$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json) Hash identifier: pLUfqHCjHwuAghPIH/6qvHxUKPzoAroQvrThda/fbB0= Subject key identifier: 70:E5:AE:A9:45:65:E8:12:09:75:D4:8E:81:DE:FE:62:5B:E4:9B:85 Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Certificate serial: 019F8F112B001F03C4A80D7CA12E31086688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft Manifest number: 144E Signing time: Thu 23 Jul 2026 13:01:34 +0000 Manifest this update: Thu 23 Jul 2026 13:01:34 +0000 Manifest next update: Fri 24 Jul 2026 13:01:34 +0000 Files and hashes: 1: Ak6u31He6A4CRCNJ-mPt0nCtwZU.roa (hash: 7MkMOyLE5GlfXjuXXJbB4yn5qJnSvZNuEM4M9yp+Ggg=) 2: J4F6hmO4Edi1GJ1rYixOAYPJtKw.asa (hash: duHFJJFX3I0YlZcUnlx39bgebUrlvDxKVBOAIrt4NF8=) 3: c7fgla_dSX-z5KFPVPyl6usE9oA.asa (hash: m9vQeSG4KsIradAMsd9ae2Gv66PLCXXvhHDN7ENT3BQ=) 4: dx3-AQN3WL647_MWerdOTTLQl5c.asa (hash: /71UZPa2NLWcdNywVSl2z1VdiqE2Rm6tSY8lOSE+s/E=) 5: gg1rsNo7V5zof6nPOy2P8woJ0Io.roa (hash: ggRo1SvW34/PLbqz4mYFAX1SvQ/7Sh6bs05rEKb+rC8=) 6: iKaObausadYfw9kPgxecbJ9r-pc.roa (hash: Oqhnf7OZmJjBnoTR4PKybtGL6ocdLnBasrpV7eemX80=) 7: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (hash: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=) 8: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: 9nS61IJzlnEPEcLT1d3BMW71DD6lgQb5UNP1Epr7NhU=) 9: u_hh95Vwkks4UP2ORaA383yO97Y.asa (hash: +9FNPQckA3MOMNlYIUC/m8OKXVehox9XWsT4hl75IHk=) 10: yRURA_ME4G4HnmjS22RzxWlBmrg.roa (hash: Bbk1x9eZaB94lGJyLOYQomUSMw9B6/AIocIUkwMP9Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:11:2b:00:1f:03:c4:a8:0d:7c:a1:2e:31:08:66:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Validity Not Before: Jul 23 13:01:34 2026 GMT Not After : Jul 24 13:01:34 2026 GMT Subject: CN=70e5aea94565e8120975d48e81defe625be49b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:83:69:d6:3f:d1:e6:fd:4e:de:65:de:1f: 7c:48:72:d9:ca:9b:06:d0:2d:1a:1d:c9:e5:d4:71: b7:70:c5:c8:26:2f:2c:94:92:60:fc:bc:af:29:45: ac:06:b7:49:56:68:9f:5b:cd:c3:32:36:37:fe:38: e3:71:cd:47:d9:ad:bf:f2:b0:3c:a4:e6:f9:8a:08: 44:72:2e:75:83:79:8c:c2:65:50:57:8c:e9:e4:a1: ae:76:2c:36:51:79:83:59:18:09:36:79:fd:b9:4c: 98:26:86:c5:46:87:c7:e7:db:0d:a0:d9:e3:1a:9b: 61:79:67:56:ea:73:23:7f:49:d3:29:4f:6a:6e:c2: b2:37:78:e5:ba:4e:5d:da:9d:80:fb:b7:c4:77:7a: b9:53:cb:ad:b2:03:b2:71:60:5b:8e:4f:ad:27:ae: 3f:e7:94:ac:fc:68:6f:6e:ac:5d:be:91:8f:c0:31: 37:20:2f:26:d4:af:b6:9e:c8:6d:0f:68:cc:2d:0a: f6:8f:eb:3d:43:01:ea:e1:2e:9a:3c:f6:ec:e2:e0: 85:41:bc:15:76:2b:e4:3f:f7:49:60:af:b0:62:39: 3f:60:4c:1f:ec:cc:48:52:b7:d9:31:58:21:de:9f: f1:c5:d3:3c:72:f6:97:04:06:af:36:d2:5d:7e:91: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:AE:A9:45:65:E8:12:09:75:D4:8E:81:DE:FE:62:5B:E4:9B:85 X509v3 Authority Key Identifier: keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:83:a2:34:9a:d3:a5:c0:07:c9:f3:04:dd:5f:b2:f9:3d: b0:09:29:f8:a7:1c:35:79:10:ed:24:56:b6:69:68:68:da:02: 54:77:dd:4f:a5:45:e4:07:20:b1:0a:2f:db:da:69:4a:63:cb: d4:ee:a4:5a:59:8f:82:67:4e:eb:38:06:5b:80:65:77:2c:2a: 47:6c:ab:41:4b:e8:6c:1c:1c:8e:4b:d3:7a:5e:53:70:6d:c8: 70:8a:93:d1:19:cd:7a:ad:41:be:35:16:d7:3d:00:bd:6d:1e: 59:cd:7d:4c:45:25:50:6d:33:f0:e7:bc:53:3b:2f:9a:ee:72: 87:31:d1:46:84:97:0d:30:b6:f4:68:6e:be:c9:c8:b6:a8:3e: 2a:b7:b3:89:6a:63:9a:3b:c8:17:0e:e4:53:19:c8:2a:5e:07: a0:5b:ef:d8:b0:35:3b:b0:6d:d3:78:20:8a:6e:17:22:0b:70: 65:3d:22:b1:54:ef:e7:e4:b8:df:43:bf:61:83:78:b1:f7:ef: 36:9f:38:04:4a:19:74:79:b0:2c:92:28:d0:ba:64:ca:56:3f: 3a:43:f6:91:e3:27:8a:ae:11:c8:7d:52:18:9e:9d:88:22:c9: 2e:77:ed:d0:e0:12:3c:c2:3a:d7:49:8b:00:4f:c2:0e:88:6f: 61:26:90:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PESsAHwPEqA18oS4xCGaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm YmFhMDAwHhcNMjYwNzIzMTMwMTM0WhcNMjYwNzI0MTMwMTM0WjAzMTEwLwYDVQQD Eyg3MGU1YWVhOTQ1NjVlODEyMDk3NWQ0OGU4MWRlZmU2MjViZTQ5Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ+DadY/0eb9Tt5l3h98SHLZypsG 0C0aHcnl1HG3cMXIJi8slJJg/LyvKUWsBrdJVmifW83DMjY3/jjjcc1H2a2/8rA8 pOb5ighEci51g3mMwmVQV4zp5KGudiw2UXmDWRgJNnn9uUyYJobFRofH59sNoNnj GptheWdW6nMjf0nTKU9qbsKyN3jluk5d2p2A+7fEd3q5U8utsgOycWBbjk+tJ64/ 55Ss/GhvbqxdvpGPwDE3IC8m1K+2nshtD2jMLQr2j+s9QwHq4S6aPPbs4uCFQbwV divkP/dJYK+wYjk/YEwf7MxIUrfZMVgh3p/xxdM8cvaXBAavNtJdfpEYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDlrqlFZegSCXXUjoHe/mJb5JuFMB8GA1UdIwQY MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt NzcwMGUyNWZmNzY5LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5 LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKliDojSa 06XAB8nzBN1fsvk9sAkp+KccNXkQ7SRWtmloaNoCVHfdT6VF5AcgsQov29ppSmPL 1O6kWlmPgmdO6zgGW4BldywqR2yrQUvobBwcjkvTel5TcG3IcIqT0RnNeq1BvjUW 1z0AvW0eWc19TEUlUG0z8Oe8Uzsvmu5yhzHRRoSXDTC29GhuvsnItqg+KreziWpj mjvIFw7kUxnIKl4HoFvv2LA1O7Bt03ggim4XIgtwZT0isVTv5+S430O/YYN4sffv Np84BEoZdHmwLJIo0LpkylY/OkP2keMniq4RyH1SGJ6diCLJLnft0OASPMI610mL AE/CDohvYSaQoQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:01 2026 by rpki-client