$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: KAUjTWat+lka1ySq1QZ+5OGc3UbhNPmzU279X2ni+p4= Subject key identifier: EE:CE:21:0E:50:A3:C4:D1:3B:26:49:3B:3C:45:EF:C4:67:3F:76:65 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019FA906D37A906CDAF88AE8864B03682AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 14C0 Signing time: Tue 28 Jul 2026 14:00:24 +0000 Manifest this update: Tue 28 Jul 2026 14:00:24 +0000 Manifest next update: Wed 29 Jul 2026 14:00:24 +0000 Files and hashes: 1: 1dfOhFGT4Rz19mHWVabW0kWxTss.roa (hash: Rjg1gNguWYpEwGKvfk1H+hd0eMsqKT2A4N+C2/8Q+uQ=) 2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: bNyojk1Mvn8C6uQkBqlmvN4WfpZm/s9n/xWdsDSfJ7Y=) 3: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 7: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 8: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 9: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 10: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 11: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 12: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 13: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 14: rp3l1DRMo7bxNlcekPEumkx_Cu4.roa (hash: cvH000yVT30CU4NGwC5k2pFAaWGJcYLG4wfqKOyLWIU=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:06:d3:7a:90:6c:da:f8:8a:e8:86:4b:03:68:2a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jul 28 14:00:24 2026 GMT Not After : Jul 29 14:00:24 2026 GMT Subject: CN=eece210e50a3c4d13b26493b3c45efc4673f7665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:35:84:0f:7b:f0:c9:4b:30:3d:25:14:f1: 1c:3b:7a:00:38:56:0b:c9:bf:e4:84:96:51:4d:f1: 72:5e:b0:c4:91:c6:ca:fc:42:29:09:cb:f5:ff:c7: 42:f3:1d:28:ca:60:01:c1:68:72:75:2a:b8:5c:c2: ac:b0:c7:b7:62:92:ea:3f:7c:0b:13:fb:1e:b5:21: 57:3c:d7:6f:75:f5:5d:94:07:fb:1b:9b:49:c8:90: c6:79:5d:74:84:45:09:34:cc:48:63:09:88:e3:e4: 59:9f:e5:a5:4c:17:06:be:43:99:a3:26:8c:ed:27: c5:b0:83:8e:9c:48:db:b7:d3:94:f3:3b:3f:e6:06: 60:8f:11:93:be:65:ca:7d:e1:fd:c4:88:2e:21:05: 82:65:1e:27:04:29:a0:6f:e5:33:f4:90:f9:5d:fc: 02:35:bc:ad:0f:02:9c:49:d7:f4:4c:39:02:6c:35: 61:8e:de:0f:07:91:ce:b3:32:80:c3:7a:a6:01:92: 1f:76:f3:07:52:95:6e:04:c5:49:40:4c:a3:ca:d2: c5:3a:be:cd:c7:ca:a2:c2:b9:9a:6c:92:66:55:43: dd:66:95:8b:30:45:9c:ce:a4:94:b5:72:4c:30:4a: b4:6c:9c:8e:96:7a:57:52:74:bf:8a:6a:0c:56:eb: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:21:0E:50:A3:C4:D1:3B:26:49:3B:3C:45:EF:C4:67:3F:76:65 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:77:b2:b6:f8:08:8d:ff:f4:04:02:62:b2:f3:a8:87:79:55: af:a6:4f:34:87:df:af:63:6d:53:a8:86:21:6c:5c:0d:86:9e: 5c:ca:0d:da:0c:2c:7f:b2:ef:93:87:44:dc:cc:32:f2:e1:37: 9e:53:50:7a:41:ad:7e:b4:fa:71:f4:1a:b7:0b:c8:86:fb:5d: e1:79:db:7f:f6:f5:a3:43:7a:e7:b6:fa:23:15:db:b3:48:3b: f3:97:36:e2:11:ff:58:f0:c7:86:d7:2a:76:7e:5d:2e:ed:de: 10:15:88:80:93:34:5b:b8:65:62:41:d0:34:bc:b1:0b:38:d7: dd:a8:50:cd:73:f2:9a:98:07:d3:42:2f:fa:87:8b:a3:aa:65: f3:87:99:6a:ca:7f:f8:5f:da:ee:97:e4:18:59:2e:e4:21:92: 46:5f:5f:41:6e:82:12:01:76:a9:83:2b:0a:a8:58:ee:91:1a: 70:11:1c:eb:b8:a3:2c:86:1c:52:c7:84:a5:90:9a:a1:22:17: 9b:4a:d6:f8:f9:01:cb:20:db:2e:33:82:14:a1:f2:2a:60:a5: 4a:0a:c7:0c:e2:ed:6f:46:6a:78:5a:97:d0:c3:a3:de:95:57: be:34:63:a7:a4:bc:70:3e:c4:2c:ff:21:3d:90:c7:e0:c9:ea: cb:c9:13:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pBtN6kGza+IrohksDaCr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwNzI4MTQwMDI0WhcNMjYwNzI5MTQwMDI0WjAzMTEwLwYDVQQD EyhlZWNlMjEwZTUwYTNjNGQxM2IyNjQ5M2IzYzQ1ZWZjNDY3M2Y3NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J81hA978MlLMD0lFPEcO3oAOFYL yb/khJZRTfFyXrDEkcbK/EIpCcv1/8dC8x0oymABwWhydSq4XMKssMe3YpLqP3wL E/setSFXPNdvdfVdlAf7G5tJyJDGeV10hEUJNMxIYwmI4+RZn+WlTBcGvkOZoyaM 7SfFsIOOnEjbt9OU8zs/5gZgjxGTvmXKfeH9xIguIQWCZR4nBCmgb+Uz9JD5XfwC NbytDwKcSdf0TDkCbDVhjt4PB5HOszKAw3qmAZIfdvMHUpVuBMVJQEyjytLFOr7N x8qiwrmabJJmVUPdZpWLMEWczqSUtXJMMEq0bJyOlnpXUnS/imoMVusi6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7OIQ5Qo8TROyZJOzxF78RnP3ZlMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATneytvgI jf/0BAJisvOoh3lVr6ZPNIffr2NtU6iGIWxcDYaeXMoN2gwsf7Lvk4dE3Mwy8uE3 nlNQekGtfrT6cfQatwvIhvtd4Xnbf/b1o0N657b6IxXbs0g785c24hH/WPDHhtcq dn5dLu3eEBWIgJM0W7hlYkHQNLyxCzjX3ahQzXPympgH00Iv+oeLo6pl84eZasp/ +F/a7pfkGFku5CGSRl9fQW6CEgF2qYMrCqhY7pEacBEc67ijLIYcUseEpZCaoSIX m0rW+PkByyDbLjOCFKHyKmClSgrHDOLtb0ZqeFqX0MOj3pVXvjRjp6S8cD7ELP8h PZDH4Mnqy8kThw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:12:56 2026 by rpki-client