$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: ONbP8n7ExaqaLVPem7MEJ839NsvvrKHdQOfH0VuwPe8= Subject key identifier: EB:DB:E0:9D:C3:B3:87:A3:A5:E4:14:C4:40:B4:3F:6A:62:B8:D6:4B Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019F909086C65A954806D444D58555ABE7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 19E8 Signing time: Thu 23 Jul 2026 20:00:18 +0000 Manifest this update: Thu 23 Jul 2026 20:00:18 +0000 Manifest next update: Fri 24 Jul 2026 20:00:18 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: b7zqNEj7lgEM7VPhz1jfvt5beTdeL1GpfJ3LS16Calo=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:86:c6:5a:95:48:06:d4:44:d5:85:55:ab:e7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jul 23 20:00:18 2026 GMT Not After : Jul 24 20:00:18 2026 GMT Subject: CN=ebdbe09dc3b387a3a5e414c440b43f6a62b8d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:e4:3b:24:1e:a7:20:3a:08:50:32:43:d5: b9:38:09:ea:fb:51:aa:0c:74:f4:0f:eb:c8:31:da: 82:b1:ac:20:b4:fc:4b:9a:95:59:d4:87:4f:3c:fb: b9:d8:f1:45:91:b5:c1:04:26:d5:77:96:db:33:40: 5a:8e:63:af:c5:b9:fd:b4:f1:e0:f1:86:bb:76:d7: a1:7a:7d:38:8c:f6:6f:e5:7d:43:b8:ec:3c:a4:6a: a4:ec:96:6a:b3:08:e7:00:6f:c8:2e:55:46:7f:d3: 26:42:11:15:09:35:68:d4:75:a6:61:07:76:bb:5c: 74:28:51:d7:87:e0:b2:41:b7:a8:46:05:ae:40:0c: 07:d1:26:43:5b:87:93:53:5d:bb:5e:8c:cd:37:e2: 47:15:57:b0:4d:fb:07:5a:c1:f9:7b:72:25:9f:69: c2:37:65:2c:b8:fd:fb:d1:65:d6:d9:07:bb:96:ba: 67:bb:0d:b8:d5:d4:28:3d:62:8c:92:a5:d3:83:8d: 89:de:20:81:b4:7c:f8:b5:8f:61:09:c7:22:da:6d: 3c:49:cb:a0:5f:d8:c5:84:32:f7:ab:71:b6:7c:7b: 57:b8:26:34:dc:db:19:d7:4f:21:ee:e1:33:11:c5: 7f:13:19:b6:e5:70:85:10:22:cc:9d:85:8d:bb:76: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:E0:9D:C3:B3:87:A3:A5:E4:14:C4:40:B4:3F:6A:62:B8:D6:4B X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:51:14:fd:04:7a:24:a3:65:5f:b4:3c:25:dc:3c:62:a8:cf: 5e:e6:6c:99:82:db:1b:08:10:42:b7:04:70:23:47:15:d5:bf: 23:6a:4d:b2:05:ff:2d:c4:51:4e:79:59:be:8e:6c:cc:4e:7f: 23:cd:fa:48:63:7e:ae:4a:47:bc:e9:ac:1b:e3:d0:ca:d4:24: eb:6a:cc:e4:5f:12:56:b5:75:51:0e:ee:9a:1f:ed:68:d2:a0: 6c:4e:4f:29:a6:cc:db:c6:64:a8:dc:76:50:19:bf:a2:82:37: fe:46:a1:c0:c3:89:47:1c:3c:57:70:c6:1d:b7:c0:df:39:89: 49:84:b6:43:70:b4:a3:aa:be:21:69:29:81:d0:84:90:ae:c5: d8:4a:b1:db:7d:4e:2d:0e:e4:67:f2:5b:94:9a:76:25:0f:4a: fd:10:14:4f:3f:ee:56:1a:d3:ae:8e:ab:24:20:70:72:55:2b: 5b:52:e8:42:a5:8e:a1:e6:de:b5:a3:20:02:d5:56:7c:88:45: cb:ab:b1:84:1b:56:1c:15:ea:d0:74:a0:33:8e:ae:07:96:d7: d4:91:7c:c2:bf:1a:1c:d7:bb:8e:57:dc:6a:a4:29:dd:72:70: 7e:b8:e3:da:b2:ba:63:cd:0e:94:c5:61:1b:31:0c:82:0a:38: d8:55:c3:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkIbGWpVIBtRE1YVVq+fnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwNzIzMjAwMDE4WhcNMjYwNzI0MjAwMDE4WjAzMTEwLwYDVQQD EyhlYmRiZTA5ZGMzYjM4N2EzYTVlNDE0YzQ0MGI0M2Y2YTYyYjhkNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBvkOyQepyA6CFAyQ9W5OAnq+1Gq DHT0D+vIMdqCsawgtPxLmpVZ1IdPPPu52PFFkbXBBCbVd5bbM0BajmOvxbn9tPHg 8Ya7dtehen04jPZv5X1DuOw8pGqk7JZqswjnAG/ILlVGf9MmQhEVCTVo1HWmYQd2 u1x0KFHXh+CyQbeoRgWuQAwH0SZDW4eTU127XozNN+JHFVewTfsHWsH5e3Iln2nC N2UsuP370WXW2Qe7lrpnuw241dQoPWKMkqXTg42J3iCBtHz4tY9hCcci2m08Scug X9jFhDL3q3G2fHtXuCY03NsZ108h7uEzEcV/Exm25XCFECLMnYWNu3aCvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvb4J3Ds4ejpeQUxEC0P2piuNZLMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplEU/QR6 JKNlX7Q8Jdw8YqjPXuZsmYLbGwgQQrcEcCNHFdW/I2pNsgX/LcRRTnlZvo5szE5/ I836SGN+rkpHvOmsG+PQytQk62rM5F8SVrV1UQ7umh/taNKgbE5PKabM28ZkqNx2 UBm/ooI3/kahwMOJRxw8V3DGHbfA3zmJSYS2Q3C0o6q+IWkpgdCEkK7F2Eqx231O LQ7kZ/JblJp2JQ9K/RAUTz/uVhrTro6rJCBwclUrW1LoQqWOoebetaMgAtVWfIhF y6uxhBtWHBXq0HSgM46uB5bX1JF8wr8aHNe7jlfcaqQp3XJwfrjj2rK6Y80OlMVh GzEMggo42FXDLQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:13 2026 by rpki-client