$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: 8aslIheJg2jMGq4sjNXo1yqO/rRRlC9r2bmZOt0kgAU= Subject key identifier: 5D:AF:4A:C0:75:8F:B9:6F:10:48:1D:17:3D:D3:B6:D0:FE:83:5C:85 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019F8EA230A98B441BB4FF48E79121343AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0B41 Signing time: Thu 23 Jul 2026 11:00:21 +0000 Manifest this update: Thu 23 Jul 2026 11:00:21 +0000 Manifest next update: Fri 24 Jul 2026 11:00:21 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: 9Y2x88GjgyunIA7DPOFW/+z6xHn/zJsCBLiJUaJ0eB0=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:30:a9:8b:44:1b:b4:ff:48:e7:91:21:34:3a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jul 23 11:00:21 2026 GMT Not After : Jul 24 11:00:21 2026 GMT Subject: CN=5daf4ac0758fb96f10481d173dd3b6d0fe835c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:9b:63:dc:8c:b8:84:d9:66:1b:5f:73:9f: 95:0d:51:10:fb:d3:d9:3f:c0:f5:35:72:14:de:00: a2:db:0c:bd:ec:cc:48:bf:be:fd:f3:6c:b4:82:52: d0:9a:01:9a:e2:98:c8:4a:ee:5c:84:95:d7:7b:22: 26:80:d5:31:1b:17:77:8b:a5:5e:76:0d:a8:e9:01: 1b:ad:16:e8:8c:b3:94:3a:16:7a:7d:b3:bf:41:ea: 28:fd:8d:d7:11:41:d6:3e:8e:53:25:68:db:44:bb: ca:e0:d6:73:58:6e:c5:ee:35:5e:90:e3:20:f8:97: 10:ff:e1:51:81:2f:7f:b9:57:84:8c:d7:9f:80:f3: 7c:74:57:1b:35:18:36:c9:e4:ca:be:bb:73:c3:86: 95:89:e5:d9:a4:40:22:7d:c6:40:55:1a:a0:c5:29: f8:04:f5:70:0a:3a:ad:e2:2e:0d:bb:04:56:96:45: a9:cb:0d:65:a6:95:05:3e:d8:d8:31:29:43:e2:99: 67:e7:26:c5:38:bd:65:16:20:87:6d:f5:c9:4c:f7: 61:4f:05:ef:3c:c1:ad:8c:0d:21:d3:e7:c7:7c:d6: 83:7d:80:b9:f0:a7:9a:22:55:93:f6:04:87:30:5e: 3d:53:a6:91:1d:e9:20:bc:9e:19:2b:92:18:f6:75: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:4A:C0:75:8F:B9:6F:10:48:1D:17:3D:D3:B6:D0:FE:83:5C:85 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:9d:90:7f:b1:23:ac:8b:e3:94:68:45:a7:00:10:ec:3f: 7e:8e:b6:a7:dc:4c:6f:d0:5d:4a:17:f6:f6:04:12:4d:aa:21: c7:e0:73:b6:bf:5c:f5:97:d4:ee:ce:2a:c4:3e:8a:eb:dd:ad: ed:83:f6:27:a4:05:27:4f:96:db:59:1f:8c:53:d2:f5:28:62: 5a:87:0d:b2:82:0f:4c:a6:92:e4:aa:0c:bd:02:1a:90:bf:ed: 81:e0:34:2c:30:9b:a8:ef:15:b6:c2:de:0c:75:96:18:0a:8c: b6:79:0f:c1:a3:82:27:c9:a8:4d:fe:1c:2b:62:52:fb:b9:60: 9e:87:93:0b:99:99:ef:19:0c:cd:07:5d:98:40:1b:3e:b3:00: c0:90:38:82:3a:43:13:51:bb:e7:1b:94:f4:40:72:06:07:e0: ce:8a:18:db:91:05:c2:77:20:7c:d1:dc:cf:70:ce:fe:09:19: d2:50:23:b0:7d:05:c7:da:58:9f:5b:f4:44:7c:b1:3d:99:61: 52:d7:dc:fd:2b:bf:ca:9a:31:1d:40:34:a6:67:65:8b:57:91: 04:78:9b:ce:10:08:73:07:83:a3:f7:58:ee:59:7f:15:e9:30: ee:ee:5c:5b:0b:1d:b4:18:83:8a:bd:7f:18:64:5f:3f:f3:bc: 30:ae:fb:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OojCpi0QbtP9I55EhNDrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwNzIzMTEwMDIxWhcNMjYwNzI0MTEwMDIxWjAzMTEwLwYDVQQD Eyg1ZGFmNGFjMDc1OGZiOTZmMTA0ODFkMTczZGQzYjZkMGZlODM1Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXebY9yMuITZZhtfc5+VDVEQ+9PZ P8D1NXIU3gCi2wy97MxIv77982y0glLQmgGa4pjISu5chJXXeyImgNUxGxd3i6Ve dg2o6QEbrRbojLOUOhZ6fbO/Qeoo/Y3XEUHWPo5TJWjbRLvK4NZzWG7F7jVekOMg +JcQ/+FRgS9/uVeEjNefgPN8dFcbNRg2yeTKvrtzw4aVieXZpEAifcZAVRqgxSn4 BPVwCjqt4i4NuwRWlkWpyw1lppUFPtjYMSlD4pln5ybFOL1lFiCHbfXJTPdhTwXv PMGtjA0h0+fHfNaDfYC58KeaIlWT9gSHMF49U6aRHekgvJ4ZK5IY9nWLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2vSsB1j7lvEEgdFz3TttD+g1yFMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+udkH+x I6yL45RoRacAEOw/fo62p9xMb9BdShf29gQSTaohx+Bztr9c9ZfU7s4qxD6K692t 7YP2J6QFJ0+W21kfjFPS9ShiWocNsoIPTKaS5KoMvQIakL/tgeA0LDCbqO8VtsLe DHWWGAqMtnkPwaOCJ8moTf4cK2JS+7lgnoeTC5mZ7xkMzQddmEAbPrMAwJA4gjpD E1G75xuU9EByBgfgzooY25EFwncgfNHcz3DO/gkZ0lAjsH0Fx9pYn1v0RHyxPZlh Utfc/Su/ypoxHUA0pmdli1eRBHibzhAIcweDo/dY7ll/Fekw7u5cWwsdtBiDir1/ GGRfP/O8MK77Lw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:26 2026 by rpki-client