$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: j8+Q0rIqAcA8O/7uAMz+SDhiRaU4uIUZBlTeFV2q+xk= Subject key identifier: A4:95:B1:0A:2E:85:1E:B6:AE:7E:0E:D1:97:F6:98:C0:FA:F6:18:16 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019FA8D076AB59912AE66DBA2BF9A65700AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1A0F Signing time: Tue 28 Jul 2026 13:01:01 +0000 Manifest this update: Tue 28 Jul 2026 13:01:01 +0000 Manifest next update: Wed 29 Jul 2026 13:01:01 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: /Z5c8DcFgA3bjYgNAlBHSBDF12feS53Ia85vSMewOA0=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: tldfbdi2KX3t4BcCVx6VGGK3iyo.roa (hash: Fi4d+ISfAotrj39E0racwhFRU+l4o+QEW3BSrZlvaV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:76:ab:59:91:2a:e6:6d:ba:2b:f9:a6:57:00:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jul 28 13:01:01 2026 GMT Not After : Jul 29 13:01:01 2026 GMT Subject: CN=a495b10a2e851eb6ae7e0ed197f698c0faf61816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:63:40:85:fc:68:3a:de:ab:8c:5d:5e:00: ac:08:29:9a:cb:45:ec:27:e5:d2:9e:2a:cb:a2:1d: 35:d2:7a:f6:09:5a:d9:33:41:58:45:fe:22:6a:18: dd:a7:56:1e:19:6f:6c:43:5a:19:64:41:0a:a0:51: 3e:26:db:f6:06:25:fb:e5:bd:a1:75:11:4d:a3:1e: 48:2f:4e:f6:55:87:f7:01:a4:12:ff:5b:46:a9:06: f9:c1:40:6c:5c:a7:b2:3f:72:f0:26:25:72:6b:fd: 30:40:ea:61:59:1f:f9:0b:30:f3:44:b3:a5:7e:7b: 9e:c2:3e:c6:7a:86:08:b0:85:16:cc:3b:6a:2b:3e: f2:62:54:c0:ac:a0:8a:00:60:d8:51:31:f8:3b:03: 40:e1:1c:9b:b0:6f:ca:84:61:6f:c0:cd:58:8f:0a: 0c:3c:e3:9a:38:5d:17:c2:38:18:42:9d:cd:11:c1: c8:31:db:90:57:7a:a4:8e:e8:06:9c:b9:cf:d0:fe: 96:52:f9:21:15:1c:aa:39:9e:e1:78:76:95:ee:23: e9:e8:4a:7f:e1:e4:98:67:0c:55:5e:8c:1e:0c:41: 3d:30:43:cb:de:aa:be:96:ea:f4:69:77:32:60:ff: 89:0d:86:6a:05:78:18:6f:5a:e4:83:92:1f:c2:54: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:B1:0A:2E:85:1E:B6:AE:7E:0E:D1:97:F6:98:C0:FA:F6:18:16 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:29:e9:8f:ba:1a:47:9b:4d:e1:d3:91:db:df:2e:11:6e: aa:3e:b6:08:41:5f:0f:d3:ad:66:93:7f:19:9b:4f:36:ac:af: 3b:2d:63:7d:55:6f:f6:75:47:dd:3d:c2:a8:f7:d7:ff:c8:f8: 98:26:9d:98:b3:fb:b8:87:98:24:21:59:18:3f:18:2e:83:41: db:04:93:05:15:2b:8d:3a:64:c6:f8:4e:4b:f8:dc:de:ce:c9: df:e7:04:44:ae:01:00:78:66:c5:e3:f2:1d:06:24:4a:5f:3a: 92:dc:df:81:08:5a:89:71:f4:7b:b2:34:21:d3:39:d1:4a:03: d8:48:5b:ed:2d:71:f2:83:c2:16:1a:4d:1f:08:19:64:e6:7f: 84:5f:37:1e:da:7e:45:0c:7d:26:c3:2b:39:62:df:d5:a7:ee: 28:51:d7:04:8e:64:86:3b:ee:fd:58:ca:b2:2b:01:31:de:95: b0:fd:33:af:f2:7e:88:27:25:1d:6c:79:0f:bb:a0:d2:58:dc: b3:76:cd:66:ff:68:58:51:36:51:0b:b3:d7:d4:e4:95:e8:ee: 0c:9e:c6:61:30:5a:b4:60:a2:ad:75:46:4b:6a:cd:3e:c2:15: 5c:5f:3f:b9:10:4f:d6:54:cd:01:7e:bb:30:d7:28:cf:66:c9: 0b:39:76:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0HarWZEq5m26K/mmVwCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwNzI4MTMwMTAxWhcNMjYwNzI5MTMwMTAxWjAzMTEwLwYDVQQD EyhhNDk1YjEwYTJlODUxZWI2YWU3ZTBlZDE5N2Y2OThjMGZhZjYxODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFjQIX8aDreq4xdXgCsCCmay0Xs J+XSnirLoh010nr2CVrZM0FYRf4iahjdp1YeGW9sQ1oZZEEKoFE+Jtv2BiX75b2h dRFNox5IL072VYf3AaQS/1tGqQb5wUBsXKeyP3LwJiVya/0wQOphWR/5CzDzRLOl fnuewj7GeoYIsIUWzDtqKz7yYlTArKCKAGDYUTH4OwNA4RybsG/KhGFvwM1YjwoM POOaOF0XwjgYQp3NEcHIMduQV3qkjugGnLnP0P6WUvkhFRyqOZ7heHaV7iPp6Ep/ 4eSYZwxVXoweDEE9MEPL3qq+lur0aXcyYP+JDYZqBXgYb1rkg5IfwlQiwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSVsQouhR62rn4O0Zf2mMD69hgWMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1Mp6Y+6 GkebTeHTkdvfLhFuqj62CEFfD9OtZpN/GZtPNqyvOy1jfVVv9nVH3T3CqPfX/8j4 mCadmLP7uIeYJCFZGD8YLoNB2wSTBRUrjTpkxvhOS/jc3s7J3+cERK4BAHhmxePy HQYkSl86ktzfgQhaiXH0e7I0IdM50UoD2Ehb7S1x8oPCFhpNHwgZZOZ/hF83Htp+ RQx9JsMrOWLf1afuKFHXBI5khjvu/VjKsisBMd6VsP0zr/J+iCclHWx5D7ug0ljc s3bNZv9oWFE2UQuz19TklejuDJ7GYTBatGCirXVGS2rNPsIVXF8/uRBP1lTNAX67 MNcoz2bJCzl2KA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:54 2026 by rpki-client