$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 6MvYSYUPpyamhmFd6HgWAKgMQdP0078OWpHicfPB9fs= Subject key identifier: 2C:D8:74:85:52:6D:ED:50:2F:FB:9D:A0:6F:74:30:35:CA:4D:03:65 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019F8F10602192AE9EAC7CA021A603168627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1A25 Signing time: Thu 23 Jul 2026 13:00:42 +0000 Manifest this update: Thu 23 Jul 2026 13:00:42 +0000 Manifest next update: Fri 24 Jul 2026 13:00:42 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 7: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 8: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 9: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 10: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 11: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: DRKeAEQkePC6F63ZZsM7saO8GvMto00fTVZ8SMCkq3I=) 25: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 26: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 27: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 28: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 29: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 30: oPoAPW2imYIIhMBjHBjrrJzlTm0.roa (hash: Ai3LKCPihwHhkGrEgiXr64yAeNHxTfkXCv7Ldk/G4cw=) 31: upydEV0ODv-v9FNJbhEvu18F0-I.roa (hash: VtfCIO/Gdxc9uNwon4WUJ3pKbdYHJr5iyQxDnmDVVgE=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:10:60:21:92:ae:9e:ac:7c:a0:21:a6:03:16:86:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jul 23 13:00:42 2026 GMT Not After : Jul 24 13:00:42 2026 GMT Subject: CN=2cd87485526ded502ffb9da06f743035ca4d0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:49:e9:65:fb:f0:57:0a:e2:9c:2d:8e:d4: 8b:fa:f5:6e:a0:40:c9:a1:3d:5f:19:47:b5:74:ae: 7c:5e:0a:9f:52:37:92:25:b9:c1:1e:a0:82:5e:3a: 17:05:93:c3:84:f9:3c:f9:3e:36:2a:83:76:56:15: 8f:65:68:0c:79:23:de:89:db:9f:70:4d:3a:50:10: 7e:80:71:7b:5f:93:c8:45:7d:40:df:3f:be:89:af: d6:24:20:3b:22:31:71:a4:c6:e8:e9:53:46:68:b4: ec:f5:02:8c:9f:01:7b:17:87:4a:13:64:52:35:4c: 1f:b4:c7:5f:ce:96:37:a1:40:b6:a5:e4:7e:19:e4: 94:cc:95:81:f2:5f:9a:fa:5d:ff:5d:ec:26:b2:f8: 23:10:8b:17:c9:f9:b4:27:30:d7:64:66:70:ef:15: 26:ad:14:63:f0:c9:07:48:82:f5:28:8d:76:e5:89: 8e:6b:08:76:e8:ba:dc:df:c4:11:61:ea:13:9b:5d: 38:a1:aa:fc:09:6e:df:49:88:ad:69:c3:7d:78:2c: bd:f1:51:43:4d:ef:eb:c7:9c:25:c3:ae:7b:37:79: 06:b7:fc:99:7b:82:5b:31:9e:e5:5c:b7:2a:ef:4d: d5:ff:1e:22:49:ed:fd:1a:6b:0c:43:49:0d:30:fe: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:74:85:52:6D:ED:50:2F:FB:9D:A0:6F:74:30:35:CA:4D:03:65 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a9:ed:55:67:a4:a5:c2:88:b5:c3:90:60:69:34:65:2c:3b: eb:50:63:25:f0:ae:2b:02:8e:c1:0d:46:ff:63:30:9b:72:1b: c5:33:24:25:a3:1a:02:bc:85:d6:f0:ad:8f:fa:ac:73:a7:5b: 11:42:d3:34:2a:8b:82:64:ad:b1:f3:a4:10:66:88:df:e4:67: ec:10:da:fd:bf:88:b0:16:c6:c2:27:a8:17:c3:a8:3e:24:e4: 66:18:81:b9:1b:a5:f8:63:d5:3c:73:3e:fc:31:c6:ea:4a:cc: 8a:0c:d3:55:13:bb:e7:68:4f:a0:fa:1e:50:40:91:44:c0:3a: 3f:15:ed:a4:7b:03:a8:ce:3d:cd:03:f8:24:2b:e8:ad:8a:6c: 1d:74:3d:73:24:87:55:ff:a8:db:9d:e5:a6:67:22:56:cc:56: 97:08:10:99:78:f7:04:37:e9:f6:98:f0:aa:54:05:d9:67:6c: 93:71:41:54:73:a2:22:64:99:52:fa:4e:72:39:d9:b9:17:fd: 95:86:6b:0b:b9:7e:46:dd:01:bd:14:e1:9f:d0:ac:38:e9:d5: b7:6c:8c:b5:47:ff:7c:f1:9e:1c:cc:47:96:c1:22:10:1a:1c: da:10:5b:35:71:1b:dd:31:9e:b0:c2:3d:7e:62:68:95:40:5e: ad:0c:2b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PEGAhkq6erHygIaYDFoYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwNzIzMTMwMDQyWhcNMjYwNzI0MTMwMDQyWjAzMTEwLwYDVQQD EygyY2Q4NzQ4NTUyNmRlZDUwMmZmYjlkYTA2Zjc0MzAzNWNhNGQwMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLFJ6WX78FcK4pwtjtSL+vVuoEDJ oT1fGUe1dK58XgqfUjeSJbnBHqCCXjoXBZPDhPk8+T42KoN2VhWPZWgMeSPeiduf cE06UBB+gHF7X5PIRX1A3z++ia/WJCA7IjFxpMbo6VNGaLTs9QKMnwF7F4dKE2RS NUwftMdfzpY3oUC2peR+GeSUzJWB8l+a+l3/XewmsvgjEIsXyfm0JzDXZGZw7xUm rRRj8MkHSIL1KI125YmOawh26Lrc38QRYeoTm104oar8CW7fSYitacN9eCy98VFD Te/rx5wlw657N3kGt/yZe4JbMZ7lXLcq703V/x4iSe39GmsMQ0kNMP4oBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzYdIVSbe1QL/udoG90MDXKTQNlMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOantVWek pcKItcOQYGk0ZSw761BjJfCuKwKOwQ1G/2Mwm3IbxTMkJaMaAryF1vCtj/qsc6db EULTNCqLgmStsfOkEGaI3+Rn7BDa/b+IsBbGwieoF8OoPiTkZhiBuRul+GPVPHM+ /DHG6krMigzTVRO752hPoPoeUECRRMA6PxXtpHsDqM49zQP4JCvorYpsHXQ9cySH Vf+o253lpmciVsxWlwgQmXj3BDfp9pjwqlQF2Wdsk3FBVHOiImSZUvpOcjnZuRf9 lYZrC7l+Rt0BvRThn9CsOOnVt2yMtUf/fPGeHMxHlsEiEBoc2hBbNXEb3TGesMI9 fmJolUBerQwrXg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:20:14 2026 by rpki-client