$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: c9DrRTHLo0OYquv5nvpEgcDw9hWVYmqUy+YO8NNTl6Q= Subject key identifier: DA:62:C8:68:4A:49:17:28:11:8A:2D:D3:BA:94:EE:BB:9A:B9:3C:36 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019FAA88AF29AD294790F7BBFF95B2B7C88E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1739 Signing time: Tue 28 Jul 2026 21:01:52 +0000 Manifest this update: Tue 28 Jul 2026 21:01:52 +0000 Manifest next update: Wed 29 Jul 2026 21:01:52 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: d+17pstAYiB77/FTNLn98+JMFQJIqIwjGRPmPlE4rxA=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:88:af:29:ad:29:47:90:f7:bb:ff:95:b2:b7:c8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jul 28 21:01:52 2026 GMT Not After : Jul 29 21:01:52 2026 GMT Subject: CN=da62c8684a491728118a2dd3ba94eebb9ab93c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:ae:3b:8b:14:7b:da:54:f2:a7:d4:89:94: 8d:8e:04:b0:b9:73:69:81:f1:61:e1:8e:83:2c:d3: af:8d:f6:bc:00:3e:b6:fd:49:a3:22:dc:88:df:91: fc:08:5a:cb:23:11:df:eb:57:e8:ca:c9:a5:1c:ab: e2:f6:ec:76:1f:b5:27:58:dd:24:2e:c4:ac:8a:97: 9d:c9:cb:41:8b:bf:8e:35:16:d4:b5:46:f6:af:49: 95:be:a3:da:03:07:29:ae:19:2f:f5:32:41:92:7f: 3c:e1:62:02:53:bd:5c:09:ff:e1:03:34:57:b5:91: 7d:a9:0f:ed:2f:14:83:5b:5e:ad:c3:dc:cd:d2:66: 6b:28:2c:78:e3:a1:6f:70:a9:60:de:b8:2f:83:c6: 6b:fd:14:2c:dd:10:cf:5a:af:68:bb:28:09:75:a1: bd:8b:18:bf:b3:e9:4c:b1:42:cf:07:a4:7f:bc:dd: e1:f2:05:2c:b8:32:6a:c1:22:48:31:00:f3:c0:37: 1d:c8:ea:e1:b2:49:ae:a3:f8:16:d7:1d:26:8c:41: 63:47:18:d6:31:d4:0e:a5:0f:36:a7:b7:cc:5d:da: 3d:ac:99:96:26:ab:44:a5:21:9d:dd:cf:d9:f2:d5: 93:22:2d:96:5d:a8:2b:9b:3d:7d:4c:f8:87:0b:1b: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:62:C8:68:4A:49:17:28:11:8A:2D:D3:BA:94:EE:BB:9A:B9:3C:36 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4d:4d:dc:1e:29:4f:ea:bd:ac:94:01:0b:ce:4c:2e:08:e6: 01:d9:ee:e6:78:b1:24:73:33:25:f0:90:7f:2f:72:c0:f7:67: c3:f5:8a:20:d3:cb:0e:b2:2b:fd:3e:0d:17:44:41:c7:c9:8c: ec:68:57:9d:c3:27:ae:17:7f:f9:c9:be:e6:1c:f2:2b:a9:ec: cb:88:18:71:44:65:d7:a5:5d:d1:f9:fe:09:ec:b6:cf:a7:de: 2a:1d:2e:46:7f:4e:ee:9b:36:68:7a:56:71:2e:3f:6d:03:8e: f9:82:1d:7b:fb:3e:d4:b0:9f:f7:e6:73:46:ac:6e:90:8b:73: 73:d3:5c:f7:00:4b:ff:4a:43:f6:ed:b1:52:2e:3d:81:ff:17: 96:2b:96:a2:ab:3f:54:41:03:2e:b3:65:c5:1f:d2:c3:68:f5: bd:fa:8f:bf:66:b7:bf:79:1a:dd:bb:78:68:73:1b:8b:c9:4d: b9:c6:53:87:d2:19:0c:70:b5:7c:13:1f:fc:04:fe:e2:8a:9c: 3f:82:a0:ce:33:ef:64:1e:9c:ec:72:99:b8:e7:97:de:85:41: 75:5f:77:dc:c2:ef:6c:e0:5d:67:a8:0e:81:6d:55:cc:ed:fd: 3c:ed:fe:7a:dd:f6:bb:35:86:30:6d:e4:e2:97:6c:fc:7a:21: 64:2a:99:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qiK8prSlHkPe7/5Wyt8iOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwNzI4MjEwMTUyWhcNMjYwNzI5MjEwMTUyWjAzMTEwLwYDVQQD EyhkYTYyYzg2ODRhNDkxNzI4MTE4YTJkZDNiYTk0ZWViYjlhYjkzYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdSuO4sUe9pU8qfUiZSNjgSwuXNp gfFh4Y6DLNOvjfa8AD62/UmjItyI35H8CFrLIxHf61foysmlHKvi9ux2H7UnWN0k LsSsipedyctBi7+ONRbUtUb2r0mVvqPaAwcprhkv9TJBkn884WICU71cCf/hAzRX tZF9qQ/tLxSDW16tw9zN0mZrKCx446FvcKlg3rgvg8Zr/RQs3RDPWq9ouygJdaG9 ixi/s+lMsULPB6R/vN3h8gUsuDJqwSJIMQDzwDcdyOrhskmuo/gW1x0mjEFjRxjW MdQOpQ82p7fMXdo9rJmWJqtEpSGd3c/Z8tWTIi2WXagrmz19TPiHCxtnkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpiyGhKSRcoEYot07qU7ruauTw2MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE1N3B4p T+q9rJQBC85MLgjmAdnu5nixJHMzJfCQfy9ywPdnw/WKINPLDrIr/T4NF0RBx8mM 7GhXncMnrhd/+cm+5hzyK6nsy4gYcURl16Vd0fn+Cey2z6feKh0uRn9O7ps2aHpW cS4/bQOO+YIde/s+1LCf9+ZzRqxukItzc9Nc9wBL/0pD9u2xUi49gf8XliuWoqs/ VEEDLrNlxR/Sw2j1vfqPv2a3v3ka3bt4aHMbi8lNucZTh9IZDHC1fBMf/AT+4oqc P4KgzjPvZB6c7HKZuOeX3oVBdV933MLvbOBdZ6gOgW1VzO39PO3+et32uzWGMG3k 4pds/HohZCqZww== -----END CERTIFICATE-----Generated at Tue Jul 28 23:33:09 2026 by rpki-client