$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: sotxQ6Gz27YM57H/cAQCnVAlfqs4rBhVts8eHTlm8I0= Subject key identifier: 6B:7F:2D:39:C5:AE:69:41:71:90:AA:AF:18:51:F0:30:0F:42:FE:68 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019FAC767489CD3AD48138D0AA82A4BB04D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 19EB Signing time: Wed 29 Jul 2026 06:01:11 +0000 Manifest this update: Wed 29 Jul 2026 06:01:11 +0000 Manifest next update: Thu 30 Jul 2026 06:01:11 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: 3DRC5nCCJw66wHXqBxmfL3e0zeQpNty6k6xYk8mAO/8=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:76:74:89:cd:3a:d4:81:38:d0:aa:82:a4:bb:04:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jul 29 06:01:11 2026 GMT Not After : Jul 30 06:01:11 2026 GMT Subject: CN=6b7f2d39c5ae69417190aaaf1851f0300f42fe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:6c:03:21:f3:be:52:1b:af:ef:c5:69:6b: 7c:c2:60:95:bd:09:32:25:9c:ad:49:31:fd:d6:f9: 09:24:df:e0:92:65:47:7a:1f:54:52:6d:40:a5:dc: 54:2b:96:a2:22:7d:87:cf:9d:17:ca:44:e8:d9:ed: 70:a4:1f:83:01:46:89:9f:67:b8:1d:f5:09:79:98: e0:d9:28:4d:b2:85:cf:f6:84:5e:ed:71:4c:f0:1b: ef:4e:8d:07:75:61:db:3b:ce:52:ab:3b:73:fd:2d: 37:b4:70:2f:37:13:5b:bb:48:80:97:f4:55:e0:82: 32:97:6a:41:93:74:9c:8a:37:21:b1:5f:ed:e3:2f: b8:5f:85:2e:18:7d:ee:be:7a:db:a3:0e:3e:c2:24: 43:83:73:64:56:16:82:2e:48:c5:8d:6b:16:75:19: 53:5b:e4:23:26:71:27:63:f9:2a:e9:a9:45:63:0f: 28:13:6f:68:08:19:93:c2:b4:27:1e:76:1c:2e:ae: 8d:5f:eb:9d:89:5d:c6:54:e4:d7:97:ff:83:87:12: 7c:1d:a8:bc:0b:51:2f:13:7b:b6:b5:8d:b3:98:5d: 04:11:21:3b:1c:dc:59:1a:85:86:27:ba:d0:48:cb: b5:71:e9:92:32:b4:02:7f:e8:e5:23:91:f1:9f:ae: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7F:2D:39:C5:AE:69:41:71:90:AA:AF:18:51:F0:30:0F:42:FE:68 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:54:34:2a:52:ea:3a:ef:14:27:3d:41:bb:71:97:85:22:3c: 3e:86:44:7a:a3:f8:b5:db:ed:1a:d5:7c:15:77:4f:2c:a5:81: 13:6a:12:d1:b6:25:f3:b2:2d:f9:c4:4e:f0:66:cc:df:a7:6b: 75:e3:9f:20:4c:cd:bc:7e:69:27:16:b5:70:67:72:60:3a:ec: 82:cb:37:7e:86:db:ac:d5:20:c1:bd:50:1a:b2:a1:87:ec:c9: ca:00:db:11:9e:c4:d7:a0:b5:5a:69:53:7f:1f:26:75:f4:43: 0e:10:d5:11:3b:42:cd:e8:9a:91:52:52:ef:cb:4e:ff:9f:1c: 6f:ec:85:d9:30:a9:d1:31:07:2b:09:6b:05:ef:63:59:54:60: 46:1d:4f:81:ff:08:84:9c:c7:d1:f3:c1:f5:35:7b:37:69:c1: 73:57:37:50:2a:39:c1:50:32:a3:9a:e2:e8:43:ea:35:d3:bd: 35:49:8f:b4:da:57:e3:0d:56:1a:59:86:9b:30:c0:d7:b7:79: dd:f7:24:b8:cc:88:6a:52:d6:07:fa:88:bf:5d:26:4a:44:16: 20:12:eb:a0:06:d9:c3:46:49:de:15:9a:af:7c:57:bf:4e:e3: ca:e0:c1:ed:25:19:c8:7e:5c:da:d7:b5:0d:5e:21:5c:c8:ae: 36:5f:38:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sdnSJzTrUgTjQqoKkuwTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNzI5MDYwMTExWhcNMjYwNzMwMDYwMTExWjAzMTEwLwYDVQQD Eyg2YjdmMmQzOWM1YWU2OTQxNzE5MGFhYWYxODUxZjAzMDBmNDJmZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rtsAyHzvlIbr+/FaWt8wmCVvQky JZytSTH91vkJJN/gkmVHeh9UUm1ApdxUK5aiIn2Hz50XykTo2e1wpB+DAUaJn2e4 HfUJeZjg2ShNsoXP9oRe7XFM8BvvTo0HdWHbO85Sqztz/S03tHAvNxNbu0iAl/RV 4IIyl2pBk3ScijchsV/t4y+4X4UuGH3uvnrbow4+wiRDg3NkVhaCLkjFjWsWdRlT W+QjJnEnY/kq6alFYw8oE29oCBmTwrQnHnYcLq6NX+udiV3GVOTXl/+DhxJ8Hai8 C1EvE3u2tY2zmF0EESE7HNxZGoWGJ7rQSMu1cemSMrQCf+jlI5Hxn66dowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt/LTnFrmlBcZCqrxhR8DAPQv5oMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFQ0KlLq Ou8UJz1Bu3GXhSI8PoZEeqP4tdvtGtV8FXdPLKWBE2oS0bYl87It+cRO8GbM36dr deOfIEzNvH5pJxa1cGdyYDrsgss3fobbrNUgwb1QGrKhh+zJygDbEZ7E16C1WmlT fx8mdfRDDhDVETtCzeiakVJS78tO/58cb+yF2TCp0TEHKwlrBe9jWVRgRh1Pgf8I hJzH0fPB9TV7N2nBc1c3UCo5wVAyo5ri6EPqNdO9NUmPtNpX4w1WGlmGmzDA17d5 3fckuMyIalLWB/qIv10mSkQWIBLroAbZw0ZJ3hWar3xXv07jyuDB7SUZyH5c2te1 DV4hXMiuNl84Qg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:50:05 2026 by rpki-client