$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: Rm0S2s24cwItr7pMsFq9AmemTjXU8r7tORol++vc4B4= Subject key identifier: 59:69:37:60:24:10:A7:73:18:08:FB:AD:67:24:FD:CA:9F:E1:70:A9 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019F8FB5E4D575A7C8C5CB175752DE1AFEF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1A13 Signing time: Thu 23 Jul 2026 16:01:30 +0000 Manifest this update: Thu 23 Jul 2026 16:01:30 +0000 Manifest next update: Fri 24 Jul 2026 16:01:30 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=) 3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: ECKV8t9iqrrtXQZbvwdUUU93YbuybA3m2VdLXEyU9H0=) 6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=) 7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=) 8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=) 11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=) 12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=) 13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=) 14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:e4:d5:75:a7:c8:c5:cb:17:57:52:de:1a:fe:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jul 23 16:01:30 2026 GMT Not After : Jul 24 16:01:30 2026 GMT Subject: CN=596937602410a7731808fbad6724fdca9fe170a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:c4:7a:a8:38:fb:7f:75:55:02:2f:94:18: 83:fa:47:35:35:6c:99:b4:1b:20:85:e8:2b:e1:65: 1d:a4:a2:47:2b:67:d3:b4:76:12:1a:08:74:f4:b9: 3c:55:c6:26:5c:5c:7f:33:6c:4b:8a:f7:36:56:11: 63:5a:6b:23:87:41:0c:f9:ac:74:92:30:93:68:ee: aa:b8:e1:39:19:a7:1b:ec:5c:a4:38:2e:03:80:bd: 1f:c7:d1:ca:01:be:ae:84:e1:18:6e:23:77:0c:c5: 57:df:61:19:f9:75:73:11:2c:b2:ec:0c:b0:d5:eb: 1c:49:70:4c:2a:ce:ee:02:7d:fd:39:17:a8:73:e8: 18:ed:48:e9:b7:53:0e:ac:bc:e7:07:65:92:fe:7d: e9:05:35:4e:40:64:66:dc:34:d9:39:f4:e8:cc:14: a1:87:ee:5d:34:89:e9:04:5d:92:6d:bd:4a:eb:93: 20:8f:ed:4f:fa:ef:50:fa:67:24:e8:fb:16:28:16: 16:87:e1:32:fb:94:f5:53:41:1a:77:9f:a0:79:d9: b7:56:19:9e:d8:31:69:70:63:27:87:5b:48:c4:9f: f7:d2:32:fa:77:3d:29:5c:c0:67:ee:66:36:1a:63: 24:16:d7:f1:56:db:01:46:33:c6:a3:7e:05:d9:a4: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:69:37:60:24:10:A7:73:18:08:FB:AD:67:24:FD:CA:9F:E1:70:A9 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5e:4a:5d:83:28:64:de:6d:76:9b:e0:02:67:be:fb:68:b2: d3:93:ed:9f:e5:42:ad:27:6d:7f:5a:c8:d5:95:9d:19:cf:7f: 91:4b:c2:0a:cf:2e:be:11:8b:8e:8f:6a:a2:6f:a7:5c:10:16: 9c:72:fb:80:5e:31:57:7a:11:4d:c5:bd:46:7c:2f:15:09:ac: e7:a4:f3:7a:16:8d:c2:58:ca:67:4b:68:9a:f0:91:f6:78:dc: d9:8b:c5:ff:8f:10:08:28:6c:27:10:76:42:f7:03:2d:d1:01: d2:c2:32:7f:9e:47:b7:37:8b:c5:3b:9c:b5:d3:2d:76:ad:a3: a9:57:61:bb:7b:d9:41:ca:c1:f9:04:cf:d5:e1:10:79:81:02: ce:19:8f:bb:02:2f:14:e1:87:e9:41:50:3d:0f:64:56:69:82: b4:fd:67:78:d9:da:09:bf:c4:12:2c:93:93:fb:a3:2e:c0:6f: c7:3f:3f:fa:c6:ec:ea:4f:af:e5:7b:52:c8:ef:9c:8f:60:88: a7:c1:13:e6:b8:14:4d:57:69:cf:ca:03:e9:5b:cb:e6:1d:bb: 57:fa:1d:bb:af:5b:36:9f:d4:bc:c1:1c:c8:ed:9b:0f:ef:25: 74:34:2f:db:7a:c7:f9:fa:3a:e2:55:bb:35:15:f8:44:96:89: 20:b4:4b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PteTVdafIxcsXV1LeGv71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwNzIzMTYwMTMwWhcNMjYwNzI0MTYwMTMwWjAzMTEwLwYDVQQD Eyg1OTY5Mzc2MDI0MTBhNzczMTgwOGZiYWQ2NzI0ZmRjYTlmZTE3MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BzEeqg4+391VQIvlBiD+kc1NWyZ tBsghegr4WUdpKJHK2fTtHYSGgh09Lk8VcYmXFx/M2xLivc2VhFjWmsjh0EM+ax0 kjCTaO6quOE5Gacb7FykOC4DgL0fx9HKAb6uhOEYbiN3DMVX32EZ+XVzESyy7Ayw 1escSXBMKs7uAn39OReoc+gY7Ujpt1MOrLznB2WS/n3pBTVOQGRm3DTZOfTozBSh h+5dNInpBF2Sbb1K65Mgj+1P+u9Q+mck6PsWKBYWh+Ey+5T1U0Ead5+gedm3Vhme 2DFpcGMnh1tIxJ/30jL6dz0pXMBn7mY2GmMkFtfxVtsBRjPGo34F2aTTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlpN2AkEKdzGAj7rWck/cqf4XCpMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU15KXYMo ZN5tdpvgAme++2iy05Ptn+VCrSdtf1rI1ZWdGc9/kUvCCs8uvhGLjo9qom+nXBAW nHL7gF4xV3oRTcW9RnwvFQms56TzehaNwljKZ0tomvCR9njc2YvF/48QCChsJxB2 QvcDLdEB0sIyf55HtzeLxTuctdMtdq2jqVdhu3vZQcrB+QTP1eEQeYECzhmPuwIv FOGH6UFQPQ9kVmmCtP1neNnaCb/EEiyTk/ujLsBvxz8/+sbs6k+v5XtSyO+cj2CI p8ET5rgUTVdpz8oD6VvL5h27V/odu69bNp/UvMEcyO2bD+8ldDQv23rH+fo64lW7 NRX4RJaJILRLRw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:10:09 2026 by rpki-client