$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: T1VkDD3NccWiasTdFzbNo1+WJ9Vi+FblZhECE1gj648= Subject key identifier: 53:58:11:66:E7:86:CB:ED:6D:11:08:45:83:07:1B:B7:EE:3B:20:A5 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019FA974DE6D52A9C8287901C74E1A23C10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 19EB Signing time: Tue 28 Jul 2026 16:00:36 +0000 Manifest this update: Tue 28 Jul 2026 16:00:36 +0000 Manifest next update: Wed 29 Jul 2026 16:00:36 +0000 Files and hashes: 1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=) 2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=) 3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=) 4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=) 5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=) 6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=) 7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=) 8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=) 9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 1X9rgBwiHyfzpT7HxNZ9XL7FIJAmBL2MTZd/hFzL3v0=) 10: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=) 11: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=) 12: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=) 13: fk1NDywalDt7uylAx-JbeK2KndA.roa (hash: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=) 14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=) 15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=) 16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=) 17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=) 18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=) 19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=) 20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=) 21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:74:de:6d:52:a9:c8:28:79:01:c7:4e:1a:23:c1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jul 28 16:00:36 2026 GMT Not After : Jul 29 16:00:36 2026 GMT Subject: CN=53581166e786cbed6d11084583071bb7ee3b20a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:e8:2a:7e:cd:c3:8d:f3:52:da:af:cf:04: 5e:f7:a6:b8:3a:28:f0:b9:d6:87:c4:7b:b8:26:70: ca:10:98:3c:f6:31:a7:7b:46:7c:e5:f1:87:44:69: f9:0c:9f:9a:0d:d2:d8:99:70:f2:0d:ea:1f:53:00: 62:59:8b:84:5c:c6:7d:dd:72:37:7b:bd:c5:96:0c: 84:8e:84:ae:6f:de:34:94:6a:7f:07:e4:ed:d8:cf: f3:a8:a6:1a:b6:28:04:15:07:0d:34:2e:90:0f:91: a9:6f:83:84:54:e4:b9:f9:e8:16:64:39:91:52:36: fa:79:e7:3d:0c:c9:55:f3:53:12:31:4a:f6:03:a1: 53:40:0a:94:41:5d:89:2d:7d:a9:17:38:42:0b:fd: c1:f7:69:2e:0b:e8:1d:5e:f3:57:86:ae:51:89:bc: e2:e5:03:ee:43:51:8d:88:70:a0:12:e7:65:cf:66: 54:b3:99:6a:49:25:42:53:3c:c5:96:e4:be:ed:84: 7b:cc:91:17:00:f6:eb:6c:7a:cc:82:c8:67:ae:35: 60:0f:a4:24:f8:d7:0e:73:4a:06:a3:f5:ff:04:da: 16:22:17:2b:26:e7:5d:2e:ce:c7:4a:58:70:67:34: 40:45:0a:88:92:40:ad:ed:67:e6:38:44:81:cd:51: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:58:11:66:E7:86:CB:ED:6D:11:08:45:83:07:1B:B7:EE:3B:20:A5 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b2:9a:b9:59:1f:3a:91:f0:dc:91:7c:d8:7c:7d:56:3d:ab: e6:ab:b7:bf:69:20:59:e5:d6:03:7b:95:be:a0:9c:a5:8c:e1: 05:aa:df:4c:c4:b9:3d:e9:e9:53:c7:52:8e:18:28:21:a7:24: 3e:7c:0f:e2:d3:81:f9:b2:f8:8c:10:0f:c3:35:4b:14:c1:2b: 2f:51:26:9c:16:fc:29:92:c7:62:c4:8f:c1:5e:3b:ec:3b:d4: dc:01:e2:9f:1f:7e:14:c5:5b:bd:d7:9d:0b:be:eb:2a:06:3b: 0c:74:43:69:11:f9:24:67:d5:84:ae:b1:76:35:09:d4:0e:a2: e7:80:1d:b3:55:ef:c1:19:10:c4:74:fe:de:0c:6a:52:18:ba: db:1c:b8:27:59:03:e4:12:d4:6e:b7:d5:ec:7c:a0:ac:bb:83: c1:0d:0d:10:61:2e:12:8d:b0:9a:ad:ce:42:af:53:31:bf:db: bf:3e:ae:6f:3c:89:81:7a:a4:29:46:f0:d0:a2:4a:c9:89:d2: 05:67:42:53:75:b9:7b:4f:89:67:05:59:17:b6:24:ff:8e:49: 21:bd:1c:09:a1:82:d2:59:d6:93:d3:d8:05:8d:24:42:f6:9a: 1c:4f:a2:94:a9:7f:f4:54:bf:5a:2d:4c:d3:a8:1e:23:2d:38: 56:ec:5e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdN5tUqnIKHkBx04aI8ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwNzI4MTYwMDM2WhcNMjYwNzI5MTYwMDM2WjAzMTEwLwYDVQQD Eyg1MzU4MTE2NmU3ODZjYmVkNmQxMTA4NDU4MzA3MWJiN2VlM2IyMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWHoKn7Nw43zUtqvzwRe96a4Oijw udaHxHu4JnDKEJg89jGne0Z85fGHRGn5DJ+aDdLYmXDyDeofUwBiWYuEXMZ93XI3 e73FlgyEjoSub940lGp/B+Tt2M/zqKYatigEFQcNNC6QD5Gpb4OEVOS5+egWZDmR Ujb6eec9DMlV81MSMUr2A6FTQAqUQV2JLX2pFzhCC/3B92kuC+gdXvNXhq5Ribzi 5QPuQ1GNiHCgEudlz2ZUs5lqSSVCUzzFluS+7YR7zJEXAPbrbHrMgshnrjVgD6Qk +NcOc0oGo/X/BNoWIhcrJuddLs7HSlhwZzRARQqIkkCt7WfmOESBzVHDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNYEWbnhsvtbREIRYMHG7fuOyClMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrKauVkf OpHw3JF82Hx9Vj2r5qu3v2kgWeXWA3uVvqCcpYzhBarfTMS5PenpU8dSjhgoIack PnwP4tOB+bL4jBAPwzVLFMErL1EmnBb8KZLHYsSPwV477DvU3AHinx9+FMVbvded C77rKgY7DHRDaRH5JGfVhK6xdjUJ1A6i54Ads1XvwRkQxHT+3gxqUhi62xy4J1kD 5BLUbrfV7HygrLuDwQ0NEGEuEo2wmq3OQq9TMb/bvz6ubzyJgXqkKUbw0KJKyYnS BWdCU3W5e0+JZwVZF7Yk/45JIb0cCaGC0lnWk9PYBY0kQvaaHE+ilKl/9FS/Wi1M 06geIy04VuxekQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:24:07 2026 by rpki-client