$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: NbNh7wlnSE+k3XCechlVAtcd8H+ZXDmV4UFtIgAzpEs= Subject key identifier: A6:05:3F:46:9B:1B:0A:BB:11:6B:F1:4C:69:25:C8:23:2A:FC:22:91 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019F8FB52C61C068D84D3B74E9F65F5EF165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 19D8 Signing time: Thu 23 Jul 2026 16:00:42 +0000 Manifest this update: Thu 23 Jul 2026 16:00:42 +0000 Manifest next update: Fri 24 Jul 2026 16:00:42 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: a5xRymNzYHbqcJdYFMnUm2tkOASf6QHjZJsCbrb6oqs=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:2c:61:c0:68:d8:4d:3b:74:e9:f6:5f:5e:f1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jul 23 16:00:42 2026 GMT Not After : Jul 24 16:00:42 2026 GMT Subject: CN=a6053f469b1b0abb116bf14c6925c8232afc2291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:80:6c:13:08:9b:85:d6:56:67:a7:86:e3: df:ea:fe:39:70:22:db:c1:0b:2c:8a:47:8d:f4:32: b9:c6:20:16:19:34:88:68:4d:c1:81:d6:32:e4:d4: 66:ba:f1:ef:96:0e:dd:d3:e7:e9:f5:cd:fb:bf:72: 79:f6:f8:96:74:99:e4:03:23:98:ca:43:9d:1b:38: b9:74:1a:ad:ad:68:15:19:52:01:78:54:9c:bb:e1: 5f:1f:80:05:3e:21:80:ac:40:23:f6:fa:91:7a:a7: e4:1b:55:3b:c4:03:3e:6b:4f:2f:8a:c2:d9:0a:19: 30:17:5c:9a:ab:0c:53:23:b8:1a:1d:74:51:74:e0: e0:d7:4a:56:78:aa:01:24:63:02:70:69:4f:1f:02: 4f:b0:39:31:fc:87:ae:57:b9:d4:fd:95:41:ef:53: 46:b6:66:1c:50:21:55:87:e8:ee:31:17:01:d9:27: ef:37:3b:79:91:58:fb:e8:3c:2f:d5:4f:3c:91:44: 9d:c1:c4:0d:2d:ef:04:17:1a:fb:33:3b:36:f3:ed: 26:21:e2:8c:ae:8a:53:a4:d2:f7:29:5f:6d:65:7e: 42:68:8a:9c:1c:73:3d:25:2c:b6:f7:8e:45:98:50: 57:86:bd:03:24:a4:7d:aa:23:27:1e:97:03:c8:d5: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:3F:46:9B:1B:0A:BB:11:6B:F1:4C:69:25:C8:23:2A:FC:22:91 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:5e:d8:eb:dd:d8:3c:44:20:cb:a6:06:dc:10:08:8c:6d: 2c:a0:3c:07:49:3e:e6:7d:a9:78:9b:ff:f7:6d:dc:23:84:45: e0:b8:37:6b:95:9f:20:c8:e4:32:c9:cd:96:7b:c2:6b:cd:41: 93:67:69:e1:e0:fc:5f:7f:3e:a5:64:ff:85:7b:cf:52:ce:f4: d1:29:1a:7a:38:66:32:23:4d:79:e9:7d:9b:83:55:8f:e9:d9: c3:38:a4:72:e9:87:c2:a5:73:2c:50:3b:28:d2:b7:d7:9d:23: cc:64:9f:d5:c4:20:64:75:4d:39:7f:76:03:e6:36:b9:51:9b: 27:78:46:80:37:38:58:75:92:e6:25:91:ff:57:42:08:26:a0: bb:28:4d:f6:fa:cd:16:6c:89:df:6b:66:be:09:60:3e:d4:81: 26:ff:fb:bd:3c:0a:1d:93:e4:aa:2c:6f:1d:b1:e4:61:64:0c: c2:79:e4:5e:ed:84:dd:87:1a:4d:03:7e:7d:d7:74:48:44:42: 03:ba:f0:9b:71:28:2c:18:40:18:8e:78:fc:6d:59:f9:89:a4: 4f:8c:74:e4:1f:ec:0a:63:fd:ec:c8:19:46:8c:31:bb:36:5b: 04:52:db:5d:c6:66:d4:4e:99:9e:e1:5c:08:40:02:f4:91:bf: 90:24:36:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtSxhwGjYTTt06fZfXvFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwNzIzMTYwMDQyWhcNMjYwNzI0MTYwMDQyWjAzMTEwLwYDVQQD EyhhNjA1M2Y0NjliMWIwYWJiMTE2YmYxNGM2OTI1YzgyMzJhZmMyMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPCAbBMIm4XWVmenhuPf6v45cCLb wQssikeN9DK5xiAWGTSIaE3BgdYy5NRmuvHvlg7d0+fp9c37v3J59viWdJnkAyOY ykOdGzi5dBqtrWgVGVIBeFScu+FfH4AFPiGArEAj9vqReqfkG1U7xAM+a08visLZ ChkwF1yaqwxTI7gaHXRRdODg10pWeKoBJGMCcGlPHwJPsDkx/IeuV7nU/ZVB71NG tmYcUCFVh+juMRcB2SfvNzt5kVj76Dwv1U88kUSdwcQNLe8EFxr7Mzs28+0mIeKM ropTpNL3KV9tZX5CaIqcHHM9JSy2945FmFBXhr0DJKR9qiMnHpcDyNWsCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYFP0abGwq7EWvxTGklyCMq/CKRMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDBe2Ovd 2DxEIMumBtwQCIxtLKA8B0k+5n2peJv/923cI4RF4Lg3a5WfIMjkMsnNlnvCa81B k2dp4eD8X38+pWT/hXvPUs700SkaejhmMiNNeel9m4NVj+nZwzikcumHwqVzLFA7 KNK3150jzGSf1cQgZHVNOX92A+Y2uVGbJ3hGgDc4WHWS5iWR/1dCCCaguyhN9vrN FmyJ32tmvglgPtSBJv/7vTwKHZPkqixvHbHkYWQMwnnkXu2E3YcaTQN+fdd0SERC A7rwm3EoLBhAGI54/G1Z+YmkT4x05B/sCmP97MgZRowxuzZbBFLbXcZm1E6ZnuFc CEAC9JG/kCQ2pw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:58:57 2026 by rpki-client