$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: 8nNLDFCLG9CzHZOgv0rKz30BBmlehSRd6aqGRmEqBk4= Subject key identifier: 7A:FC:B4:4D:6F:54:E2:DD:8B:DB:1B:FB:7B:5F:47:6C:16:62:48:D8 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019F9135ED542D3F2E7ED6A8D34BD8016242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0C9A Signing time: Thu 23 Jul 2026 23:00:58 +0000 Manifest this update: Thu 23 Jul 2026 23:00:58 +0000 Manifest next update: Fri 24 Jul 2026 23:00:58 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa (hash: 0Zeu5WbfkcoRWCcChq+NWwrNo0Y/QIR7cp1J9a7juh8=) 8: KWeUe8stEcRBCfK1V9M1OdEhYVo.roa (hash: 5db5SBY8xLjigcej1g8W2J/cv1YnUc8GiiKN3rxcM4Y=) 9: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 10: SY0oaouPknTSy2MmGqSQOcOco4Q.roa (hash: HRxdYO/Iechw+UCcupxpKvFHOwFwn4JRjC6eMfFT/dQ=) 11: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: 6pyPx3pL005NVLfD947A5Nun3Lg85ZXgRcLX0kRuEho=) 12: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 13: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 14: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 15: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:ed:54:2d:3f:2e:7e:d6:a8:d3:4b:d8:01:62:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jul 23 23:00:58 2026 GMT Not After : Jul 24 23:00:58 2026 GMT Subject: CN=7afcb44d6f54e2dd8bdb1bfb7b5f476c166248d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:7c:9c:c4:c3:67:ea:ed:d0:4a:62:ee:6c: 4e:99:fb:9b:e7:6a:42:f7:08:2f:b2:19:df:7c:18: 1f:d4:c7:c0:ae:9b:13:35:21:06:05:89:39:52:16: ac:ad:ac:f1:96:de:81:c7:68:37:3f:22:65:23:63: 64:9f:18:51:18:65:6c:10:f7:2e:f1:96:6e:b5:09: bc:1c:a0:92:ba:56:de:7e:bb:2e:77:b7:ec:7b:44: f7:d3:ae:c0:5a:b8:47:22:fc:4e:54:78:1e:bb:bc: 62:c5:ce:5b:fc:10:4e:42:18:79:25:7f:be:95:6f: 0a:1b:fe:5f:8b:93:54:63:1f:64:29:78:3e:88:c1: 8f:a2:9d:ea:59:73:44:81:c3:d5:9d:8d:75:bf:e1: 1c:74:55:d1:62:40:e8:aa:03:f8:34:be:24:68:12: f4:8a:f9:e8:de:e6:04:a2:72:03:a4:f8:36:26:db: 33:1b:79:22:ec:27:3e:6a:1a:8d:8b:54:fa:c6:a7: e8:36:e4:1e:87:4b:e5:57:7d:0e:77:0e:a1:f3:54: f9:0a:4c:5f:33:0e:f3:55:dc:36:e5:5f:a3:eb:3c: af:9e:2b:82:89:a5:94:fc:c7:70:7e:b5:3c:f0:b2: 6d:14:77:ba:6d:96:65:d5:6f:0a:24:88:58:0e:b1: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:B4:4D:6F:54:E2:DD:8B:DB:1B:FB:7B:5F:47:6C:16:62:48:D8 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b3:ae:14:a7:c3:8d:c6:08:3b:bd:e9:53:12:2c:1e:cc:93: 90:86:e3:f2:c7:a7:86:cb:1f:10:8b:0a:82:87:c0:8a:98:19: 74:ce:e3:1f:40:a8:a7:b3:e0:1f:97:57:4b:ea:8b:8e:70:7c: d0:b8:3c:da:4a:fd:c0:33:21:8c:d1:2c:92:84:aa:07:63:80: 48:c1:87:4a:90:5d:74:be:05:5c:98:98:47:64:78:29:5d:75: d1:d9:6d:0c:5a:a7:da:ee:56:d3:9e:a2:3c:6a:34:46:c6:7b: 1b:03:b3:7d:23:bd:a0:06:5c:d9:85:1c:0b:1d:2a:53:13:e4: ad:4d:3e:fb:d1:7d:8f:93:c0:86:fb:a1:3b:6e:74:f8:16:7c: a0:42:1a:4a:5c:5f:ec:5b:f0:52:56:b8:ef:9e:d4:df:72:73: 81:f8:96:8c:89:ec:b3:f4:e9:1c:b9:61:a3:be:01:e2:24:be: c0:f0:76:32:ce:53:6b:32:9a:f7:27:44:4d:2b:21:5c:9e:b7: 1d:17:a7:84:bc:ac:be:69:f4:fa:c8:08:cf:29:31:4c:ca:8a: 5f:11:ea:ea:4c:1c:1b:0c:79:fb:3f:23:ad:c1:f5:42:f0:8f: 03:34:79:68:30:1c:02:13:bd:7f:3d:a6:f0:d8:54:24:e6:f5: 9b:2c:36:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNe1ULT8uftao00vYAWJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwNzIzMjMwMDU4WhcNMjYwNzI0MjMwMDU4WjAzMTEwLwYDVQQD Eyg3YWZjYjQ0ZDZmNTRlMmRkOGJkYjFiZmI3YjVmNDc2YzE2NjI0OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBF8nMTDZ+rt0Epi7mxOmfub52pC 9wgvshnffBgf1MfArpsTNSEGBYk5Uhasrazxlt6Bx2g3PyJlI2NknxhRGGVsEPcu 8ZZutQm8HKCSulbefrsud7fse0T3067AWrhHIvxOVHgeu7xixc5b/BBOQhh5JX++ lW8KG/5fi5NUYx9kKXg+iMGPop3qWXNEgcPVnY11v+EcdFXRYkDoqgP4NL4kaBL0 ivno3uYEonIDpPg2JtszG3ki7Cc+ahqNi1T6xqfoNuQeh0vlV30Odw6h81T5Ckxf Mw7zVdw25V+j6zyvniuCiaWU/MdwfrU88LJtFHe6bZZl1W8KJIhYDrGOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr8tE1vVOLdi9sb+3tfR2wWYkjYMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7OuFKfD jcYIO73pUxIsHsyTkIbj8senhssfEIsKgofAipgZdM7jH0Cop7PgH5dXS+qLjnB8 0Lg82kr9wDMhjNEskoSqB2OASMGHSpBddL4FXJiYR2R4KV110dltDFqn2u5W056i PGo0RsZ7GwOzfSO9oAZc2YUcCx0qUxPkrU0++9F9j5PAhvuhO250+BZ8oEIaSlxf 7FvwUla4757U33JzgfiWjInss/TpHLlho74B4iS+wPB2Ms5TazKa9ydETSshXJ63 HRenhLysvmn0+sgIzykxTMqKXxHq6kwcGwx5+z8jrcH1QvCPAzR5aDAcAhO9fz2m 8NhUJOb1myw2RQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:58 2026 by rpki-client