$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: hZ6poN5r1ZAsK/jBJA426avFjpCQ3K1O4nOoEH5aB0E= Subject key identifier: B3:A2:3F:36:E7:A2:B6:0B:8F:AA:E3:58:B3:78:67:C8:A8:B4:6D:77 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019FAABEF568154196DBC13807A56DD2865B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 16FB Signing time: Tue 28 Jul 2026 22:01:09 +0000 Manifest this update: Tue 28 Jul 2026 22:01:09 +0000 Manifest next update: Wed 29 Jul 2026 22:01:09 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=) 3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: IWIDDiauoUE/yTKNEm9NO4rRTfGOLfxx+esg9MwHkt4=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:f5:68:15:41:96:db:c1:38:07:a5:6d:d2:86:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jul 28 22:01:09 2026 GMT Not After : Jul 29 22:01:09 2026 GMT Subject: CN=b3a23f36e7a2b60b8faae358b37867c8a8b46d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:98:3f:8e:c9:f8:45:b7:80:88:bf:b2:c8: a6:a5:8f:ce:42:2f:fa:10:ce:62:17:12:2e:f7:e9: e9:84:de:9f:a7:2d:0c:3b:5e:42:57:78:82:3d:d9: e0:28:07:c3:b8:46:d2:62:be:2c:10:81:b7:e6:34: 19:dd:d7:3c:7e:c2:9f:96:4c:eb:c7:70:88:c8:bc: f3:63:d5:46:59:0f:66:3d:a8:7f:27:fd:cc:28:05: 5d:a0:9e:f2:4d:fe:48:12:3b:2d:d4:98:e5:1a:d3: 38:5d:37:7c:39:6f:82:62:8c:4b:66:2c:61:eb:c4: 0d:e7:1d:b9:e7:bc:08:1f:42:eb:78:68:84:ce:35: ec:46:32:8f:32:ab:eb:d3:27:d1:f5:a9:a0:52:37: 4b:32:fa:dd:a9:50:37:4c:71:4c:63:a8:44:05:12: 95:2b:ee:20:0b:ac:d9:92:f7:5d:99:50:9a:69:88: 02:26:5b:a6:5e:c5:54:ed:2f:a4:a3:00:a7:35:86: 6f:8b:73:8f:53:63:b0:7c:b5:a7:1b:cf:8d:cf:34: 27:1e:da:f1:53:e2:2f:d5:8f:79:20:5a:0b:2a:db: dc:17:e4:b9:e9:4b:aa:36:7b:12:92:08:4a:de:df: 41:90:e5:42:8f:47:83:02:ae:cc:27:2d:8d:2e:ae: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A2:3F:36:E7:A2:B6:0B:8F:AA:E3:58:B3:78:67:C8:A8:B4:6D:77 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:77:58:e1:0c:36:68:fa:e2:f4:9b:a6:d1:04:7f:d0:71: 3d:c5:c4:50:38:69:33:fc:7e:63:61:30:42:c8:61:48:86:c9: e9:f4:6d:06:f5:0d:e2:1a:7a:e8:1d:7d:75:4f:1f:3e:bd:a7: 70:cf:01:27:d5:c6:1a:c2:61:f2:51:42:2b:c5:1a:7c:f5:33: f4:b6:84:1c:1f:83:af:57:78:cb:36:68:7e:0f:0f:f8:47:dc: 22:e6:95:cb:e3:e7:83:7e:60:93:41:24:b5:42:b9:ad:67:d1: d3:ea:6b:60:15:1e:73:f0:90:b4:ed:e0:f9:c1:51:9e:5a:15: 14:bf:ed:27:30:a4:1c:e9:c1:a9:4a:5a:da:f3:1e:ba:a4:40: 1b:7c:6e:ae:ad:df:eb:13:aa:a3:92:7a:ad:39:11:6d:b3:f0: 60:91:f0:5a:b4:b1:5a:95:f9:ac:30:d8:f9:3c:97:bb:6f:a1: 27:ab:f2:01:37:ac:ee:a1:d3:94:f4:aa:f5:2d:3a:a7:cf:f0: 51:ef:6c:57:aa:3c:bd:95:40:60:d0:61:77:12:da:2d:db:02: e5:95:59:60:27:e1:74:ae:7c:f6:d5:59:ce:ed:fd:33:f4:75: b0:e6:a9:07:8b:f5:73:82:fc:c4:c7:11:33:28:74:00:2e:42: c1:3d:f5:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvvVoFUGW28E4B6Vt0oZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwNzI4MjIwMTA5WhcNMjYwNzI5MjIwMTA5WjAzMTEwLwYDVQQD EyhiM2EyM2YzNmU3YTJiNjBiOGZhYWUzNThiMzc4NjdjOGE4YjQ2ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fCYP47J+EW3gIi/ssimpY/OQi/6 EM5iFxIu9+nphN6fpy0MO15CV3iCPdngKAfDuEbSYr4sEIG35jQZ3dc8fsKflkzr x3CIyLzzY9VGWQ9mPah/J/3MKAVdoJ7yTf5IEjst1JjlGtM4XTd8OW+CYoxLZixh 68QN5x2557wIH0LreGiEzjXsRjKPMqvr0yfR9amgUjdLMvrdqVA3THFMY6hEBRKV K+4gC6zZkvddmVCaaYgCJlumXsVU7S+kowCnNYZvi3OPU2OwfLWnG8+NzzQnHtrx U+Iv1Y95IFoLKtvcF+S56UuqNnsSkghK3t9BkOVCj0eDAq7MJy2NLq714QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOiPzbnorYLj6rjWLN4Z8iotG13MB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAN3WOEM Nmj64vSbptEEf9BxPcXEUDhpM/x+Y2EwQshhSIbJ6fRtBvUN4hp66B19dU8fPr2n cM8BJ9XGGsJh8lFCK8UafPUz9LaEHB+Dr1d4yzZofg8P+EfcIuaVy+Png35gk0Ek tUK5rWfR0+prYBUec/CQtO3g+cFRnloVFL/tJzCkHOnBqUpa2vMeuqRAG3xurq3f 6xOqo5J6rTkRbbPwYJHwWrSxWpX5rDDY+TyXu2+hJ6vyATes7qHTlPSq9S06p8/w Ue9sV6o8vZVAYNBhdxLaLdsC5ZVZYCfhdK589tVZzu39M/R1sOapB4v1c4L8xMcR Myh0AC5CwT31Uw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:28:58 2026 by rpki-client