$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: MlCKIL8MzUF//yEGepeN3oxQJpMiMGAZaD6A9cQOseU= Subject key identifier: FF:23:5B:39:24:23:A6:E2:0B:F7:72:AB:F3:68:43:0F:6C:B2:B4:6D Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019F924845AD559F98BEC09E04A258C5435C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1A4F Signing time: Fri 24 Jul 2026 04:00:37 +0000 Manifest this update: Fri 24 Jul 2026 04:00:37 +0000 Manifest next update: Sat 25 Jul 2026 04:00:37 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: vfQ2uVMmvmAqOJWVmtP95NunlCI07Javj9QBn1OXObI=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: pvvItYaD0BkPMVYmwXbvL-utTRQ.roa (hash: O8ehVuL3rG3e1+vU9AU1AJ7dONUierORB47r4BxJ0l8=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:45:ad:55:9f:98:be:c0:9e:04:a2:58:c5:43:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jul 24 04:00:37 2026 GMT Not After : Jul 25 04:00:37 2026 GMT Subject: CN=ff235b392423a6e20bf772abf368430f6cb2b46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:84:d8:44:a8:0e:6b:8c:12:3f:b4:5a:d4: 52:5e:f0:6b:12:75:02:0e:33:52:ba:fa:81:58:9c: 0b:c4:e0:6d:49:62:c9:58:f4:e6:06:c3:2b:5f:dd: 48:10:d7:5e:06:43:13:d2:81:cf:72:a4:62:c6:ca: e7:7e:b3:6f:e7:55:ff:dc:37:b2:27:2a:e6:a1:39: ec:2f:43:fb:45:c4:1a:81:52:91:44:d0:84:d6:75: 11:e3:ca:01:b2:b9:03:f3:91:b0:90:23:3c:a3:59: fc:23:54:f7:e0:0b:77:5e:0e:39:69:80:f3:3e:b3: 0a:0d:69:99:b9:11:ab:f3:94:08:c6:bb:c8:ea:57: c1:f8:5d:80:21:ac:71:4c:a5:73:51:70:76:e1:ee: fa:42:46:f2:fc:2c:8f:3e:95:45:69:dc:e1:f8:0f: 8f:22:be:9a:6b:ca:69:45:98:e0:62:35:f7:19:7f: 5d:c6:7b:29:08:04:46:25:09:ef:44:31:97:9f:31: 29:25:ee:3c:bc:41:71:08:3d:0a:63:12:05:28:34: 56:3e:07:68:86:86:ac:b5:c1:ba:4a:dc:43:62:3d: 0b:60:a3:15:0a:e4:b0:34:ed:8a:1b:89:5a:e6:59: 35:ac:1d:c3:5b:44:ef:a4:91:81:09:b6:eb:ed:f4: 87:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:5B:39:24:23:A6:E2:0B:F7:72:AB:F3:68:43:0F:6C:B2:B4:6D X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:50:24:40:e6:46:c3:9f:4b:0e:9d:62:fc:c9:ee:a3:82:45: 36:24:4d:ed:3e:e9:a8:b2:8c:d4:3d:de:85:ea:f1:de:9d:55: d1:e0:39:75:cf:7b:4d:17:d2:ff:93:88:cb:ef:a5:59:13:d5: d7:c4:a6:35:0c:00:e4:2a:b2:13:b6:1e:fe:bd:ef:b7:9c:e5: 8c:8a:bb:c4:1f:0f:22:79:96:f5:3c:77:c0:15:e1:5c:5c:bb: 26:c9:1b:6f:69:60:e9:0b:72:df:5e:3f:b5:f0:c4:1d:88:9b: bf:44:11:e3:b7:ad:a7:61:dc:ad:22:18:f6:66:5e:e1:73:e9: bc:f9:a0:2f:ad:d0:55:ae:ce:ae:fa:97:77:59:17:a6:5a:85: c3:4b:ee:e1:ab:14:24:9c:7f:17:0c:71:c3:bb:87:9e:0c:38: c4:78:dd:2b:18:c3:cc:15:c0:22:97:58:1a:d3:2b:cd:d5:fb: 36:f8:fb:a2:36:ef:15:80:2d:82:e2:21:eb:fc:0b:7c:0a:a8: 7d:61:92:5f:c5:2f:e9:0d:d0:24:96:52:68:b4:73:69:e1:7f: 96:8a:dc:55:64:7a:0c:87:f1:38:11:2c:97:71:3a:80:23:d2: 28:14:e9:19:e9:e8:5e:b5:7e:f7:32:2a:38:73:e1:31:6e:d2: e4:d2:bd:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSEWtVZ+YvsCeBKJYxUNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwNzI0MDQwMDM3WhcNMjYwNzI1MDQwMDM3WjAzMTEwLwYDVQQD EyhmZjIzNWIzOTI0MjNhNmUyMGJmNzcyYWJmMzY4NDMwZjZjYjJiNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmyE2ESoDmuMEj+0WtRSXvBrEnUC DjNSuvqBWJwLxOBtSWLJWPTmBsMrX91IENdeBkMT0oHPcqRixsrnfrNv51X/3Dey JyrmoTnsL0P7RcQagVKRRNCE1nUR48oBsrkD85GwkCM8o1n8I1T34At3Xg45aYDz PrMKDWmZuRGr85QIxrvI6lfB+F2AIaxxTKVzUXB24e76Qkby/CyPPpVFadzh+A+P Ir6aa8ppRZjgYjX3GX9dxnspCARGJQnvRDGXnzEpJe48vEFxCD0KYxIFKDRWPgdo hoastcG6StxDYj0LYKMVCuSwNO2KG4la5lk1rB3DW0TvpJGBCbbr7fSHSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8jWzkkI6biC/dyq/NoQw9ssrRtMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFAkQOZG w59LDp1i/Mnuo4JFNiRN7T7pqLKM1D3eherx3p1V0eA5dc97TRfS/5OIy++lWRPV 18SmNQwA5CqyE7Ye/r3vt5zljIq7xB8PInmW9Tx3wBXhXFy7Jskbb2lg6Qty314/ tfDEHYibv0QR47etp2HcrSIY9mZe4XPpvPmgL63QVa7OrvqXd1kXplqFw0vu4asU JJx/Fwxxw7uHngw4xHjdKxjDzBXAIpdYGtMrzdX7Nvj7ojbvFYAtguIh6/wLfAqo fWGSX8Uv6Q3QJJZSaLRzaeF/lorcVWR6DIfxOBEsl3E6gCPSKBTpGenoXrV+9zIq OHPhMW7S5NK9kg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:55:18 2026 by rpki-client