$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: F4AdqLh06vTDe7JTTJwlrlELjj7fkfsYVuGhnx3n3rg= Subject key identifier: 37:28:03:C4:93:FB:B0:A3:38:FB:A1:16:9D:34:B8:2B:4A:67:34:4F Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019F909121D5E88A0BEC0348ADFAB266560A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 19D2 Signing time: Thu 23 Jul 2026 20:00:58 +0000 Manifest this update: Thu 23 Jul 2026 20:00:58 +0000 Manifest next update: Fri 24 Jul 2026 20:00:58 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 8: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 9: NEyQG9kyLEW4Um4QAvO7DA9LZsE.roa (hash: v1Y4jsLwKJqAeGZpT4JA4xV86AlZtwzcF7xc4splz3Q=) 10: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 11: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 12: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 13: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: qxNFlD0I7UZbEpA0/prUdl96bNzoEgJ6BInbKvKBAL0=) 14: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 15: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 16: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 17: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 18: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 19: p1SWpdWXGLbEBPrhZY5QfK82wIw.roa (hash: VfVL2JfcEVzWDqasnouu2XzXkqrAe9JpcBaMStaIF8Y=) 20: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:91:21:d5:e8:8a:0b:ec:03:48:ad:fa:b2:66:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jul 23 20:00:58 2026 GMT Not After : Jul 24 20:00:58 2026 GMT Subject: CN=372803c493fbb0a338fba1169d34b82b4a67344f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:63:5d:b9:31:9a:3f:e4:af:ea:4d:f3:f7: 1e:f2:33:f5:62:46:f8:6b:78:5b:55:6f:bc:c2:bf: d9:15:3b:e2:9a:3a:f8:56:89:ca:75:6a:d6:e7:3a: 7e:f6:c1:6b:7b:7a:45:5a:79:27:2c:70:13:6d:4e: 68:3f:60:33:99:cc:ea:08:f7:52:68:6b:37:ce:60: e9:50:48:6c:03:5f:37:0a:40:a6:84:3f:67:04:df: 91:4c:63:14:55:b7:59:bc:df:26:32:a8:17:03:97: 6e:a3:c5:29:75:ff:c9:0c:a5:6f:e8:7d:12:da:83: a6:17:a3:18:19:51:0e:6c:10:2d:28:28:02:47:3f: 65:70:57:1b:e9:31:a3:8b:55:36:e4:58:c9:08:35: 9c:8a:5c:fa:f8:21:6c:5e:84:d2:cf:0e:4c:6c:4c: 3e:bd:e2:9d:34:98:9f:4f:61:9d:34:6e:42:55:bf: 17:8d:7f:63:6a:3e:db:19:91:3b:85:5f:27:c5:9b: 66:f3:73:43:8a:65:77:1a:cb:29:cf:55:22:aa:5c: e8:5b:e7:45:1e:33:7d:cf:f2:59:8e:69:7d:7d:93: ff:e2:f0:76:0a:07:4a:cd:1b:0d:6a:3e:29:f3:65: 98:ea:fe:84:6d:31:a4:49:4b:cc:dd:4c:36:82:c3: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:28:03:C4:93:FB:B0:A3:38:FB:A1:16:9D:34:B8:2B:4A:67:34:4F X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dc:99:6f:77:02:ba:c4:98:a5:bd:6a:46:5e:e7:b8:8b:33: e2:96:79:e9:3a:04:34:ec:89:0f:b2:e8:59:5c:6c:ce:b8:81: 78:48:54:1e:19:a7:19:eb:81:98:ff:40:5a:2d:f9:2b:4c:3b: 3f:8f:19:98:4d:64:40:31:d6:dd:5a:7a:e0:77:f6:62:2a:aa: ef:6b:62:48:10:cb:fb:f4:54:74:9c:62:74:62:28:82:0f:2e: e1:3f:2c:51:bc:97:d4:34:9f:0f:b8:0b:48:b3:fd:c7:4b:a6: 97:1b:0a:8c:41:5f:91:00:95:96:5e:17:03:19:b2:de:6e:bf: b7:29:19:4e:71:62:68:fc:96:2b:4d:0c:80:9c:0a:00:33:71: fa:db:7c:ec:6d:ae:c7:8a:b3:0b:85:64:a6:bb:32:80:c2:ca: 01:4d:4a:00:1d:12:be:38:16:79:67:6e:03:48:79:7a:1e:51: 7c:a6:1f:3b:25:2b:37:2f:b1:c9:e7:97:60:89:33:4e:43:60: 89:f5:4c:23:cf:f6:47:c1:be:b5:22:fd:bf:07:f5:27:e0:e1: 26:52:4a:ec:10:b8:f1:9f:9e:ab:db:29:e0:84:53:0b:25:06: f3:e6:c0:01:f4:9b:5b:e3:50:4e:37:a8:b2:1e:dd:23:9c:3e: 6c:96:3c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkSHV6IoL7ANIrfqyZlYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD EygzNzI4MDNjNDkzZmJiMGEzMzhmYmExMTY5ZDM0YjgyYjRhNjczNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04xjXbkxmj/kr+pN8/ce8jP1Ykb4 a3hbVW+8wr/ZFTvimjr4VonKdWrW5zp+9sFre3pFWnknLHATbU5oP2AzmczqCPdS aGs3zmDpUEhsA183CkCmhD9nBN+RTGMUVbdZvN8mMqgXA5duo8Updf/JDKVv6H0S 2oOmF6MYGVEObBAtKCgCRz9lcFcb6TGji1U25FjJCDWcilz6+CFsXoTSzw5MbEw+ veKdNJifT2GdNG5CVb8XjX9jaj7bGZE7hV8nxZtm83NDimV3Gsspz1UiqlzoW+dF HjN9z/JZjml9fZP/4vB2CgdKzRsNaj4p82WY6v6EbTGkSUvM3Uw2gsPZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcoA8ST+7CjOPuhFp00uCtKZzRPMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtyZb3cC usSYpb1qRl7nuIsz4pZ56ToENOyJD7LoWVxszriBeEhUHhmnGeuBmP9AWi35K0w7 P48ZmE1kQDHW3Vp64Hf2Yiqq72tiSBDL+/RUdJxidGIogg8u4T8sUbyX1DSfD7gL SLP9x0umlxsKjEFfkQCVll4XAxmy3m6/tykZTnFiaPyWK00MgJwKADNx+tt87G2u x4qzC4VkprsygMLKAU1KAB0SvjgWeWduA0h5eh5RfKYfOyUrNy+xyeeXYIkzTkNg ifVMI8/2R8G+tSL9vwf1J+DhJlJK7BC48Z+eq9sp4IRTCyUG8+bAAfSbW+NQTjeo sh7dI5w+bJY8kQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:44 2026 by rpki-client