$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: E8hpgnuRccRMnCgXvfD98p7uHxFDkO6kc53GAypkvGQ= Subject key identifier: 6B:4B:3F:01:8F:84:B5:8D:D4:B1:A9:8B:3A:6D:91:23:75:D5:E1:0F Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019F9248DC44B9BDD4055587887950CE2704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 19F1 Signing time: Fri 24 Jul 2026 04:01:16 +0000 Manifest this update: Fri 24 Jul 2026 04:01:16 +0000 Manifest next update: Sat 25 Jul 2026 04:01:16 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: KKNHMcngS3bwloJ+E2K6WP1nRvAJ+X4i8SwFICFjuUk=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:dc:44:b9:bd:d4:05:55:87:88:79:50:ce:27:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jul 24 04:01:16 2026 GMT Not After : Jul 25 04:01:16 2026 GMT Subject: CN=6b4b3f018f84b58dd4b1a98b3a6d912375d5e10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:bd:3d:5d:47:f5:2d:3d:ad:9e:a3:21:da: d5:17:30:ac:79:85:58:c0:cd:e9:95:00:3d:fc:e3: 62:ec:76:9c:4e:80:76:12:71:8e:8f:da:38:d6:9a: 2e:9d:88:b7:b4:de:98:d7:5f:0f:9c:79:ae:27:d6: ca:19:f0:11:82:fa:15:b8:e0:55:d5:5c:2a:70:11: 62:ef:54:7d:f4:f8:ce:d5:9d:61:63:3f:2e:a7:b4: da:ea:14:dc:ac:5b:2b:3f:e9:9b:c0:89:85:b2:ff: b8:6e:1e:ea:9a:a3:d0:dd:f4:6a:a6:5e:89:72:ec: c6:e3:33:be:87:db:36:fb:52:19:cb:dc:55:37:98: fe:91:dc:31:db:02:79:02:cb:d9:64:85:a3:16:2c: b2:91:2c:b4:8f:70:98:ce:23:ca:5e:52:f5:39:e9: 61:65:25:23:f4:13:91:63:52:69:a7:c8:34:25:73: d4:64:2b:d6:21:63:52:0d:9f:64:d9:89:3b:06:c5: d0:e6:e2:13:5f:86:dc:49:1a:73:b4:7b:62:c4:35: 81:b2:99:ba:01:1b:7e:54:f8:21:7e:4f:e2:fb:e4: 7b:4a:ec:d9:be:9c:e1:a0:5d:57:50:6b:1b:18:88: 71:40:cc:ad:d2:f4:f2:5c:fc:15:70:8e:ab:82:2e: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4B:3F:01:8F:84:B5:8D:D4:B1:A9:8B:3A:6D:91:23:75:D5:E1:0F X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5b:16:0c:de:3d:14:53:95:b3:f9:6d:fa:2b:76:09:19:85: f1:5f:06:b8:1e:55:3d:85:ba:f2:83:29:f6:84:90:f2:9b:41: 94:67:64:33:8b:5a:dd:cf:cc:78:a9:ef:c8:1e:e5:bc:bc:e7: bf:08:91:95:24:17:c2:40:3f:e7:3c:76:2f:1e:da:de:5b:6f: 2a:3f:84:6c:9a:e9:e4:0f:5b:c2:e2:24:66:37:93:fc:6d:7e: 0b:8c:7b:ef:1e:47:ca:51:89:99:c4:33:f3:68:ef:33:f7:69: ea:43:d5:0b:9c:db:a7:59:e2:fb:80:e8:8f:83:e8:88:a2:14: f0:97:79:fc:ac:33:eb:14:43:a5:27:bd:cc:57:c4:8f:dc:8a: 63:64:40:24:cc:a7:2d:d8:0a:a7:72:ce:e0:e0:28:53:70:d4: 9c:56:51:d8:90:6a:76:7e:1c:f5:a9:ac:93:3f:cf:b9:cd:06: a8:eb:e1:b4:78:67:8c:a4:61:0e:90:11:7b:03:e2:28:fb:e4: f7:ad:6f:eb:72:94:6f:32:18:87:23:7e:5c:d6:19:89:fe:40: 9d:9a:61:16:df:c4:6e:89:ce:9d:58:8b:72:e3:40:54:91:d7: 31:29:33:25:3e:e8:75:9a:16:02:9e:93:34:a8:2b:50:6e:07: 0a:04:92:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSNxEub3UBVWHiHlQzicEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNzI0MDQwMTE2WhcNMjYwNzI1MDQwMTE2WjAzMTEwLwYDVQQD Eyg2YjRiM2YwMThmODRiNThkZDRiMWE5OGIzYTZkOTEyMzc1ZDVlMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCu9PV1H9S09rZ6jIdrVFzCseYVY wM3plQA9/ONi7HacToB2EnGOj9o41pounYi3tN6Y118PnHmuJ9bKGfARgvoVuOBV 1VwqcBFi71R99PjO1Z1hYz8up7Ta6hTcrFsrP+mbwImFsv+4bh7qmqPQ3fRqpl6J cuzG4zO+h9s2+1IZy9xVN5j+kdwx2wJ5AsvZZIWjFiyykSy0j3CYziPKXlL1Oelh ZSUj9BORY1Jpp8g0JXPUZCvWIWNSDZ9k2Yk7BsXQ5uITX4bcSRpztHtixDWBspm6 ARt+VPghfk/i++R7SuzZvpzhoF1XUGsbGIhxQMyt0vTyXPwVcI6rgi5WawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtLPwGPhLWN1LGpizptkSN11eEPMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlsWDN49 FFOVs/lt+it2CRmF8V8GuB5VPYW68oMp9oSQ8ptBlGdkM4ta3c/MeKnvyB7lvLzn vwiRlSQXwkA/5zx2Lx7a3ltvKj+EbJrp5A9bwuIkZjeT/G1+C4x77x5HylGJmcQz 82jvM/dp6kPVC5zbp1ni+4Doj4PoiKIU8Jd5/Kwz6xRDpSe9zFfEj9yKY2RAJMyn LdgKp3LO4OAoU3DUnFZR2JBqdn4c9amskz/Puc0GqOvhtHhnjKRhDpARewPiKPvk 961v63KUbzIYhyN+XNYZif5AnZphFt/EbonOnViLcuNAVJHXMSkzJT7odZoWAp6T NKgrUG4HCgSSBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:01 2026 by rpki-client