$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: g1l5YpX81r7vnEHea8Ob3X/T1oD3Cd45iexJi/RJHBA= Subject key identifier: 66:9B:08:00:D8:11:A4:1D:34:AB:FB:E6:17:18:98:B4:86:BD:87:5B Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 019FA9E2EB60B4C99B8798AEDA200D0D4179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 0152 Signing time: Tue 28 Jul 2026 18:00:48 +0000 Manifest this update: Tue 28 Jul 2026 18:00:48 +0000 Manifest next update: Wed 29 Jul 2026 18:00:48 +0000 Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: xfA2VhAkjnLs+EEa/x06/YWXZPWp8xMpE3xBQYaNmzI=) 3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 5: b3e-kztK16dNJ4hjcUxvpEGWdz0.roa (hash: 8EZoV6vzVeuipBhh3IecuZX3yaL/9h5v2euKRytgqTI=) 6: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (hash: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=) 7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 8: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 9: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 10: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 11: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:eb:60:b4:c9:9b:87:98:ae:da:20:0d:0d:41:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Jul 28 18:00:48 2026 GMT Not After : Jul 29 18:00:48 2026 GMT Subject: CN=669b0800d811a41d34abfbe6171898b486bd875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:42:81:07:da:86:32:c8:9e:16:47:05:b7: 02:74:b2:2d:dd:9f:9b:c3:36:4a:98:fd:26:14:bc: ec:57:61:9e:46:37:4b:c4:aa:14:90:53:58:0f:51: d7:86:01:11:46:ce:05:6b:f8:bf:5e:6b:5b:ef:8d: 7e:f2:1a:4e:af:52:07:2c:18:a0:cb:08:45:ee:a6: 36:64:b1:0e:f7:54:05:f7:b1:26:cf:28:69:b4:9d: ae:93:ae:67:0b:98:77:64:b8:6f:af:07:76:c2:7d: e8:10:69:55:2f:be:54:ce:25:a2:2f:b6:8d:b8:0c: e4:bc:f3:7f:58:c9:d4:4a:29:93:26:3e:cb:e7:10: 8b:45:37:c2:71:43:ab:7c:59:df:00:c1:bb:3e:67: 55:8c:da:32:92:f5:79:aa:66:1a:51:d0:3d:f4:e2: 91:82:db:70:16:a6:fc:2b:45:4c:81:cd:ca:2a:62: 08:4f:03:aa:b2:86:a9:ca:1b:4d:a0:06:02:bb:f4: fc:00:01:43:e0:d7:17:af:40:03:ed:49:1d:78:ba: a3:a7:f0:52:ea:e3:14:b2:17:d0:a4:8b:e0:d7:1c: 36:eb:b6:7b:4a:f6:51:c6:7c:d8:d6:96:7c:58:e8: 63:14:f8:ae:2c:81:3a:61:7b:62:37:99:7f:2f:97: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:08:00:D8:11:A4:1D:34:AB:FB:E6:17:18:98:B4:86:BD:87:5B X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:78:d2:28:2e:3a:b2:d3:24:4d:19:9a:cf:9c:3f:8c:d6:3b: 69:05:ff:85:2a:5e:8a:5e:0e:e9:14:ee:cc:f0:ca:f5:8d:ab: 0b:be:0a:d4:ba:0c:60:b5:77:79:94:4e:6d:13:a7:de:a0:99: 43:11:79:b1:17:a5:09:ad:43:45:0f:e3:6d:5b:9c:31:cb:a6: 25:03:02:3e:d8:d4:17:0f:36:70:52:4d:40:16:1c:7f:56:18: cc:23:7c:4a:ff:30:ff:4e:dd:97:a7:31:10:e7:57:a5:58:a1: c5:04:35:ee:8a:b1:50:ea:ce:9c:e1:a4:ce:4d:ee:11:18:38: 99:5d:f3:13:ad:ca:26:7b:2a:53:96:fc:59:7d:de:dc:28:d5: 29:c0:d3:c8:6d:80:57:b1:b7:d9:29:5e:07:d5:35:01:9c:96: 50:b9:51:88:ec:78:13:3d:71:1e:b2:d7:c2:bf:b7:e8:e0:d4: 2e:2c:8f:90:42:91:a6:23:8c:14:c3:18:9c:88:51:77:30:8e: f1:c9:f0:cd:d8:ef:3c:3b:f9:28:b4:0c:08:13:dd:85:61:d3: c9:bf:4a:e8:ce:fc:32:e7:84:d5:e5:e6:f4:59:ef:a5:c4:ad: 2c:10:41:c8:2f:6e:a9:ff:41:1d:8c:cb:be:66:dc:31:ca:1c: e5:97:fa:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4utgtMmbh5iu2iANDUF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYwNzI4MTgwMDQ4WhcNMjYwNzI5MTgwMDQ4WjAzMTEwLwYDVQQD Eyg2NjliMDgwMGQ4MTFhNDFkMzRhYmZiZTYxNzE4OThiNDg2YmQ4NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RBCgQfahjLInhZHBbcCdLIt3Z+b wzZKmP0mFLzsV2GeRjdLxKoUkFNYD1HXhgERRs4Fa/i/Xmtb741+8hpOr1IHLBig ywhF7qY2ZLEO91QF97EmzyhptJ2uk65nC5h3ZLhvrwd2wn3oEGlVL75UziWiL7aN uAzkvPN/WMnUSimTJj7L5xCLRTfCcUOrfFnfAMG7PmdVjNoykvV5qmYaUdA99OKR gttwFqb8K0VMgc3KKmIITwOqsoapyhtNoAYCu/T8AAFD4NcXr0AD7UkdeLqjp/BS 6uMUshfQpIvg1xw267Z7SvZRxnzY1pZ8WOhjFPiuLIE6YXtiN5l/L5ctiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGabCADYEaQdNKv75hcYmLSGvYdbMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHjSKC46 stMkTRmaz5w/jNY7aQX/hSpeil4O6RTuzPDK9Y2rC74K1LoMYLV3eZRObROn3qCZ QxF5sRelCa1DRQ/jbVucMcumJQMCPtjUFw82cFJNQBYcf1YYzCN8Sv8w/07dl6cx EOdXpVihxQQ17oqxUOrOnOGkzk3uERg4mV3zE63KJnsqU5b8WX3e3CjVKcDTyG2A V7G32SleB9U1AZyWULlRiOx4Ez1xHrLXwr+36ODULiyPkEKRpiOMFMMYnIhRdzCO 8cnwzdjvPDv5KLQMCBPdhWHTyb9K6M78MueE1eXm9FnvpcStLBBByC9uqf9BHYzL vmbcMcoc5Zf6cA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:31 2026 by rpki-client