$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: ZMHjmLmPQ+XO6O3xURCmB5XyBfqMnX8nlQ8mtthNi54= Subject key identifier: 3B:B2:8D:62:3C:5E:8E:67:3A:70:E6:19:21:0C:B6:29:77:E7:FB:44 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019F90C7B0500EFD7A3AC4F96466A9CCF589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1394 Signing time: Thu 23 Jul 2026 21:00:33 +0000 Manifest this update: Thu 23 Jul 2026 21:00:33 +0000 Manifest next update: Fri 24 Jul 2026 21:00:33 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: WyVCBXp5dbAVKtNLaA/hAZZ6S68WgWSCjsVvnbq3NPQ=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:b0:50:0e:fd:7a:3a:c4:f9:64:66:a9:cc:f5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jul 23 21:00:33 2026 GMT Not After : Jul 24 21:00:33 2026 GMT Subject: CN=3bb28d623c5e8e673a70e619210cb62977e7fb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:95:8f:fe:10:3e:52:d7:b6:09:51:8b:a3: a6:37:91:7c:2e:48:a7:82:9c:5a:25:43:ef:c2:61: 18:73:d0:d3:ec:57:34:50:87:26:f9:9d:80:fb:33: 05:d9:22:04:a9:ef:a4:47:c0:82:f3:c9:d7:57:22: 52:2c:30:44:c4:23:ee:92:d0:b1:21:81:98:3e:97: 78:4f:95:44:49:f5:0d:88:69:27:aa:aa:a8:59:b9: 2c:04:8c:88:4c:bf:82:8e:5a:68:dc:ea:dd:38:d7: 0a:43:13:6b:0f:1f:71:0e:a3:b5:a7:f2:90:f4:41: 2b:37:bc:60:2c:cc:15:bc:5f:4f:1b:68:17:ba:21: db:98:83:97:ba:3c:b9:d5:53:cc:59:22:3a:b1:4d: 9c:f0:82:56:5a:ee:f9:2d:53:cf:60:7b:67:da:98: aa:fa:06:df:0c:cb:a5:b9:12:16:02:7d:0c:da:a1: a3:25:fd:e3:57:71:fa:3f:af:b7:fb:cf:0a:77:6e: 03:eb:13:9f:e8:3a:87:00:be:b0:79:a1:3c:26:d7: f9:da:96:82:94:10:7c:6c:ad:73:0c:db:07:78:9c: c7:83:0c:2c:91:e7:cf:73:4c:2a:ca:c7:8b:03:dc: 88:7c:42:0d:0a:34:2f:74:a3:21:76:31:51:0e:81: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B2:8D:62:3C:5E:8E:67:3A:70:E6:19:21:0C:B6:29:77:E7:FB:44 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e2:49:fc:65:b1:db:f2:21:df:3d:eb:7e:86:0a:a3:1c:bb: 82:e5:4f:37:63:af:48:84:92:17:ac:d7:de:39:3f:f6:0f:b1: 64:bc:4a:e7:74:08:1a:73:70:77:8a:b8:e0:74:dd:a0:35:97: ce:5f:19:74:8e:71:13:5f:7c:b8:c0:1b:7f:04:08:8b:7c:af: 2d:03:83:bf:0a:9b:f5:12:ef:ef:67:c6:6c:fb:8b:b5:70:f3: e6:4b:28:03:3b:78:e9:f4:3c:31:3d:1b:cc:ca:c9:29:67:52: 1a:91:06:66:ba:ae:4e:0e:c1:b9:37:5e:c2:4e:9e:c9:b1:02: 25:38:49:c9:ec:c1:c0:dd:2c:c7:a0:d0:da:27:e4:7e:f6:42: 3f:31:2d:50:84:c7:a0:f2:f2:c7:0c:ce:0c:08:de:70:09:32: 69:e7:00:3f:cf:64:d8:26:73:8c:05:63:93:c6:64:47:f3:80: e2:f5:33:65:13:d7:a1:a0:f0:84:56:7e:58:d1:e4:9c:82:a9: 51:94:7f:62:bd:b4:71:1d:77:5a:c5:57:57:58:c5:97:b6:65: 7c:f9:23:31:15:19:a4:81:4f:b1:37:99:b9:ea:0d:ab:9b:94: 5a:b0:d7:dc:91:ac:74:f4:4c:bd:18:79:6f:13:39:16:ae:da: ed:7b:f4:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx7BQDv16OsT5ZGapzPWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNzIzMjEwMDMzWhcNMjYwNzI0MjEwMDMzWjAzMTEwLwYDVQQD EygzYmIyOGQ2MjNjNWU4ZTY3M2E3MGU2MTkyMTBjYjYyOTc3ZTdmYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzWVj/4QPlLXtglRi6OmN5F8Lkin gpxaJUPvwmEYc9DT7Fc0UIcm+Z2A+zMF2SIEqe+kR8CC88nXVyJSLDBExCPuktCx IYGYPpd4T5VESfUNiGknqqqoWbksBIyITL+Cjlpo3OrdONcKQxNrDx9xDqO1p/KQ 9EErN7xgLMwVvF9PG2gXuiHbmIOXujy51VPMWSI6sU2c8IJWWu75LVPPYHtn2piq +gbfDMuluRIWAn0M2qGjJf3jV3H6P6+3+88Kd24D6xOf6DqHAL6weaE8Jtf52paC lBB8bK1zDNsHeJzHgwwskefPc0wqyseLA9yIfEINCjQvdKMhdjFRDoGYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuyjWI8Xo5nOnDmGSEMtil35/tEMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOJJ/GWx 2/Ih3z3rfoYKoxy7guVPN2OvSISSF6zX3jk/9g+xZLxK53QIGnNwd4q44HTdoDWX zl8ZdI5xE198uMAbfwQIi3yvLQODvwqb9RLv72fGbPuLtXDz5ksoAzt46fQ8MT0b zMrJKWdSGpEGZrquTg7BuTdewk6eybECJThJyezBwN0sx6DQ2ifkfvZCPzEtUITH oPLyxwzODAjecAkyaecAP89k2CZzjAVjk8ZkR/OA4vUzZRPXoaDwhFZ+WNHknIKp UZR/Yr20cR13WsVXV1jFl7ZlfPkjMRUZpIFPsTeZueoNq5uUWrDX3JGsdPRMvRh5 bxM5Fq7a7Xv0Sw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:29 2026 by rpki-client