$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: muOcOW4vWttPmp+qUhOvsVVHhmnwDzqa/gBY6CFG6lY= Subject key identifier: 8F:CF:AC:94:50:31:C8:25:EE:A6:ED:A8:9E:3C:73:4A:09:C5:94:EF Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019FA7BDCF4FE6DDF08D936BD4D30B7ADDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0F15 Signing time: Tue 28 Jul 2026 08:01:02 +0000 Manifest this update: Tue 28 Jul 2026 08:01:02 +0000 Manifest next update: Wed 29 Jul 2026 08:01:02 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 3: CcVgFG7BZonjVWr4-H-FOyJB6rU.asa (hash: laUwrqbn5y+IuSKtz7iff3aTwLc/uHIZOpDttjq0UN0=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: 51xDfeNd63pc8dkfWyJ40Mz4XYzcCGoIxTVTY0Z05GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:cf:4f:e6:dd:f0:8d:93:6b:d4:d3:0b:7a:dd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jul 28 08:01:02 2026 GMT Not After : Jul 29 08:01:02 2026 GMT Subject: CN=8fcfac945031c825eea6eda89e3c734a09c594ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:b5:f2:d7:be:cc:8b:01:0a:63:c0:ce:64: e4:f8:8a:ab:83:28:e2:df:c8:35:4a:da:3a:9b:68: 15:28:51:b9:d5:18:ef:d4:4e:70:77:6a:43:94:2a: 4f:41:57:67:f3:71:13:09:a3:99:75:71:af:fd:0b: 3f:f5:69:02:08:15:b1:93:c0:80:60:eb:73:2d:72: 6f:bc:f5:cb:7b:4f:2e:50:74:71:61:db:47:2a:69: e3:c3:cb:dc:1b:76:a8:14:1a:4d:8a:76:39:78:03: ad:31:89:3f:ed:dc:49:ca:ad:0c:99:2e:d2:0a:7e: 6d:e2:23:7e:27:43:e3:0a:1a:c5:9b:f4:7f:85:45: 7e:b8:0e:4f:47:04:79:e7:38:69:0a:17:6f:73:e7: a5:00:02:35:dc:89:ab:66:17:7a:b4:52:65:3e:06: e3:e2:be:66:60:00:53:44:02:93:e3:01:fe:92:a2: 56:28:75:cf:d5:18:7c:a3:cc:37:2f:9b:65:02:e7: fc:dd:b6:c2:dd:6a:85:f4:26:f5:c9:dd:a9:e8:ec: 78:f0:79:90:52:37:d4:86:0b:e0:5c:8c:e1:9c:55: 8e:ca:e7:1b:c5:5d:e3:65:c0:ed:8e:7c:94:b6:39: ae:9e:aa:60:5c:0e:0d:b6:a6:60:65:b3:63:00:05: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CF:AC:94:50:31:C8:25:EE:A6:ED:A8:9E:3C:73:4A:09:C5:94:EF X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:1c:bf:39:cd:83:a3:41:41:02:79:f4:0c:74:7d:c7:80:16: 34:a9:18:46:a6:e0:af:be:11:3b:4e:ec:f9:f7:64:25:9f:ae: ed:79:e0:d2:09:a7:c5:b8:e7:16:d4:72:da:71:3e:6d:a4:80: 21:55:c0:77:ce:94:6a:e5:ca:43:44:e7:5a:d3:d7:9e:87:6b: 0e:97:a8:2f:85:f5:00:a7:d2:66:b4:44:a1:4e:94:52:fb:9c: 1c:ae:97:38:89:6f:1f:6f:f1:bb:49:54:4e:c3:a8:e7:df:2f: a8:5e:37:a1:33:5e:70:0f:3b:7a:70:ae:40:88:92:d5:e0:bf: 3f:6b:da:cc:a0:ae:15:dd:25:73:7a:7f:ae:a6:7d:5b:8c:47: 54:83:73:40:29:a9:48:21:72:cc:04:c8:12:75:5f:19:d6:ba: 29:d0:cf:d1:69:d2:97:d1:94:bd:23:7c:87:d6:b3:f0:f4:12: 69:f4:a0:60:2c:4e:08:52:80:d8:d4:2a:92:f5:ab:ab:6f:77: 31:00:13:ae:8a:5e:03:7c:eb:83:78:8d:89:80:ea:97:69:29: 67:3a:8f:3c:9e:69:d8:65:dc:a9:b7:66:1a:60:dd:35:d5:e7: 29:06:a6:0c:22:b4:52:d2:40:6a:cf:41:60:3f:71:cf:a3:4e: 67:4a:8d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvc9P5t3wjZNr1NMLet3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNzI4MDgwMTAyWhcNMjYwNzI5MDgwMTAyWjAzMTEwLwYDVQQD Eyg4ZmNmYWM5NDUwMzFjODI1ZWVhNmVkYTg5ZTNjNzM0YTA5YzU5NGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0m18te+zIsBCmPAzmTk+Iqrgyji 38g1Sto6m2gVKFG51Rjv1E5wd2pDlCpPQVdn83ETCaOZdXGv/Qs/9WkCCBWxk8CA YOtzLXJvvPXLe08uUHRxYdtHKmnjw8vcG3aoFBpNinY5eAOtMYk/7dxJyq0MmS7S Cn5t4iN+J0PjChrFm/R/hUV+uA5PRwR55zhpChdvc+elAAI13ImrZhd6tFJlPgbj 4r5mYABTRAKT4wH+kqJWKHXP1Rh8o8w3L5tlAuf83bbC3WqF9Cb1yd2p6Ox48HmQ UjfUhgvgXIzhnFWOyucbxV3jZcDtjnyUtjmunqpgXA4NtqZgZbNjAAUMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/PrJRQMcgl7qbtqJ48c0oJxZTvMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxy/Oc2D o0FBAnn0DHR9x4AWNKkYRqbgr74RO07s+fdkJZ+u7Xng0gmnxbjnFtRy2nE+baSA IVXAd86UauXKQ0TnWtPXnodrDpeoL4X1AKfSZrREoU6UUvucHK6XOIlvH2/xu0lU TsOo598vqF43oTNecA87enCuQIiS1eC/P2vazKCuFd0lc3p/rqZ9W4xHVINzQCmp SCFyzATIEnVfGda6KdDP0WnSl9GUvSN8h9az8PQSafSgYCxOCFKA2NQqkvWrq293 MQATropeA3zrg3iNiYDql2kpZzqPPJ5p2GXcqbdmGmDdNdXnKQamDCK0UtJAas9B YD9xz6NOZ0qNEQ== -----END CERTIFICATE-----Generated at Tue Jul 28 15:56:19 2026 by rpki-client