$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: PJoSWYe53rR4fUahlwDoDfy//Tq324tL7Y0c4qvcsfI= Subject key identifier: D7:4B:41:48:79:EF:A1:43:7A:30:77:62:29:3B:AC:FD:52:10:B0:4A Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 019F91356971B47B2E4C6DF8C005F773CCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: 40 Signing time: Thu 23 Jul 2026 23:00:24 +0000 Manifest this update: Thu 23 Jul 2026 23:00:24 +0000 Manifest next update: Fri 24 Jul 2026 23:00:24 +0000 Files and hashes: 1: 2OM9F-ynYI7nKV68vz7MKBmoAcA.roa (hash: p55w46f06nkZCeBDXOOnXNkrx6MfMkBzLizXi7yr8Fo=) 2: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 3: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 4: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 5: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 6: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 7: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 8: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 9: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 10: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 11: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 12: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 13: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 14: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 15: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 16: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 17: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 18: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 19: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 20: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 21: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 22: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 23: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 24: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: bE7HuoPRMOccp5l9gH5uD9bRIS5uWExpgwjEcdUuKe0=) 25: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:69:71:b4:7b:2e:4c:6d:f8:c0:05:f7:73:cc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Jul 23 23:00:24 2026 GMT Not After : Jul 24 23:00:24 2026 GMT Subject: CN=d74b414879efa1437a307762293bacfd5210b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:11:9b:73:10:ba:53:72:48:98:1b:02:c0:3d: 16:4b:05:6c:0c:a9:cc:6e:71:4c:06:0a:a3:90:40: 20:b4:b3:e7:12:c3:f0:e9:1b:31:0f:94:b0:a3:6b: 23:88:9c:a8:7b:0f:96:cb:53:c2:c7:8b:95:e1:ed: 3d:e0:46:88:bb:00:d2:92:d9:97:c4:33:e8:b3:c4: 9b:6d:0b:9d:6c:55:64:be:6f:31:68:f0:41:ba:52: af:85:db:30:c9:b9:8c:8a:6d:96:a1:e1:07:38:ed: 9b:d5:19:7c:02:0a:b3:17:4e:e4:8d:21:ae:ab:c5: fa:9c:97:b2:a7:30:ce:0e:73:a6:01:c1:3a:e4:36: 46:b6:8e:c3:3f:87:de:de:64:51:8c:f2:45:c3:10: ba:be:71:83:64:6b:44:d5:c2:68:83:bd:0f:ac:70: 10:ef:48:04:4e:a9:5f:b8:e6:2b:70:98:84:12:ef: de:f4:f2:6b:6e:54:a9:40:73:e4:27:77:dd:81:0d: 55:6d:67:10:6d:51:ba:3d:bf:00:cd:61:c7:ca:c4: 48:fa:bf:fb:8f:4e:0f:ca:4c:16:a2:39:ab:c0:71: ad:86:40:ba:fd:e1:42:69:c9:e1:7b:52:31:df:8c: dd:7f:12:4a:9c:a8:41:63:e4:4e:7b:de:d7:b9:68: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4B:41:48:79:EF:A1:43:7A:30:77:62:29:3B:AC:FD:52:10:B0:4A X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:96:2f:99:e6:88:82:7e:4a:a0:01:fe:f8:ba:38:19:01:79: f4:ed:c9:6b:dc:42:4e:98:ab:75:cb:96:e8:37:74:1a:91:d7: 8f:0e:0d:c9:80:02:02:06:c9:b1:d3:b7:11:f7:c2:47:3d:ee: b4:57:2b:fb:d1:b3:5b:75:fb:87:07:da:98:a5:6c:a2:e9:c5: 79:4e:12:90:f2:cd:6b:f3:ce:d2:dd:e7:94:0d:5e:e0:1a:a9: e0:c5:f1:31:87:47:c0:85:e3:48:42:08:6a:15:0f:17:3d:96: 40:80:4c:8d:39:8a:bc:8c:44:ef:62:e7:73:4c:c1:06:19:e1: 7d:4a:95:bd:7f:3d:f9:44:09:98:1b:fa:a8:4b:d7:43:23:8e: d4:c7:42:1f:e7:af:3d:b2:58:29:b0:10:af:b4:92:c8:53:9a: 09:29:09:54:9c:c4:ad:b7:19:71:80:a0:73:aa:d2:92:f0:ef: 96:e4:b5:1b:ce:81:7b:5a:e2:60:71:39:e6:e3:1b:d1:e5:3e: c7:22:6f:d7:3f:34:0e:59:7c:2f:6d:a4:74:ec:91:c2:3a:0f: cc:5b:ed:a5:5c:59:95:9a:5f:03:6b:bc:54:f9:7f:f7:8f:45: 86:e9:1c:fc:9c:23:56:ec:03:c8:ee:be:e9:58:ab:01:4b:52: d9:2b:c2:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNWlxtHsuTG34wAX3c8yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwNzIzMjMwMDI0WhcNMjYwNzI0MjMwMDI0WjAzMTEwLwYDVQQD EyhkNzRiNDE0ODc5ZWZhMTQzN2EzMDc3NjIyOTNiYWNmZDUyMTBiMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RGbcxC6U3JImBsCwD0WSwVsDKnM bnFMBgqjkEAgtLPnEsPw6RsxD5Swo2sjiJyoew+Wy1PCx4uV4e094EaIuwDSktmX xDPos8SbbQudbFVkvm8xaPBBulKvhdswybmMim2WoeEHOO2b1Rl8AgqzF07kjSGu q8X6nJeypzDODnOmAcE65DZGto7DP4fe3mRRjPJFwxC6vnGDZGtE1cJog70PrHAQ 70gETqlfuOYrcJiEEu/e9PJrblSpQHPkJ3fdgQ1VbWcQbVG6Pb8AzWHHysRI+r/7 j04PykwWojmrwHGthkC6/eFCacnhe1Ix34zdfxJKnKhBY+ROe97XuWggiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdLQUh576FDejB3Yik7rP1SELBKMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5YvmeaI gn5KoAH++Lo4GQF59O3Ja9xCTpirdcuW6Dd0GpHXjw4NyYACAgbJsdO3EffCRz3u tFcr+9GzW3X7hwfamKVsounFeU4SkPLNa/PO0t3nlA1e4Bqp4MXxMYdHwIXjSEII ahUPFz2WQIBMjTmKvIxE72Lnc0zBBhnhfUqVvX89+UQJmBv6qEvXQyOO1MdCH+ev PbJYKbAQr7SSyFOaCSkJVJzErbcZcYCgc6rSkvDvluS1G86Be1riYHE55uMb0eU+ xyJv1z80Dll8L22kdOyRwjoPzFvtpVxZlZpfA2u8VPl/949Fhukc/JwjVuwDyO6+ 6VirAUtS2SvCCw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:25:44 2026 by rpki-client