$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: fkLTUsXathmJpFX/CWgCvWIoxdt+W7HV/pfVnKjI8bs= Subject key identifier: 9F:42:9B:68:3F:B9:2B:89:33:55:D2:C1:FF:87:9F:51:2E:4C:81:86 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019F90232D541E4E65B5CA0FC0771B64E7BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0286 Signing time: Thu 23 Jul 2026 18:00:52 +0000 Manifest this update: Thu 23 Jul 2026 18:00:52 +0000 Manifest next update: Fri 24 Jul 2026 18:00:52 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: a3Hy7EnwyEqAkLMaKpbldk3gHolPP4afm0TtKuYdz9U=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:2d:54:1e:4e:65:b5:ca:0f:c0:77:1b:64:e7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jul 23 18:00:52 2026 GMT Not After : Jul 24 18:00:52 2026 GMT Subject: CN=9f429b683fb92b893355d2c1ff879f512e4c8186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:55:9c:20:b9:a3:48:b8:7d:c6:30:3a:06: 1f:98:27:29:35:8c:09:d2:c1:a4:69:03:50:94:e2: 5f:f6:90:95:02:ac:f1:a0:77:f9:e1:87:9a:94:70: 15:a8:1c:f5:7c:e6:8f:ba:ec:a0:b2:92:af:11:98: a7:07:6c:e9:78:c3:66:23:0a:95:75:3c:b3:9e:83: 94:1e:b4:d1:ce:26:88:f6:d0:f5:67:2f:ce:9d:47: cc:21:b1:3e:b7:28:05:ba:5b:37:b8:ba:03:8b:db: 18:59:4b:f7:b2:d3:72:04:61:18:c6:8a:fe:d7:56: 4e:1a:6c:69:9a:0c:9f:6c:c0:f3:2e:8b:f5:81:d3: 29:b8:91:69:12:32:db:ca:d0:41:6e:31:2d:c2:ba: 86:3a:bc:8b:f2:8f:d6:c8:16:d1:15:8a:13:b1:e3: 90:66:7a:66:15:a7:af:f5:84:6e:10:97:4e:18:d0: f5:d0:77:6e:b7:23:8d:cb:a9:d9:3e:fd:32:6d:7c: 8d:e0:9b:dc:8d:de:5e:29:49:5c:4e:fd:9a:4d:cc: 7d:51:78:49:ad:36:72:9a:3a:47:4f:ad:46:ae:5f: 03:fe:a0:89:0b:2c:ee:f6:b6:ce:21:28:9e:15:34: 8b:be:36:0f:c8:1d:09:d8:35:b6:a3:6c:27:ac:4c: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:42:9B:68:3F:B9:2B:89:33:55:D2:C1:FF:87:9F:51:2E:4C:81:86 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f1:bc:85:4e:10:00:c5:1a:6e:fc:4f:71:37:bb:4c:40:f4: 1c:11:f6:93:61:c1:69:0d:7e:56:cb:5c:e6:c3:a3:8b:f6:aa: 1c:f4:0a:11:9a:d5:69:61:8e:12:8b:78:32:c9:c2:72:84:a4: 70:16:30:70:9e:98:51:22:73:d2:ee:bc:cb:b7:d1:b9:1d:c2: b4:63:3f:07:15:5a:62:c3:75:f5:9c:d7:75:c2:0b:c0:b6:4e: a7:92:c8:38:47:58:b9:21:4e:5e:bc:c6:1c:9d:17:67:05:4f: c8:a1:0d:ae:c5:63:2e:97:4c:30:93:31:c3:07:9c:d3:3b:7e: b1:75:25:1a:3f:69:a3:69:37:6f:40:bc:43:0a:2e:f9:93:cd: 00:54:b0:d9:ec:59:d9:1f:dd:a0:33:0c:c1:a0:2b:7b:3b:b1: d4:71:d3:d2:31:52:b3:28:c4:82:3d:6e:1c:85:85:e9:7c:bb: ed:ab:9e:1c:d7:ea:3c:02:27:03:5d:a8:06:fb:8e:31:a3:18: e3:da:1c:41:20:dc:e2:81:08:ea:3b:b1:bd:f9:16:3d:88:b5: 12:a4:37:64:e3:61:bf:66:03:ee:f1:3f:1e:3e:b6:ee:f4:23: 76:34:a5:ab:56:f9:a8:ef:79:0a:ad:45:e4:fa:98:92:39:72: 96:8b:4e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIy1UHk5ltcoPwHcbZOe+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNzIzMTgwMDUyWhcNMjYwNzI0MTgwMDUyWjAzMTEwLwYDVQQD Eyg5ZjQyOWI2ODNmYjkyYjg5MzM1NWQyYzFmZjg3OWY1MTJlNGM4MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sBVnCC5o0i4fcYwOgYfmCcpNYwJ 0sGkaQNQlOJf9pCVAqzxoHf54YealHAVqBz1fOaPuuygspKvEZinB2zpeMNmIwqV dTyznoOUHrTRziaI9tD1Zy/OnUfMIbE+tygFuls3uLoDi9sYWUv3stNyBGEYxor+ 11ZOGmxpmgyfbMDzLov1gdMpuJFpEjLbytBBbjEtwrqGOryL8o/WyBbRFYoTseOQ ZnpmFaev9YRuEJdOGND10HdutyONy6nZPv0ybXyN4Jvcjd5eKUlcTv2aTcx9UXhJ rTZymjpHT61Grl8D/qCJCyzu9rbOISieFTSLvjYPyB0J2DW2o2wnrEzWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Cm2g/uSuJM1XSwf+Hn1EuTIGGMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvG8hU4Q AMUabvxPcTe7TED0HBH2k2HBaQ1+Vstc5sOji/aqHPQKEZrVaWGOEot4MsnCcoSk cBYwcJ6YUSJz0u68y7fRuR3CtGM/BxVaYsN19ZzXdcILwLZOp5LIOEdYuSFOXrzG HJ0XZwVPyKENrsVjLpdMMJMxwwec0zt+sXUlGj9po2k3b0C8Qwou+ZPNAFSw2exZ 2R/doDMMwaArezux1HHT0jFSsyjEgj1uHIWF6Xy77aueHNfqPAInA12oBvuOMaMY 49ocQSDc4oEI6juxvfkWPYi1EqQ3ZONhv2YD7vE/Hj627vQjdjSlq1b5qO95Cq1F 5PqYkjlylotOWQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:16:03 2026 by rpki-client