$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: DnSokBr8GGD3WYu/f+Y9n+SVZdawkm2NI0Q3QHItGzk= Subject key identifier: BD:89:AE:3B:68:1E:7A:C9:99:29:F7:C5:47:08:22:34:AB:FC:8A:28 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019F8EA2432F976D7537C7E49B504E2EB08A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 19E7 Signing time: Thu 23 Jul 2026 11:00:26 +0000 Manifest this update: Thu 23 Jul 2026 11:00:26 +0000 Manifest next update: Fri 24 Jul 2026 11:00:26 +0000 Files and hashes: 1: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (hash: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI=) 2: 1DvNK1UEfocldcVoSCDz4-rQCu0.roa (hash: W9AE3etelZntnhp0Syb26y14LnYuyubNeRnjY+KTeic=) 3: 2IRQ2tg7AckZC-qaAHhGpj_YvX0.roa (hash: E5vcK/Kzq3X0ZU3ua0SSHujRQ2xDF2dauEaV4Vglvqc=) 4: 2ufcO6Solkeoxok1gEGcUzsMb5Q.asa (hash: YPRSCljS8W4a21wjawN3tjkT21ahLvmlXryi5Zk5yms=) 5: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (hash: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA=) 6: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (hash: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw=) 7: MEF3inUBFdwUSzzBPPrNynpqKew.asa (hash: qyxeY4oHRpmv1kLBWmfROmIvHNMqEegs2w5oRBvEBq4=) 8: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (hash: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E=) 9: PzoJn7JmNA7HLgDJj3qABg4rdIg.roa (hash: Pu8elV3ASkAhzzlLq5cnqoeSEZGr98s46wDdEgSzMVE=) 10: Rs1lwHsOhORTbpOYC0DdvHoRuG4.roa (hash: 2ldj5+OjHEBz42EYRxs+dDbaX+fxjP+Yz7ZHeTr6lGA=) 11: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (hash: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4=) 12: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (hash: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y=) 13: eLLgkJY0LUjDQzm5GuuyzsHUdO8.roa (hash: 5HseyNnROV3cBPGdpH59V7rf9Io+o9Vye7FV9A2XVfo=) 14: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: Hocpm0ck0iZWOfILHRIju427DA5UrRWl2yPL073RxfQ=) 15: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (hash: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k=) 16: qJ3niIVK-kPpD_FGpR52CMp181s.roa (hash: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:43:2f:97:6d:75:37:c7:e4:9b:50:4e:2e:b0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jul 23 11:00:26 2026 GMT Not After : Jul 24 11:00:26 2026 GMT Subject: CN=bd89ae3b681e7ac99929f7c547082234abfc8a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:c1:0e:14:83:8a:11:9f:a7:8c:18:c0:aa: 19:a6:a8:6f:c6:d5:2e:53:ac:80:7e:b8:5b:ee:9f: e4:a1:6a:ff:55:26:88:0d:e1:8d:66:66:13:42:ba: a7:66:35:9f:b9:ba:ea:d9:2a:93:42:b2:38:88:c8: de:80:23:36:e3:f7:bc:a4:9a:23:a6:fc:94:9c:2a: a1:17:8d:2d:80:63:0b:19:bb:e3:3a:43:76:5b:ce: 73:ed:fb:71:48:f8:1a:ff:47:20:fe:c8:21:f2:e0: 9a:ba:de:98:ca:f6:f5:1b:a2:21:9c:68:e4:39:41: 1c:0d:4f:4d:68:cc:d7:07:f4:e5:7a:7f:1b:dd:6c: a0:87:55:ae:75:41:1f:e2:d2:c3:c3:ae:70:ba:44: 8a:10:b8:c3:8e:2f:60:5d:b5:3e:bb:10:df:5f:82: 3c:40:b4:a2:2e:18:55:14:3f:6c:38:14:75:b0:44: 60:68:15:90:2e:64:56:5a:73:60:ad:a4:6f:57:8e: 72:2a:a2:a6:a2:70:19:59:e1:09:9f:57:e3:a3:ec: 0c:b0:0d:53:98:e2:42:fe:e9:8d:ea:4b:3a:0b:c9: ad:38:ea:54:37:4b:cf:e2:20:5c:a6:db:3c:c9:8e: 78:bc:59:93:c2:37:d0:1c:cf:a6:6a:74:b3:25:1c: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:89:AE:3B:68:1E:7A:C9:99:29:F7:C5:47:08:22:34:AB:FC:8A:28 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ba:22:58:1e:00:ce:19:bb:1e:08:ad:c1:a4:21:ae:99:23: b5:b9:4b:3f:8c:cd:b2:ac:87:4b:fc:af:ce:99:aa:ca:5d:1e: 20:84:b6:db:89:a9:3e:b0:24:9f:5e:6d:c8:cb:73:f2:52:34: 72:e0:40:4b:8b:49:55:76:78:c2:22:c3:aa:36:a9:46:d3:05: 22:dc:b5:9d:86:6c:39:08:52:ee:0c:f7:0c:d3:81:db:ce:00: 93:9f:d4:20:00:17:25:05:8b:3f:ed:9a:39:0b:f3:38:de:3a: bc:eb:79:c4:01:db:a8:e9:4c:9a:f0:4a:07:e6:bc:cf:aa:1e: 70:e1:c4:00:4d:cd:5a:b2:df:f8:a9:d1:34:af:da:a1:cd:a9: 41:68:cb:36:89:10:9f:ed:1f:a2:fa:b8:2b:9f:0e:13:06:69: 35:19:35:d7:1d:28:c1:e9:26:37:57:f8:38:5f:aa:04:6d:f5: ed:d5:6d:c1:e4:e5:d6:fb:27:30:0e:97:b6:7d:b7:2a:e4:79: 50:be:f6:ca:b0:67:52:87:e5:b1:01:0f:34:73:1a:c2:fa:b6: 91:19:1f:7c:c3:cf:8b:d8:d7:2b:4e:6a:22:2d:fa:90:60:29: 09:4a:5b:43:ac:50:1a:67:ae:b0:d0:b3:e1:7e:5a:e0:d5:12: 4e:23:9c:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OokMvl211N8fkm1BOLrCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwNzIzMTEwMDI2WhcNMjYwNzI0MTEwMDI2WjAzMTEwLwYDVQQD EyhiZDg5YWUzYjY4MWU3YWM5OTkyOWY3YzU0NzA4MjIzNGFiZmM4YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqanBDhSDihGfp4wYwKoZpqhvxtUu U6yAfrhb7p/koWr/VSaIDeGNZmYTQrqnZjWfubrq2SqTQrI4iMjegCM24/e8pJoj pvyUnCqhF40tgGMLGbvjOkN2W85z7ftxSPga/0cg/sgh8uCaut6Yyvb1G6IhnGjk OUEcDU9NaMzXB/Tlen8b3Wygh1WudUEf4tLDw65wukSKELjDji9gXbU+uxDfX4I8 QLSiLhhVFD9sOBR1sERgaBWQLmRWWnNgraRvV45yKqKmonAZWeEJn1fjo+wMsA1T mOJC/umN6ks6C8mtOOpUN0vP4iBcpts8yY54vFmTwjfQHM+manSzJRyMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2JrjtoHnrJmSn3xUcIIjSr/IooMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLoiWB4A zhm7HgitwaQhrpkjtblLP4zNsqyHS/yvzpmqyl0eIIS224mpPrAkn15tyMtz8lI0 cuBAS4tJVXZ4wiLDqjapRtMFIty1nYZsOQhS7gz3DNOB284Ak5/UIAAXJQWLP+2a OQvzON46vOt5xAHbqOlMmvBKB+a8z6oecOHEAE3NWrLf+KnRNK/aoc2pQWjLNokQ n+0fovq4K58OEwZpNRk11x0owekmN1f4OF+qBG317dVtweTl1vsnMA6Xtn23KuR5 UL72yrBnUoflsQEPNHMawvq2kRkffMPPi9jXK05qIi36kGApCUpbQ6xQGmeusNCz 4X5a4NUSTiOcqw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:14 2026 by rpki-client