$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: 1A4t/DmfY/ZOjY8PGsv1wTj6lZPhr6KN/lCKXevMWek= Subject key identifier: 8C:73:D3:64:02:E6:31:16:33:2E:EB:C5:8F:C1:AC:7F:7C:1D:5D:CD Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019FAC08BD18150EF1F53A97619F28E11989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1A06 Signing time: Wed 29 Jul 2026 04:01:21 +0000 Manifest this update: Wed 29 Jul 2026 04:01:21 +0000 Manifest next update: Thu 30 Jul 2026 04:01:21 +0000 Files and hashes: 1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 5: Pr4mDq76semd9HzVIDKeDMYvVQQ.roa (hash: FDZv7C+onU2+GR6E81dEXEL21YIE7+gux++CAkqFZL8=) 6: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 7: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 8: jua4hKlutOS31SwhNWPcizeoJNk.roa (hash: GsUfbWZJBpTbGNz+qcdiYy4Y57UODYIplssHp/VIRYc=) 9: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: SLasascE03ay87hovSYqMpHqbzc67apa4NEk3aupUmo=) 11: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=) 12: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:08:bd:18:15:0e:f1:f5:3a:97:61:9f:28:e1:19:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jul 29 04:01:21 2026 GMT Not After : Jul 30 04:01:21 2026 GMT Subject: CN=8c73d36402e63116332eebc58fc1ac7f7c1d5dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:25:fd:7e:df:48:45:b1:6a:16:1f:53:ff: 9f:46:82:b2:e5:24:0b:9d:e3:78:f1:ae:05:9c:99: 22:53:21:4b:47:8f:40:b5:a9:66:d9:c3:ef:c4:f5: 44:3d:7b:61:d9:36:4c:8f:11:77:55:aa:22:46:60: f3:73:c9:52:72:e8:c4:29:e9:88:22:3d:04:c9:49: 31:79:47:bb:12:e8:f8:16:5a:df:bd:a2:5b:64:e4: 8f:84:b2:b7:b0:50:23:8e:e1:b5:92:88:bc:c0:ca: a4:0a:ad:19:f0:13:db:1d:68:dc:8e:b4:3d:cc:64: 3e:f3:4d:0c:97:4c:56:27:ed:06:ef:56:49:4c:cb: 5b:a0:66:b1:95:8d:73:9b:54:ce:72:66:25:75:45: 26:11:9a:84:11:f2:a4:34:91:cd:cd:72:4f:06:fc: 06:92:56:63:1d:e5:1b:ea:e3:eb:3a:d5:30:b4:ff: 9c:f3:55:3a:61:95:c0:55:2b:98:6c:33:d0:a9:dc: 43:63:ff:65:ba:6e:93:ef:be:48:35:af:bb:aa:f2: 93:90:cb:00:16:13:12:d8:ce:37:e2:b3:8d:fc:93: fc:42:c5:fc:ce:46:d8:d4:27:80:d0:05:84:5a:2b: e6:5d:a8:db:4f:f0:4a:04:e8:e9:9a:da:1f:0f:9c: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:73:D3:64:02:E6:31:16:33:2E:EB:C5:8F:C1:AC:7F:7C:1D:5D:CD X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8a:2b:86:15:15:2f:9b:53:c5:89:41:88:2b:16:a0:37:18: 9b:6a:18:7e:1b:d6:32:22:4c:bc:8d:fd:12:15:68:42:8e:db: 0d:fd:46:39:9b:93:4c:1a:87:81:bd:86:42:90:ca:51:0b:36: dc:0d:f3:2d:65:fd:b3:7f:54:3f:4e:64:ee:ce:2f:09:3b:3e: b4:5f:1f:a1:ff:20:d1:e9:01:04:30:db:ce:0d:60:7f:32:f1: 8a:df:97:6f:24:51:a7:d3:d4:a7:19:7e:f7:d4:13:06:53:e0: 92:9a:64:bb:6c:78:d1:67:7b:78:54:fd:91:f0:ee:da:e4:0c: e0:7f:f7:f2:c5:4f:b4:96:5c:90:15:18:1c:6c:ec:2c:8d:ad: 45:f3:49:85:bc:f4:7b:08:1e:a6:63:a3:3b:6a:cc:f1:9f:73: 7e:e0:5c:83:a8:18:95:ce:11:ec:fc:8e:1a:8e:c8:67:f7:45: 6b:aa:5a:0e:33:a1:4b:fc:7c:dc:12:61:e6:32:27:2f:4d:f6: da:c7:03:37:f2:83:3c:2d:8c:dd:c8:d9:ef:dd:9e:51:8d:82: 32:b0:f3:41:f8:44:2f:88:2b:84:60:01:b6:d6:75:66:fa:1b: b2:5c:6f:70:10:39:0a:e5:93:71:52:4a:b9:12:57:3d:c7:1f: 5d:d4:22:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sCL0YFQ7x9TqXYZ8o4RmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwNzI5MDQwMTIxWhcNMjYwNzMwMDQwMTIxWjAzMTEwLwYDVQQD Eyg4YzczZDM2NDAyZTYzMTE2MzMyZWViYzU4ZmMxYWM3ZjdjMWQ1ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiol/X7fSEWxahYfU/+fRoKy5SQL neN48a4FnJkiUyFLR49Atalm2cPvxPVEPXth2TZMjxF3VaoiRmDzc8lScujEKemI Ij0EyUkxeUe7Euj4FlrfvaJbZOSPhLK3sFAjjuG1koi8wMqkCq0Z8BPbHWjcjrQ9 zGQ+800Ml0xWJ+0G71ZJTMtboGaxlY1zm1TOcmYldUUmEZqEEfKkNJHNzXJPBvwG klZjHeUb6uPrOtUwtP+c81U6YZXAVSuYbDPQqdxDY/9lum6T775INa+7qvKTkMsA FhMS2M434rON/JP8QsX8zkbY1CeA0AWEWivmXajbT/BKBOjpmtofD5yA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxz02QC5jEWMy7rxY/BrH98HV3NMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoorhhUV L5tTxYlBiCsWoDcYm2oYfhvWMiJMvI39EhVoQo7bDf1GOZuTTBqHgb2GQpDKUQs2 3A3zLWX9s39UP05k7s4vCTs+tF8fof8g0ekBBDDbzg1gfzLxit+XbyRRp9PUpxl+ 99QTBlPgkppku2x40Wd7eFT9kfDu2uQM4H/38sVPtJZckBUYHGzsLI2tRfNJhbz0 ewgepmOjO2rM8Z9zfuBcg6gYlc4R7PyOGo7IZ/dFa6paDjOhS/x83BJh5jInL032 2scDN/KDPC2M3cjZ792eUY2CMrDzQfhEL4grhGABttZ1ZvobslxvcBA5CuWTcVJK uRJXPccfXdQijw== -----END CERTIFICATE-----Generated at Wed Jul 29 06:47:20 2026 by rpki-client