$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: STLsDj0JKV6qc1Rq/lnS56I5sxDX10TPOoBxbH1CnaM= Subject key identifier: 95:A2:8B:2C:29:12:5F:DD:AD:54:8E:03:74:78:53:A0:6E:BC:80:16 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019F9323EC787F7F571223B38CD0135CBACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 19A9 Signing time: Fri 24 Jul 2026 08:00:32 +0000 Manifest this update: Fri 24 Jul 2026 08:00:32 +0000 Manifest next update: Sat 25 Jul 2026 08:00:32 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 42mZrPNvOTomsI6OOppPuDaxpUvaIDA5ykwIUafluO8=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:23:ec:78:7f:7f:57:12:23:b3:8c:d0:13:5c:ba:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jul 24 08:00:32 2026 GMT Not After : Jul 25 08:00:32 2026 GMT Subject: CN=95a28b2c29125fddad548e03747853a06ebc8016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:25:d5:26:62:f3:5c:e0:b8:24:1f:31:b7:bb: 98:8c:70:b0:a3:f3:89:6e:df:ee:dd:df:04:03:17: 8d:63:27:f9:07:dc:b8:97:1c:77:78:9e:a5:bf:2c: 35:ab:f8:74:40:3d:f7:09:9d:26:39:c8:30:a4:22: df:b2:e6:69:c0:67:55:81:27:af:d5:ff:85:87:9d: 00:b1:6c:79:33:53:1b:22:7b:7b:41:90:4b:e0:41: d7:be:96:5d:db:fa:63:be:60:80:15:6b:f4:1a:16: c9:16:c7:ae:fa:73:c0:a2:fb:56:41:c2:d7:ac:05: 37:7e:e9:c8:b9:bf:ee:1d:6c:b0:26:78:5e:82:20: d9:82:e1:f1:b2:87:f4:88:95:6f:d3:84:ba:2a:84: f0:1a:fa:e9:47:38:75:22:c6:4b:0d:ad:41:19:6f: 1b:50:cf:0f:c0:4d:35:4f:4a:3a:45:ec:b4:60:64: 0c:48:06:e4:39:f1:d4:c0:fc:c5:b6:ce:68:2e:46: f5:43:ca:33:9c:bc:06:e6:be:17:f9:98:45:4b:fc: de:12:f4:07:47:f0:c6:ff:e7:fb:17:e6:35:aa:21: ee:83:4a:58:9c:27:22:23:2c:6f:53:7d:33:7a:48: c0:8d:59:a0:69:27:49:05:5a:2d:99:69:e7:68:5c: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:8B:2C:29:12:5F:DD:AD:54:8E:03:74:78:53:A0:6E:BC:80:16 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:01:de:99:00:95:39:cf:17:f7:24:4a:08:25:b5:1a:6c:2f: 00:4c:65:fd:e9:bd:ac:15:25:59:fa:18:e3:7b:20:f8:23:3d: ee:fb:62:fb:d9:28:94:90:82:76:2a:0a:87:c9:76:d9:66:97: be:b5:fe:11:ff:78:08:fb:54:58:b4:c8:9e:67:71:e1:f6:29: 32:f9:52:1c:56:ff:4c:22:10:d0:75:79:2f:65:5f:bf:ca:ca: 27:37:9e:1c:99:2f:fc:43:fc:4c:bc:bb:eb:ba:75:6e:a0:0f: 48:6c:7a:da:ae:44:1a:6a:e2:62:aa:2d:ae:2a:67:d7:c6:a9: 71:ef:95:e3:60:01:0c:cb:cc:2b:9b:42:fc:ac:36:07:c4:e4: 4c:f1:2b:41:62:ab:14:02:af:45:bd:c6:34:c6:2b:db:e0:c5: 56:99:a6:49:69:eb:3b:53:6b:95:dc:59:09:4a:6f:0c:6e:98: 18:05:f5:06:8f:30:11:d3:92:e8:53:5e:b5:f8:57:e0:9e:4b: 01:4c:1f:ab:c2:29:10:d6:70:85:37:11:e0:d4:cf:38:f4:79: bc:1c:f7:4e:75:ea:1d:d9:15:63:fd:ef:51:36:1e:cc:f6:53: 37:51:56:a3:11:83:5e:f1:9b:64:e0:61:0b:ab:c1:bd:59:98: b7:94:81:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TI+x4f39XEiOzjNATXLrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwNzI0MDgwMDMyWhcNMjYwNzI1MDgwMDMyWjAzMTEwLwYDVQQD Eyg5NWEyOGIyYzI5MTI1ZmRkYWQ1NDhlMDM3NDc4NTNhMDZlYmM4MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSXVJmLzXOC4JB8xt7uYjHCwo/OJ bt/u3d8EAxeNYyf5B9y4lxx3eJ6lvyw1q/h0QD33CZ0mOcgwpCLfsuZpwGdVgSev 1f+Fh50AsWx5M1MbInt7QZBL4EHXvpZd2/pjvmCAFWv0GhbJFseu+nPAovtWQcLX rAU3funIub/uHWywJnhegiDZguHxsof0iJVv04S6KoTwGvrpRzh1IsZLDa1BGW8b UM8PwE01T0o6Rey0YGQMSAbkOfHUwPzFts5oLkb1Q8oznLwG5r4X+ZhFS/zeEvQH R/DG/+f7F+Y1qiHug0pYnCciIyxvU30zekjAjVmgaSdJBVotmWnnaFwC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWiiywpEl/drVSOA3R4U6BuvIAWMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAHemQCV Oc8X9yRKCCW1GmwvAExl/em9rBUlWfoY43sg+CM97vti+9kolJCCdioKh8l22WaX vrX+Ef94CPtUWLTInmdx4fYpMvlSHFb/TCIQ0HV5L2Vfv8rKJzeeHJkv/EP8TLy7 67p1bqAPSGx62q5EGmriYqotripn18apce+V42ABDMvMK5tC/Kw2B8TkTPErQWKr FAKvRb3GNMYr2+DFVpmmSWnrO1NrldxZCUpvDG6YGAX1Bo8wEdOS6FNetfhX4J5L AUwfq8IpENZwhTcR4NTPOPR5vBz3TnXqHdkVY/3vUTYezPZTN1FWoxGDXvGbZOBh C6vBvVmYt5SBFA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:27:42 2026 by rpki-client