$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: 278eBZZt6uhGx/ZVx7XCz8DHdv+aTLU4+MeAeFg5P0I= Subject key identifier: 2B:56:09:AD:11:24:29:E3:56:05:54:6E:09:F5:4A:17:56:0C:19:0F Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019F8FEC57CDC0AE5D1A206E3B6B8938878B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0F2B Signing time: Thu 23 Jul 2026 17:00:58 +0000 Manifest this update: Thu 23 Jul 2026 17:00:58 +0000 Manifest next update: Fri 24 Jul 2026 17:00:58 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: acwNL2FnPU9mHrV5g7dJ40bb0S5pU5L+Cwy7C/Dvaiw=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=) 10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa (hash: UpH6SRZNnW0R8ahn4MRnqsFRfwo0pvGLoWtik7wjde0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:57:cd:c0:ae:5d:1a:20:6e:3b:6b:89:38:87:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jul 23 17:00:58 2026 GMT Not After : Jul 24 17:00:58 2026 GMT Subject: CN=2b5609ad112429e35605546e09f54a17560c190f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:7e:f5:0b:5b:d3:a6:61:9d:80:f3:32:7b: d5:ea:b8:e6:02:3f:9d:38:e2:8b:20:cd:8b:18:6c: 65:3c:73:72:16:14:36:25:67:26:f8:60:81:dc:7a: c9:a2:03:48:28:ed:0b:6d:b1:5c:d7:aa:a8:8c:32: ee:f9:ba:7b:60:64:5c:24:cf:9e:f3:fe:42:d9:8d: b8:24:c0:df:0e:72:c2:12:4e:cd:fc:2e:5a:5a:bd: 6d:b8:56:d1:68:42:ec:72:24:e3:25:ed:21:92:b6: 64:f5:8a:78:27:fa:48:41:89:61:1f:6c:c4:7f:0b: a6:3c:70:ff:08:e1:11:c9:fc:62:ab:a7:5c:7b:3f: ab:9d:6b:19:11:60:d4:5b:86:7f:fc:68:de:f2:5f: bd:1d:b9:42:85:b9:17:56:c5:6c:00:86:c3:33:ba: 59:cb:04:8e:6c:0c:e8:bf:00:1e:24:18:71:e4:67: f4:65:a0:04:0d:27:90:23:bd:34:07:04:44:fa:e5: 5b:b3:6e:f9:fb:b0:f1:73:6e:d3:03:e5:d0:b6:46: 5a:5b:1b:4c:d1:4d:4f:77:2f:75:f6:bf:ca:88:90: 51:25:45:be:68:58:8e:d9:8e:23:a2:c8:42:e3:08: 48:c5:ad:8e:90:c7:3b:77:20:7a:78:a5:9a:77:8f: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:56:09:AD:11:24:29:E3:56:05:54:6E:09:F5:4A:17:56:0C:19:0F X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:90:e7:b3:a0:3d:22:5c:d7:66:ec:1d:9b:d9:5c:cd:16:e6: 58:b9:fb:05:3f:90:55:a1:7a:9a:6f:3d:46:90:01:ac:c2:45: 2a:7a:c2:c8:df:15:6c:a5:a7:08:23:9a:eb:20:69:fb:a0:00: 10:2a:61:1f:92:7e:3a:e7:2d:5e:a0:c7:e3:e8:03:9d:91:ba: 07:74:c9:64:4c:c2:c7:91:34:33:80:4f:9c:01:16:c3:36:3b: 60:04:d8:44:8d:60:9a:c6:39:d3:e7:33:ef:8c:7a:cf:6d:5d: f4:31:0c:21:b6:44:62:53:4b:f8:6b:81:e4:8c:b5:a4:c5:37: 86:5a:e9:69:19:c0:c8:a1:1f:72:e5:78:cc:7d:ef:a4:43:98: 86:7e:22:48:0c:49:d8:fa:ad:2e:1a:bd:7a:17:89:af:3d:07: b4:6a:bd:c8:91:3c:5a:d7:08:ee:a1:70:82:1e:f6:b1:20:8a: 49:34:ca:60:72:0a:05:ba:0c:c5:1d:a8:3b:c2:8a:92:02:31: 26:02:f9:c5:26:05:62:0a:ee:63:a7:2f:f7:0d:fd:fb:72:5d: 46:81:1c:dd:af:75:79:d3:ac:40:f4:17:d6:6a:eb:4b:01:fd: c1:ba:40:57:ef:9e:06:4d:7b:15:fd:ea:d3:c2:bd:e8:51:9f: cb:02:b2:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7FfNwK5dGiBuO2uJOIeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwNzIzMTcwMDU4WhcNMjYwNzI0MTcwMDU4WjAzMTEwLwYDVQQD EygyYjU2MDlhZDExMjQyOWUzNTYwNTU0NmUwOWY1NGExNzU2MGMxOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS9+9Qtb06ZhnYDzMnvV6rjmAj+d OOKLIM2LGGxlPHNyFhQ2JWcm+GCB3HrJogNIKO0LbbFc16qojDLu+bp7YGRcJM+e 8/5C2Y24JMDfDnLCEk7N/C5aWr1tuFbRaELsciTjJe0hkrZk9Yp4J/pIQYlhH2zE fwumPHD/COERyfxiq6dcez+rnWsZEWDUW4Z//Gje8l+9HblChbkXVsVsAIbDM7pZ ywSObAzovwAeJBhx5Gf0ZaAEDSeQI700BwRE+uVbs275+7Dxc27TA+XQtkZaWxtM 0U1Pdy919r/KiJBRJUW+aFiO2Y4joshC4whIxa2OkMc7dyB6eKWad49SXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtWCa0RJCnjVgVUbgn1ShdWDBkPMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5Dns6A9 IlzXZuwdm9lczRbmWLn7BT+QVaF6mm89RpABrMJFKnrCyN8VbKWnCCOa6yBp+6AA ECphH5J+OuctXqDH4+gDnZG6B3TJZEzCx5E0M4BPnAEWwzY7YATYRI1gmsY50+cz 74x6z21d9DEMIbZEYlNL+GuB5Iy1pMU3hlrpaRnAyKEfcuV4zH3vpEOYhn4iSAxJ 2PqtLhq9eheJrz0HtGq9yJE8WtcI7qFwgh72sSCKSTTKYHIKBboMxR2oO8KKkgIx JgL5xSYFYgruY6cv9w39+3JdRoEc3a91edOsQPQX1mrrSwH9wbpAV++eBk17Ff3q 08K96FGfywKySA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:20:45 2026 by rpki-client