$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: P952q+IkJzFTuXry21KuZwc5OCj8eUOkk4BjtR+AL9o= Subject key identifier: 9A:F4:E6:84:E7:AB:0F:DD:A3:3B:9D:14:EB:D8:3B:68:76:0E:7D:7A Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019F9023608E39C5D82AC3BA97A264288ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 139A Signing time: Thu 23 Jul 2026 18:01:05 +0000 Manifest this update: Thu 23 Jul 2026 18:01:05 +0000 Manifest next update: Fri 24 Jul 2026 18:01:05 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 6: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: BTt9svdREW+bVTbWDk9CMobrQnGN8NnDrDrUO9BfV6A=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: mnNKxvqyX4ji89R1P4Lrhnun34M.roa (hash: 9zg3oF/RaHPi5XG1qYCPea66H/lTzoUD6Gk79Hpa+OI=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:60:8e:39:c5:d8:2a:c3:ba:97:a2:64:28:8a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jul 23 18:01:05 2026 GMT Not After : Jul 24 18:01:05 2026 GMT Subject: CN=9af4e684e7ab0fdda33b9d14ebd83b68760e7d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:22:66:84:ee:15:05:62:69:0d:fd:cf:cf: 69:0d:7d:d7:b5:ed:78:8b:ab:5c:b6:36:fa:6a:20: 56:58:92:ed:38:df:2e:d4:ee:4d:d2:e1:b7:41:c3: c7:92:fb:29:67:6e:ce:12:53:ef:4a:83:60:ef:6f: 91:4c:a8:51:31:91:6f:cb:57:2c:63:f7:a3:f0:d9: 85:e5:b0:3b:df:f1:4a:cc:3e:e1:4e:82:70:18:4c: 61:84:22:41:a4:f4:c1:a0:e5:42:76:29:77:1f:c6: d8:2b:01:e5:f6:3a:49:fa:f3:8a:0c:e8:18:59:ca: 4f:ff:82:89:e3:af:42:3c:d7:6c:3e:7a:58:03:2c: 60:c3:a4:15:ec:b2:49:b1:c6:a7:12:8b:9a:6a:6b: 65:e7:e8:a4:04:ae:20:ba:83:f2:ec:fd:9d:1a:93: d7:df:ee:02:53:11:11:4b:dc:2c:f8:3b:e9:69:1e: 4e:31:57:ec:af:56:e9:f8:15:83:e0:bf:2a:2b:b9: f4:b5:7f:20:0d:d0:cc:ad:76:05:d7:bc:10:cb:30: 11:0f:4e:b1:96:67:27:27:04:3f:07:bb:0a:49:d0: 77:06:0f:0e:57:ce:32:2a:41:42:c0:01:96:8b:97: e3:05:cf:a2:68:f7:74:7f:d2:76:5f:e0:ba:e1:9c: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F4:E6:84:E7:AB:0F:DD:A3:3B:9D:14:EB:D8:3B:68:76:0E:7D:7A X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:d0:89:99:55:8d:37:df:f5:10:a9:d5:fd:fb:59:cf:20: 48:bd:58:0a:34:c9:1a:56:0f:5c:40:b6:a8:ba:c6:fd:24:88: 17:b0:31:67:c3:cc:03:84:7f:68:04:19:b4:84:92:62:5f:8b: 92:09:49:fc:9e:6b:34:e0:a5:ee:3f:e2:62:65:13:8c:1e:17: 2f:9e:9f:d9:51:49:08:8d:cd:8b:44:b2:27:61:06:fc:29:bd: a9:59:81:41:24:ba:d9:1a:08:32:89:3f:e6:0b:5d:b5:06:32: 3a:92:b7:4f:c6:91:69:58:0c:d2:83:41:9e:5c:85:95:f7:26: 13:7d:45:c8:cf:2a:e7:21:4b:bd:36:23:e0:5f:67:07:dc:3a: e1:aa:92:78:2f:de:d4:b9:e9:06:f2:49:b5:0f:6f:b4:e7:63: b7:3b:ca:55:33:c4:ab:42:28:d1:df:92:55:c7:ed:e4:bd:bd: c4:ac:07:b1:e7:e3:c0:d5:27:78:fc:a1:a7:ec:20:2e:4e:99: 22:ef:55:b5:12:2f:4a:39:2e:fb:d0:87:0b:21:f0:ba:42:af: 45:25:d7:56:db:73:20:2c:7e:1d:02:1d:0a:1f:88:1a:3c:28: 23:6d:d0:1a:ab:08:6e:61:f7:23:86:e6:0f:2b:b6:10:aa:0e: 19:c5:cd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QI2COOcXYKsO6l6JkKIq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwNzIzMTgwMTA1WhcNMjYwNzI0MTgwMTA1WjAzMTEwLwYDVQQD Eyg5YWY0ZTY4NGU3YWIwZmRkYTMzYjlkMTRlYmQ4M2I2ODc2MGU3ZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4iZoTuFQViaQ39z89pDX3Xte14 i6tctjb6aiBWWJLtON8u1O5N0uG3QcPHkvspZ27OElPvSoNg72+RTKhRMZFvy1cs Y/ej8NmF5bA73/FKzD7hToJwGExhhCJBpPTBoOVCdil3H8bYKwHl9jpJ+vOKDOgY WcpP/4KJ469CPNdsPnpYAyxgw6QV7LJJscanEouaamtl5+ikBK4guoPy7P2dGpPX 3+4CUxERS9ws+DvpaR5OMVfsr1bp+BWD4L8qK7n0tX8gDdDMrXYF17wQyzARD06x lmcnJwQ/B7sKSdB3Bg8OV84yKkFCwAGWi5fjBc+iaPd0f9J2X+C64Zx4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJr05oTnqw/dozudFOvYO2h2Dn16MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcbQiZlV jTff9RCp1f37Wc8gSL1YCjTJGlYPXEC2qLrG/SSIF7AxZ8PMA4R/aAQZtISSYl+L kglJ/J5rNOCl7j/iYmUTjB4XL56f2VFJCI3Ni0SyJ2EG/Cm9qVmBQSS62RoIMok/ 5gtdtQYyOpK3T8aRaVgM0oNBnlyFlfcmE31FyM8q5yFLvTYj4F9nB9w64aqSeC/e 1LnpBvJJtQ9vtOdjtzvKVTPEq0Io0d+SVcft5L29xKwHsefjwNUnePyhp+wgLk6Z Iu9VtRIvSjku+9CHCyHwukKvRSXXVttzICx+HQIdCh+IGjwoI23QGqsIbmH3I4bm Dyu2EKoOGcXNJw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:08 2026 by rpki-client