$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: o6pNQpg5f0mfl3qOl8/yYCZNklK8NA/0+MzLmzN8PRg= Subject key identifier: 99:8B:C0:80:A3:42:E6:6A:E3:CE:CA:6F:81:F1:09:7B:81:8E:B4:3C Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019F8EA2BDE33A9920C5E5971CBF3792C3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 19E2 Signing time: Thu 23 Jul 2026 11:00:57 +0000 Manifest this update: Thu 23 Jul 2026 11:00:57 +0000 Manifest next update: Fri 24 Jul 2026 11:00:57 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=) 6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 7: e5VirbuAOkg1PBFK0M3mtZcI84w.asa (hash: EqbpkcZPOaxJPSydnA3m+kgJNXbf/c0LEhfWDvh4rJY=) 8: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=) 9: hYI8_W7KbcINcD3rIBl0TxlFsr0.asa (hash: ul9ROLDfaYD/lTgozmnX7AY2tTIU1gHVBphVJS56cV4=) 10: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 11: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: wWDthLnQZ5CChTHHE11cvkbiOyY2c+suAURF1wCvd24=) 12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) 13: yPa1ORKwdYO21oPHsCqaSGK2ss8.asa (hash: rF3Bv82DUAK46dZh7JdvizZgf5EoczF43qjQleVqEKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:bd:e3:3a:99:20:c5:e5:97:1c:bf:37:92:c3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jul 23 11:00:57 2026 GMT Not After : Jul 24 11:00:57 2026 GMT Subject: CN=998bc080a342e66ae3ceca6f81f1097b818eb43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:43:bf:6e:25:d5:c1:f7:18:6a:97:69:df: 98:17:08:9f:ef:89:40:4a:4d:9a:63:5a:5b:ac:6c: df:0e:35:2f:a7:f0:28:a1:24:7c:93:d0:45:4c:ab: 82:05:7e:0f:e0:3e:7b:85:b3:f9:14:e4:a7:99:38: bd:a6:a2:55:4e:09:9e:73:aa:42:65:d9:a6:01:2f: ef:5a:6c:94:eb:23:fe:eb:fc:f7:02:fe:2b:fd:f6: 81:5d:99:7d:32:32:74:ad:5b:ad:93:6d:c9:be:3c: ac:b8:26:ac:32:f1:ec:0c:e1:38:8a:44:71:1a:b0: 00:27:d5:73:f8:74:54:40:1f:ce:07:72:78:c0:96: 26:9f:9f:66:ee:33:80:a0:49:e4:d3:15:76:6f:01: fa:b2:db:ea:20:f9:87:34:26:9f:e7:d4:72:60:d3: 48:e0:a4:9c:b6:a1:cc:3a:82:ba:79:af:2c:f6:0d: d0:c5:1d:54:37:4f:88:5e:e5:b1:31:ba:af:f0:9c: ab:3f:e5:32:5c:cb:e5:5c:0f:2e:7a:16:02:2b:31: 07:05:d6:8d:1e:92:2f:f2:be:84:d6:13:de:b0:96: 2e:23:e4:c4:6d:98:ec:58:32:9e:0c:1f:ca:7f:8e: ff:37:d1:b5:c4:4d:2c:f2:b3:fb:1f:4c:8a:54:33: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:C0:80:A3:42:E6:6A:E3:CE:CA:6F:81:F1:09:7B:81:8E:B4:3C X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:26:54:8c:3c:c2:cd:5d:21:e0:5e:61:e2:50:bc:91:bd:d2: 39:89:41:46:a5:ca:64:47:83:62:c8:e0:f3:1a:d4:66:99:c1: a7:bd:16:6b:7e:55:ba:a6:88:f9:3b:83:cb:f7:5d:30:30:82: 5e:c4:71:5c:f8:58:8e:cb:74:54:43:32:d4:7e:27:91:29:e0: 81:92:7e:bb:55:51:dc:27:66:d0:27:11:61:15:c1:bd:45:ae: 0c:bd:dd:9b:26:ac:5f:2c:36:88:ea:44:70:a7:f0:9f:6c:69: a0:ea:5a:66:9a:5b:0c:94:c5:76:5e:7c:72:72:09:b9:24:c4: fc:d3:3e:0f:06:87:14:8b:41:2a:9e:1a:e6:e0:ce:ea:29:0a: 5b:9a:95:01:a4:46:fb:f5:89:e3:9f:1f:ae:e2:32:45:4e:8f: d0:81:38:5e:59:84:62:2f:c2:2d:d8:e7:c4:09:84:47:dd:4f: 6c:18:fe:64:73:ec:66:98:f6:2b:28:e5:db:dc:f1:5b:cb:a9: 1a:96:83:25:c7:54:d7:25:ef:00:a6:1b:31:09:6d:ec:a4:63: 11:e9:26:10:35:d1:4c:ec:e0:bf:74:f6:a3:f7:f5:d8:89:08: 51:38:4e:33:4f:1a:c0:f0:59:39:c3:a7:5e:30:51:26:0d:67: d0:b2:a8:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Oor3jOpkgxeWXHL83ksPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwNzIzMTEwMDU3WhcNMjYwNzI0MTEwMDU3WjAzMTEwLwYDVQQD Eyg5OThiYzA4MGEzNDJlNjZhZTNjZWNhNmY4MWYxMDk3YjgxOGViNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEdDv24l1cH3GGqXad+YFwif74lA Sk2aY1pbrGzfDjUvp/AooSR8k9BFTKuCBX4P4D57hbP5FOSnmTi9pqJVTgmec6pC ZdmmAS/vWmyU6yP+6/z3Av4r/faBXZl9MjJ0rVutk23JvjysuCasMvHsDOE4ikRx GrAAJ9Vz+HRUQB/OB3J4wJYmn59m7jOAoEnk0xV2bwH6stvqIPmHNCaf59RyYNNI 4KSctqHMOoK6ea8s9g3QxR1UN0+IXuWxMbqv8JyrP+UyXMvlXA8uehYCKzEHBdaN HpIv8r6E1hPesJYuI+TEbZjsWDKeDB/Kf47/N9G1xE0s8rP7H0yKVDNmQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmLwICjQuZq487Kb4HxCXuBjrQ8MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSZUjDzC zV0h4F5h4lC8kb3SOYlBRqXKZEeDYsjg8xrUZpnBp70Wa35VuqaI+TuDy/ddMDCC XsRxXPhYjst0VEMy1H4nkSnggZJ+u1VR3Cdm0CcRYRXBvUWuDL3dmyasXyw2iOpE cKfwn2xpoOpaZppbDJTFdl58cnIJuSTE/NM+DwaHFItBKp4a5uDO6ikKW5qVAaRG +/WJ458fruIyRU6P0IE4XlmEYi/CLdjnxAmER91PbBj+ZHPsZpj2Kyjl29zxW8up GpaDJcdU1yXvAKYbMQlt7KRjEekmEDXRTOzgv3T2o/f12IkIUThOM08awPBZOcOn XjBRJg1n0LKoTg== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:35 2026 by rpki-client