$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: 3Q9zLdcf9Tv6uRo2Jg8YWm4oUC7ajCJUihOdHPztBSU= Subject key identifier: AB:39:0B:65:77:60:E0:DC:5F:EA:80:AC:35:0D:AC:8E:EF:79:D0:8A Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019F916C885456BA783DC350823D74E16929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1ADB Signing time: Fri 24 Jul 2026 00:00:36 +0000 Manifest this update: Fri 24 Jul 2026 00:00:36 +0000 Manifest next update: Sat 25 Jul 2026 00:00:36 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: LGFfswZJUc2uQJnCGtAMoBVxkmAU/dB4YXFnnbyjWiw=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:88:54:56:ba:78:3d:c3:50:82:3d:74:e1:69:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jul 24 00:00:36 2026 GMT Not After : Jul 25 00:00:36 2026 GMT Subject: CN=ab390b657760e0dc5fea80ac350dac8eef79d08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:70:f5:c3:29:39:76:8f:cd:89:39:f8:58: 05:8e:52:8c:8b:34:48:ba:59:1d:2f:ca:05:77:90: 0d:13:ce:56:60:4f:5e:6c:6d:2c:b8:6b:60:bf:ba: ae:87:e9:f6:96:41:36:51:e7:61:37:98:43:eb:7c: db:18:90:24:05:fb:ed:69:15:2d:5d:a9:78:72:83: 30:dc:04:de:bc:fa:b7:00:cf:99:8e:3b:40:73:38: 65:59:de:dc:41:0f:ca:98:a5:9f:ed:fb:b1:ac:24: e8:28:23:eb:82:46:f9:5d:57:2c:48:a9:9a:e7:a8: e5:aa:bb:9d:62:3f:ce:5d:2b:e8:2b:a6:9f:04:bd: 1e:7a:ce:ac:88:7f:e8:30:d6:84:ff:2b:4c:32:6c: 16:6e:c3:73:2d:a1:22:5c:6d:08:06:e9:20:af:be: 63:4b:27:e7:e2:fb:f4:7c:ab:77:e6:28:fd:8d:0f: c5:32:d6:45:f9:3c:40:a8:3f:53:79:e1:e6:7c:ae: c0:b5:7d:b4:5b:4f:2f:8d:53:f7:76:5a:12:f7:28: 50:45:f1:1f:53:2f:ff:6d:97:aa:f4:e6:98:33:38: ff:cb:0b:f1:3f:bf:29:04:28:f0:4e:a3:b6:2e:bf: d0:0b:ea:18:ea:d1:eb:ff:4a:ee:1e:54:6d:af:bf: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:0B:65:77:60:E0:DC:5F:EA:80:AC:35:0D:AC:8E:EF:79:D0:8A X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e1:27:b5:9f:b0:1c:8a:ec:9f:c2:8c:8e:5a:91:17:15:0d: 2b:71:ef:5b:ad:26:e9:77:d5:f3:44:11:2c:2e:70:38:26:04: 01:95:e0:7d:a7:8c:f8:fb:9d:38:dc:e2:0d:14:d3:20:a6:72: 73:30:cd:2c:88:7f:00:5f:ef:b2:fc:7b:8d:27:8b:ce:db:a0: f3:b3:bc:a3:37:fd:73:43:f9:71:e5:b9:e5:24:f6:a2:59:85: 63:66:37:60:16:dd:68:b9:bd:dd:e1:fd:54:e3:8b:c4:d1:65: 38:3b:c6:eb:18:10:9c:68:e3:22:a7:0e:ae:c9:72:52:80:2b: 0b:44:de:20:45:47:36:cd:05:12:66:97:a1:de:04:a0:66:8b: eb:bb:43:0d:30:ba:53:04:3e:10:95:3f:a4:2d:07:d1:7f:93: 30:cf:d8:48:4f:33:08:84:6e:b1:39:79:31:9a:ad:43:0e:35: 2b:28:06:e2:f3:4b:67:bc:cf:8c:92:59:a8:1b:ed:31:4a:2b: 8a:3c:17:64:34:54:da:bd:ef:5c:b7:74:1d:bc:74:e4:05:79: 20:f2:d1:b5:ce:5c:00:49:3d:1f:e6:bf:14:0e:00:ac:3e:cd: b3:91:d8:4c:bd:c5:8a:98:82:ab:50:09:69:8d:c0:62:31:b4: 7f:90:ee:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbIhUVrp4PcNQgj104WkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNzI0MDAwMDM2WhcNMjYwNzI1MDAwMDM2WjAzMTEwLwYDVQQD EyhhYjM5MGI2NTc3NjBlMGRjNWZlYTgwYWMzNTBkYWM4ZWVmNzlkMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKlw9cMpOXaPzYk5+FgFjlKMizRI ulkdL8oFd5ANE85WYE9ebG0suGtgv7quh+n2lkE2UedhN5hD63zbGJAkBfvtaRUt Xal4coMw3ATevPq3AM+ZjjtAczhlWd7cQQ/KmKWf7fuxrCToKCPrgkb5XVcsSKma 56jlqrudYj/OXSvoK6afBL0ees6siH/oMNaE/ytMMmwWbsNzLaEiXG0IBukgr75j Syfn4vv0fKt35ij9jQ/FMtZF+TxAqD9TeeHmfK7AtX20W08vjVP3dloS9yhQRfEf Uy//bZeq9OaYMzj/ywvxP78pBCjwTqO2Lr/QC+oY6tHr/0ruHlRtr78XGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs5C2V3YODcX+qArDUNrI7vedCKMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+EntZ+w HIrsn8KMjlqRFxUNK3HvW60m6XfV80QRLC5wOCYEAZXgfaeM+PudONziDRTTIKZy czDNLIh/AF/vsvx7jSeLztug87O8ozf9c0P5ceW55ST2olmFY2Y3YBbdaLm93eH9 VOOLxNFlODvG6xgQnGjjIqcOrslyUoArC0TeIEVHNs0FEmaXod4EoGaL67tDDTC6 UwQ+EJU/pC0H0X+TMM/YSE8zCIRusTl5MZqtQw41KygG4vNLZ7zPjJJZqBvtMUor ijwXZDRU2r3vXLd0Hbx05AV5IPLRtc5cAEk9H+a/FA4ArD7Ns5HYTL3FipiCq1AJ aY3AYjG0f5Du/g== -----END CERTIFICATE-----Generated at Fri Jul 24 03:16:00 2026 by rpki-client