$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: NUdYOSCsbSficbvqawqAaK43bGGsIqDoFZ8TOtmA9CM= Subject key identifier: 8F:05:A3:4B:2B:65:29:E3:20:A1:DD:48:76:6A:28:5C:23:B8:B1:37 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019FA9E2E11A0875F00F4D94B36BD6EC3A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 19D7 Signing time: Tue 28 Jul 2026 18:00:46 +0000 Manifest this update: Tue 28 Jul 2026 18:00:46 +0000 Manifest next update: Wed 29 Jul 2026 18:00:46 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: 9kkvLm08FzFnepAPrfrC8EB3FgVYYG2ZrTA4oYm1xKo=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:e1:1a:08:75:f0:0f:4d:94:b3:6b:d6:ec:3a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jul 28 18:00:46 2026 GMT Not After : Jul 29 18:00:46 2026 GMT Subject: CN=8f05a34b2b6529e320a1dd48766a285c23b8b137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:0c:c2:28:2a:24:c0:06:f3:5e:79:79:fd: 74:a7:16:d8:ca:09:2b:05:f1:e3:06:5d:59:3e:66: 82:58:da:4a:ea:8b:44:5b:24:73:b7:bf:01:77:48: 6d:08:ae:61:48:e9:43:d2:24:af:a0:04:32:bc:2c: ef:a1:83:ed:fa:49:e5:11:99:9d:1c:f1:61:5a:43: be:50:37:81:2f:8f:67:17:d1:3b:db:3c:65:f5:08: 46:41:17:80:13:40:5c:72:3c:e2:ba:89:b4:fe:46: 88:94:5c:05:9b:58:b0:b6:d5:91:90:d1:6d:35:5c: 51:b0:e0:22:be:64:05:2d:53:eb:81:bf:32:b0:dd: 0e:61:2d:40:d3:a6:03:a8:af:30:ba:a4:2e:cd:de: 97:5a:2e:66:59:39:d8:54:28:cc:05:e7:31:3c:69: 92:e5:e9:87:30:df:3e:37:43:fa:01:80:d5:4a:ca: cf:64:66:c9:e2:05:63:71:b6:23:8d:a5:6c:67:19: 9b:a5:af:d1:c5:d7:60:70:98:9a:d5:f3:56:27:d6: 1c:33:82:94:19:19:6d:19:6f:f0:d1:14:b2:a1:7f: 12:21:50:d1:75:33:13:51:96:da:a5:48:07:9d:6b: 46:3b:54:99:6a:67:da:9d:30:48:67:3f:3b:18:36: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:A3:4B:2B:65:29:E3:20:A1:DD:48:76:6A:28:5C:23:B8:B1:37 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:57:80:2a:d3:c9:de:8a:62:8b:20:86:85:f6:df:e2:82: 2f:68:e7:20:08:ef:17:3f:62:b4:75:5c:69:57:58:e5:e9:64: b0:8b:71:2e:07:29:3f:93:1c:1a:c1:5b:f4:de:57:fe:75:bd: c0:b5:0a:8d:d2:8d:b1:ce:1c:7b:ec:e7:ae:d8:d6:63:bf:c7: 38:76:35:92:25:46:d1:bc:5c:69:67:7d:bc:97:84:11:6a:99: 39:86:65:9a:7d:b3:27:6e:09:a5:79:e3:e8:47:99:a3:aa:72: a8:6f:42:ba:77:58:f2:10:95:02:86:1d:87:4a:87:49:10:c5: 61:fc:28:c4:cf:b8:df:74:ec:b1:79:cd:f6:59:1d:88:6d:5e: 97:dc:f8:5f:c2:a6:a4:7f:5c:39:fb:db:9b:d1:cd:ad:03:64: 66:fe:71:7a:f9:04:3d:4f:f0:26:d0:a5:85:6b:a3:c2:38:bf: da:68:aa:5d:d5:55:c3:82:a0:43:22:20:10:21:43:92:0f:c9: a1:f0:ac:b8:29:5a:2a:85:8d:8d:2e:28:d5:3f:8a:d8:af:8f: 05:8c:3c:31:00:ff:2d:2a:76:1b:84:2c:c5:72:7c:68:2d:17: b4:d8:fe:6f:8d:b6:0b:2d:ea:fc:75:95:07:07:03:6e:3b:4b: c9:e2:a5:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4uEaCHXwD02Us2vW7DoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNzI4MTgwMDQ2WhcNMjYwNzI5MTgwMDQ2WjAzMTEwLwYDVQQD Eyg4ZjA1YTM0YjJiNjUyOWUzMjBhMWRkNDg3NjZhMjg1YzIzYjhiMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFAMwigqJMAG8155ef10pxbYygkr BfHjBl1ZPmaCWNpK6otEWyRzt78Bd0htCK5hSOlD0iSvoAQyvCzvoYPt+knlEZmd HPFhWkO+UDeBL49nF9E72zxl9QhGQReAE0Bccjziuom0/kaIlFwFm1iwttWRkNFt NVxRsOAivmQFLVPrgb8ysN0OYS1A06YDqK8wuqQuzd6XWi5mWTnYVCjMBecxPGmS 5emHMN8+N0P6AYDVSsrPZGbJ4gVjcbYjjaVsZxmbpa/RxddgcJia1fNWJ9YcM4KU GRltGW/w0RSyoX8SIVDRdTMTUZbapUgHnWtGO1SZamfanTBIZz87GDboEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8Fo0srZSnjIKHdSHZqKFwjuLE3MB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey1XgCrT yd6KYosghoX23+KCL2jnIAjvFz9itHVcaVdY5elksItxLgcpP5McGsFb9N5X/nW9 wLUKjdKNsc4ce+znrtjWY7/HOHY1kiVG0bxcaWd9vJeEEWqZOYZlmn2zJ24JpXnj 6EeZo6pyqG9CundY8hCVAoYdh0qHSRDFYfwoxM+433TssXnN9lkdiG1el9z4X8Km pH9cOfvbm9HNrQNkZv5xevkEPU/wJtClhWujwji/2miqXdVVw4KgQyIgECFDkg/J ofCsuClaKoWNjS4o1T+K2K+PBYw8MQD/LSp2G4QsxXJ8aC0XtNj+b422Cy3q/HWV BwcDbjtLyeKlIg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:29:53 2026 by rpki-client