$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json) Hash identifier: Zp8HaEljv3fyAqWOD/YDms+MQO8EwLg7DkzjNB/+QiA= Subject key identifier: 14:8E:B1:FB:67:AA:AB:DE:10:68:54:CE:80:5F:41:A6:94:DE:C1:A3 Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 019F935BC1973372D04F131E875770225127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft Manifest number: 16E1 Signing time: Fri 24 Jul 2026 09:01:31 +0000 Manifest this update: Fri 24 Jul 2026 09:01:31 +0000 Manifest next update: Sat 25 Jul 2026 09:01:31 +0000 Files and hashes: 1: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=) 2: KJMJ77kQuoG9cpUlP7ImSAxxrC8.roa (hash: K2EGS70mhDKfj9roByjDWB46Ks+HmqgyJLsqPE6aR0s=) 3: KKPvuphxl-jCXx-t6E5TKLh7ouE.roa (hash: ghQPL+5j3H9Pp1Ju//l14r1R97GRHHIGE3fwtOKGTjA=) 4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=) 5: PIctaaq8hYam_9VAPrVCYf9AqiI.roa (hash: M1/1hfWtMFwKSAcTSdndXFN4Ntl5XmVjhTvpw61hDG0=) 6: diWdBr8Lw6nPV-tMvOf0Cna3ipc.roa (hash: iWodsL01tWCHUx+C3pbxQzDdBQEdtQ4RhYGFNEL8TgE=) 7: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: +wKdNTAtCKlZs8m+WKB/ZcPus+rVNsXZGZj340kQnDY=) 8: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=) 9: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=) 10: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=) 11: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5b:c1:97:33:72:d0:4f:13:1e:87:57:70:22:51:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Jul 24 09:01:31 2026 GMT Not After : Jul 25 09:01:31 2026 GMT Subject: CN=148eb1fb67aaabde106854ce805f41a694dec1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:ac:0d:b0:de:7e:3d:97:f5:18:1d:73:c6: 55:5b:53:37:b5:78:f0:e9:52:da:dd:c1:b9:7d:fc: 79:34:51:a5:93:5c:96:39:bf:e9:ae:71:fd:a0:7e: 75:c3:ad:38:e5:fc:25:c3:32:ca:5c:56:f6:a6:e6: ed:54:ad:76:74:8c:a0:56:b8:bc:91:ef:7c:ef:04: 2e:98:1e:4d:70:0b:3e:e1:49:d6:4c:88:0f:e1:56: 55:60:ca:67:a3:39:41:28:6e:a3:64:39:12:69:56: 38:09:1b:66:05:e1:b2:81:da:ed:ad:fa:9e:a8:7c: 95:06:17:57:e2:1c:cd:71:81:35:f7:30:66:90:46: 0f:4d:cb:18:37:54:33:e2:5d:e5:b3:97:d4:c6:27: 13:5f:e5:d5:07:6f:f0:93:fc:f9:ba:bd:a6:a1:7a: b9:aa:26:cc:33:4a:44:90:f6:9e:29:90:18:bb:09: 88:f6:d7:cb:f0:26:22:6b:a5:a0:75:01:64:43:c2: 57:0c:db:52:5f:18:8b:35:88:0e:20:61:a4:ff:57: 4d:b2:eb:a0:e1:a4:47:28:7b:e4:26:8f:6b:51:79: 1f:f0:71:e5:72:c3:ee:1d:92:c1:fb:a3:cd:fe:7a: cb:7e:e8:1e:55:58:ee:ca:86:5a:f1:82:b4:92:2b: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:B1:FB:67:AA:AB:DE:10:68:54:CE:80:5F:41:A6:94:DE:C1:A3 X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:05:8f:74:b6:74:f1:62:2f:bc:a8:51:bc:01:e6:90:94:4f: 55:0b:ba:a8:dc:2e:65:0e:6b:46:33:d7:67:b7:48:60:c2:d1: d9:e0:cf:f7:dd:34:3b:4f:c6:95:3f:7f:4d:4d:60:2d:25:6b: f6:8e:15:1c:4e:e0:35:a8:5b:2b:d4:6c:54:ab:62:d0:49:b1: 00:be:37:7e:b7:ed:3d:66:e2:da:d0:3e:74:4d:43:5a:40:cd: 11:ad:e9:72:85:42:60:98:b8:eb:b3:07:ec:2f:9b:a2:dc:fb: ef:ba:1b:76:60:ab:70:26:31:95:5a:a9:83:bc:6e:3a:60:b4: 25:3d:0b:c5:61:28:9b:8f:d0:7c:44:1e:b1:8c:b3:b1:08:85: 89:1e:20:94:7e:b1:f8:53:a7:51:f0:7d:30:91:25:be:a0:c0: ae:12:a5:1a:8a:73:fd:35:ae:af:23:64:29:05:c3:6e:8e:4f: f1:4e:3d:b6:2d:c7:59:96:7d:7a:3e:a4:0c:01:2a:eb:75:85: e4:29:eb:33:b3:81:e1:d0:61:86:4b:45:4c:87:d7:8d:86:8b: 69:a6:43:50:32:1e:fd:0e:22:f1:4e:43:07:a4:23:43:26:24: 78:5c:a1:ad:46:3f:e5:fa:2b:fe:87:af:fd:e5:dc:0c:61:6b: a0:e4:ac:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TW8GXM3LQTxMeh1dwIlEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwNzI0MDkwMTMxWhcNMjYwNzI1MDkwMTMxWjAzMTEwLwYDVQQD EygxNDhlYjFmYjY3YWFhYmRlMTA2ODU0Y2U4MDVmNDFhNjk0ZGVjMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWsDbDefj2X9Rgdc8ZVW1M3tXjw 6VLa3cG5ffx5NFGlk1yWOb/prnH9oH51w6045fwlwzLKXFb2pubtVK12dIygVri8 ke987wQumB5NcAs+4UnWTIgP4VZVYMpnozlBKG6jZDkSaVY4CRtmBeGygdrtrfqe qHyVBhdX4hzNcYE19zBmkEYPTcsYN1Qz4l3ls5fUxicTX+XVB2/wk/z5ur2moXq5 qibMM0pEkPaeKZAYuwmI9tfL8CYia6WgdQFkQ8JXDNtSXxiLNYgOIGGk/1dNsuug 4aRHKHvkJo9rUXkf8HHlcsPuHZLB+6PN/nrLfugeVVjuyoZa8YK0kiuxMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSOsftnqqveEGhUzoBfQaaU3sGjMB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwWPdLZ0 8WIvvKhRvAHmkJRPVQu6qNwuZQ5rRjPXZ7dIYMLR2eDP9900O0/GlT9/TU1gLSVr 9o4VHE7gNahbK9RsVKti0EmxAL43frftPWbi2tA+dE1DWkDNEa3pcoVCYJi467MH 7C+botz777obdmCrcCYxlVqpg7xuOmC0JT0LxWEom4/QfEQesYyzsQiFiR4glH6x +FOnUfB9MJElvqDArhKlGopz/TWuryNkKQXDbo5P8U49ti3HWZZ9ej6kDAEq63WF 5CnrM7OB4dBhhktFTIfXjYaLaaZDUDIe/Q4i8U5DB6QjQyYkeFyhrUY/5for/oev /eXcDGFroOSsiw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:54:28 2026 by rpki-client