$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: 9ofQirb8lkZDE7+A2uY5IYnmt8AuHAXujN6LDL3Au5M= Subject key identifier: 06:5D:90:A9:98:A9:AC:DB:50:E8:F5:BD:84:DB:83:54:62:0F:C2:21 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019F8F7E09F1459BF3129A46D8FADCC5B24B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 1791 Signing time: Thu 23 Jul 2026 15:00:29 +0000 Manifest this update: Thu 23 Jul 2026 15:00:29 +0000 Manifest next update: Fri 24 Jul 2026 15:00:29 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: Eb3oKhcmyyKI6xOqSTciLCMSRTRZBVpV+qL4fMoD3DA=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:09:f1:45:9b:f3:12:9a:46:d8:fa:dc:c5:b2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jul 23 15:00:29 2026 GMT Not After : Jul 24 15:00:29 2026 GMT Subject: CN=065d90a998a9acdb50e8f5bd84db8354620fc221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:c5:90:a0:2d:5b:90:98:68:d5:fc:16:c7: 0a:fc:a9:42:34:64:0d:55:ae:5c:a7:2b:2e:36:ef: 83:7c:5c:9d:5b:89:fc:a6:f8:98:75:54:63:d5:e6: 5e:54:37:15:9e:77:de:3d:92:62:ad:57:5b:62:7a: bc:35:74:fc:f8:53:4d:cf:68:b7:90:73:92:55:e7: 6f:80:65:c3:fe:a1:5b:a4:19:b2:ae:9f:d9:8d:45: 38:c4:f4:32:50:5a:13:34:a5:d3:5e:41:96:ec:99: 1f:5e:00:8f:44:de:66:86:c7:de:ef:16:59:4e:96: 9f:26:84:6c:5f:eb:42:54:3a:87:ca:6f:9c:02:6b: 58:e9:a1:cc:0b:66:bc:ba:b5:33:fa:61:9c:29:23: 7d:05:68:1a:b8:d1:67:10:d5:ed:85:a5:e9:f9:10: 2a:0b:18:d4:5a:79:a3:c9:2a:1d:a5:d9:e4:70:78: bc:a6:f2:b8:c9:3b:ca:f5:09:64:e6:37:a6:39:47: 2b:55:e1:62:19:0b:d2:2a:8b:c4:c9:3c:31:00:73: 6e:e5:bd:c9:5c:8e:55:66:15:48:5e:9d:6c:58:97: f3:30:b1:2b:a7:ed:89:7f:57:64:df:56:9f:7b:9b: 2e:bb:13:da:46:07:02:49:42:38:f2:7f:b9:93:d7: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:90:A9:98:A9:AC:DB:50:E8:F5:BD:84:DB:83:54:62:0F:C2:21 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d0:b4:48:d8:e8:d3:e7:4a:6f:a7:3b:62:cd:18:89:9d:e3: 89:82:7e:44:c9:31:64:ff:75:65:8d:b2:42:ef:5d:b4:9d:83: 6c:6a:02:c8:ee:eb:1d:c4:94:29:b6:73:35:37:19:64:8e:18: 42:1b:af:17:b9:47:44:3e:f0:91:04:a8:c1:f4:89:44:20:8e: 4f:82:ed:79:79:f2:02:35:40:d8:f2:c5:97:c2:15:69:8f:27: ff:60:ae:26:4c:2c:3b:c5:58:9b:f2:cd:f8:0d:b3:6b:ee:75: 8e:e9:83:1e:c7:d7:51:8a:08:8e:e8:c6:6f:6d:51:0b:18:ca: 25:58:91:73:54:cc:a8:03:6c:76:13:3a:d1:e0:2c:44:76:ea: 63:61:ad:7a:b1:06:c1:01:81:a0:42:af:f2:08:d7:32:4a:00: e5:cb:d7:26:21:36:f7:3d:72:ca:e1:dd:21:91:a9:94:09:64: 44:4a:2d:46:bc:fe:b6:e4:93:5e:ab:15:28:57:ae:e4:89:3a: 14:a3:4a:16:a8:26:36:68:f5:e5:34:cd:51:7a:86:80:b1:68: f1:89:39:99:52:c0:53:a2:72:89:d8:7d:c2:3a:17:e4:4e:dd: 43:a4:07:20:94:26:4b:45:aa:36:75:fc:96:40:fb:17:e4:c9: d0:85:84:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PfgnxRZvzEppG2PrcxbJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNzIzMTUwMDI5WhcNMjYwNzI0MTUwMDI5WjAzMTEwLwYDVQQD EygwNjVkOTBhOTk4YTlhY2RiNTBlOGY1YmQ4NGRiODM1NDYyMGZjMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7FkKAtW5CYaNX8FscK/KlCNGQN Va5cpysuNu+DfFydW4n8pviYdVRj1eZeVDcVnnfePZJirVdbYnq8NXT8+FNNz2i3 kHOSVedvgGXD/qFbpBmyrp/ZjUU4xPQyUFoTNKXTXkGW7JkfXgCPRN5mhsfe7xZZ TpafJoRsX+tCVDqHym+cAmtY6aHMC2a8urUz+mGcKSN9BWgauNFnENXthaXp+RAq CxjUWnmjySodpdnkcHi8pvK4yTvK9Qlk5jemOUcrVeFiGQvSKovEyTwxAHNu5b3J XI5VZhVIXp1sWJfzMLErp+2Jf1dk31afe5suuxPaRgcCSUI48n+5k9eB9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZdkKmYqazbUOj1vYTbg1RiD8IhMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9C0SNjo 0+dKb6c7Ys0YiZ3jiYJ+RMkxZP91ZY2yQu9dtJ2DbGoCyO7rHcSUKbZzNTcZZI4Y QhuvF7lHRD7wkQSowfSJRCCOT4LteXnyAjVA2PLFl8IVaY8n/2CuJkwsO8VYm/LN +A2za+51jumDHsfXUYoIjujGb21RCxjKJViRc1TMqANsdhM60eAsRHbqY2GterEG wQGBoEKv8gjXMkoA5cvXJiE29z1yyuHdIZGplAlkREotRrz+tuSTXqsVKFeu5Ik6 FKNKFqgmNmj15TTNUXqGgLFo8Yk5mVLAU6Jyidh9wjoX5E7dQ6QHIJQmS0WqNnX8 lkD7F+TJ0IWE3Q== -----END CERTIFICATE-----Generated at Thu Jul 23 20:24:02 2026 by rpki-client