$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: DeqX7F81lfB+XMksChO/lUP3EGWCDuqwDt8y/yULMso= Subject key identifier: 58:B0:CF:27:BC:5E:F1:71:63:36:97:FE:F4:31:D9:F3:58:1F:CD:32 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019FAAF53153B47A0BCFF428D8EA587ACF36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1541 Signing time: Tue 28 Jul 2026 23:00:23 +0000 Manifest this update: Tue 28 Jul 2026 23:00:23 +0000 Manifest next update: Wed 29 Jul 2026 23:00:23 +0000 Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=) 2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 6: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 7: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 8: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: JnnyeZQEU7d3vtmiI5bRDuDQYcncl0nq40GTHvkKzqc=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:31:53:b4:7a:0b:cf:f4:28:d8:ea:58:7a:cf:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jul 28 23:00:23 2026 GMT Not After : Jul 29 23:00:23 2026 GMT Subject: CN=58b0cf27bc5ef171633697fef431d9f3581fcd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:80:91:df:89:87:cd:6b:44:3f:82:2f:53: 83:46:98:c4:15:20:0b:2e:15:55:fe:a0:8d:bf:9d: 21:9a:c4:a1:71:aa:c8:6c:64:ba:ba:f2:c9:1a:ce: dd:e0:5f:02:5f:e5:1e:ed:03:4b:30:8d:0d:59:d9: 09:b9:c6:5b:90:eb:85:43:68:4d:2d:eb:a0:fc:bc: 01:64:eb:31:dc:6d:8b:ef:3e:19:a6:2c:4e:06:5b: 3e:58:d9:ce:7d:07:d9:cc:92:0c:7c:d5:97:19:62: ff:6c:c4:b3:ba:a4:31:30:f9:e7:d8:ec:f6:18:58: 71:cd:18:a1:8d:b4:db:04:09:d5:b1:b8:c9:ff:53: ae:45:7f:7f:06:76:a8:e9:5b:65:68:e4:7c:a9:97: 43:62:56:44:2a:69:a1:4c:b5:5c:05:99:a9:d1:71: cb:10:b3:6f:05:59:13:8a:03:d4:1f:43:b5:cc:73: 45:e2:e0:13:28:38:a3:1e:64:68:bf:ea:35:82:58: f0:d1:97:81:e1:d1:45:76:c3:97:32:92:c0:d2:60: 34:4a:d4:15:94:25:49:3d:70:a6:ca:cd:6e:d3:23: 98:7c:b8:48:37:df:3e:45:84:69:34:f6:67:d8:a6: c6:68:0d:40:2a:6c:be:89:b9:08:af:35:e7:72:5e: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B0:CF:27:BC:5E:F1:71:63:36:97:FE:F4:31:D9:F3:58:1F:CD:32 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0f:84:f7:b9:59:d2:fe:e2:b4:21:8f:b0:64:4d:9e:ea:42: 0c:a2:09:19:d7:8f:0c:c4:75:e8:4a:b9:06:52:aa:1b:ba:fc: d0:85:aa:b0:50:d6:66:fc:c3:40:73:0c:02:c5:ed:6a:1e:47: e7:cf:df:61:5a:7a:68:09:e1:eb:8e:91:d9:a3:de:f2:b4:9d: 56:84:71:d5:b3:3f:92:a7:03:62:9a:13:6e:b8:1d:58:f7:bd: ec:b7:55:80:dd:c4:8d:79:b8:d0:01:4f:3b:c9:b6:5c:5a:fc: 24:45:a1:b6:06:cf:fc:75:9f:7f:4d:6b:5a:1e:9d:56:60:48: 6f:a3:7f:cf:48:fc:f9:13:3c:c4:5a:3b:2b:24:fd:45:54:d0: 36:32:cb:23:31:83:84:63:be:b7:63:e7:b9:05:38:e6:a7:4a: 69:93:4a:64:8b:43:24:85:31:d8:4a:fa:5e:c8:19:af:6d:0b: ba:2c:2c:aa:79:6d:65:d3:28:c1:df:8a:58:1f:a7:e8:d8:42: 08:68:f8:28:1a:93:ee:cd:5b:74:41:a0:95:d5:9e:45:23:13: dd:c9:27:3d:c4:1e:e5:78:ad:71:04:b8:7c:9d:92:d5:e6:b8: 71:b8:62:43:8f:85:73:fa:a0:ca:02:75:3c:35:52:79:ef:40: dd:13:af:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9TFTtHoLz/Qo2OpYes82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNzI4MjMwMDIzWhcNMjYwNzI5MjMwMDIzWjAzMTEwLwYDVQQD Eyg1OGIwY2YyN2JjNWVmMTcxNjMzNjk3ZmVmNDMxZDlmMzU4MWZjZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFmAkd+Jh81rRD+CL1ODRpjEFSAL LhVV/qCNv50hmsShcarIbGS6uvLJGs7d4F8CX+Ue7QNLMI0NWdkJucZbkOuFQ2hN Leug/LwBZOsx3G2L7z4ZpixOBls+WNnOfQfZzJIMfNWXGWL/bMSzuqQxMPnn2Oz2 GFhxzRihjbTbBAnVsbjJ/1OuRX9/Bnao6VtlaOR8qZdDYlZEKmmhTLVcBZmp0XHL ELNvBVkTigPUH0O1zHNF4uATKDijHmRov+o1gljw0ZeB4dFFdsOXMpLA0mA0StQV lCVJPXCmys1u0yOYfLhIN98+RYRpNPZn2KbGaA1AKmy+ibkIrzXncl7OgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiwzye8XvFxYzaX/vQx2fNYH80yMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ+E97lZ 0v7itCGPsGRNnupCDKIJGdePDMR16Eq5BlKqG7r80IWqsFDWZvzDQHMMAsXtah5H 58/fYVp6aAnh646R2aPe8rSdVoRx1bM/kqcDYpoTbrgdWPe97LdVgN3EjXm40AFP O8m2XFr8JEWhtgbP/HWff01rWh6dVmBIb6N/z0j8+RM8xFo7KyT9RVTQNjLLIzGD hGO+t2PnuQU45qdKaZNKZItDJIUx2Er6XsgZr20LuiwsqnltZdMowd+KWB+n6NhC CGj4KBqT7s1bdEGgldWeRSMT3cknPcQe5XitcQS4fJ2S1ea4cbhiQ4+Fc/qgygJ1 PDVSee9A3ROvIg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:45:43 2026 by rpki-client