$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: IiK5oHGdE12xbuSr+rPNgNY9xcPG9zGbRp7Vtg8SogM= Subject key identifier: 65:1B:91:DC:FD:A5:9A:EC:42:BD:13:1C:D2:9E:E9:EB:1E:1C:7A:A6 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019F921177F7BBBEA095D03A5E9EA1E5A843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 15C9 Signing time: Fri 24 Jul 2026 03:00:46 +0000 Manifest this update: Fri 24 Jul 2026 03:00:46 +0000 Manifest next update: Sat 25 Jul 2026 03:00:46 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: opvtVGG1rW5Ekg6C7J+QhtdtbGFeT+ERt4MV6wWFGko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:11:77:f7:bb:be:a0:95:d0:3a:5e:9e:a1:e5:a8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jul 24 03:00:46 2026 GMT Not After : Jul 25 03:00:46 2026 GMT Subject: CN=651b91dcfda59aec42bd131cd29ee9eb1e1c7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e6:6a:bf:47:c4:c9:eb:94:dd:05:08:28:c3: 78:fd:72:09:b6:79:5b:22:64:6e:b8:c0:79:71:78: b5:c9:b7:b8:19:76:ea:82:9a:b7:e6:38:43:15:1e: 7f:1e:1c:da:4b:81:1d:9e:be:6d:41:08:f1:5e:0b: fe:39:18:b3:39:1a:e4:a1:fc:fa:6f:30:cc:5a:be: 50:fe:74:b5:4b:67:d5:f3:e4:46:13:d9:d6:c6:2d: b2:fd:bd:3d:70:df:fe:5b:e6:58:72:51:4b:44:11: d3:07:d5:ca:ef:58:08:33:69:42:14:e3:cb:74:4e: 4c:98:43:8f:f4:6a:2d:bf:65:7b:b4:a4:fc:ec:5b: 70:39:4e:2f:8a:d8:6b:8c:3e:c6:3d:71:08:ad:81: d0:96:ff:34:4d:bb:13:51:7e:1a:07:00:4a:41:e1: 37:23:28:6b:47:37:2b:c0:09:87:99:52:b1:3c:1b: 46:7d:08:7d:42:2d:b7:d0:60:cd:51:de:c8:e2:18: f1:0b:8c:08:54:40:1d:48:bc:15:61:58:3d:a4:5f: 25:6a:aa:2b:d3:ce:cf:ae:8d:e7:5b:73:85:ca:53: 75:fc:83:fc:15:52:4d:b9:15:c8:89:6c:3f:0b:16: 03:47:a0:48:cd:ee:54:6b:19:75:52:f4:43:15:e0: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:91:DC:FD:A5:9A:EC:42:BD:13:1C:D2:9E:E9:EB:1E:1C:7A:A6 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:30:91:20:67:47:e7:90:ab:bd:45:5f:e5:c7:2f:3d:59:27: e2:b2:9b:f2:55:18:17:29:8f:d2:11:64:8c:56:ad:b1:7b:56: 15:56:b4:d9:32:35:77:68:9e:a7:e7:ac:2e:73:5e:e4:9b:5c: f7:a1:5d:77:23:15:c9:d9:ce:34:50:a7:8a:d0:d3:d8:e7:1c: b5:14:56:3f:ea:0a:82:41:dd:81:a6:db:b9:aa:42:c7:da:19: 10:7a:24:0c:11:a4:45:eb:87:7c:2a:a3:d1:01:07:1e:44:dd: a1:be:1f:e6:ac:90:62:c5:43:7e:1a:2d:d6:8f:4f:a7:8a:78: 29:be:62:fc:57:2f:c7:4c:55:51:c0:d1:47:3b:d4:4b:39:1b: 77:14:9e:4f:bc:51:85:8f:0d:97:a3:2c:de:e3:f3:5c:58:1b: 47:ed:a6:9d:82:a1:f8:4a:a9:d1:af:13:11:a8:f5:14:56:3f: 66:05:77:20:ea:b3:46:79:99:7b:b2:4f:5d:59:bf:16:15:4c: 40:1a:8f:fd:4d:5b:bf:8c:c0:26:9a:d1:b7:cc:46:ca:ff:5e: ef:01:1d:6d:b3:b7:3f:7a:cf:d5:b6:83:a3:09:2e:51:f3:63: aa:c8:2e:89:19:79:45:8f:25:30:4a:0e:80:28:ff:22:f8:40: f6:b8:ca:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SEXf3u76gldA6Xp6h5ahDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNzI0MDMwMDQ2WhcNMjYwNzI1MDMwMDQ2WjAzMTEwLwYDVQQD Eyg2NTFiOTFkY2ZkYTU5YWVjNDJiZDEzMWNkMjllZTllYjFlMWM3YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OZqv0fEyeuU3QUIKMN4/XIJtnlb ImRuuMB5cXi1ybe4GXbqgpq35jhDFR5/HhzaS4Ednr5tQQjxXgv+ORizORrkofz6 bzDMWr5Q/nS1S2fV8+RGE9nWxi2y/b09cN/+W+ZYclFLRBHTB9XK71gIM2lCFOPL dE5MmEOP9Gotv2V7tKT87FtwOU4vithrjD7GPXEIrYHQlv80TbsTUX4aBwBKQeE3 IyhrRzcrwAmHmVKxPBtGfQh9Qi230GDNUd7I4hjxC4wIVEAdSLwVYVg9pF8laqor 087Pro3nW3OFylN1/IP8FVJNuRXIiWw/CxYDR6BIze5Uaxl1UvRDFeCYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUbkdz9pZrsQr0THNKe6eseHHqmMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDCRIGdH 55CrvUVf5ccvPVkn4rKb8lUYFymP0hFkjFatsXtWFVa02TI1d2iep+esLnNe5Jtc 96FddyMVydnONFCnitDT2OcctRRWP+oKgkHdgabbuapCx9oZEHokDBGkReuHfCqj 0QEHHkTdob4f5qyQYsVDfhot1o9Pp4p4Kb5i/Fcvx0xVUcDRRzvUSzkbdxSeT7xR hY8Nl6Ms3uPzXFgbR+2mnYKh+Eqp0a8TEaj1FFY/ZgV3IOqzRnmZe7JPXVm/FhVM QBqP/U1bv4zAJprRt8xGyv9e7wEdbbO3P3rP1baDowkuUfNjqsguiRl5RY8lMEoO gCj/IvhA9rjK1Q== -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:59 2026 by rpki-client