$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: nQ1Yfe2PdhRp/AZqW8C9gX4b0QIh5hXc2lXcDoWsTdg= Subject key identifier: ED:50:95:C4:57:B5:18:3B:A7:18:E8:EF:C0:32:74:13:8E:A6:E1:D1 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019FA86263900167209F73FA93EB97BB3F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 11D0 Signing time: Tue 28 Jul 2026 11:00:48 +0000 Manifest this update: Tue 28 Jul 2026 11:00:48 +0000 Manifest next update: Wed 29 Jul 2026 11:00:48 +0000 Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=) 2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=) 3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=) 4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=) 5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: HUSV3MT1iRcgBx4UOE562xChSGfXz2hpuqKIHdzJEnw=) 6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=) 7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=) 8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=) 9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=) 10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:62:63:90:01:67:20:9f:73:fa:93:eb:97:bb:3f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jul 28 11:00:48 2026 GMT Not After : Jul 29 11:00:48 2026 GMT Subject: CN=ed5095c457b5183ba718e8efc03274138ea6e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:b0:74:09:0f:84:ba:3c:97:f7:77:7f:cd: 6d:ce:9c:85:1d:09:ae:f7:bc:b4:40:95:53:0b:ab: cd:17:57:e5:9f:f5:3b:bd:9e:0f:34:bc:f1:a0:03: 1e:b7:d8:ee:2f:61:99:5c:8a:b2:66:8d:7b:e3:e2: dd:6f:39:68:56:e1:7d:f2:20:7d:f4:68:5f:4b:89: 40:2d:8a:cb:ba:90:3d:a9:e5:f6:fd:f8:e5:80:3c: 7b:e5:54:e5:75:28:44:fb:e1:83:c6:48:72:5a:8d: 5b:4a:2e:8e:82:93:f1:a8:9b:d4:c1:a0:1d:36:c9: be:92:ec:30:2e:96:ee:dc:44:99:e0:3f:43:e8:94: a1:c7:6d:5c:dc:c0:b5:2c:2f:10:dd:2b:a0:41:59: b4:09:c1:e0:ac:bd:a6:29:06:a2:91:c0:a4:98:c2: b1:5f:4e:3b:c6:13:06:78:fe:ff:22:f2:d5:ab:82: b5:0e:f1:53:73:fb:a6:a9:fd:2d:5b:d0:6a:fd:37: 5d:b0:c2:4c:2b:43:e3:c8:25:cc:9d:ec:97:ad:b9: 8c:a9:e7:79:8f:52:58:a6:84:f1:c6:52:de:e8:0f: d0:45:7c:94:58:10:b9:cd:b3:ce:36:8c:6d:3e:a3: 7a:70:32:52:f4:d0:77:61:cc:c4:42:2f:10:22:37: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:50:95:C4:57:B5:18:3B:A7:18:E8:EF:C0:32:74:13:8E:A6:E1:D1 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:35:88:e1:93:29:78:6b:93:bb:50:6c:09:29:41:34:16:d1: 9e:c9:3c:07:bd:68:91:f3:b3:b4:22:51:04:ba:29:d4:96:14: 78:4e:2e:dd:a9:e8:d2:2a:50:f0:7d:ed:a8:d8:3c:81:5e:d8: 40:5a:70:bf:eb:5a:2d:5c:12:47:c9:6d:ab:86:5e:a0:a4:d2: fc:a8:c9:47:98:cd:d4:73:ca:33:c3:fb:6e:17:65:b2:ec:09: 1e:05:9d:f8:60:ef:b1:6b:23:da:a4:a9:a5:a5:a3:a4:08:00: 9c:16:8b:f5:22:a3:be:4f:19:e5:81:87:87:86:de:64:7a:d2: c4:34:58:ed:97:fa:1a:f5:ff:33:b5:31:47:6f:fb:ea:a2:5b: df:32:76:74:10:fa:1b:20:d6:d4:d8:20:0b:32:33:9b:f4:71: 77:a7:97:01:2a:77:b2:8b:a5:fb:cd:5c:96:ab:44:47:9b:99: d3:93:49:c8:5e:60:c0:90:7d:80:02:d8:c5:41:a9:11:e7:12: be:c7:d3:fd:14:de:01:86:8a:cd:43:75:f8:c1:40:a8:59:31: ef:d0:79:f2:e4:03:f8:b0:b6:6f:1b:7e:67:58:88:6e:45:82: 70:c4:b6:36:98:c5:ac:d9:40:c9:c2:a5:1c:a6:84:60:7e:5f: eb:60:d8:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oYmOQAWcgn3P6k+uXuz+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwNzI4MTEwMDQ4WhcNMjYwNzI5MTEwMDQ4WjAzMTEwLwYDVQQD EyhlZDUwOTVjNDU3YjUxODNiYTcxOGU4ZWZjMDMyNzQxMzhlYTZlMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiywdAkPhLo8l/d3f81tzpyFHQmu 97y0QJVTC6vNF1fln/U7vZ4PNLzxoAMet9juL2GZXIqyZo174+LdbzloVuF98iB9 9GhfS4lALYrLupA9qeX2/fjlgDx75VTldShE++GDxkhyWo1bSi6OgpPxqJvUwaAd Nsm+kuwwLpbu3ESZ4D9D6JShx21c3MC1LC8Q3SugQVm0CcHgrL2mKQaikcCkmMKx X047xhMGeP7/IvLVq4K1DvFTc/umqf0tW9Bq/TddsMJMK0PjyCXMneyXrbmMqed5 j1JYpoTxxlLe6A/QRXyUWBC5zbPONoxtPqN6cDJS9NB3YczEQi8QIjeIOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1QlcRXtRg7pxjo78AydBOOpuHRMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTWI4ZMp eGuTu1BsCSlBNBbRnsk8B71okfOztCJRBLop1JYUeE4u3ano0ipQ8H3tqNg8gV7Y QFpwv+taLVwSR8ltq4ZeoKTS/KjJR5jN1HPKM8P7bhdlsuwJHgWd+GDvsWsj2qSp paWjpAgAnBaL9SKjvk8Z5YGHh4beZHrSxDRY7Zf6GvX/M7UxR2/76qJb3zJ2dBD6 GyDW1NggCzIzm/Rxd6eXASp3soul+81clqtER5uZ05NJyF5gwJB9gALYxUGpEecS vsfT/RTeAYaKzUN1+MFAqFkx79B58uQD+LC2bxt+Z1iIbkWCcMS2NpjFrNlAycKl HKaEYH5f62DYlA== -----END CERTIFICATE-----Generated at Tue Jul 28 15:51:45 2026 by rpki-client