$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: tj44BsNJFp48qp2PjKqiVygoxE+m81DaLoPBAsSBPsk= Subject key identifier: C5:30:BB:51:A6:F1:07:EA:61:72:42:03:70:47:FD:3D:BB:AC:76:57 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019F8EA2D353C186B84897F1401DCB2DA538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 19E3 Signing time: Thu 23 Jul 2026 11:01:03 +0000 Manifest this update: Thu 23 Jul 2026 11:01:03 +0000 Manifest next update: Fri 24 Jul 2026 11:01:03 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: GmKW5_EHkoH0GvuRNXDDZJBTr9w.asa (hash: WTnAG5IBd9zYOkgfV7EwghTiMnsdkoRczSviULKHvJk=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: PY4zk8ZdTV8J6IiAD0rRER8XcM4.asa (hash: ds1r0Q17VFau1bpjzlPurN1iqObqDOJcn+qwvKgVZdM=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 8: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: Dq50klazdVO8Un+WSbzLjMTCjL9Q8HvlEBRAJBuH1Mw=) 9: kWoDnbDfKRrdPEqboPrzUYeYutU.asa (hash: KIa+NGQ3X/m6SyP7wk2j8x0CtEKUsyJ76G3KolFP4Sw=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:d3:53:c1:86:b8:48:97:f1:40:1d:cb:2d:a5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Jul 23 11:01:03 2026 GMT Not After : Jul 24 11:01:03 2026 GMT Subject: CN=c530bb51a6f107ea617242037047fd3dbbac7657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:67:5e:00:03:7e:64:61:37:c9:23:df:2e: 07:fe:66:a1:08:0b:c6:b4:35:8f:9a:89:2b:f4:00: 0e:05:62:55:7a:fd:44:33:bd:ae:9b:d9:65:49:21: 35:d6:3b:85:d7:1a:4e:50:d1:0d:cf:d4:32:9a:e7: 15:78:49:dc:b3:98:4c:a5:37:08:54:30:df:69:a9: b5:80:3c:e5:c7:3b:6c:9c:f1:36:d2:91:c6:79:fe: 65:d4:76:cb:fe:59:9d:0a:66:34:a2:51:1a:9e:ba: 90:8a:96:6b:ff:01:76:4c:7e:67:99:b2:8c:d7:79: c7:85:ca:71:2f:01:21:77:db:02:ee:c6:83:22:17: cb:45:3c:d8:9b:31:92:8e:88:fd:0e:7d:fe:80:19: 2e:27:42:44:25:26:84:bb:81:3c:51:32:ce:b5:68: bd:a1:ae:73:f9:52:21:01:a8:5a:0f:1f:38:f8:d4: 97:5d:99:e0:59:a6:cb:42:b2:73:ca:3d:36:e8:18: 54:65:ab:c1:72:16:d3:c5:ac:9e:4c:21:ef:0a:fa: 79:c7:53:3f:f8:08:7e:93:a7:f4:ec:4c:66:88:87: 68:c1:f7:c7:35:c5:ce:b0:06:6e:85:06:04:2d:04: c5:bc:f6:f7:d4:91:72:da:d9:23:28:80:f8:7c:36: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:30:BB:51:A6:F1:07:EA:61:72:42:03:70:47:FD:3D:BB:AC:76:57 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:56:55:a4:6c:f6:d9:a0:a0:00:13:e6:e3:9e:e8:6b:57:e9: 4f:5c:a1:98:09:b9:81:58:61:55:c8:c5:18:94:c5:c9:86:17: 06:fa:0b:61:f4:5a:de:d9:de:14:56:45:42:89:aa:18:e6:87: f9:39:bc:c1:04:aa:c9:b1:5e:b9:ea:c9:80:ac:b4:8a:05:d0: 29:4c:36:3e:02:17:0d:18:07:50:23:79:5f:27:ea:cc:dd:cf: 87:02:7f:70:dd:9c:60:58:9c:db:a6:f1:07:12:fa:db:67:93: 93:01:a1:be:b5:14:e4:46:45:34:5b:ce:f8:45:05:c6:62:1c: a4:12:14:07:8d:97:62:cb:88:e9:0b:07:d4:ef:1b:3a:10:ff: 71:44:fe:a6:77:48:cc:9f:fd:1e:b3:ed:ef:04:80:5e:33:e9: 13:85:49:f8:8d:a4:b5:80:cd:13:75:59:71:1e:d3:d6:5b:70: 87:6b:05:65:4a:04:a4:5b:87:8d:c7:c9:5e:ec:32:33:24:2a: cc:2a:db:32:82:f7:31:5c:5b:c2:2a:00:e3:d2:a8:74:34:7d: e8:2b:d4:c5:ff:3e:be:58:f0:80:20:af:06:8c:70:d2:04:a7: e5:2b:64:6d:51:c9:32:41:1b:21:93:3f:b6:c1:4a:68:3a:9f: 4d:5c:c5:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OotNTwYa4SJfxQB3LLaU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwNzIzMTEwMTAzWhcNMjYwNzI0MTEwMTAzWjAzMTEwLwYDVQQD EyhjNTMwYmI1MWE2ZjEwN2VhNjE3MjQyMDM3MDQ3ZmQzZGJiYWM3NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMNnXgADfmRhN8kj3y4H/mahCAvG tDWPmokr9AAOBWJVev1EM72um9llSSE11juF1xpOUNENz9QymucVeEncs5hMpTcI VDDfaam1gDzlxztsnPE20pHGef5l1HbL/lmdCmY0olEanrqQipZr/wF2TH5nmbKM 13nHhcpxLwEhd9sC7saDIhfLRTzYmzGSjoj9Dn3+gBkuJ0JEJSaEu4E8UTLOtWi9 oa5z+VIhAahaDx84+NSXXZngWabLQrJzyj026BhUZavBchbTxayeTCHvCvp5x1M/ +Ah+k6f07ExmiIdowffHNcXOsAZuhQYELQTFvPb31JFy2tkjKID4fDYDEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUwu1Gm8QfqYXJCA3BH/T27rHZXMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlZVpGz2 2aCgABPm457oa1fpT1yhmAm5gVhhVcjFGJTFyYYXBvoLYfRa3tneFFZFQomqGOaH +Tm8wQSqybFeuerJgKy0igXQKUw2PgIXDRgHUCN5XyfqzN3PhwJ/cN2cYFic26bx BxL622eTkwGhvrUU5EZFNFvO+EUFxmIcpBIUB42XYsuI6QsH1O8bOhD/cUT+pndI zJ/9HrPt7wSAXjPpE4VJ+I2ktYDNE3VZcR7T1ltwh2sFZUoEpFuHjcfJXuwyMyQq zCrbMoL3MVxbwioA49KodDR96CvUxf8+vljwgCCvBoxw0gSn5StkbVHJMkEbIZM/ tsFKaDqfTVzFFw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:49 2026 by rpki-client