$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: v9il0Ctzop46WCtEFYdj6KdMccLpGr49We6lseUI9XU= Subject key identifier: 79:98:3A:8C:DC:94:0E:7E:54:09:ED:D5:6F:F5:97:A4:3B:51:B5:89 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019F92ED9B39B47FDAF884CA01792D163162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 19DD Signing time: Fri 24 Jul 2026 07:01:12 +0000 Manifest this update: Fri 24 Jul 2026 07:01:12 +0000 Manifest next update: Sat 25 Jul 2026 07:01:12 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: AZ+WMAaK0oglR92GXs8TQxdhuk4Bmx/xdWYSjYWxrNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:ed:9b:39:b4:7f:da:f8:84:ca:01:79:2d:16:31:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jul 24 07:01:12 2026 GMT Not After : Jul 25 07:01:12 2026 GMT Subject: CN=79983a8cdc940e7e5409edd56ff597a43b51b589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d5:f4:41:e5:72:87:c5:06:12:9a:bf:a8:ae: a2:a5:74:33:ab:53:1d:de:2d:21:41:88:b8:2d:08: 13:2a:64:f4:e1:bf:02:86:d0:3b:55:6d:cf:a8:89: e9:79:ea:67:f0:27:2b:e1:0a:c8:52:45:ba:8a:6a: 03:72:64:f6:d6:b0:24:d3:15:70:37:4d:a5:a8:2e: 44:d5:af:19:ee:8f:05:76:2e:d3:c2:66:dc:19:af: 3b:d7:4d:2e:b7:36:28:51:c4:cb:ea:14:a2:1b:c2: b2:12:1f:12:98:fd:f3:65:40:5f:39:5d:ca:6d:c9: f1:44:c7:92:d8:4e:34:c2:35:5e:10:c7:3a:c4:a4: 6e:c5:34:96:27:c2:26:bd:0d:63:0d:95:58:74:3d: cd:4c:b2:4c:ff:7c:b5:a5:8c:4b:ca:90:b7:c6:b8: f3:93:1b:27:7a:be:50:a1:46:18:c4:64:a9:0a:d7: c3:f4:42:a5:d4:f6:1a:13:79:49:58:1b:6e:ed:79: 16:23:00:76:3c:93:a2:46:bd:49:13:3c:c0:e2:46: 75:32:05:96:0f:6e:c1:33:2a:6f:fa:13:e2:ba:d1: ba:01:e0:6f:4f:50:16:be:f0:4b:ab:11:9d:53:f4: c2:58:40:9c:27:d3:76:56:e1:8e:e2:14:db:a4:b2: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:98:3A:8C:DC:94:0E:7E:54:09:ED:D5:6F:F5:97:A4:3B:51:B5:89 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c3:4b:3e:c3:ec:16:68:1b:fa:fd:ab:e2:71:2e:e9:3d:81: 7c:72:78:65:43:f0:2b:9f:2b:12:18:f7:cb:d4:c1:ad:0e:b0: 1d:aa:0b:dd:88:6b:eb:58:4a:3e:ea:48:5b:51:dc:77:64:89: 4e:5f:4a:78:b0:01:7c:ea:1d:9a:39:da:f4:86:38:dd:d9:e8: 80:c7:07:44:df:27:a3:a0:97:e4:86:d4:2d:84:62:a7:53:85: e5:0c:bf:2b:24:1a:82:cc:b7:f9:22:f5:a6:56:94:f2:57:c4: 8c:7f:3a:9f:49:ca:f4:5d:b6:59:0e:68:ea:e0:a5:ae:44:e1: 53:00:25:8e:06:0d:c8:83:f5:94:51:79:7c:7e:a3:fd:59:94: be:57:4e:08:e5:19:80:2b:ed:7a:b5:55:06:27:33:07:b4:80: 93:d3:2c:94:5d:4b:29:89:a5:4d:94:d9:1e:8a:4e:fd:b7:9c: 45:be:6a:f2:37:ec:8d:1f:60:24:31:da:39:c1:30:7f:42:df: 68:62:61:f1:18:62:1e:26:43:d8:e1:13:30:80:da:b9:5f:56: 43:02:13:0f:2f:35:6e:be:b8:b3:a2:11:4d:5c:f2:4d:74:1d: 9f:f3:f8:30:03:a5:fc:8b:9a:5e:5f:47:21:00:d7:67:28:43: 1e:fd:b0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+S7Zs5tH/a+ITKAXktFjFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwNzI0MDcwMTEyWhcNMjYwNzI1MDcwMTEyWjAzMTEwLwYDVQQD Eyg3OTk4M2E4Y2RjOTQwZTdlNTQwOWVkZDU2ZmY1OTdhNDNiNTFiNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9X0QeVyh8UGEpq/qK6ipXQzq1Md 3i0hQYi4LQgTKmT04b8ChtA7VW3PqInpeepn8Ccr4QrIUkW6imoDcmT21rAk0xVw N02lqC5E1a8Z7o8Fdi7TwmbcGa87100utzYoUcTL6hSiG8KyEh8SmP3zZUBfOV3K bcnxRMeS2E40wjVeEMc6xKRuxTSWJ8ImvQ1jDZVYdD3NTLJM/3y1pYxLypC3xrjz kxsner5QoUYYxGSpCtfD9EKl1PYaE3lJWBtu7XkWIwB2PJOiRr1JEzzA4kZ1MgWW D27BMypv+hPiutG6AeBvT1AWvvBLqxGdU/TCWECcJ9N2VuGO4hTbpLLJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmYOozclA5+VAnt1W/1l6Q7UbWJMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcNLPsPs Fmgb+v2r4nEu6T2BfHJ4ZUPwK58rEhj3y9TBrQ6wHaoL3Yhr61hKPupIW1Hcd2SJ Tl9KeLABfOodmjna9IY43dnogMcHRN8no6CX5IbULYRip1OF5Qy/KyQagsy3+SL1 plaU8lfEjH86n0nK9F22WQ5o6uClrkThUwAljgYNyIP1lFF5fH6j/VmUvldOCOUZ gCvterVVBiczB7SAk9MslF1LKYmlTZTZHopO/becRb5q8jfsjR9gJDHaOcEwf0Lf aGJh8RhiHiZD2OETMIDauV9WQwITDy81br64s6IRTVzyTXQdn/P4MAOl/IuaXl9H IQDXZyhDHv2waw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:52:24 2026 by rpki-client