$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: eySqsxO9zQc4RfoNyemNUVivMbRsA8Uq98gQCT08QKY= Subject key identifier: 9C:58:56:BF:01:68:07:1E:61:70:54:0E:03:C5:C9:37:F8:13:F0:60 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 019F8F7E843CD1C042FD13548B238E97BB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: 3F Signing time: Thu 23 Jul 2026 15:01:00 +0000 Manifest this update: Thu 23 Jul 2026 15:01:00 +0000 Manifest next update: Fri 24 Jul 2026 15:01:00 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: bow+bIyvsNWdNES/Li35hvQEcMCjnPuj2HLq926TsH8=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 10: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 11: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 12: tSageFEQxzkkdzWrWiPFkT3D-Ec.roa (hash: 62TffehwovUDTyT5E6936YcLFqlIeIdvRZN8MDzVRzY=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:84:3c:d1:c0:42:fd:13:54:8b:23:8e:97:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Jul 23 15:01:00 2026 GMT Not After : Jul 24 15:01:00 2026 GMT Subject: CN=9c5856bf0168071e6170540e03c5c937f813f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:09:1c:32:2b:ca:89:f7:99:dc:4a:c6:2f: 5a:99:9f:7b:aa:c6:b1:9a:9f:fd:da:aa:69:5b:74: 9e:2c:0b:44:97:2b:7e:be:4c:bd:9b:8b:53:e1:30: cf:75:b9:62:4f:3d:ea:47:0e:6b:05:dc:5b:78:31: 0d:df:88:18:f8:54:f4:e8:04:01:8b:9e:25:8d:75: 9c:91:54:86:df:72:c0:66:1c:2b:79:84:c5:c4:a3: 83:57:e4:ee:99:8a:2b:7a:fa:89:8a:ee:45:d3:b7: 72:90:f9:07:59:bc:9d:fa:16:49:e2:c1:08:bf:b5: 83:86:a6:38:e3:46:64:1e:a8:66:5a:eb:da:3b:96: 30:66:f1:ca:fc:88:7f:9b:d7:e5:87:ae:53:9e:6f: 3b:a3:13:b6:ee:fe:01:4c:f0:0f:e5:43:55:15:13: ab:11:6d:2d:f7:6d:04:e7:23:4d:29:09:aa:6c:3c: 3e:3d:a7:7d:3e:97:ac:87:39:5a:2b:71:7c:04:6e: 5a:a1:b4:75:09:b9:75:ae:c0:7b:c3:bd:74:34:b0: 77:e4:28:2f:2e:c9:d7:95:62:a0:c2:3a:ac:4b:3f: 79:f1:99:9a:c4:ac:e8:db:ee:b5:62:94:4e:a2:8c: 0e:24:c4:fe:28:ba:d2:ad:79:9e:d3:96:4e:c4:8e: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:58:56:BF:01:68:07:1E:61:70:54:0E:03:C5:C9:37:F8:13:F0:60 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:23:80:2a:5b:55:39:ce:64:3a:48:d9:c3:f3:28:64:22:f8: e5:18:b0:00:63:74:bd:54:10:55:a1:88:a6:cd:a0:7f:53:c6: 13:55:1e:9c:1d:19:85:a3:9f:6a:da:21:b2:87:1e:d7:a1:ad: 3e:ee:b5:2d:f1:76:94:2e:4f:12:d5:da:79:43:ec:28:89:52: 26:33:52:18:09:5e:8e:96:59:2f:22:dc:a1:c1:5e:0d:b5:af: 01:53:33:4e:f0:f2:22:61:38:9b:df:27:d1:9e:a7:f9:27:c1: 68:40:ba:07:e4:fc:64:b7:20:58:29:d7:b5:2b:4c:c9:9e:2b: 94:0a:56:b5:b6:84:0f:3f:66:94:53:10:f2:8c:57:6d:ff:85: d4:47:28:c2:cb:e5:b1:d8:5c:77:fd:a4:90:40:88:95:f4:f0: 04:b6:32:40:e4:da:a3:a4:5a:0a:f8:4e:2b:09:5d:43:eb:3f: 60:2b:f4:0d:fd:a1:04:b9:cd:a9:16:f1:26:96:9a:9a:34:14: d1:7f:b4:24:74:bd:7c:64:e1:35:91:95:61:66:0b:b4:7c:f5: 0f:29:c5:67:84:ef:67:d2:d1:12:3a:0d:3e:10:94:65:cd:f3: 1c:33:e9:71:3a:c8:ed:af:af:6b:47:98:15:93:98:a8:91:3d: e9:6d:7f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PfoQ80cBC/RNUiyOOl7tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYwNzIzMTUwMTAwWhcNMjYwNzI0MTUwMTAwWjAzMTEwLwYDVQQD Eyg5YzU4NTZiZjAxNjgwNzFlNjE3MDU0MGUwM2M1YzkzN2Y4MTNmMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUIJHDIryon3mdxKxi9amZ97qsax mp/92qppW3SeLAtElyt+vky9m4tT4TDPdbliTz3qRw5rBdxbeDEN34gY+FT06AQB i54ljXWckVSG33LAZhwreYTFxKODV+TumYorevqJiu5F07dykPkHWbyd+hZJ4sEI v7WDhqY440ZkHqhmWuvaO5YwZvHK/Ih/m9flh65Tnm87oxO27v4BTPAP5UNVFROr EW0t920E5yNNKQmqbDw+Pad9PpeshzlaK3F8BG5aobR1Cbl1rsB7w710NLB35Cgv LsnXlWKgwjqsSz958ZmaxKzo2+61YpROoowOJMT+KLrSrXme05ZOxI7wRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxYVr8BaAceYXBUDgPFyTf4E/BgMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiOAKltV Oc5kOkjZw/MoZCL45RiwAGN0vVQQVaGIps2gf1PGE1UenB0ZhaOfatohsoce16Gt Pu61LfF2lC5PEtXaeUPsKIlSJjNSGAlejpZZLyLcocFeDbWvAVMzTvDyImE4m98n 0Z6n+SfBaEC6B+T8ZLcgWCnXtStMyZ4rlApWtbaEDz9mlFMQ8oxXbf+F1Ecowsvl sdhcd/2kkECIlfTwBLYyQOTao6RaCvhOKwldQ+s/YCv0Df2hBLnNqRbxJpaamjQU 0X+0JHS9fGThNZGVYWYLtHz1DynFZ4TvZ9LREjoNPhCUZc3zHDPpcTrI7a+va0eY FZOYqJE96W1/mQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:36 2026 by rpki-client