$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: Kz4dS+HKESRyYQ0rSZmIdSD4zDKOW5VX5uHSmwwfRTU= Subject key identifier: A5:AE:3F:82:60:EF:AA:3B:B4:B5:AC:F3:A5:87:EC:17:BD:4B:D2:CC Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 019FA899F15C267CD4F0EAD179B0798C6EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:01:28 +0000 Manifest this update: Tue 28 Jul 2026 12:01:28 +0000 Manifest next update: Wed 29 Jul 2026 12:01:28 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: nRv4zugO4FovK8+fooLRpOVqqnNHptuxy3M06GkGMoE=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:f1:5c:26:7c:d4:f0:ea:d1:79:b0:79:8c:6e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Jul 28 12:01:28 2026 GMT Not After : Jul 29 12:01:28 2026 GMT Subject: CN=a5ae3f8260efaa3bb4b5acf3a587ec17bd4bd2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:7b:96:33:24:b7:97:49:74:c5:75:3b:d7: e7:14:15:f1:aa:08:75:7c:49:c1:8e:f7:94:f3:9f: 07:69:99:ad:1b:3d:66:34:52:e8:66:b1:cd:e4:34: 95:6a:c5:f8:fe:ee:4e:d5:06:c8:75:8d:11:d6:11: 57:96:40:8b:86:02:aa:08:45:4d:fe:f5:80:a8:74: 9e:da:28:27:7a:2b:7a:b4:71:ca:9b:8f:99:ef:cc: 02:24:98:df:da:40:8f:aa:8d:60:a8:87:74:8e:5f: 5f:94:c6:e5:fc:5c:8f:2e:0f:e8:cc:65:4f:80:1c: a6:06:9a:2f:10:55:0a:17:31:cb:25:76:a1:66:49: 18:8a:af:94:d5:bf:c9:5d:6a:84:26:f2:3b:eb:a6: fb:6d:b4:e1:a5:37:a4:c9:77:08:c0:37:93:0d:de: 48:0b:2f:cc:1f:0e:24:28:3a:67:1e:dd:db:57:cb: f2:aa:6c:cd:a5:9d:ec:ac:7e:4a:f2:a1:ce:cb:58: 04:05:8a:af:e5:16:6b:d3:f3:c8:48:73:38:c6:8e: 2b:e0:80:70:79:a8:39:38:ba:d8:e4:8c:95:b5:69: a1:86:5f:9c:64:9b:03:ea:1c:be:3d:e1:91:a3:ba: a4:4c:8f:b0:e8:92:a6:d7:aa:ae:28:19:69:29:82: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AE:3F:82:60:EF:AA:3B:B4:B5:AC:F3:A5:87:EC:17:BD:4B:D2:CC X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bc:de:52:46:e4:25:2e:84:c4:04:5e:db:13:5b:f7:bd:08: 4f:3e:b5:87:2a:11:64:6a:dd:6f:ec:d7:69:3d:76:73:67:53: d6:91:de:09:c5:00:a0:30:79:d3:5b:ec:97:3d:ee:a3:ae:e8: 28:98:d3:03:24:05:e4:a1:bf:93:b3:37:03:a8:c6:15:5d:08: 42:71:67:48:c7:c2:89:0f:ba:d8:e6:b8:93:2f:ac:b5:ce:20: 90:ca:2e:de:9a:d9:60:dd:57:15:a1:22:b8:86:87:43:a3:56: 63:23:1b:a0:73:bb:4c:71:8d:cc:a3:76:76:40:6a:f4:00:f6: f8:1e:aa:0b:67:bd:17:3d:3a:5a:43:4d:b6:f5:50:da:22:f2: 4f:37:83:ac:3d:85:7d:fa:25:b1:af:e9:74:6b:cf:ae:18:c7: 9e:9b:b4:ef:89:d2:2f:13:10:34:70:8f:7e:5c:b9:b9:08:4e: 48:fd:03:3c:aa:08:ec:37:d3:9b:52:74:55:06:51:b2:24:2d: 17:43:cd:84:44:56:08:e4:86:64:eb:46:71:c5:a8:8b:de:f2: de:5b:63:72:2e:6b:c1:67:26:37:47:ae:00:92:1d:d6:84:05: 36:3e:0b:08:2f:4e:1f:d8:ac:c6:36:30:b5:c8:1f:02:64:92: e8:95:9d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omfFcJnzU8OrRebB5jG7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwNzI4MTIwMTI4WhcNMjYwNzI5MTIwMTI4WjAzMTEwLwYDVQQD EyhhNWFlM2Y4MjYwZWZhYTNiYjRiNWFjZjNhNTg3ZWMxN2JkNGJkMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp717ljMkt5dJdMV1O9fnFBXxqgh1 fEnBjveU858HaZmtGz1mNFLoZrHN5DSVasX4/u5O1QbIdY0R1hFXlkCLhgKqCEVN /vWAqHSe2igneit6tHHKm4+Z78wCJJjf2kCPqo1gqId0jl9flMbl/FyPLg/ozGVP gBymBpovEFUKFzHLJXahZkkYiq+U1b/JXWqEJvI766b7bbThpTekyXcIwDeTDd5I Cy/MHw4kKDpnHt3bV8vyqmzNpZ3srH5K8qHOy1gEBYqv5RZr0/PISHM4xo4r4IBw eag5OLrY5IyVtWmhhl+cZJsD6hy+PeGRo7qkTI+w6JKm16quKBlpKYIGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWuP4Jg76o7tLWs86WH7Be9S9LMMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7zeUkbk JS6ExARe2xNb970ITz61hyoRZGrdb+zXaT12c2dT1pHeCcUAoDB501vslz3uo67o KJjTAyQF5KG/k7M3A6jGFV0IQnFnSMfCiQ+62Oa4ky+stc4gkMou3prZYN1XFaEi uIaHQ6NWYyMboHO7THGNzKN2dkBq9AD2+B6qC2e9Fz06WkNNtvVQ2iLyTzeDrD2F ffolsa/pdGvPrhjHnpu074nSLxMQNHCPfly5uQhOSP0DPKoI7DfTm1J0VQZRsiQt F0PNhERWCOSGZOtGccWoi97y3ltjci5rwWcmN0euAJId1oQFNj4LCC9OH9isxjYw tcgfAmSS6JWdmQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:07:48 2026 by rpki-client