$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: aeIFIRf4rB7BULN3cpPNHolOFLiOLScaDUL2thnk8kQ= Subject key identifier: 5C:DA:E5:63:9E:E1:6D:15:D0:90:8F:48:5F:DE:E6:6A:A9:1E:DB:D9 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019FAA50F62D90E5FA38667904BB2CCE2362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0518 Signing time: Tue 28 Jul 2026 20:01:00 +0000 Manifest this update: Tue 28 Jul 2026 20:01:00 +0000 Manifest next update: Wed 29 Jul 2026 20:01:00 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 12: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 13: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: WLWDwSsDedLUv5vEgzOGXtSoQFnE/8OR+TV2YH1l+kQ=) 15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:f6:2d:90:e5:fa:38:66:79:04:bb:2c:ce:23:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jul 28 20:01:00 2026 GMT Not After : Jul 29 20:01:00 2026 GMT Subject: CN=5cdae5639ee16d15d0908f485fdee66aa91edbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:7e:43:5a:7f:7d:6b:2d:d7:ca:dc:dc:13: 3f:9f:bd:4d:67:46:00:fc:20:f7:a0:f4:b1:cf:a8: 7e:b8:bf:81:57:c0:87:1f:7e:46:01:63:68:1e:e8: 0a:72:af:ee:71:49:4a:8a:ee:9a:64:53:e9:95:81: eb:d2:5f:a1:ef:0e:e8:6f:b8:ad:01:14:ca:e6:fd: 73:a0:88:20:00:35:e9:69:e2:13:ba:58:2c:17:e5: 0e:d0:a4:af:b4:fd:70:9c:2a:36:78:b3:a5:94:41: 64:14:99:f1:bf:1b:fa:f5:34:a2:82:2c:33:ce:b0: 38:3d:b3:eb:c2:93:60:3d:30:2c:02:90:7c:8c:e8: 45:c9:8d:9f:df:c7:0e:bd:89:b1:0f:e8:44:94:70: c7:02:13:95:07:95:bd:bf:e0:98:f1:eb:ed:44:57: db:45:9b:92:a1:c2:69:f3:70:a1:57:af:a1:eb:81: a6:14:0d:c0:ca:32:ff:4d:0f:3a:d0:00:b8:62:27: 8b:1c:f7:1c:66:f0:ee:2f:53:52:0b:55:e0:ce:d9: 07:d1:73:f3:fb:df:52:4d:08:75:28:c6:f2:ca:1b: 10:2f:24:09:72:14:79:c5:f0:45:bf:2d:a0:86:3e: da:cd:aa:b4:e6:8f:d9:dc:04:c5:02:42:32:ba:32: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:E5:63:9E:E1:6D:15:D0:90:8F:48:5F:DE:E6:6A:A9:1E:DB:D9 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ff:68:bb:56:c1:83:de:71:dc:4c:03:80:e2:fc:1f:ce:58: 13:57:03:68:b5:ec:df:04:e9:39:a6:31:6b:0a:b2:fb:8e:e2: 98:f5:68:15:9f:fe:3b:5e:5a:0b:86:6b:d0:ee:9a:93:94:09: 4b:7a:a2:a6:1b:4a:a3:29:c7:6f:d5:2e:84:a3:6f:34:94:66: d5:7a:f0:f8:1d:1c:f9:bc:36:7a:39:50:ca:29:fa:4a:01:c6: 40:2f:f2:28:5e:74:50:48:f9:91:82:0e:bd:0c:52:1b:f5:22: 98:27:8d:de:a1:e6:f9:e3:15:0e:95:a6:4f:cc:73:5c:d7:07: e2:43:20:c2:5f:02:4b:57:89:a7:3b:fb:55:c9:96:fd:3d:de: 94:ba:37:0e:1b:54:c6:5e:40:66:cb:cd:58:26:7c:02:64:dd: 9b:23:48:b8:3c:5c:d4:4d:1e:2b:30:f0:6c:09:37:d4:d8:04: 92:aa:d7:f1:5c:32:0f:de:0d:1b:98:67:0d:68:3b:aa:8a:2c: 85:08:5b:7e:80:24:07:93:43:ac:6b:76:24:5a:5b:72:6d:eb: 76:91:10:d1:66:bf:0c:0a:89:1e:a8:b6:75:e0:9a:6a:3b:92: ab:c2:21:57:22:86:de:3e:89:24:25:95:c6:44:44:12:ef:c8: cb:c1:c4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUPYtkOX6OGZ5BLssziNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwNzI4MjAwMTAwWhcNMjYwNzI5MjAwMTAwWjAzMTEwLwYDVQQD Eyg1Y2RhZTU2MzllZTE2ZDE1ZDA5MDhmNDg1ZmRlZTY2YWE5MWVkYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyl+Q1p/fWst18rc3BM/n71NZ0YA /CD3oPSxz6h+uL+BV8CHH35GAWNoHugKcq/ucUlKiu6aZFPplYHr0l+h7w7ob7it ARTK5v1zoIggADXpaeITulgsF+UO0KSvtP1wnCo2eLOllEFkFJnxvxv69TSigiwz zrA4PbPrwpNgPTAsApB8jOhFyY2f38cOvYmxD+hElHDHAhOVB5W9v+CY8evtRFfb RZuSocJp83ChV6+h64GmFA3AyjL/TQ860AC4YieLHPccZvDuL1NSC1XgztkH0XPz +99STQh1KMbyyhsQLyQJchR5xfBFvy2ghj7azaq05o/Z3ATFAkIyujLgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFza5WOe4W0V0JCPSF/e5mqpHtvZMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv9ou1bB g95x3EwDgOL8H85YE1cDaLXs3wTpOaYxawqy+47imPVoFZ/+O15aC4Zr0O6ak5QJ S3qiphtKoynHb9UuhKNvNJRm1Xrw+B0c+bw2ejlQyin6SgHGQC/yKF50UEj5kYIO vQxSG/UimCeN3qHm+eMVDpWmT8xzXNcH4kMgwl8CS1eJpzv7VcmW/T3elLo3DhtU xl5AZsvNWCZ8AmTdmyNIuDxc1E0eKzDwbAk31NgEkqrX8VwyD94NG5hnDWg7qoos hQhbfoAkB5NDrGt2JFpbcm3rdpEQ0Wa/DAqJHqi2deCaajuSq8IhVyKG3j6JJCWV xkREEu/Iy8HEaQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:21:43 2026 by rpki-client