$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: f3n+6SrEqazhbZa6BF+O9v/g6QtD5XVUQ5Wlbknmkjo= Subject key identifier: 5F:E5:77:95:2D:0D:F1:ED:17:31:A7:27:FE:68:A7:FF:74:66:47:F4 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019FAA873521F45092E876BBE4F2005B639F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1A40 Signing time: Tue 28 Jul 2026 21:00:15 +0000 Manifest this update: Tue 28 Jul 2026 21:00:15 +0000 Manifest next update: Wed 29 Jul 2026 21:00:15 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: cG4hH/CRyBeNMMzZjyfn6FQkw0YfuAHnwbUsIN3onaI=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:35:21:f4:50:92:e8:76:bb:e4:f2:00:5b:63:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jul 28 21:00:15 2026 GMT Not After : Jul 29 21:00:15 2026 GMT Subject: CN=5fe577952d0df1ed1731a727fe68a7ff746647f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:6f:fe:87:96:d3:a6:ad:cd:79:c7:42:6d: f2:2c:53:bc:0b:43:5c:fb:c2:a0:30:86:d0:56:a9: 2e:1c:e4:d7:a8:8a:ea:32:4c:01:20:16:e9:47:82: d5:c2:ad:c9:56:01:24:dd:3f:23:41:d4:51:bf:42: 3a:a3:fb:22:b9:e1:94:66:6c:69:37:19:91:fa:31: ee:92:6b:c5:f0:02:88:f5:4c:6c:e1:6f:eb:51:26: 45:78:cf:5b:1c:b7:4c:bd:c2:2e:70:3b:68:da:6f: eb:0d:40:ea:7f:22:fe:dc:44:b1:0d:18:1d:13:ff: 76:8e:5e:d2:88:a8:a2:70:21:0b:00:4b:8c:de:48: d2:c5:49:b6:b2:ca:41:f5:27:77:85:ad:bf:91:4f: 16:39:54:a1:21:a7:9a:d4:ac:0b:42:d6:d6:b5:f7: b1:fe:e9:58:57:85:16:e7:62:b9:90:17:77:e5:13: dd:90:96:5b:da:79:55:59:68:6d:59:16:73:5f:fd: c4:50:9b:f4:b2:df:47:09:27:17:21:4a:b0:79:00: 95:3f:57:7e:45:02:76:9b:f4:2f:9a:c5:02:2e:97: a9:3e:35:5a:63:61:c2:57:c3:d8:e3:a6:59:2f:79: bd:30:8d:bb:96:61:ca:29:d0:34:ae:89:5d:23:86: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:77:95:2D:0D:F1:ED:17:31:A7:27:FE:68:A7:FF:74:66:47:F4 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:68:ca:e0:8d:4d:f9:75:9a:bd:23:23:b4:77:de:a4:28:f2: 17:a4:d7:1e:7a:f8:cb:8b:dc:e4:98:3a:b6:d6:1f:be:cf:f8: e2:7f:cd:cb:fc:88:dc:b3:d7:58:42:a3:5f:d6:29:cf:4f:93: ee:1c:69:d1:2f:92:e7:f3:43:54:60:4e:7b:95:34:00:c8:da: 5a:88:7e:69:3d:77:7d:45:df:af:f0:7f:6e:ff:01:8b:fb:c8: 06:43:50:8a:19:a0:03:a9:f7:f5:bc:60:bb:50:20:b5:ab:57: bc:27:7c:ba:89:d8:a3:01:a2:07:a2:a2:77:1b:e9:d2:1f:ce: 6c:31:00:19:8e:ec:2d:be:9d:16:d0:f7:c4:c4:3c:7a:12:f3: 85:c8:50:ec:ea:b8:f9:ba:fa:16:6e:08:d4:de:9d:c4:13:31: 4d:0d:3c:c6:87:66:3a:fa:e9:11:37:d3:d5:b2:29:0a:35:ea: 1f:f6:3b:6e:8e:36:48:4c:2f:ed:25:fd:cc:3b:5e:c7:e6:15: ef:d9:ae:f1:9f:27:be:c3:8a:31:57:65:71:af:41:4f:1d:53: 7e:bd:33:cf:33:97:03:0d:c0:f3:8d:f4:00:98:94:ae:f1:6f: 55:d4:04:b8:f8:12:30:c2:90:63:b9:21:61:39:64:6b:d4:71: 5c:2d:b5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qhzUh9FCS6Ha75PIAW2OfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwNzI4MjEwMDE1WhcNMjYwNzI5MjEwMDE1WjAzMTEwLwYDVQQD Eyg1ZmU1Nzc5NTJkMGRmMWVkMTczMWE3MjdmZTY4YTdmZjc0NjY0N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dRv/oeW06atzXnHQm3yLFO8C0Nc +8KgMIbQVqkuHOTXqIrqMkwBIBbpR4LVwq3JVgEk3T8jQdRRv0I6o/siueGUZmxp NxmR+jHukmvF8AKI9Uxs4W/rUSZFeM9bHLdMvcIucDto2m/rDUDqfyL+3ESxDRgd E/92jl7SiKiicCELAEuM3kjSxUm2sspB9Sd3ha2/kU8WOVShIaea1KwLQtbWtfex /ulYV4UW52K5kBd35RPdkJZb2nlVWWhtWRZzX/3EUJv0st9HCScXIUqweQCVP1d+ RQJ2m/QvmsUCLpepPjVaY2HCV8PY46ZZL3m9MI27lmHKKdA0roldI4YtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/ld5UtDfHtFzGnJ/5op/90Zkf0MB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGjK4I1N +XWavSMjtHfepCjyF6TXHnr4y4vc5Jg6ttYfvs/44n/Ny/yI3LPXWEKjX9Ypz0+T 7hxp0S+S5/NDVGBOe5U0AMjaWoh+aT13fUXfr/B/bv8Bi/vIBkNQihmgA6n39bxg u1AgtatXvCd8uonYowGiB6Kidxvp0h/ObDEAGY7sLb6dFtD3xMQ8ehLzhchQ7Oq4 +br6Fm4I1N6dxBMxTQ08xodmOvrpETfT1bIpCjXqH/Y7bo42SEwv7SX9zDtex+YV 79mu8Z8nvsOKMVdlca9BTx1Tfr0zzzOXAw3A8430AJiUrvFvVdQEuPgSMMKQY7kh YTlka9RxXC215A== -----END CERTIFICATE-----Generated at Wed Jul 29 07:41:08 2026 by rpki-client