$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: nzYPzux8Dd0FhnUvoBbC7zmmvtuZEeGpv52VZpwlt88= Subject key identifier: 22:17:3B:BE:BE:56:80:63:26:73:9B:F1:14:B8:08:CE:8F:0C:8C:6B Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019FA8993E2C7B4544D6576B167710F02750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1891 Signing time: Tue 28 Jul 2026 12:00:42 +0000 Manifest this update: Tue 28 Jul 2026 12:00:42 +0000 Manifest next update: Wed 29 Jul 2026 12:00:42 +0000 Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=) 2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: QMybjgxG41jKAfJtrb34pxQsBsQhljZ1ZKzWaYqIwmM=) 7: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 8: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) 14: vvun3eikZcpW6UjAhYfVCVsm-AI.roa (hash: U39ycL4LLB92O8NzJ38ORyHzqu/08gaa/sDm7/jkQGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:3e:2c:7b:45:44:d6:57:6b:16:77:10:f0:27:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jul 28 12:00:42 2026 GMT Not After : Jul 29 12:00:42 2026 GMT Subject: CN=22173bbebe56806326739bf114b808ce8f0c8c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:1e:0e:10:58:3f:f7:f9:cf:10:78:12:69: 4f:3b:30:00:8b:e7:62:95:2f:52:79:5b:23:0d:79: b8:41:dd:97:73:05:16:15:89:48:1b:5a:46:d6:03: 8a:ad:28:1c:f0:15:21:08:d1:96:ae:60:c0:1a:36: ec:c4:53:fa:c1:58:38:c6:38:df:0b:bf:da:b2:00: ad:ce:33:e9:dd:32:fc:65:d5:ad:bd:98:96:54:3a: 10:c4:c8:24:1f:32:25:83:04:f7:e2:3e:eb:89:d0: e9:02:b7:96:6e:0a:03:8f:81:6e:c3:dd:6a:6b:af: 76:16:2b:63:0c:29:ab:11:c2:54:03:80:72:b6:11: 21:d5:fc:6e:e0:d0:27:1f:e8:e5:19:80:f4:dc:aa: 7a:14:23:a2:e5:36:84:84:6a:b1:92:37:25:8d:f0: a5:9f:22:8d:a1:05:62:c8:11:de:71:33:73:c8:91: 1b:19:eb:39:ad:a6:f0:97:5c:4c:bf:0c:fb:52:8e: 88:fc:9b:e4:b5:fd:4f:45:99:8a:97:e8:29:32:08: 89:12:4b:51:f0:5c:b7:39:64:c1:f7:a6:17:99:f7: 4c:0a:32:b3:33:ab:4c:02:b1:f3:52:b3:8c:dc:7e: a0:da:e8:88:3f:cb:e7:1a:66:c9:99:a1:27:66:5c: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:3B:BE:BE:56:80:63:26:73:9B:F1:14:B8:08:CE:8F:0C:8C:6B X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:39:5c:db:9d:2c:84:d9:f9:36:98:97:76:28:89:85:24:53: e7:33:75:4f:f7:d0:5a:4f:46:ee:ee:97:57:a3:aa:ed:1c:e4: f2:12:b6:60:ba:ae:8e:59:8b:a2:d3:bb:a4:50:ae:8a:5b:28: fe:b8:2e:5e:28:bc:1d:3d:16:2b:14:31:5d:b1:38:f8:54:60: eb:a7:b8:eb:07:c5:73:4f:e2:13:3b:a5:78:90:df:c9:cc:bc: 7d:7e:87:61:17:bd:86:72:a3:11:66:f3:8b:7a:dc:38:7d:96: 41:95:fe:d4:bd:3b:59:b5:b2:c3:17:2f:0c:3d:51:57:74:72: a0:66:2d:7f:f5:72:e8:42:95:7b:1d:c8:81:1e:54:39:30:aa: 4c:3f:29:e5:8c:f6:0b:46:14:85:13:ec:b3:c2:7f:d3:b7:fe: 1e:d6:a7:1f:e3:55:4d:a9:0a:43:1a:f7:64:1e:94:f2:f0:3b: 66:4c:82:ff:5f:25:9d:be:6f:d9:8c:00:40:5e:02:d3:02:ae: 81:16:cf:d2:d6:5a:93:c8:90:57:52:0a:3b:b5:e2:96:3d:97: 6f:de:e4:f7:0b:e8:6a:1c:53:48:e7:01:ad:bb:f4:97:4c:f5: ef:d7:9b:77:f8:ed:a3:1c:4b:dc:df:a7:f3:f8:f3:53:30:13: 89:5e:7f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omT4se0VE1ldrFncQ8CdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwNzI4MTIwMDQyWhcNMjYwNzI5MTIwMDQyWjAzMTEwLwYDVQQD EygyMjE3M2JiZWJlNTY4MDYzMjY3MzliZjExNGI4MDhjZThmMGM4YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk0eDhBYP/f5zxB4EmlPOzAAi+di lS9SeVsjDXm4Qd2XcwUWFYlIG1pG1gOKrSgc8BUhCNGWrmDAGjbsxFP6wVg4xjjf C7/asgCtzjPp3TL8ZdWtvZiWVDoQxMgkHzIlgwT34j7ridDpAreWbgoDj4Fuw91q a692FitjDCmrEcJUA4BythEh1fxu4NAnH+jlGYD03Kp6FCOi5TaEhGqxkjcljfCl nyKNoQViyBHecTNzyJEbGes5rabwl1xMvwz7Uo6I/Jvktf1PRZmKl+gpMgiJEktR 8Fy3OWTB96YXmfdMCjKzM6tMArHzUrOM3H6g2uiIP8vnGmbJmaEnZlzD6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIXO76+VoBjJnOb8RS4CM6PDIxrMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTlc250s hNn5NpiXdiiJhSRT5zN1T/fQWk9G7u6XV6Oq7Rzk8hK2YLqujlmLotO7pFCuilso /rguXii8HT0WKxQxXbE4+FRg66e46wfFc0/iEzuleJDfycy8fX6HYRe9hnKjEWbz i3rcOH2WQZX+1L07WbWywxcvDD1RV3RyoGYtf/Vy6EKVex3IgR5UOTCqTD8p5Yz2 C0YUhRPss8J/07f+HtanH+NVTakKQxr3ZB6U8vA7ZkyC/18lnb5v2YwAQF4C0wKu gRbP0tZak8iQV1IKO7Xilj2Xb97k9wvoahxTSOcBrbv0l0z179ebd/jtoxxL3N+n 8/jzUzATiV5/WQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:37:42 2026 by rpki-client