$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: /A8ljamMenmfv+HdyfawIc7H5BogzZa+pjXPNxLCCKo= Subject key identifier: BF:27:47:AB:F9:FE:72:E9:12:4E:E2:55:30:3B:D6:ED:E2:1B:45:D4 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019F9023583237B3026529D8F9D971C3F86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 157A Signing time: Thu 23 Jul 2026 18:01:03 +0000 Manifest this update: Thu 23 Jul 2026 18:01:03 +0000 Manifest next update: Fri 24 Jul 2026 18:01:03 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: sG8eRsqTSA7GPJtQlSwxyxbWZaS91VENATsloyZI7to=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:58:32:37:b3:02:65:29:d8:f9:d9:71:c3:f8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jul 23 18:01:03 2026 GMT Not After : Jul 24 18:01:03 2026 GMT Subject: CN=bf2747abf9fe72e9124ee255303bd6ede21b45d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:7e:31:7b:3d:7e:bd:ed:af:bc:9e:2f:b5: 85:aa:f2:64:0a:20:b2:de:d6:bd:d1:4d:00:5b:f5: 64:3f:98:de:9c:ca:20:10:f4:41:95:f8:19:74:45: e1:28:30:53:a9:33:02:42:73:02:3c:ce:54:e4:ed: 98:24:03:de:30:2f:85:fb:4d:b0:1f:c4:64:28:eb: 95:b2:ef:a8:81:0c:3d:4b:99:d7:c0:2f:64:cd:04: 9c:46:10:58:5e:9e:1f:44:2a:65:ec:34:f3:2b:51: 92:03:4c:fb:30:c4:46:88:e7:22:38:1a:a3:38:75: 96:d7:47:c9:b6:c5:26:c7:09:c9:d6:56:5d:b5:14: 8b:17:07:0e:78:af:69:b0:89:b2:33:84:d6:e8:cc: 2d:a6:33:44:71:12:c5:79:aa:be:bf:3b:f0:f3:d5: e9:e9:50:98:05:7e:fc:e3:94:cd:e9:79:fe:75:ea: 54:51:cb:c8:6d:d8:31:3b:0c:cc:86:c5:7e:a0:b0: a1:77:d0:b2:1e:f6:73:c1:4d:58:aa:1f:26:35:28: b0:1f:52:10:c4:0a:fc:ee:71:42:51:b1:ba:23:84: 1c:46:91:8f:33:3d:e2:a9:0c:c8:85:82:1a:5c:3e: 3f:3d:92:e6:5f:15:14:d5:88:d5:b0:bb:cb:c0:ea: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:47:AB:F9:FE:72:E9:12:4E:E2:55:30:3B:D6:ED:E2:1B:45:D4 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:8c:35:0c:2c:e8:6b:f5:18:89:03:fa:ba:45:d1:4f:0b: a3:5c:3e:0e:6d:05:04:d6:0d:91:f5:40:bb:89:a4:43:2d:bc: 04:6b:68:46:13:37:f8:58:75:e7:1b:73:20:a0:32:61:8e:10: 5e:d7:cb:4c:42:56:fd:f9:37:0a:c8:e1:6c:12:c1:14:39:a5: eb:3f:ea:1e:c0:82:eb:5a:6a:16:95:bb:d6:e3:07:d5:25:9c: 66:f7:41:a8:45:43:6c:05:67:9b:c5:7d:3f:fd:ee:95:b5:86: 63:d4:73:b7:5b:36:be:87:9b:22:5b:3b:6a:8b:6b:3f:d1:fd: c6:96:46:82:5f:b6:f2:0c:75:77:44:f0:c8:bf:d0:c7:c7:3b: 48:08:9e:7d:d1:e0:04:7b:89:22:a0:50:d4:76:4b:1d:1f:ad: e9:08:a4:44:1e:3f:31:e5:9e:cf:67:84:37:b1:2b:ae:ea:d7: 90:99:fa:72:bb:a2:47:9e:67:6c:92:c9:b2:ab:91:ae:7d:fd: 7d:9e:ed:12:65:d2:04:16:d2:6f:8e:c8:83:40:72:35:78:df: cc:0c:54:6c:2f:7a:54:0a:b8:53:c7:10:8d:af:57:d6:6c:78: 62:a9:8b:a9:6f:4e:44:8b:5f:11:32:37:32:a9:bf:ea:c5:4f: d1:b9:d5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QI1gyN7MCZSnY+dlxw/hvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwNzIzMTgwMTAzWhcNMjYwNzI0MTgwMTAzWjAzMTEwLwYDVQQD EyhiZjI3NDdhYmY5ZmU3MmU5MTI0ZWUyNTUzMDNiZDZlZGUyMWI0NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQR+MXs9fr3tr7yeL7WFqvJkCiCy 3ta90U0AW/VkP5jenMogEPRBlfgZdEXhKDBTqTMCQnMCPM5U5O2YJAPeMC+F+02w H8RkKOuVsu+ogQw9S5nXwC9kzQScRhBYXp4fRCpl7DTzK1GSA0z7MMRGiOciOBqj OHWW10fJtsUmxwnJ1lZdtRSLFwcOeK9psImyM4TW6MwtpjNEcRLFeaq+vzvw89Xp 6VCYBX7845TN6Xn+depUUcvIbdgxOwzMhsV+oLChd9CyHvZzwU1Yqh8mNSiwH1IQ xAr87nFCUbG6I4QcRpGPMz3iqQzIhYIaXD4/PZLmXxUU1YjVsLvLwOp1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8nR6v5/nLpEk7iVTA71u3iG0XUMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoKMNQws 6Gv1GIkD+rpF0U8Lo1w+Dm0FBNYNkfVAu4mkQy28BGtoRhM3+Fh15xtzIKAyYY4Q XtfLTEJW/fk3CsjhbBLBFDml6z/qHsCC61pqFpW71uMH1SWcZvdBqEVDbAVnm8V9 P/3ulbWGY9Rzt1s2voebIls7aotrP9H9xpZGgl+28gx1d0TwyL/Qx8c7SAiefdHg BHuJIqBQ1HZLHR+t6QikRB4/MeWez2eEN7ErrurXkJn6cruiR55nbJLJsquRrn39 fZ7tEmXSBBbSb47Ig0ByNXjfzAxUbC96VAq4U8cQja9X1mx4YqmLqW9ORItfETI3 Mqm/6sVP0bnVzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:38:12 2026 by rpki-client