$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: PmBOD5q9SfIsdAApZUrFN6grJJ0arldENJ8mzLYovds= Subject key identifier: D2:2D:EF:87:5D:B9:56:A7:17:C9:E7:58:7D:56:06:CA:9E:EF:5E:0E Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019F94A52AC5280B17AEAE9EC8D7CAE48B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 0FAD Signing time: Fri 24 Jul 2026 15:01:20 +0000 Manifest this update: Fri 24 Jul 2026 15:01:20 +0000 Manifest next update: Sat 25 Jul 2026 15:01:20 +0000 Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=) 2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=) 3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=) 4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=) 5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=) 6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=) 7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=) 8: UW-4UFZx7To3RNwelVOgzAwhD_o.roa (hash: eiBKYL64skKUAlgyf8e0asSrepS7YuL7BO8UWyOpmg8=) 9: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: 9VzX2TyTTRd4ZgMdsK4ZqIrG/dbaLkKm4gCiY5w4EVI=) 10: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=) 11: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:94:a5:2a:c5:28:0b:17:ae:ae:9e:c8:d7:ca:e4:8b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jul 24 15:01:20 2026 GMT Not After : Jul 25 15:01:20 2026 GMT Subject: CN=d22def875db956a717c9e7587d5606ca9eef5e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:e6:39:f4:8d:e2:5e:48:c2:79:51:d8:7b: 38:b8:38:cb:99:fb:ba:5d:2c:b1:4a:9c:a0:35:28: 63:34:48:6b:30:ce:df:83:a8:6e:e2:ce:0a:1c:3b: b2:6a:f0:a5:7f:fa:10:6a:b3:5b:44:d4:dd:7c:46: 35:ba:f4:d5:92:c3:03:94:58:5a:ae:f8:92:0d:c6: 04:77:05:4d:2a:89:6f:91:7d:93:b6:68:ca:73:15: f3:9f:e7:19:e8:10:26:fd:06:e2:57:3f:6e:d3:69: 05:7a:42:f2:fe:8d:de:e4:8b:28:bc:a4:05:dd:82: ba:ac:b7:26:bb:6f:7d:bf:1f:d1:a2:aa:40:bd:52: d2:b7:c6:7e:54:0d:96:da:c8:fe:95:a6:73:d5:23: 93:a2:91:09:12:5e:19:f7:75:3c:2d:72:eb:e2:ee: d7:84:33:d2:23:21:3f:bb:87:c9:d1:16:d9:4d:99: dd:93:ab:e9:f7:f9:25:8b:74:61:aa:13:f4:d9:d5: c2:7e:93:1d:3c:a4:00:ab:43:ba:5d:da:38:93:5e: 32:a9:a2:dc:62:4b:32:7f:82:e4:1f:21:53:14:16: 00:2f:ca:55:05:93:09:e7:d4:fd:98:af:e4:85:81: 83:ea:b7:62:ed:b5:ab:bb:7e:4d:3f:13:01:67:19: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:EF:87:5D:B9:56:A7:17:C9:E7:58:7D:56:06:CA:9E:EF:5E:0E X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fa:a9:67:2b:f0:d8:8d:7e:0c:aa:b9:c2:b8:3f:58:08:9f: 80:a2:b4:13:9b:04:97:16:fb:db:0f:c8:48:7f:b6:e4:59:ef: d0:2e:7e:ed:f3:c2:8c:81:26:76:bd:f8:bd:29:2c:40:95:25: 66:73:77:57:25:52:66:c3:a4:cd:42:c6:ee:29:c4:f6:c3:8a: 38:29:d6:92:8a:37:98:ef:00:b7:14:2f:3e:8d:71:c6:b5:17: b5:26:1c:1b:06:f9:7d:28:6a:5b:9e:6e:f5:2e:ad:f9:25:99: ff:08:8e:64:c1:f2:cc:0b:75:3a:32:a2:13:b6:11:fd:96:95: dc:db:71:fc:0c:32:3f:3a:87:64:90:2b:20:90:fb:96:d7:e6: fd:87:a4:4e:f0:c9:8c:0c:ce:59:2f:c9:60:7b:8d:9d:ca:10: 86:9d:e6:05:97:98:09:fd:6f:dd:98:da:de:b5:07:4b:d5:d8: fd:79:8f:4d:4d:19:31:47:3a:c6:4c:d4:7c:fa:04:0b:a2:63: 50:b5:74:aa:7a:fa:59:fe:0a:ef:a7:26:53:14:76:aa:86:7c: e8:ce:c2:81:18:d9:76:39:38:d5:39:64:b7:85:b7:64:05:63: 3c:77:1a:9c:40:09:de:cc:95:65:5d:ba:14:ba:f3:c2:ee:06: a4:38:a6:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+UpSrFKAsXrq6eyNfK5IuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwNzI0MTUwMTIwWhcNMjYwNzI1MTUwMTIwWjAzMTEwLwYDVQQD EyhkMjJkZWY4NzVkYjk1NmE3MTdjOWU3NTg3ZDU2MDZjYTllZWY1ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXjmOfSN4l5IwnlR2Hs4uDjLmfu6 XSyxSpygNShjNEhrMM7fg6hu4s4KHDuyavClf/oQarNbRNTdfEY1uvTVksMDlFha rviSDcYEdwVNKolvkX2TtmjKcxXzn+cZ6BAm/QbiVz9u02kFekLy/o3e5IsovKQF 3YK6rLcmu299vx/RoqpAvVLSt8Z+VA2W2sj+laZz1SOTopEJEl4Z93U8LXLr4u7X hDPSIyE/u4fJ0RbZTZndk6vp9/kli3RhqhP02dXCfpMdPKQAq0O6Xdo4k14yqaLc Yksyf4LkHyFTFBYAL8pVBZMJ59T9mK/khYGD6rdi7bWru35NPxMBZxkRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIt74dduVanF8nnWH1WBsqe714OMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/qpZyvw 2I1+DKq5wrg/WAifgKK0E5sElxb72w/ISH+25Fnv0C5+7fPCjIEmdr34vSksQJUl ZnN3VyVSZsOkzULG7inE9sOKOCnWkoo3mO8AtxQvPo1xxrUXtSYcGwb5fShqW55u 9S6t+SWZ/wiOZMHyzAt1OjKiE7YR/ZaV3Ntx/AwyPzqHZJArIJD7ltfm/YekTvDJ jAzOWS/JYHuNncoQhp3mBZeYCf1v3Zja3rUHS9XY/XmPTU0ZMUc6xkzUfPoEC6Jj ULV0qnr6Wf4K76cmUxR2qoZ86M7CgRjZdjk41Tlkt4W3ZAVjPHcanEAJ3syVZV26 FLrzwu4GpDimiQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:21:29 2026 by rpki-client