$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft File: _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json) Hash identifier: g3MJqhjTmq+PSaPMEpBmmEAAzZdJqXzUfiHrmxWGuoo= Subject key identifier: 2F:B1:2F:95:6E:5A:D4:B5:D4:70:25:E2:3E:7D:DB:C5:45:6A:33:D2 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019FA7873400CB39CF4300973E9869271B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft Manifest number: 1A97 Signing time: Tue 28 Jul 2026 07:01:23 +0000 Manifest this update: Tue 28 Jul 2026 07:01:23 +0000 Manifest next update: Wed 29 Jul 2026 07:01:23 +0000 Files and hashes: 1: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (hash: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg=) 2: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (hash: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg=) 3: 2KUTocOpAT7sBhebTwh3G4FESlk.roa (hash: qCXP7Gzh5WeYsyND7xGMNVQazeCbTW+xxU01dOva01I=) 4: 4l9EsCgzSHlVTtpywsbUUFtExTk.roa (hash: YL2VEKNHNIjwIMrHgQShXB+ezdUEHsuR+LX2D+OX3sQ=) 5: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (hash: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI=) 6: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (hash: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w=) 7: CnjhaBCYf7ZnMG3Es2D005bWWPI.roa (hash: vnu28EkHQSIG2pnIVVAMbjcgAHNSaPZ05++SiDjH6LA=) 8: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (hash: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc=) 9: EKuLwMJDazSSbggWLeeqY64f0qk.roa (hash: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE=) 10: F9UQlAebc29GSseukVGk2Ly4-ig.roa (hash: SXDWRzwFnYBqyLhZKjGPwwWVf1aIUUbUr34+3OpNV9g=) 11: Fm258hcKsjpIMI7amylXAkeBtU4.roa (hash: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY=) 12: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (hash: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM=) 13: Ip7B4awbZgfNeXA2x0V50-o-c9A.roa (hash: fF+qKa96LMcpcHr7gUx7PPq8EJWzQoCtAK5cioR9tRU=) 14: KmL9hUmZWVkaAtdmjfXfWJiHh-s.roa (hash: YDzujFQaz+G+jCdu6mA5zUHDiIZN9X1GHpvWadjwBgQ=) 15: L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (hash: v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=) 16: L1z4gAbmtBr6IFjxlRf2f6QkURo.roa (hash: wfR+HjJDOFvJipZLYW4jdBeVJSrQq986lvQU2WiKhq8=) 17: MS8Bv_7T3F3D_VAzb7WSaLcYpfc.roa (hash: lk0a4eNfHng0En9tKf/4Xz/4DH1EMESKWrpSRzXWN9g=) 18: MpaMfmjA4uXhju6yGPMxcbYBu4A.roa (hash: fY6Bd8Jwx3Az9knsVe9icW6R6BO4nR3yyPPzfFj5DB8=) 19: N7A86p6PRImcj39W7i3dmRULO6M.roa (hash: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas=) 20: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (hash: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0=) 21: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (hash: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw=) 22: PuWhap-0muVvQV-0BrycJNZtn1s.roa (hash: cwkFpse9f5j5nHN/rRZOX3pPvRyqmiPVwVbzwBgvaHU=) 23: SrXqNvmuvQJBIjB0Di8xUFoZez0.roa (hash: SRA4RELyTLPR3imea02LrnsTj3Gu/dAsOF+7lBcjxe8=) 24: WgE1MGBGPR7k5rh3nE3hf7taSUw.roa (hash: tpDyS9JuhgZT9rKwZWlbjacZtc36iJXeis37wFMFBNY=) 25: XgyNYXwLhPSXrny8NDix9oprHDI.roa (hash: PWGs9rS5sBhLApUjUmFl5ISIFI1Oly8X3m/3XXPeS0g=) 26: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (hash: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o=) 27: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: kglbOZsGYWalWtLZqbgOVRGIQyoAz2SBMRsodNp3Udg=) 28: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (hash: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs=) 29: bjOfSR2MqsV8F2u47GaaSTilb7o.roa (hash: CSQqwPLLCYB1G620MY/nxSIeK4G85F9XmfdOOy9X5uE=) 30: eVUCZ2gkOg648kh9IahZkIBOJA8.roa (hash: vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=) 31: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (hash: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA=) 32: kRm---guYcInSUKq-QookHvNTuM.roa (hash: iGZFzrsQlmqEd4hUxjMucE/uvpD/1KA4uLxkKOBPLhA=) 33: kmtJGb31zTt_pJ6GCyTQ9LzmkzE.roa (hash: Q5L6eWKaIz5gBzH7B4mLua9KGWq+PLDJnwr9Kj6N+qo=) 34: msSEI6HlL5d64JwmuUz8Sr8pWG0.roa (hash: Te8OnG1Rs5zfBbzAKPB1q6JjnhlnmawlvBxGi0xWVuw=) 35: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (hash: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY=) 36: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (hash: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8=) 37: pNL3oico6rSRy7HI-qZpBv7USh8.roa (hash: nkMrE3yZ9+wbGR6nyZRKmZOaTcWk2iFc5i+D0HRUuvk=) 38: sjMKCmjaFKZ8YxmALLmdtrMAc1o.roa (hash: hCi0GLTWFRS32LeOAKNmqM7bPUbqpVB22DtgGi/v/Pg=) 39: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (hash: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg=) 40: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (hash: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8=) 41: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (hash: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:87:34:00:cb:39:cf:43:00:97:3e:98:69:27:1b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jul 28 07:01:23 2026 GMT Not After : Jul 29 07:01:23 2026 GMT Subject: CN=2fb12f956e5ad4b5d47025e23e7ddbc5456a33d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:8a:6e:43:c6:96:0e:6b:5f:c5:dd:23:9b: a1:74:65:d3:dc:b3:0c:e5:5c:3e:50:ea:0c:b8:f4: b7:6d:9c:50:8e:9a:c9:f8:1b:4b:bf:80:47:7f:6e: 6d:e1:fd:58:be:0f:c1:0c:a1:d8:08:b8:ff:53:43: d2:88:c6:d9:a2:e5:41:77:8e:e1:50:9f:e7:bc:a1: 31:ce:0d:f1:60:ff:c0:0c:fa:38:03:4f:af:1d:0b: 48:62:b5:e6:c8:d7:c2:73:5b:a1:79:b0:e6:c2:c3: 43:b7:6a:00:dd:a3:cc:12:d6:c8:a5:aa:48:65:1d: a0:c2:b9:b2:5a:b0:3e:97:61:02:0d:4f:4c:71:5c: 8f:1b:ac:2d:f7:02:1c:f1:ba:c6:0b:5d:75:b9:4f: 11:d0:db:68:65:09:b9:a2:42:ca:1b:7d:86:cd:6e: 79:a6:08:52:52:c3:21:ef:9a:fc:24:49:b6:35:b0: 33:9c:5e:71:ac:57:bc:c0:98:92:10:42:bc:ec:6d: f0:e0:2e:40:b6:e7:0b:ff:ab:d9:eb:ef:b7:3c:6d: ab:0f:eb:63:a6:38:b2:32:9b:92:c9:5f:df:d4:61: 37:fc:0a:32:b7:d7:c8:14:76:05:d6:2e:4b:f7:cb: 18:9c:f6:87:34:2b:52:7e:ab:25:30:d9:d5:17:d0: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:2F:95:6E:5A:D4:B5:D4:70:25:E2:3E:7D:DB:C5:45:6A:33:D2 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d5:89:11:a3:f1:58:29:bb:70:04:2e:f3:47:e3:0b:c1:6a: 3f:0b:40:0b:c3:3e:aa:20:49:a9:50:37:1d:ea:35:b1:13:57: 50:4c:28:db:3f:9b:f7:18:70:a0:18:7e:9a:ab:c2:cf:0f:bd: e4:fe:d8:a6:15:68:2e:39:2e:01:3d:98:ac:01:97:48:b5:3d: bf:ba:ef:00:56:47:c4:61:3a:59:9c:56:91:0d:9e:58:3a:41: 6a:65:50:64:68:1d:cf:05:a8:0f:a6:af:03:75:8d:a5:7a:58: c6:eb:6d:67:e8:94:0d:3b:f8:f3:f6:4c:88:71:e3:c7:d6:dc: ce:50:31:f3:1d:54:dd:69:24:49:1d:60:15:02:0c:ef:c2:6a: d6:0a:9d:07:c4:93:f8:44:f0:0f:f4:d9:3a:34:a3:2d:29:1c: 39:b4:78:3d:ac:b1:da:3a:9a:5d:e3:38:b4:28:04:af:87:8c: f0:67:98:d3:6f:56:13:ce:cc:d1:d9:c6:7e:b8:2b:a8:46:e9: b3:62:35:ff:fc:f6:d1:ea:f0:16:4c:34:7f:05:47:3c:e4:77: e3:b4:9f:2c:d4:6f:f6:45:31:dc:ad:49:56:3a:42:07:eb:25: b4:63:b4:e0:83:2f:4a:b6:53:e3:27:be:3e:20:1c:03:c4:d1: f6:96:31:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nhzQAyznPQwCXPphpJxt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwNzI4MDcwMTIzWhcNMjYwNzI5MDcwMTIzWjAzMTEwLwYDVQQD EygyZmIxMmY5NTZlNWFkNGI1ZDQ3MDI1ZTIzZTdkZGJjNTQ1NmEzM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm76KbkPGlg5rX8XdI5uhdGXT3LMM 5Vw+UOoMuPS3bZxQjprJ+BtLv4BHf25t4f1Yvg/BDKHYCLj/U0PSiMbZouVBd47h UJ/nvKExzg3xYP/ADPo4A0+vHQtIYrXmyNfCc1uhebDmwsNDt2oA3aPMEtbIpapI ZR2gwrmyWrA+l2ECDU9McVyPG6wt9wIc8brGC111uU8R0NtoZQm5okLKG32GzW55 pghSUsMh75r8JEm2NbAznF5xrFe8wJiSEEK87G3w4C5AtucL/6vZ6++3PG2rD+tj pjiyMpuSyV/f1GE3/Aoyt9fIFHYF1i5L98sYnPaHNCtSfqslMNnVF9BK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+xL5VuWtS11HAl4j5928VFajPSMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNWJEaPx WCm7cAQu80fjC8FqPwtAC8M+qiBJqVA3Heo1sRNXUEwo2z+b9xhwoBh+mqvCzw+9 5P7YphVoLjkuAT2YrAGXSLU9v7rvAFZHxGE6WZxWkQ2eWDpBamVQZGgdzwWoD6av A3WNpXpYxuttZ+iUDTv48/ZMiHHjx9bczlAx8x1U3WkkSR1gFQIM78Jq1gqdB8ST +ETwD/TZOjSjLSkcObR4Payx2jqaXeM4tCgEr4eM8GeY029WE87M0dnGfrgrqEbp s2I1//z20erwFkw0fwVHPOR347SfLNRv9kUx3K1JVjpCB+sltGO04IMvSrZT4ye+ PiAcA8TR9pYxpA== -----END CERTIFICATE-----Generated at Tue Jul 28 17:10:52 2026 by rpki-client