$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: buT299eCldCAlWCY7uGNauGrd6R20Mke2iTdXMHOUSw= Subject key identifier: DF:1E:3C:08:F9:0B:56:27:3B:E7:FD:FE:98:96:77:AC:F7:28:5B:98 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019F9090D31CD9D6B87BE0A0BE6A67EC4BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 14C6 Signing time: Thu 23 Jul 2026 20:00:38 +0000 Manifest this update: Thu 23 Jul 2026 20:00:38 +0000 Manifest next update: Fri 24 Jul 2026 20:00:38 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: lmeVaiFcO7oe6OWqv7FsFtGdyMQH+6XeQcdxyn4Y7fo=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 8: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 9: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) 18: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (hash: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:d3:1c:d9:d6:b8:7b:e0:a0:be:6a:67:ec:4b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jul 23 20:00:38 2026 GMT Not After : Jul 24 20:00:38 2026 GMT Subject: CN=df1e3c08f90b56273be7fdfe989677acf7285b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:d4:cf:43:1d:f9:b2:d3:e5:67:98:b2:11: 5d:89:ce:50:ef:ed:e9:51:52:90:eb:d0:07:33:69: fe:14:30:fc:03:56:21:44:98:73:07:52:79:32:4b: 55:2b:24:ad:6e:59:84:9c:5f:46:87:f4:43:f2:41: 3e:5c:b2:e0:2e:c4:56:8a:14:67:a5:f4:4e:b7:7f: 4a:b7:c7:fe:23:12:35:d5:33:e1:36:5c:68:04:fb: 5a:9a:92:2b:f0:97:48:cd:f6:32:a5:bb:65:d1:f3: 77:e9:a9:4e:18:d6:95:c6:40:39:8a:9f:7c:87:9a: c0:fc:55:07:ef:55:a3:db:01:58:b4:b7:2f:99:5f: 13:30:d8:50:09:b9:ad:d3:c5:e5:5e:51:2c:dd:af: 09:3e:9f:b0:d3:e7:8d:d5:79:6e:27:c3:25:9f:58: f8:20:c7:42:dc:41:62:40:14:52:e4:4b:a4:14:e6: 46:57:ab:82:4a:e5:2a:69:da:a0:11:71:fa:dc:44: 4a:24:93:ca:3d:4a:c4:89:2c:1b:bc:ad:a3:52:dd: a6:e0:81:fc:09:f9:4d:71:74:1a:e9:93:e7:18:b0: 8f:4c:c6:56:c6:c4:fe:c0:5e:01:cd:17:2f:83:51: 74:65:69:c5:38:be:c6:ec:fc:63:45:21:05:7e:b9: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1E:3C:08:F9:0B:56:27:3B:E7:FD:FE:98:96:77:AC:F7:28:5B:98 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7e:02:98:38:00:6d:fd:aa:19:33:8d:ad:55:a2:40:cc:ec: 57:50:1d:0e:a1:22:34:0c:fb:9b:fd:77:90:95:26:21:14:79: 86:9e:31:83:97:b2:7d:46:8e:02:bc:1d:72:2f:cb:fe:c5:c0: de:8f:34:83:80:f4:c5:36:ae:db:ee:23:1c:e0:bc:01:1e:39: ce:f8:bb:2a:b8:54:50:36:c6:82:f6:5e:ad:07:85:ee:f9:d1: 1f:c9:89:26:e2:1f:1b:79:37:18:c4:4c:fa:34:e5:d2:28:8b: f7:5b:31:9b:f1:80:80:35:2a:5c:b4:6b:2e:b7:c7:d8:ee:61: 79:fe:0e:9d:00:3c:63:e8:0c:53:8f:bd:ef:29:60:50:9b:a0: 87:73:73:41:6d:bd:a9:5e:8e:e2:32:44:11:4d:d2:8b:51:79: 96:cb:1d:22:dd:91:f2:3b:db:e3:99:29:88:e9:6a:02:16:6a: fd:38:b4:a8:a9:37:0b:49:10:d3:c9:ce:e3:9f:00:aa:a8:4b: c0:6c:a8:76:f3:2f:2d:5a:35:63:03:c2:36:0a:f1:61:88:db: 04:cd:fb:89:6f:17:2b:0f:c7:02:21:df:50:77:c2:30:56:99: 79:fe:03:c8:e2:46:e2:3b:4d:01:61:3d:e9:b2:7b:b0:d5:c7: 42:40:e0:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkNMc2da4e+Cgvmpn7Ev8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNzIzMjAwMDM4WhcNMjYwNzI0MjAwMDM4WjAzMTEwLwYDVQQD EyhkZjFlM2MwOGY5MGI1NjI3M2JlN2ZkZmU5ODk2NzdhY2Y3Mjg1Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw7Uz0Md+bLT5WeYshFdic5Q7+3p UVKQ69AHM2n+FDD8A1YhRJhzB1J5MktVKyStblmEnF9Gh/RD8kE+XLLgLsRWihRn pfROt39Kt8f+IxI11TPhNlxoBPtampIr8JdIzfYypbtl0fN36alOGNaVxkA5ip98 h5rA/FUH71Wj2wFYtLcvmV8TMNhQCbmt08XlXlEs3a8JPp+w0+eN1XluJ8Mln1j4 IMdC3EFiQBRS5EukFOZGV6uCSuUqadqgEXH63ERKJJPKPUrEiSwbvK2jUt2m4IH8 CflNcXQa6ZPnGLCPTMZWxsT+wF4BzRcvg1F0ZWnFOL7G7PxjRSEFfrkmmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8ePAj5C1YnO+f9/piWd6z3KFuYMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyH4CmDgA bf2qGTONrVWiQMzsV1AdDqEiNAz7m/13kJUmIRR5hp4xg5eyfUaOArwdci/L/sXA 3o80g4D0xTau2+4jHOC8AR45zvi7KrhUUDbGgvZerQeF7vnRH8mJJuIfG3k3GMRM +jTl0iiL91sxm/GAgDUqXLRrLrfH2O5hef4OnQA8Y+gMU4+97ylgUJugh3NzQW29 qV6O4jJEEU3Si1F5lssdIt2R8jvb45kpiOlqAhZq/Ti0qKk3C0kQ08nO458AqqhL wGyodvMvLVo1YwPCNgrxYYjbBM37iW8XKw/HAiHfUHfCMFaZef4DyOJG4jtNAWE9 6bJ7sNXHQkDgXg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:25 2026 by rpki-client