$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: Rm1o8uCmeYd44pborNoP9tF1Ps4KbkmGmAciCB6oubg= Subject key identifier: 4A:8C:A9:B8:BE:60:62:63:06:DA:E6:28:40:EB:5F:7F:93:04:59:F6 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019F8F7E2E54C2780E0E763A90E825498A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 19D3 Signing time: Thu 23 Jul 2026 15:00:38 +0000 Manifest this update: Thu 23 Jul 2026 15:00:38 +0000 Manifest next update: Fri 24 Jul 2026 15:00:38 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: GOZpypaTgAMeSZTlPVOUrAix+pk57olRuLkVnyQwnyA=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:2e:54:c2:78:0e:0e:76:3a:90:e8:25:49:8a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jul 23 15:00:38 2026 GMT Not After : Jul 24 15:00:38 2026 GMT Subject: CN=4a8ca9b8be60626306dae62840eb5f7f930459f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:6e:e4:f7:b3:97:f3:44:cc:ee:37:b2:ef: 4d:15:45:8d:9d:a1:96:84:f1:85:1d:b5:48:9d:2a: 0c:47:94:e2:a5:52:94:84:b7:4a:91:d7:83:f1:d9: 45:18:72:5f:a3:c9:87:84:7b:39:34:1a:a3:39:a7: 21:69:9a:e5:0c:e8:f1:23:8f:4c:66:be:03:07:98: cd:09:41:c8:29:26:18:17:1a:ab:a7:d4:5f:30:a7: be:1a:0f:e9:1a:f9:d2:99:c0:15:9a:0e:25:c0:99: 9c:63:48:ba:43:17:ec:a4:ef:47:35:42:f2:ba:51: a8:bc:c5:1b:31:ef:5d:6e:1b:eb:af:1a:34:21:5a: ee:14:9b:b1:62:f4:98:67:c7:60:9f:14:bf:dc:83: 5e:f3:b9:85:9a:2c:41:d1:51:ad:10:3c:0d:52:da: 0f:8b:29:0b:fb:39:df:9f:7f:22:29:71:d9:f5:42: ec:81:a2:29:6d:35:4b:21:7e:2b:d0:d5:98:9b:7f: 78:8b:8e:cb:db:15:cb:3d:f2:76:84:38:2f:7a:65: 8f:6a:8e:39:3f:5f:5d:1c:9a:5f:b0:2b:d9:3c:cc: 98:33:ae:50:16:3c:05:da:00:1f:cd:42:63:6e:b3: c3:7a:66:7d:c0:54:31:5b:76:64:75:6e:7c:78:12: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:A9:B8:BE:60:62:63:06:DA:E6:28:40:EB:5F:7F:93:04:59:F6 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:07:31:fc:da:5a:99:c9:52:f1:43:4c:5b:cd:c7:d0:cd:2c: 5a:ec:6f:2e:22:fd:32:7e:53:80:4c:77:e7:75:52:5c:8e:45: b3:1c:7f:9f:e0:52:b3:c5:62:f4:b3:24:ac:3c:20:14:91:d5: 35:42:18:a8:63:06:1c:c1:2b:25:4d:3e:21:e1:c8:8b:e1:20: 3f:c1:35:21:29:29:29:ac:3f:7e:96:ca:26:62:04:75:a9:9c: 2f:ce:6b:87:16:a4:0e:75:1d:4e:e5:c9:9d:6a:ce:b8:86:93: c3:38:89:fe:33:db:fb:39:e5:1e:cc:3c:28:0c:94:43:90:bf: d9:db:49:87:57:65:b1:8b:1f:1b:08:90:04:4b:5f:9c:0b:55: cd:1c:ea:87:dc:bf:7a:4c:54:ac:87:4d:4f:82:cc:ce:38:70: 70:54:e9:d2:39:64:6d:6a:e0:14:0e:f1:d3:67:5e:89:7f:a6: b8:33:45:33:1c:81:d0:14:46:6d:d3:96:75:27:c2:56:b0:21: 36:2c:d6:3c:42:81:3e:c6:f3:74:5a:3d:bc:14:34:bd:eb:24: 60:76:cd:97:de:f8:f7:ee:27:92:07:de:aa:d3:74:bb:f4:9a: 0d:78:fc:1d:ab:d4:b6:c8:94:de:ee:d5:ee:b8:02:0c:7c:61: 15:2f:e0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pfi5UwngODnY6kOglSYofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwNzIzMTUwMDM4WhcNMjYwNzI0MTUwMDM4WjAzMTEwLwYDVQQD Eyg0YThjYTliOGJlNjA2MjYzMDZkYWU2Mjg0MGViNWY3ZjkzMDQ1OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuotu5Pezl/NEzO43su9NFUWNnaGW hPGFHbVInSoMR5TipVKUhLdKkdeD8dlFGHJfo8mHhHs5NBqjOachaZrlDOjxI49M Zr4DB5jNCUHIKSYYFxqrp9RfMKe+Gg/pGvnSmcAVmg4lwJmcY0i6QxfspO9HNULy ulGovMUbMe9dbhvrrxo0IVruFJuxYvSYZ8dgnxS/3INe87mFmixB0VGtEDwNUtoP iykL+znfn38iKXHZ9ULsgaIpbTVLIX4r0NWYm394i47L2xXLPfJ2hDgvemWPao45 P19dHJpfsCvZPMyYM65QFjwF2gAfzUJjbrPDemZ9wFQxW3ZkdW58eBI6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqMqbi+YGJjBtrmKEDrX3+TBFn2MB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwcx/Npa mclS8UNMW83H0M0sWuxvLiL9Mn5TgEx353VSXI5Fsxx/n+BSs8Vi9LMkrDwgFJHV NUIYqGMGHMErJU0+IeHIi+EgP8E1ISkpKaw/fpbKJmIEdamcL85rhxakDnUdTuXJ nWrOuIaTwziJ/jPb+znlHsw8KAyUQ5C/2dtJh1dlsYsfGwiQBEtfnAtVzRzqh9y/ ekxUrIdNT4LMzjhwcFTp0jlkbWrgFA7x02deiX+muDNFMxyB0BRGbdOWdSfCVrAh NizWPEKBPsbzdFo9vBQ0veskYHbNl9749+4nkgfeqtN0u/SaDXj8HavUtsiU3u7V 7rgCDHxhFS/gOA== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:17 2026 by rpki-client