$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: jBW5iBGFCqFlpyZO+Ob2dqTQs1wfRKP5PG0ccShhoFk= Subject key identifier: 33:11:59:E1:D5:C7:3A:05:3E:BB:4E:95:F1:D2:D9:F9:F1:C2:88:3B Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019F905A3C30B8599204929C8564EB72397D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1614 Signing time: Thu 23 Jul 2026 19:01:00 +0000 Manifest this update: Thu 23 Jul 2026 19:01:00 +0000 Manifest next update: Fri 24 Jul 2026 19:01:00 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: /i/6T2OmvgX8IFSB2mocWaKz7ELnNk9chY0Bud54DLY=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:3c:30:b8:59:92:04:92:9c:85:64:eb:72:39:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jul 23 19:01:00 2026 GMT Not After : Jul 24 19:01:00 2026 GMT Subject: CN=331159e1d5c73a053ebb4e95f1d2d9f9f1c2883b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:fe:52:9c:11:54:5e:69:5e:97:87:ce:d3: 04:8f:23:e3:d9:f3:67:43:15:8a:e9:31:ce:60:9c: b6:24:c3:c5:7f:61:78:11:71:16:80:b3:e9:1b:3f: 8e:2e:ea:24:87:7a:80:b4:22:45:3a:8b:d3:cf:d1: 67:53:47:cf:a6:b2:39:96:a2:fc:2f:20:1b:b3:ee: 13:e4:c4:d8:02:17:61:9f:86:88:57:98:a2:00:dd: c7:76:c3:45:d4:82:1a:6a:7e:78:8d:d2:b3:55:60: e6:71:67:0f:ae:c4:25:cd:80:5e:bf:3d:0d:18:21: cc:59:46:06:c4:89:17:a1:42:55:24:89:8e:2f:94: 53:3b:83:91:00:6e:5c:2f:6f:c0:33:2e:f9:22:b4: 13:65:2a:26:96:de:aa:ad:82:ec:e0:a5:10:c0:dd: fa:f4:f9:c2:24:46:fe:26:8e:84:7d:fa:ee:3a:7c: f5:e1:b8:66:6d:f9:f7:a0:c6:ab:64:ac:ca:38:c7: ce:7b:1f:10:6a:8b:db:e8:6e:b9:29:ac:6e:71:08: 9d:ed:df:a3:9e:45:d7:78:bc:21:ae:ba:8c:74:4f: 4f:bb:d7:a9:0f:bf:9a:0d:29:82:42:4e:eb:63:8d: 6c:ba:91:56:29:14:8a:ef:71:6e:b9:5a:47:6e:f4: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:59:E1:D5:C7:3A:05:3E:BB:4E:95:F1:D2:D9:F9:F1:C2:88:3B X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:95:bd:d7:32:a4:03:7a:5c:2a:4d:b8:4e:5f:a2:0f:cb:d6: e9:e8:f8:e4:d9:bf:28:d7:af:e9:63:f4:1a:0c:f2:e8:e6:9e: 23:56:11:56:54:c5:61:12:fe:41:9a:0a:85:d5:7c:06:f4:71: 82:93:ea:0a:7c:2f:46:69:51:3b:16:bb:5a:8d:c6:c7:00:55: 74:05:79:ae:fe:fc:cb:e1:1e:af:07:cb:c0:86:47:2f:6e:6a: f7:6e:d3:83:8b:b1:5a:bf:20:8a:54:1b:ba:34:f7:f2:5f:55: 4a:45:46:fb:1e:53:e6:6d:5f:88:1c:56:da:40:24:62:a2:96: 09:90:9c:45:fe:e4:3e:45:a7:0e:03:59:ab:9d:eb:c6:5b:2b: fb:14:54:8e:38:58:32:0e:7c:22:66:a6:46:f2:05:97:e7:2c: da:ed:0a:ca:c0:a9:b6:c7:89:9d:00:60:5d:e3:6f:23:f1:bf: 14:5e:e8:2f:97:5c:9a:d3:68:af:2c:93:92:42:66:f2:3c:f9: 39:09:97:98:40:e7:59:8c:12:dd:48:14:ad:b1:f2:d8:5f:dc: 9f:36:83:0e:1a:9a:2b:a6:35:52:ff:2b:b5:06:90:e3:4b:71: ca:b2:33:47:a6:1e:67:63:9d:45:0f:5d:b0:d3:dd:5d:d1:69: 72:e0:0d:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWjwwuFmSBJKchWTrcjl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwNzIzMTkwMTAwWhcNMjYwNzI0MTkwMTAwWjAzMTEwLwYDVQQD EygzMzExNTllMWQ1YzczYTA1M2ViYjRlOTVmMWQyZDlmOWYxYzI4ODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07/+UpwRVF5pXpeHztMEjyPj2fNn QxWK6THOYJy2JMPFf2F4EXEWgLPpGz+OLuokh3qAtCJFOovTz9FnU0fPprI5lqL8 LyAbs+4T5MTYAhdhn4aIV5iiAN3HdsNF1IIaan54jdKzVWDmcWcPrsQlzYBevz0N GCHMWUYGxIkXoUJVJImOL5RTO4ORAG5cL2/AMy75IrQTZSomlt6qrYLs4KUQwN36 9PnCJEb+Jo6EffruOnz14bhmbfn3oMarZKzKOMfOex8Qaovb6G65KaxucQid7d+j nkXXeLwhrrqMdE9Pu9epD7+aDSmCQk7rY41supFWKRSK73FuuVpHbvT9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMRWeHVxzoFPrtOlfHS2fnxwog7MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZW91zKk A3pcKk24Tl+iD8vW6ej45Nm/KNev6WP0Ggzy6OaeI1YRVlTFYRL+QZoKhdV8BvRx gpPqCnwvRmlROxa7Wo3GxwBVdAV5rv78y+EerwfLwIZHL25q927Tg4uxWr8gilQb ujT38l9VSkVG+x5T5m1fiBxW2kAkYqKWCZCcRf7kPkWnDgNZq53rxlsr+xRUjjhY Mg58ImamRvIFl+cs2u0KysCptseJnQBgXeNvI/G/FF7oL5dcmtNoryyTkkJm8jz5 OQmXmEDnWYwS3UgUrbHy2F/cnzaDDhqaK6Y1Uv8rtQaQ40txyrIzR6YeZ2OdRQ9d sNPdXdFpcuANTQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:37 2026 by rpki-client