$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: 9pkDZzIe9LYzyzNxTmmTQ59d2ePVgjUo/1BASKA6kT8= Subject key identifier: 3D:79:21:AB:EA:6A:BE:E3:7D:D0:85:8D:FE:3E:25:B3:C8:28:C4:C4 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019F90FE77EAE46662B352C087E476020E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0EC8 Signing time: Thu 23 Jul 2026 22:00:23 +0000 Manifest this update: Thu 23 Jul 2026 22:00:23 +0000 Manifest next update: Fri 24 Jul 2026 22:00:23 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: J4YIqMbPg3bzxhpQq92TB/5C9bVRxp58lW+KYQW6V/8=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:77:ea:e4:66:62:b3:52:c0:87:e4:76:02:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jul 23 22:00:23 2026 GMT Not After : Jul 24 22:00:23 2026 GMT Subject: CN=3d7921abea6abee37dd0858dfe3e25b3c828c4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:7e:ae:af:31:3f:ea:99:bd:aa:31:3c:b8: 61:b2:c9:4e:39:43:58:9e:16:01:0c:59:71:06:92: f5:5a:4a:15:79:1c:81:e4:0d:a5:d7:fd:b1:5c:03: 2e:d6:eb:67:66:7f:5f:09:83:b4:f5:f8:9b:ca:48: 7b:9b:c3:73:42:c5:5e:80:b1:22:2a:01:37:b0:82: 5f:aa:b3:f3:3d:c5:ff:45:0e:4b:5a:ee:ea:a5:d9: e4:27:b4:c5:22:3d:6d:39:f8:16:6c:a5:88:18:18: dd:bf:a9:d6:08:ac:15:e1:9d:23:26:b4:cc:57:07: 9b:05:7b:ed:1e:bb:e4:cd:54:7f:d2:5f:07:e5:15: d1:00:8d:1d:e9:07:a8:6d:e4:3e:7d:b1:87:8f:ed: b6:7c:68:c8:e8:8c:25:ff:6f:ca:2d:fc:dc:00:b1: 96:09:ee:c3:6a:6a:f9:fc:55:e7:55:86:f1:f0:8d: 8b:01:1e:08:f5:9d:a0:49:24:5f:f1:dd:0f:50:fe: 9b:6c:f5:6e:8c:ac:c9:3d:a3:eb:2d:f9:c5:ab:72: 70:da:d3:13:7f:76:e5:09:61:06:c7:5b:dd:18:1b: 82:df:74:45:91:aa:92:ff:51:80:79:17:70:f0:dd: 37:77:9e:d8:43:53:77:d1:4d:51:75:23:41:ce:6d: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:79:21:AB:EA:6A:BE:E3:7D:D0:85:8D:FE:3E:25:B3:C8:28:C4:C4 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dc:c1:22:d9:c4:ca:a7:b8:53:8f:8d:38:46:7b:2b:16:07: 44:e5:e3:d3:65:4d:10:92:c5:46:51:1f:95:4f:a2:58:12:6c: dd:9e:ac:ff:28:d6:29:26:ec:1d:4d:fa:cc:1c:8f:8d:4f:a9: 5a:9a:86:f5:2c:18:ab:47:8a:ab:57:a9:b1:2c:be:cb:54:c9: 89:42:3f:e7:47:b8:1d:36:55:5b:cd:82:86:cb:99:a5:66:45: 68:2d:13:a0:b7:92:e6:18:5e:47:66:9f:da:50:7d:5d:bf:70: b7:52:a4:d6:45:3d:fc:4f:7c:9c:cd:2a:6f:5e:b4:e5:7a:38: 55:62:c7:9b:ae:7a:e1:c8:d5:6e:35:7a:67:d8:b4:87:c4:56: cc:90:09:f4:8a:47:6a:bb:97:30:1a:b9:5b:0b:9f:c5:71:82: f2:d1:3b:77:1f:73:f1:f6:29:80:e6:86:01:9d:ef:83:c8:1a: 29:89:b4:49:30:dd:b9:e0:79:1c:87:66:c1:75:25:09:89:f2: 3b:80:02:44:ab:f4:30:33:20:67:5d:d5:64:47:dc:ba:07:4e: a2:bf:65:08:2b:62:4f:90:f8:1c:c7:da:e5:aa:10:8d:a6:f9: ef:d6:80:71:5d:2e:27:da:49:2f:e6:e0:c1:e5:b3:9c:78:d5: 7c:c8:b1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/nfq5GZis1LAh+R2Ag5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwNzIzMjIwMDIzWhcNMjYwNzI0MjIwMDIzWjAzMTEwLwYDVQQD EygzZDc5MjFhYmVhNmFiZWUzN2RkMDg1OGRmZTNlMjViM2M4MjhjNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5+rq8xP+qZvaoxPLhhsslOOUNY nhYBDFlxBpL1WkoVeRyB5A2l1/2xXAMu1utnZn9fCYO09fibykh7m8NzQsVegLEi KgE3sIJfqrPzPcX/RQ5LWu7qpdnkJ7TFIj1tOfgWbKWIGBjdv6nWCKwV4Z0jJrTM VwebBXvtHrvkzVR/0l8H5RXRAI0d6QeobeQ+fbGHj+22fGjI6Iwl/2/KLfzcALGW Ce7Damr5/FXnVYbx8I2LAR4I9Z2gSSRf8d0PUP6bbPVujKzJPaPrLfnFq3Jw2tMT f3blCWEGx1vdGBuC33RFkaqS/1GAeRdw8N03d57YQ1N30U1RdSNBzm0eLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD15Iavqar7jfdCFjf4+JbPIKMTEMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNzBItnE yqe4U4+NOEZ7KxYHROXj02VNEJLFRlEflU+iWBJs3Z6s/yjWKSbsHU36zByPjU+p WpqG9SwYq0eKq1epsSy+y1TJiUI/50e4HTZVW82ChsuZpWZFaC0ToLeS5hheR2af 2lB9Xb9wt1Kk1kU9/E98nM0qb1605Xo4VWLHm6564cjVbjV6Z9i0h8RWzJAJ9IpH aruXMBq5WwufxXGC8tE7dx9z8fYpgOaGAZ3vg8gaKYm0STDdueB5HIdmwXUlCYny O4ACRKv0MDMgZ13VZEfcugdOor9lCCtiT5D4HMfa5aoQjab579aAcV0uJ9pJL+bg weWznHjVfMixyg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:40:07 2026 by rpki-client