$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: DpoQHqfCX62x6RveHmPMnZFgEEDjPXHRQg/y5eHf/R8= Subject key identifier: 01:70:5F:D8:13:C2:70:B8:E0:9A:60:61:00:43:46:6B:13:0F:27:5C Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019F8FECC3184BB36A1250DDE88A6048C322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1869 Signing time: Thu 23 Jul 2026 17:01:25 +0000 Manifest this update: Thu 23 Jul 2026 17:01:25 +0000 Manifest next update: Fri 24 Jul 2026 17:01:25 +0000 Files and hashes: 1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=) 2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: /3SuLlAGihPp1XCckjr0wYYAxcSCdkwDBL1bt1mujZI=) 5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 6: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:c3:18:4b:b3:6a:12:50:dd:e8:8a:60:48:c3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jul 23 17:01:25 2026 GMT Not After : Jul 24 17:01:25 2026 GMT Subject: CN=01705fd813c270b8e09a60610043466b130f275c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:23:27:2a:a8:d2:2a:69:ea:eb:a7:37:7d: cf:d2:69:31:1a:e3:76:21:11:2f:81:ac:6e:61:8d: 39:02:31:3d:10:dd:e4:59:ac:a9:09:93:be:95:d7: 9c:23:ce:bf:e3:08:4b:69:c1:ef:f6:3a:c4:8d:c5: 05:5d:d4:1a:28:a9:f1:b4:17:53:cb:b5:f0:78:d4: 1a:bf:9e:e8:ec:ac:c5:2c:3a:0a:d9:72:fc:2e:56: c9:e1:fd:ae:00:79:95:68:de:bd:4a:9b:81:bd:98: cd:f2:8f:0a:1d:c7:0c:bc:3b:8f:41:f5:d1:7d:42: b6:ba:72:5f:94:5a:b2:72:d5:61:6e:c7:8d:6d:9f: ee:89:3b:24:75:29:e7:fa:5d:a3:c2:7f:5c:dc:ca: 03:1d:8a:ce:97:6c:36:9f:a2:32:6b:79:53:5e:44: 92:91:1b:05:fa:4d:58:4b:48:35:7f:ed:0b:c9:5a: bd:b5:18:2a:56:ad:ee:a3:66:21:10:b3:7b:7b:63: 23:61:e1:87:b9:36:b5:57:69:35:8f:5a:31:5b:e1: 4c:96:e5:b9:1c:cd:9e:c6:60:ed:d0:67:53:21:71: 3e:68:f3:0e:5d:aa:d5:6e:60:cf:36:cc:38:22:1e: 79:58:f3:77:94:bf:c1:32:e9:d1:e8:2c:7f:5f:9f: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:70:5F:D8:13:C2:70:B8:E0:9A:60:61:00:43:46:6B:13:0F:27:5C X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:30:db:89:22:93:82:53:70:1a:1a:f5:58:20:5d:a8:98:fb: cd:1b:25:38:dc:e6:30:a2:da:79:44:44:37:d2:a5:41:f0:94: c1:bf:93:24:a1:a4:70:aa:9b:e2:77:2b:dc:31:a2:49:a4:81: b3:9e:e4:05:ae:cf:47:63:ba:1e:f4:2e:fc:6e:df:d1:66:f2: ca:49:d6:00:ba:1e:bd:58:9b:5b:67:8f:20:98:7b:fe:1d:cf: e3:72:9e:65:eb:22:49:25:bf:d7:e1:28:1a:01:7c:c1:98:db: 1f:13:08:35:5d:50:54:d4:15:8a:32:e1:83:f1:4a:b6:fc:20: c5:46:b1:a4:10:ba:5f:72:f2:9f:04:de:a6:9d:5f:a6:88:80: 34:b5:e3:92:ed:e4:99:b2:7c:85:1c:f8:9a:7b:d6:ef:3d:ec: 24:c9:22:b5:55:95:cf:bd:f1:ae:0f:9a:36:df:c9:d8:0d:a0: 28:f5:cd:63:ef:6b:77:90:24:f7:38:4c:62:60:9e:09:93:3b: 31:e0:24:17:c4:e4:66:ea:49:a7:3f:61:a5:bb:10:7b:07:65: f7:d9:cf:80:7f:7c:25:4b:32:f4:cb:13:67:99:76:d0:36:53: a1:a1:8e:a7:76:07:5e:7a:3e:5d:91:8f:f3:03:37:f9:5b:4f: 84:a7:e1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7MMYS7NqElDd6IpgSMMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwNzIzMTcwMTI1WhcNMjYwNzI0MTcwMTI1WjAzMTEwLwYDVQQD EygwMTcwNWZkODEzYzI3MGI4ZTA5YTYwNjEwMDQzNDY2YjEzMGYyNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwkjJyqo0ipp6uunN33P0mkxGuN2 IREvgaxuYY05AjE9EN3kWaypCZO+ldecI86/4whLacHv9jrEjcUFXdQaKKnxtBdT y7XweNQav57o7KzFLDoK2XL8LlbJ4f2uAHmVaN69SpuBvZjN8o8KHccMvDuPQfXR fUK2unJflFqyctVhbseNbZ/uiTskdSnn+l2jwn9c3MoDHYrOl2w2n6Iya3lTXkSS kRsF+k1YS0g1f+0LyVq9tRgqVq3uo2YhELN7e2MjYeGHuTa1V2k1j1oxW+FMluW5 HM2exmDt0GdTIXE+aPMOXarVbmDPNsw4Ih55WPN3lL/BMunR6Cx/X59D6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFwX9gTwnC44JpgYQBDRmsTDydcMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzDbiSKT glNwGhr1WCBdqJj7zRslONzmMKLaeUREN9KlQfCUwb+TJKGkcKqb4ncr3DGiSaSB s57kBa7PR2O6HvQu/G7f0WbyyknWALoevVibW2ePIJh7/h3P43KeZesiSSW/1+Eo GgF8wZjbHxMINV1QVNQVijLhg/FKtvwgxUaxpBC6X3LynwTepp1fpoiANLXjku3k mbJ8hRz4mnvW7z3sJMkitVWVz73xrg+aNt/J2A2gKPXNY+9rd5Ak9zhMYmCeCZM7 MeAkF8TkZupJpz9hpbsQewdl99nPgH98JUsy9MsTZ5l20DZToaGOp3YHXno+XZGP 8wM3+VtPhKfh+A== -----END CERTIFICATE-----Generated at Fri Jul 24 01:45:19 2026 by rpki-client