$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: +CNWaUrtzddXnCN+dsolOrzgDU+0gK8LsfN9f1SJh6s= Subject key identifier: E5:74:BD:21:9F:43:9B:4E:A8:49:29:90:48:3A:01:F4:C9:6C:AC:58 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019F916DD1897E759AD6729332AD973D825C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1795 Signing time: Fri 24 Jul 2026 00:02:01 +0000 Manifest this update: Fri 24 Jul 2026 00:02:01 +0000 Manifest next update: Sat 25 Jul 2026 00:02:01 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: M1AjC6C1UIYUBqCLzKDZWIQA8edb5jjfVVX7JBS8kP4=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:d1:89:7e:75:9a:d6:72:93:32:ad:97:3d:82:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jul 24 00:02:01 2026 GMT Not After : Jul 25 00:02:01 2026 GMT Subject: CN=e574bd219f439b4ea8492990483a01f4c96cac58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:07:d4:2c:32:e4:42:e3:97:56:1c:2b:1c: cb:d1:68:1e:20:c7:6a:23:7f:85:93:70:46:71:d4: 0c:93:90:f1:8a:4d:c3:68:0b:29:8c:f7:74:38:16: ac:6e:ee:98:f4:c5:3a:af:b7:69:99:43:d7:cb:bd: 57:5f:85:0f:a7:79:7d:78:2a:c8:b9:40:ef:fd:f9: a9:37:6e:68:cd:8f:1c:59:fa:f7:92:9f:37:86:04: 3f:67:e2:79:ad:e9:ee:f2:82:89:33:79:8f:62:88: 44:fc:e2:86:31:2e:29:cd:7b:f7:9a:6f:76:88:f7: 67:6b:a1:f6:b0:95:8b:3c:25:ab:09:76:17:df:09: 3a:ca:9d:7a:64:7a:c0:78:a1:aa:2c:f7:39:b5:6c: df:78:5c:af:f4:c1:ba:01:4a:48:78:d3:20:4c:61: a6:b6:ab:5d:37:99:8a:c5:a4:6b:32:25:80:a3:31: ab:88:51:4f:02:32:3a:6a:e7:13:25:bd:e0:4b:12: 8f:3d:e9:7a:1b:b8:0c:3f:1e:a5:8f:a7:24:0b:24: a2:39:08:e7:3b:ca:5a:d7:27:7b:54:7b:eb:bf:30: bb:c3:7c:a7:52:c3:ab:67:01:88:2a:6b:00:03:5c: 7d:70:42:dd:c1:8f:e8:11:9b:2b:d3:3d:47:e9:49: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:BD:21:9F:43:9B:4E:A8:49:29:90:48:3A:01:F4:C9:6C:AC:58 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:1e:d3:03:dd:cc:f4:7f:3a:f5:e3:c7:e6:66:c5:d1:eb: ce:be:0e:f0:a5:9a:b9:93:98:06:17:a4:d5:bf:c5:e1:de:4d: 10:67:be:de:ba:87:9e:b6:6f:ea:00:d6:0d:e4:01:21:00:2b: 45:68:72:86:7f:ab:bf:98:19:44:73:4e:74:1d:41:6c:77:69: cd:b4:82:c2:1e:50:25:71:99:ce:af:9c:ec:ea:7b:a7:66:df: 86:b4:25:65:4b:dd:a0:f1:51:f3:df:6d:88:5e:27:2f:51:40: e7:26:2f:b9:3b:62:11:cb:30:fb:4e:f7:8e:1e:a9:1d:9e:08: 9f:3b:36:77:fe:9f:ec:a5:8e:b9:56:fe:5b:fd:a3:14:96:f4: 1d:6c:dc:b2:82:fd:7b:5d:11:ee:10:57:f9:9b:4c:95:c2:c9: 88:1a:7b:2a:63:7d:61:7f:05:85:f9:1c:60:bd:b7:4a:05:bf: 2f:7b:f4:6e:b1:9a:03:d9:48:d5:90:25:ee:54:a1:1c:93:06: e6:38:2b:70:15:4c:4f:c3:e7:b7:d8:bb:d7:f8:40:1f:b0:e8: 8e:0a:10:87:7e:8a:47:1d:e3:28:dd:17:dc:7f:c9:d2:66:ea: 48:8e:8a:31:b7:92:8a:ce:87:03:de:b4:87:28:15:db:ce:30: b7:ba:83:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbdGJfnWa1nKTMq2XPYJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwNzI0MDAwMjAxWhcNMjYwNzI1MDAwMjAxWjAzMTEwLwYDVQQD EyhlNTc0YmQyMTlmNDM5YjRlYTg0OTI5OTA0ODNhMDFmNGM5NmNhYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K8H1Cwy5ELjl1YcKxzL0WgeIMdq I3+Fk3BGcdQMk5Dxik3DaAspjPd0OBasbu6Y9MU6r7dpmUPXy71XX4UPp3l9eCrI uUDv/fmpN25ozY8cWfr3kp83hgQ/Z+J5renu8oKJM3mPYohE/OKGMS4pzXv3mm92 iPdna6H2sJWLPCWrCXYX3wk6yp16ZHrAeKGqLPc5tWzfeFyv9MG6AUpIeNMgTGGm tqtdN5mKxaRrMiWAozGriFFPAjI6aucTJb3gSxKPPel6G7gMPx6lj6ckCySiOQjn O8pa1yd7VHvrvzC7w3ynUsOrZwGIKmsAA1x9cELdwY/oEZsr0z1H6UkPpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV0vSGfQ5tOqEkpkEg6AfTJbKxYMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV4e0wPd zPR/OvXjx+ZmxdHrzr4O8KWauZOYBhek1b/F4d5NEGe+3rqHnrZv6gDWDeQBIQAr RWhyhn+rv5gZRHNOdB1BbHdpzbSCwh5QJXGZzq+c7Op7p2bfhrQlZUvdoPFR899t iF4nL1FA5yYvuTtiEcsw+073jh6pHZ4Inzs2d/6f7KWOuVb+W/2jFJb0HWzcsoL9 e10R7hBX+ZtMlcLJiBp7KmN9YX8FhfkcYL23SgW/L3v0brGaA9lI1ZAl7lShHJMG 5jgrcBVMT8Pnt9i71/hAH7DojgoQh36KRx3jKN0X3H/J0mbqSI6KMbeSis6HA960 hygV284wt7qDeA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:09:20 2026 by rpki-client