$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: HcaszhUeJkqChLoUFVdX2nA9mn3MhDLk7r2YzWkuLS8= Subject key identifier: 89:9B:75:1C:2B:B1:3E:7C:82:AC:80:86:50:25:54:90:25:5D:23:A5 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019F90C78C11658B968F836B1A939AC647BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1A56 Signing time: Thu 23 Jul 2026 21:00:24 +0000 Manifest this update: Thu 23 Jul 2026 21:00:24 +0000 Manifest next update: Fri 24 Jul 2026 21:00:24 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 3: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 4: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 5: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 6: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 7: l6NUj59hnqy3JLtxFYVYwOzXNdc.roa (hash: FrjzAwtuQeTaIwwwPCyfJBI49cI+Unf2qW7eLS9drHQ=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: cbSKW9UJx57hXS5AYDgz12HPu69LlKfv3ShxxmfhLxE=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: z0oaUfPMt3Z_xl8gY8NTLVtXaGM.roa (hash: q9SpH5VN4ogoXvDgwfQyWPD2v94u40id/9IL4OGY508=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:8c:11:65:8b:96:8f:83:6b:1a:93:9a:c6:47:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Jul 23 21:00:24 2026 GMT Not After : Jul 24 21:00:24 2026 GMT Subject: CN=899b751c2bb13e7c82ac808650255490255d23a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:c0:a2:51:bc:80:bc:16:c3:7c:54:75:4d: a0:84:f1:29:ac:18:93:09:0f:64:fb:1b:4d:bd:3e: c9:5a:c0:2a:2e:86:3e:d7:25:71:f1:a4:b7:1e:25: 28:be:a3:14:b5:89:c9:a0:db:7c:5a:ea:d6:12:3d: fa:84:d8:c0:a3:ff:a0:2c:c1:87:f1:ac:e7:be:4c: 58:aa:2c:9a:66:36:94:3d:74:db:be:2d:4d:de:95: 63:fd:a2:23:e3:9a:b0:c7:a0:24:52:dd:93:96:be: 52:20:e0:f4:3e:96:e8:10:fe:b6:a7:8f:2f:02:b2: d2:59:79:9c:34:93:af:06:65:6e:cc:88:ac:12:7e: f6:4f:7d:ac:95:91:84:e2:9a:4d:f3:7a:84:dc:e6: 7d:d0:dd:b2:82:38:15:4e:36:f6:aa:62:96:77:a2: f1:6c:60:f0:2a:cc:8e:a6:49:d0:76:f8:5b:70:cc: 76:ae:6f:4e:9e:aa:0e:42:b5:4b:ea:17:5c:f2:30: 8d:5a:e6:8a:d1:29:85:5a:ec:86:67:77:3a:25:ed: 71:3c:05:e3:df:a5:72:81:93:3f:4c:4d:e6:1d:68: c7:b8:7a:b0:3a:88:cc:c3:41:d7:00:48:0f:86:47: 6b:8a:2d:b4:16:64:c4:21:08:64:d0:22:b8:63:ef: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:75:1C:2B:B1:3E:7C:82:AC:80:86:50:25:54:90:25:5D:23:A5 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e1:9e:be:38:18:76:a2:39:fa:21:99:a0:df:91:e6:8f:b7: 51:23:93:9c:ec:6a:ff:83:41:5e:c0:71:fc:9e:18:23:c7:9d: b8:86:05:83:a5:11:38:4a:5d:86:c9:60:a7:dd:b1:e5:f2:2b: 4d:f9:84:76:47:80:1f:b8:68:ae:09:ac:72:fc:e4:2e:1f:f2: e1:c7:dd:7d:e2:b9:0e:3b:d7:77:5c:67:ff:bd:d3:2c:0f:f2: 36:75:0b:73:1b:1e:30:d8:4a:97:92:e7:fb:34:a8:52:f7:f6: d8:cf:1b:d1:d8:10:82:b9:c1:71:ad:a8:5d:d5:f9:ea:15:24: c2:be:d5:b7:29:ce:dc:e0:0c:e2:1a:56:eb:03:c8:a9:0a:a3: d4:95:34:dc:cc:8b:08:de:c6:3f:dc:7f:63:fa:ed:65:5f:54: ee:0f:bd:db:90:2a:2d:8b:65:5e:d3:31:b4:c0:35:e6:75:6d: 1d:e3:0d:cc:e9:34:0a:8e:11:b9:b6:de:ec:59:f4:b1:d0:1b: 90:02:9c:13:51:58:81:37:37:cb:8f:76:d9:1b:47:fc:d2:2b: f1:2c:13:38:1e:2b:15:48:ef:7a:d7:74:1c:83:26:10:14:bf: 38:7d:80:99:57:1b:20:b4:05:25:e2:b3:4e:19:ad:65:d1:ad: df:4f:ed:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx4wRZYuWj4NrGpOaxke7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwNzIzMjEwMDI0WhcNMjYwNzI0MjEwMDI0WjAzMTEwLwYDVQQD Eyg4OTliNzUxYzJiYjEzZTdjODJhYzgwODY1MDI1NTQ5MDI1NWQyM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD3AolG8gLwWw3xUdU2ghPEprBiT CQ9k+xtNvT7JWsAqLoY+1yVx8aS3HiUovqMUtYnJoNt8WurWEj36hNjAo/+gLMGH 8aznvkxYqiyaZjaUPXTbvi1N3pVj/aIj45qwx6AkUt2Tlr5SIOD0PpboEP62p48v ArLSWXmcNJOvBmVuzIisEn72T32slZGE4ppN83qE3OZ90N2ygjgVTjb2qmKWd6Lx bGDwKsyOpknQdvhbcMx2rm9OnqoOQrVL6hdc8jCNWuaK0SmFWuyGZ3c6Je1xPAXj 36VygZM/TE3mHWjHuHqwOojMw0HXAEgPhkdrii20FmTEIQhk0CK4Y+90AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImbdRwrsT58gqyAhlAlVJAlXSOlMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+GevjgY dqI5+iGZoN+R5o+3USOTnOxq/4NBXsBx/J4YI8eduIYFg6UROEpdhslgp92x5fIr TfmEdkeAH7horgmscvzkLh/y4cfdfeK5DjvXd1xn/73TLA/yNnULcxseMNhKl5Ln +zSoUvf22M8b0dgQgrnBca2oXdX56hUkwr7VtynO3OAM4hpW6wPIqQqj1JU03MyL CN7GP9x/Y/rtZV9U7g+925AqLYtlXtMxtMA15nVtHeMNzOk0Co4Rubbe7Fn0sdAb kAKcE1FYgTc3y4922RtH/NIr8SwTOB4rFUjvetd0HIMmEBS/OH2AmVcbILQFJeKz ThmtZdGt30/tCw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:14:23 2026 by rpki-client