$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft File: byNYUxg5hEeanWn0ChlPC4tn4WU.mft (raw, json) Hash identifier: 6eyZjFrAA73BeFLE7vh/iy/HCwnd9dGAxLVxFruWJuQ= Subject key identifier: F9:1F:D3:E4:77:0A:7B:13:F4:11:BB:C1:D5:A6:65:DC:3A:6D:B4:E0 Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165 Certificate serial: 019F916CA56697C86FAEFEB8B87C942434B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft Manifest number: 40 Signing time: Fri 24 Jul 2026 00:00:44 +0000 Manifest this update: Fri 24 Jul 2026 00:00:44 +0000 Manifest next update: Sat 25 Jul 2026 00:00:44 +0000 Files and hashes: 1: 2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa (hash: RaceEYp+9x/nmRjbttzsLu4fwsF5EmfcJqvuxa0ObDg=) 2: 3MxkJ8oImusR-x6YZIDHo7H63Vw.roa (hash: OGE63mhnkHU2lgMLydoR0MdyRE14meeXr8jQF5XZkts=) 3: 7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa (hash: MQjxwKpRG2tiJ2eQhlWW1RBEP51Pbiw0toODvQ604Ak=) 4: 9EELKgk7YXr6QiSeinApyGlwoOg.roa (hash: 65EuDdRjxCNjT0cpt3YcmI/39MhqamhYj7mC3NNKwG4=) 5: HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa (hash: el4hRvXmm03w/ouApdicwVDgwdfDa1Ax7skb82xPN74=) 6: T_XID6vuukHAvdlVbOkSvdJrmpQ.roa (hash: 3iwmUlZdkQ/+grvrDB6VspRZaoYjMWi/tzaIbi1/oWU=) 7: XCLmZ42Y2x9YN1-Jb94X567tAPE.roa (hash: ltIWBiaNO3Twv3Jxf5yLk7wkuyVnobkAoGRbCxAIl/Q=) 8: XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa (hash: MyDRiichukTa9/2yAU6IIGMytc1TPM1wlbX1da+yjW4=) 9: Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa (hash: Upfc+pXKegcvhRzDlXEiNd2VXaPZzzD0Dy/XWAb+Rt8=) 10: ajCoue65wSBqsLOepcqnGK-maoY.roa (hash: YnWPiPKcNfNunm8Lp8arYjMf1qLz2VlLI9iMozyniiE=) 11: byNYUxg5hEeanWn0ChlPC4tn4WU.crl (hash: ARZOd+f66d81Pm7WFjiJ2WJ/t2X4EMsGAvlPjZ8Foi0=) 12: dGMIw7XyljKZ4VAipgRb_Gv3574.roa (hash: 5XpQyNwCpMd1s8manxuLHo6eOOCEr2maqfz0CCW1PAA=) 13: dgzEX6Rn-OqO4kyR10BfdiXHxCM.roa (hash: q0vAO8NsoCVHvKqTdmqncsS0Cbhf2cyWq21pDNvi164=) 14: huXlbPqAA1b9i7ZmKbP4NUymuTI.roa (hash: 2yKN6PVua0m6pjdKSS6mAuCNTQE3dH0rSHmJAsGUQ2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:a5:66:97:c8:6f:ae:fe:b8:b8:7c:94:24:34:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165 Validity Not Before: Jul 24 00:00:44 2026 GMT Not After : Jul 25 00:00:44 2026 GMT Subject: CN=f91fd3e4770a7b13f411bbc1d5a665dc3a6db4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:5f:67:e7:1f:38:e8:79:cf:3e:47:c2:4e: 56:a8:e9:92:6d:3b:49:c4:18:7d:3b:a7:11:4e:b5: da:e8:42:f7:f0:ed:30:37:e3:34:c0:5f:e3:a3:34: 2d:45:30:e2:2b:71:72:06:81:e4:6b:67:d5:70:76: 57:fc:cf:af:75:61:da:c7:ea:c5:7f:ba:09:6f:66: 74:c4:cb:b7:66:92:cd:b7:b1:ac:4f:b1:51:7a:99: 36:e0:6b:ab:32:a8:6a:ff:e1:72:d4:05:dd:26:e3: 4b:a2:3e:8c:46:4a:b1:da:85:dc:c4:6b:67:8e:e6: 17:c2:22:bb:ee:e5:21:0c:3f:4b:4f:c1:76:7c:d0: 5e:73:e3:ab:20:eb:aa:e7:60:03:19:dc:21:db:81: 6d:c2:a9:9b:d1:46:89:38:e5:9e:d5:53:d3:d3:33: 97:e3:57:3a:ee:a5:e0:f5:8e:fe:4b:b7:03:dc:0f: 97:f5:e3:5e:23:25:5b:cb:22:f4:bb:c7:e1:ab:59: f6:ef:90:a0:14:0e:27:d9:b8:95:9c:7c:a0:74:38: f1:8e:0b:be:58:41:4d:e3:48:d2:d7:83:55:8f:8f: 15:5c:0d:5e:bd:ba:fb:c8:bc:ae:82:b3:cd:96:f7: 7c:ed:c0:da:e1:4b:40:8a:07:80:a1:6b:44:dd:9b: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1F:D3:E4:77:0A:7B:13:F4:11:BB:C1:D5:A6:65:DC:3A:6D:B4:E0 X509v3 Authority Key Identifier: keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:da:fc:f9:82:44:0d:b5:2b:2e:c1:51:54:25:3a:3c:d9: 47:8c:38:68:01:b8:3f:9c:7d:c6:75:31:de:38:8e:5f:5f:d0: 18:be:0a:92:2a:00:8a:61:00:2f:9b:40:2d:76:a1:f5:df:00: 74:d2:69:10:d0:1b:f9:cf:b7:12:d7:c1:20:a0:c1:0c:2a:6e: ed:a6:89:5b:19:57:72:29:2b:33:97:13:54:ec:d1:03:41:37: be:0d:77:a2:00:6e:99:cc:92:6c:b1:56:87:fd:6d:95:17:5f: 99:9f:28:4c:8d:3e:6b:35:a6:89:e3:a5:60:be:a0:45:0a:00: 96:9f:c5:18:0a:fa:95:e3:03:cf:e7:78:34:e6:f0:ef:e0:4e: 3d:5d:06:05:a2:bc:d7:12:4c:1f:f9:30:20:b8:23:bb:a8:7e: 6a:84:95:0e:b2:30:71:4f:16:0d:c6:17:b5:5b:64:1e:36:9c: eb:1e:17:83:82:52:9c:18:7b:83:ca:5a:11:b7:30:41:77:8e: e9:c1:82:f5:d1:e9:6c:2f:c2:99:3d:ff:6e:fa:68:e1:dc:78: 5d:d0:f0:a0:11:01:7f:88:96:5e:4f:ba:ab:2f:c4:ec:69:b7: 80:44:25:f1:b9:8b:6c:34:7f:c5:6c:77:53:ec:b5:69:11:d8: d1:39:9f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbKVml8hvrv64uHyUJDS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjM1ODUzMTgzOTg0NDc5YTlkNjlmNDBhMTk0ZjBiOGI2 N2UxNjUwHhcNMjYwNzI0MDAwMDQ0WhcNMjYwNzI1MDAwMDQ0WjAzMTEwLwYDVQQD EyhmOTFmZDNlNDc3MGE3YjEzZjQxMWJiYzFkNWE2NjVkYzNhNmRiNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4pfZ+cfOOh5zz5Hwk5WqOmSbTtJ xBh9O6cRTrXa6EL38O0wN+M0wF/jozQtRTDiK3FyBoHka2fVcHZX/M+vdWHax+rF f7oJb2Z0xMu3ZpLNt7GsT7FRepk24GurMqhq/+Fy1AXdJuNLoj6MRkqx2oXcxGtn juYXwiK77uUhDD9LT8F2fNBec+OrIOuq52ADGdwh24Ftwqmb0UaJOOWe1VPT0zOX 41c67qXg9Y7+S7cD3A+X9eNeIyVbyyL0u8fhq1n275CgFA4n2biVnHygdDjxjgu+ WEFN40jS14NVj48VXA1evbr7yLyugrPNlvd87cDa4UtAigeAoWtE3ZtQpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkf0+R3CnsT9BG7wdWmZdw6bbTgMB8GA1UdIwQY MBaAFG8jWFMYOYRHmp1p9AoZTwuLZ+FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvja/PmC RA21Ky7BUVQlOjzZR4w4aAG4P5x9xnUx3jiOX1/QGL4KkioAimEAL5tALXah9d8A dNJpENAb+c+3EtfBIKDBDCpu7aaJWxlXcikrM5cTVOzRA0E3vg13ogBumcySbLFW h/1tlRdfmZ8oTI0+azWmieOlYL6gRQoAlp/FGAr6leMDz+d4NObw7+BOPV0GBaK8 1xJMH/kwILgju6h+aoSVDrIwcU8WDcYXtVtkHjac6x4Xg4JSnBh7g8paEbcwQXeO 6cGC9dHpbC/CmT3/bvpo4dx4XdDwoBEBf4iWXk+6qy/E7Gm3gEQl8bmLbDR/xWx3 U+y1aRHY0Tmf2Q== -----END CERTIFICATE-----Generated at Fri Jul 24 03:38:05 2026 by rpki-client