$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: Ef4qgyC4Xx9pg+P61nsWYts1ZdaCQUI7NqdZk+dsyEc= Subject key identifier: BC:A8:8C:D0:A7:F3:D2:FF:79:09:24:21:73:9C:03:24:E3:6D:B4:03 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019FA9E2B41C6F7B19C9F008115577A5D5C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 06AA Signing time: Tue 28 Jul 2026 18:00:34 +0000 Manifest this update: Tue 28 Jul 2026 18:00:34 +0000 Manifest next update: Wed 29 Jul 2026 18:00:34 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: u1L+KoOKC7oW6wLUc1EYQokmkPFj9guMnP8PL+UW3hw=) 7: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 8: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 9: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 10: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 11: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 12: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 13: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:b4:1c:6f:7b:19:c9:f0:08:11:55:77:a5:d5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Jul 28 18:00:34 2026 GMT Not After : Jul 29 18:00:34 2026 GMT Subject: CN=bca88cd0a7f3d2ff79092421739c0324e36db403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:8b:5e:34:b5:8f:13:b1:c7:45:86:0e:82: 2a:3e:b9:37:6c:55:1c:ba:55:61:39:00:82:49:7a: 0a:37:35:1a:40:5d:0d:c8:00:3e:9b:cc:6d:77:ac: d8:63:68:4e:8a:d4:ea:79:e7:8a:99:bd:ae:27:12: 13:94:72:5c:41:d0:82:c6:f8:66:62:5a:48:ac:21: a4:03:06:f0:f6:4f:6a:06:37:d7:1f:ae:64:2b:c8: de:28:12:ef:52:51:b1:65:ad:f4:0d:d2:ad:65:2a: 6a:1d:19:f9:e8:84:96:30:0f:ba:1b:af:97:62:18: 39:4f:75:c7:24:a8:48:4e:0a:91:16:44:ab:d9:3a: 61:85:39:ec:e9:55:19:c8:c2:a4:fa:d4:ff:db:0b: 8d:d0:f9:97:58:44:42:0f:a4:03:c0:12:40:80:e5: 0a:c4:bf:ef:93:9c:14:2e:df:39:b2:59:24:e3:1c: 38:8f:34:7d:78:95:7e:0c:bc:3e:44:cd:67:fa:15: 95:cf:2f:81:d7:86:9c:9d:0e:d7:ee:d3:77:28:e8: fb:e2:b7:93:b5:99:6c:70:d0:0f:5b:dc:f1:ba:d7: f6:4f:8f:98:3a:2e:7c:fb:1a:39:e4:1c:ed:56:92: 37:8a:52:75:21:f3:21:9e:e2:0f:5e:6b:a8:98:f4: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:8C:D0:A7:F3:D2:FF:79:09:24:21:73:9C:03:24:E3:6D:B4:03 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1f:01:8d:21:f0:ac:e6:dc:38:cf:d0:db:f0:b1:aa:a9:18: b0:c0:71:20:31:a9:8d:06:ab:e5:7b:8a:78:2a:a3:64:6d:c8: 7e:62:30:de:06:de:a6:92:c7:33:fb:fc:36:c5:86:01:43:a6: 06:0e:a8:79:66:65:a0:d6:76:9a:85:9f:d6:1a:ab:86:0f:00: d4:d0:bc:07:04:f6:17:69:09:04:74:e5:87:ba:07:3f:20:16: 50:28:8d:ea:a6:2a:ae:8c:ef:a4:c9:7f:43:dd:75:a6:28:00: 3d:fa:8a:ed:ad:b6:c7:54:98:04:80:4c:52:9e:7b:21:63:5b: aa:28:a4:fe:71:5d:c7:75:c5:14:4c:01:02:86:fb:06:76:5c: 80:c0:2f:02:5f:2e:61:20:a8:20:ff:fd:2b:e9:d2:fb:08:ea: 22:38:87:3b:a7:62:7a:b7:27:b1:55:04:8a:cd:fd:62:5d:37: ee:b3:75:51:97:0c:77:96:88:30:cf:ba:d2:68:09:e0:b8:11: 1b:3e:1d:f9:5a:ea:06:dd:6b:33:16:16:94:a6:3a:4b:f0:e2: 8d:35:67:64:7f:a2:77:2a:17:d5:7a:75:39:ea:92:00:5b:7b: 93:4d:5e:6f:77:8e:57:44:e0:1b:8b:75:ac:98:b3:eb:d4:4a: cc:f5:1e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4rQcb3sZyfAIEVV3pdXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwNzI4MTgwMDM0WhcNMjYwNzI5MTgwMDM0WjAzMTEwLwYDVQQD EyhiY2E4OGNkMGE3ZjNkMmZmNzkwOTI0MjE3MzljMDMyNGUzNmRiNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgSLXjS1jxOxx0WGDoIqPrk3bFUc ulVhOQCCSXoKNzUaQF0NyAA+m8xtd6zYY2hOitTqeeeKmb2uJxITlHJcQdCCxvhm YlpIrCGkAwbw9k9qBjfXH65kK8jeKBLvUlGxZa30DdKtZSpqHRn56ISWMA+6G6+X Yhg5T3XHJKhITgqRFkSr2TphhTns6VUZyMKk+tT/2wuN0PmXWERCD6QDwBJAgOUK xL/vk5wULt85slkk4xw4jzR9eJV+DLw+RM1n+hWVzy+B14acnQ7X7tN3KOj74reT tZlscNAPW9zxutf2T4+YOi58+xo55BztVpI3ilJ1IfMhnuIPXmuomPQCTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyojNCn89L/eQkkIXOcAyTjbbQDMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwh8BjSHw rObcOM/Q2/CxqqkYsMBxIDGpjQar5XuKeCqjZG3IfmIw3gbeppLHM/v8NsWGAUOm Bg6oeWZloNZ2moWf1hqrhg8A1NC8BwT2F2kJBHTlh7oHPyAWUCiN6qYqrozvpMl/ Q911pigAPfqK7a22x1SYBIBMUp57IWNbqiik/nFdx3XFFEwBAob7BnZcgMAvAl8u YSCoIP/9K+nS+wjqIjiHO6diercnsVUEis39Yl037rN1UZcMd5aIMM+60mgJ4LgR Gz4d+VrqBt1rMxYWlKY6S/DijTVnZH+idyoX1Xp1OeqSAFt7k01eb3eOV0TgG4t1 rJiz69RKzPUeCg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:02 2026 by rpki-client