$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: 2qTOR5BjQ/5TN+c6XerF7rt65drKhBI9ABqeoqydRdY= Subject key identifier: 7C:D2:35:CB:11:DD:62:01:88:1E:29:90:04:29:0C:11:CA:B2:57:9F Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019F91DB1985ACA7BFA41393BC5E4F1B138D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1A82 Signing time: Fri 24 Jul 2026 02:01:22 +0000 Manifest this update: Fri 24 Jul 2026 02:01:22 +0000 Manifest next update: Sat 25 Jul 2026 02:01:22 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 3: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 4: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 5: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 6: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 7: TqC5cslAjOBidLHAZI8XGLZ-bAQ.roa (hash: bLuUwhyQVd1VS9DwSq655y43wtPrqbuVYv80UPVmwic=) 8: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 9: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: oSe5GdYOYWuH9A9TKC7qyQfwUHR0KGrGjW+pyuozU5w=) 10: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 11: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:db:19:85:ac:a7:bf:a4:13:93:bc:5e:4f:1b:13:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jul 24 02:01:22 2026 GMT Not After : Jul 25 02:01:22 2026 GMT Subject: CN=7cd235cb11dd6201881e299004290c11cab2579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:02:86:b5:2d:5d:b1:cd:20:24:9b:ee:16: 31:11:5e:2a:1d:94:a2:d8:4b:eb:6a:3f:80:64:d8: 81:0c:ff:dd:3c:b3:d1:88:52:93:be:03:48:d4:4e: da:19:d7:f6:b8:95:69:77:d7:e7:08:57:48:84:63: c2:3c:21:38:55:0d:71:eb:70:5b:ed:a2:b3:59:02: 62:3c:d4:1e:7d:b4:fc:2f:e3:fd:1e:77:58:64:e6: a0:53:09:ba:f5:e0:f6:01:f7:e1:c0:68:cd:70:63: 47:ea:1d:a9:57:79:27:dd:d7:49:2b:1a:c7:38:44: 96:cf:37:90:59:c7:58:b3:06:e9:e3:e9:32:ca:f6: 9b:3c:36:42:dd:b7:58:a7:17:26:1d:7d:20:38:e5: c4:6d:6f:9b:da:9d:aa:bd:81:91:1b:a7:38:3f:0c: 36:68:93:78:6e:cb:fa:b6:cb:d9:87:1d:49:07:11: 74:d3:6d:27:e3:3d:df:66:27:b8:ae:44:3c:a5:05: 44:cf:40:e3:2a:b0:b7:06:69:11:1b:07:49:2f:83: 96:35:dc:25:f7:69:a2:39:2b:a2:b7:a1:77:59:70: 6c:2a:17:eb:bb:b1:cd:25:8f:11:3e:40:34:79:e7: 4c:e5:bf:a2:15:f9:87:ed:53:17:cb:46:40:94:fe: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D2:35:CB:11:DD:62:01:88:1E:29:90:04:29:0C:11:CA:B2:57:9F X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4e:22:20:ed:78:51:be:a1:98:7f:f2:02:4f:87:4a:2e:16: fa:79:a2:55:27:7d:0d:a2:b7:13:c7:c7:76:92:38:a9:45:6c: c6:a2:1b:3a:b0:91:e7:a2:f3:8f:7c:58:20:41:1a:e4:66:05: 8b:01:f8:59:79:db:5b:80:2f:44:a2:e6:b9:e2:4d:5d:3f:66: b0:29:91:cb:34:0d:f0:3e:44:06:a9:5f:5c:59:be:c9:d7:c2: 01:9b:c1:02:9d:f5:83:19:69:14:35:c3:6e:80:5f:55:6c:48: 30:b1:4c:b3:ce:40:e8:f5:8e:be:dc:df:da:61:7a:33:3f:16: fd:99:55:9e:17:cb:29:91:23:20:6b:07:dd:61:be:ea:74:72: 7c:7a:a3:28:5a:f9:65:26:35:d2:7b:0a:d5:79:e7:35:45:5a: b1:f4:4c:37:0a:63:86:ac:09:09:c8:d3:01:fc:5d:79:a1:7c: 97:e2:f6:38:5a:5e:37:4d:9b:5f:02:1c:69:07:f8:1e:f3:1f: 05:2e:7b:a9:9f:47:2a:1e:7f:1c:d8:cb:a9:5e:a2:7a:9b:7a: 18:9b:45:b4:64:ff:1c:37:53:6c:96:4c:33:77:d0:6e:ad:1c: ca:60:7f:4a:fb:8e:ac:77:e4:6e:d7:ed:13:60:1e:6a:80:95: 90:2c:66:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2xmFrKe/pBOTvF5PGxONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwNzI0MDIwMTIyWhcNMjYwNzI1MDIwMTIyWjAzMTEwLwYDVQQD Eyg3Y2QyMzVjYjExZGQ2MjAxODgxZTI5OTAwNDI5MGMxMWNhYjI1NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aoChrUtXbHNICSb7hYxEV4qHZSi 2Evraj+AZNiBDP/dPLPRiFKTvgNI1E7aGdf2uJVpd9fnCFdIhGPCPCE4VQ1x63Bb 7aKzWQJiPNQefbT8L+P9HndYZOagUwm69eD2AffhwGjNcGNH6h2pV3kn3ddJKxrH OESWzzeQWcdYswbp4+kyyvabPDZC3bdYpxcmHX0gOOXEbW+b2p2qvYGRG6c4Pww2 aJN4bsv6tsvZhx1JBxF0020n4z3fZie4rkQ8pQVEz0DjKrC3BmkRGwdJL4OWNdwl 92miOSuit6F3WXBsKhfru7HNJY8RPkA0eedM5b+iFfmH7VMXy0ZAlP6EmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzSNcsR3WIBiB4pkAQpDBHKslefMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE4iIO14 Ub6hmH/yAk+HSi4W+nmiVSd9DaK3E8fHdpI4qUVsxqIbOrCR56Lzj3xYIEEa5GYF iwH4WXnbW4AvRKLmueJNXT9msCmRyzQN8D5EBqlfXFm+ydfCAZvBAp31gxlpFDXD boBfVWxIMLFMs85A6PWOvtzf2mF6Mz8W/ZlVnhfLKZEjIGsH3WG+6nRyfHqjKFr5 ZSY10nsK1XnnNUVasfRMNwpjhqwJCcjTAfxdeaF8l+L2OFpeN02bXwIcaQf4HvMf BS57qZ9HKh5/HNjLqV6iept6GJtFtGT/HDdTbJZMM3fQbq0cymB/SvuOrHfkbtft E2AeaoCVkCxm1w== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:44 2026 by rpki-client