$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json) Hash identifier: 2U3WdGTQnzEUimcScor6/1pluE54eDp8tptcg6d6O9I= Subject key identifier: A2:58:2C:0C:71:83:83:A5:7F:E6:0F:82:E9:82:B3:43:FF:B2:81:B2 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019FAABED6C8B2764021E508B997A303E8A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft Manifest number: 19E5 Signing time: Tue 28 Jul 2026 22:01:01 +0000 Manifest this update: Tue 28 Jul 2026 22:01:01 +0000 Manifest next update: Wed 29 Jul 2026 22:01:01 +0000 Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=) 2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: MBAOQZAfBCCo7fBfVTX8lrkwd+RavOcD0uD0SeDlkfw=) 3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=) 4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=) 5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=) 6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=) 7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=) 8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=) 9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=) 10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:d6:c8:b2:76:40:21:e5:08:b9:97:a3:03:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jul 28 22:01:01 2026 GMT Not After : Jul 29 22:01:01 2026 GMT Subject: CN=a2582c0c718383a57fe60f82e982b343ffb281b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:23:8d:4c:46:c5:f3:5d:82:af:ca:a9:4d: 38:ba:0e:05:f7:d4:33:e5:bf:7a:45:58:b5:e6:07: aa:ec:6a:cb:b7:08:34:eb:f9:fa:d0:4a:56:f2:f6: 72:e5:3d:ca:d4:f4:4e:6e:ff:60:63:41:62:e4:cc: 59:6d:98:1e:39:31:e6:e4:35:e5:38:30:49:2e:3d: 77:52:f6:f8:1f:35:20:6e:c6:58:72:45:da:6b:5b: 3a:2e:97:fc:29:39:fc:03:00:4b:28:52:19:30:d4: 6f:d6:e2:5b:37:27:16:bd:f3:5a:7c:50:ef:ff:10: ad:a2:77:09:e8:74:8b:39:0f:76:9f:d0:c8:56:3f: a1:b5:52:05:4b:d9:e2:fe:cd:84:c9:5e:bf:a4:06: 9b:e9:a3:82:07:7e:fe:17:b4:17:43:8b:27:4b:07: 38:1a:62:33:10:9b:f6:71:10:45:7f:f4:6e:b4:f1: 7e:35:2d:fb:43:91:75:01:59:49:40:0a:02:7b:60: 1e:23:dd:40:df:7e:8d:46:16:47:12:d3:8f:73:28: a1:af:10:d5:b2:be:9a:e0:39:05:27:0b:06:88:a5: 80:4c:80:e9:d4:82:9a:fd:40:ba:64:7a:33:5e:82: 56:ef:dc:d1:54:cf:0c:33:cb:57:0a:bc:92:d0:62: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:2C:0C:71:83:83:A5:7F:E6:0F:82:E9:82:B3:43:FF:B2:81:B2 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:00:42:78:d9:9c:87:7e:0e:ab:77:06:78:b0:2e:1f:20:ac: 1a:aa:52:f4:ca:69:6f:e1:70:67:8f:e4:a0:0e:d3:e0:0f:5b: 7a:94:de:57:4b:00:1c:4d:0a:ff:d2:21:3b:5a:09:e9:09:c5: 9f:2b:7f:9d:fe:46:1e:7b:af:ec:08:fc:47:42:41:bc:59:46: 58:bf:4b:6b:47:58:2b:2e:77:40:27:96:45:9a:ad:6a:7d:5f: 92:10:a6:33:c4:7d:de:50:74:09:0c:32:0b:6f:ed:bc:db:20: be:4e:9e:d0:bb:42:c7:01:de:bc:36:2c:a9:41:37:1e:1e:07: 2e:38:18:da:f7:f0:90:9b:f4:9e:8e:15:9c:9b:4f:db:8c:6c: fc:bb:1f:d4:cb:70:b6:e4:10:cf:f8:31:c8:e4:c9:a6:f0:02: 27:59:e4:ce:42:3b:5f:60:4c:b1:86:d2:a1:b4:50:f9:76:ee: cb:c2:59:e4:b3:a2:73:4d:8e:d9:00:f6:e5:e5:84:69:38:09: 88:48:68:1c:8b:ce:61:dc:8a:34:2b:fa:5b:e2:30:bf:fe:68: 14:a4:6d:72:9b:65:39:b2:af:c0:59:f7:51:d6:3b:dd:d3:28: 91:10:f3:55:57:c3:9a:26:23:8f:33:41:48:39:a3:1f:18:a0: 53:1d:3f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvtbIsnZAIeUIuZejA+igMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwNzI4MjIwMTAxWhcNMjYwNzI5MjIwMTAxWjAzMTEwLwYDVQQD EyhhMjU4MmMwYzcxODM4M2E1N2ZlNjBmODJlOTgyYjM0M2ZmYjI4MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PojjUxGxfNdgq/KqU04ug4F99Qz 5b96RVi15geq7GrLtwg06/n60EpW8vZy5T3K1PRObv9gY0Fi5MxZbZgeOTHm5DXl ODBJLj13Uvb4HzUgbsZYckXaa1s6Lpf8KTn8AwBLKFIZMNRv1uJbNycWvfNafFDv /xCtoncJ6HSLOQ92n9DIVj+htVIFS9ni/s2EyV6/pAab6aOCB37+F7QXQ4snSwc4 GmIzEJv2cRBFf/RutPF+NS37Q5F1AVlJQAoCe2AeI91A336NRhZHEtOPcyihrxDV sr6a4DkFJwsGiKWATIDp1IKa/UC6ZHozXoJW79zRVM8MM8tXCryS0GIR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJYLAxxg4Olf+YPgumCs0P/soGyMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALABCeNmc h34Oq3cGeLAuHyCsGqpS9Mppb+FwZ4/koA7T4A9bepTeV0sAHE0K/9IhO1oJ6QnF nyt/nf5GHnuv7Aj8R0JBvFlGWL9La0dYKy53QCeWRZqtan1fkhCmM8R93lB0CQwy C2/tvNsgvk6e0LtCxwHevDYsqUE3Hh4HLjgY2vfwkJv0no4VnJtP24xs/Lsf1Mtw tuQQz/gxyOTJpvACJ1nkzkI7X2BMsYbSobRQ+Xbuy8JZ5LOic02O2QD25eWEaTgJ iEhoHIvOYdyKNCv6W+Iwv/5oFKRtcptlObKvwFn3UdY73dMokRDzVVfDmiYjjzNB SDmjHxigUx0/Bg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:41:03 2026 by rpki-client