:c2:98:2e:59:35: 04:c2:cf:cb:97:02:b5:88:14:31:9c:94:01:b0:36: c3:10:d6:fd:3d:5b:a4:3a:8f:65:b2:9c:d5:61:f5: c5:e6:a9:b1:83:dc:39:db:fe:b4:0d:65:85:ab:c8: 2e:31:b8:d9:75:c4:da:8d:aa:0e:e3:e4:58:df:83: 45:f9:6e:a9:49:7b:32:9f:9f:f2:d0:c8:78:48:1f: 89:9a:7f:5a:81:a1:58:29:97:b0:41:19:94:c4:0c: c0:94:b3:69:78:99:9d:cf:f7:e2:38:d1:89:83:8a: 38:f4:c1:93:1f:25:03:c3:6f:88:7d:43:d5:25:25: e6:b3:19:ac:b1:20:cd:a5:ac:ff:0e:6d:be:fa:35: 2d:0f:1e:0d:b9:f9:36:4a:3c:17:07:85:d7:a6:e6: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:8E:E9:69:BF:24:BA:31:1C:17:75:59:2B:26:C1:C8:E4:50:C4 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:21:d1:64:61:48:f8:4e:78:55:3a:05:67:b9:73:7d:3b:db: d4:ca:57:ca:cc:85:a7:7f:13:a8:28:59:76:c7:c1:9f:c3:1b: 1b:7e:72:61:63:f5:f3:b1:2e:0c:55:15:47:03:fa:b4:37:3e: 85:e0:47:60:a2:0f:47:d8:6d:06:6f:1a:3f:00:22:bb:86:41: e8:fc:f1:67:8e:e2:a2:9f:01:79:7b:02:e9:09:0e:79:ca:3a: 43:d6:bc:01:21:6c:f1:24:65:3c:eb:b1:8b:f3:3a:02:e4:7e: 94:cd:eb:40:37:b6:01:34:d8:1d:fe:24:fe:ab:eb:23:59:d6: 9c:72:40:0b:57:5c:87:de:c9:24:04:a0:5c:14:8c:ac:80:7b: c5:62:09:27:3f:ea:8c:09:d7:ce:b8:5e:f4:c0:e9:f1:7a:f2: cf:65:b2:01:75:c8:04:54:a9:53:56:ce:1e:71:ce:16:78:43: 79:be:aa:00:4f:99:5e:14:21:68:54:c5:c5:da:c5:89:72:9e: 34:b4:3c:ed:93:5f:a1:32:17:f3:ba:61:3e:17:10:aa:df:3f: 30:cb:95:41:1f:4f:fb:76:60:ff:db:68:76:6e:91:ba:97:eb: 26:8c:74:c6:ad:2f:03:6b:68:c0:5a:d3:c5:30:41:c7:d6:71: 0e:e0:dc:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/wmc5zRAfRCvBWxOaDklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwNzIzMjIwMTAwWhcNMjYwNzI0MjIwMTAwWjAzMTEwLwYDVQQD EyhmNzMwOGVlOTY5YmYyNGJhMzExYzE3NzU1OTJiMjZjMWM4ZTQ1MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3KPloYPDR0kDmnL3/ejQJ+yMbxB /sOJeGIAwdC0SPHoz2FARq3ffr2ND0TX3vkGgg9FmXKZqvMWmeKLLTBLYbisSnI3 lC9OeANSJsC7ZaDaQhKp/GEN2LBZDLb6r2f4cGaVwpguWTUEws/LlwK1iBQxnJQB sDbDENb9PVukOo9lspzVYfXF5qmxg9w52/60DWWFq8guMbjZdcTajaoO4+RY34NF +W6pSXsyn5/y0Mh4SB+Jmn9agaFYKZewQRmUxAzAlLNpeJmdz/fiONGJg4o49MGT HyUDw2+IfUPVJSXmsxmssSDNpaz/Dm2++jUtDx4Nufk2SjwXB4XXpub9BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcwjulpvyS6MRwXdVkrJsHI5FDEMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiHRZGFI +E54VToFZ7lzfTvb1MpXysyFp38TqChZdsfBn8MbG35yYWP187EuDFUVRwP6tDc+ heBHYKIPR9htBm8aPwAiu4ZB6PzxZ47iop8BeXsC6QkOeco6Q9a8ASFs8SRlPOux i/M6AuR+lM3rQDe2ATTYHf4k/qvrI1nWnHJAC1dch97JJASgXBSMrIB7xWIJJz/q jAnXzrhe9MDp8Xryz2WyAXXIBFSpU1bOHnHOFnhDeb6qAE+ZXhQhaFTFxdrFiXKe NLQ87ZNfoTIX87phPhcQqt8/MMuVQR9P+3Zg/9todm6RupfrJox0xq0vA2towFrT xTBBx9ZxDuDcNw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:32 2026 by rpki-client