$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: 0NFxVZzUa5E7QtCZZiouLy3hyFU+SzOqMV3HWtyIS6s= Subject key identifier: E9:56:85:17:62:2B:65:C3:50:CD:40:49:6A:BC:11:0E:D0:B0:53:5F Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019FAC3F07A024A2076A79247AC97505CB13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 16E4 Signing time: Wed 29 Jul 2026 05:00:39 +0000 Manifest this update: Wed 29 Jul 2026 05:00:39 +0000 Manifest next update: Thu 30 Jul 2026 05:00:39 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 0YWwdG6s9hjc296KXwRpYGGdEeLvBCJMw0FcOU9p98g=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:3f:07:a0:24:a2:07:6a:79:24:7a:c9:75:05:cb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jul 29 05:00:39 2026 GMT Not After : Jul 30 05:00:39 2026 GMT Subject: CN=e9568517622b65c350cd40496abc110ed0b0535f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:5f:66:4c:b6:f9:ad:5a:7b:bd:2f:0e:be: 2b:27:7c:b9:d3:b4:38:04:a2:7b:f9:7b:dd:cb:ce: 5a:d6:f3:20:cb:6b:88:45:9d:8a:f1:c9:5b:42:3f: f0:66:26:34:9a:4d:c0:e7:7b:9d:55:4c:37:bf:62: cd:d8:e3:be:3b:f5:03:d8:f5:51:a8:4e:07:60:27: f8:7f:88:dc:43:8a:7e:e1:52:2a:2b:68:00:56:f3: d7:a3:e9:1c:0d:91:39:65:93:09:fc:b7:a2:fc:b7: 61:44:c5:c8:65:ae:b3:15:71:55:1e:79:1c:bb:71: 0a:24:fe:2b:ee:44:77:ee:83:f1:bf:51:a4:92:ca: 05:09:ab:4e:67:07:47:68:d4:54:87:19:7f:f5:f9: e6:76:e8:64:a5:ec:97:bc:cd:46:fe:48:73:9c:eb: 33:f2:12:db:be:68:6b:3f:db:04:73:ab:e3:8f:ba: c0:21:18:14:a0:5e:ac:49:81:b6:7d:68:7b:27:20: 9b:6c:04:59:31:3d:28:5c:43:64:f4:9b:9b:c2:93: 82:2a:c2:91:f8:16:d1:2f:f2:75:30:69:eb:ce:4a: 76:10:7b:ff:1f:ef:49:b0:61:6d:49:58:94:19:04: 09:e2:10:85:05:f7:11:0e:aa:77:e7:b9:a9:d6:fe: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:56:85:17:62:2B:65:C3:50:CD:40:49:6A:BC:11:0E:D0:B0:53:5F X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:35:4e:29:e4:22:98:f0:28:e2:90:92:0b:a1:17:c4:f6:22: 62:88:aa:9c:32:b1:ac:24:b7:2f:f7:7c:68:e3:73:2c:f6:40: 0e:3e:e8:77:81:4e:8e:bb:41:bf:6d:7d:c0:ca:68:d2:44:4c: a6:33:0f:50:ac:20:7c:ab:8a:bd:8c:20:9d:8b:5a:56:5a:7a: 3b:b3:9b:6e:01:1a:15:4d:fa:27:56:34:04:57:68:7c:70:aa: 31:2a:4b:e9:60:a3:8c:d8:fd:6a:1f:17:b7:0a:d9:7c:93:ee: 32:06:b7:0e:fb:0a:ad:09:40:b7:43:2b:91:ba:c3:45:6e:34: 1d:09:24:22:97:da:1f:d1:7b:3c:93:96:a1:5d:4d:27:1d:4b: 78:1f:9d:9e:6e:6b:70:43:43:d2:c5:42:07:ad:54:81:0d:8e: cb:19:69:c1:df:e1:eb:1b:27:42:84:a9:ee:f6:fa:93:73:8c: 44:a6:ba:71:3b:1d:d1:6b:be:b9:00:88:5c:44:0d:75:13:ae: 5a:6f:45:bc:ab:57:4a:39:2f:31:52:f4:80:21:c3:a7:ef:6f: 45:eb:c1:5e:cc:27:10:a3:aa:4c:6f:7e:46:cb:6d:38:93:79: 53:8a:25:e5:d5:82:29:e3:3f:38:8d:20:3b:bc:58:b8:6c:fb: ed:e2:51:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sPwegJKIHankkesl1BcsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwNzI5MDUwMDM5WhcNMjYwNzMwMDUwMDM5WjAzMTEwLwYDVQQD EyhlOTU2ODUxNzYyMmI2NWMzNTBjZDQwNDk2YWJjMTEwZWQwYjA1MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oFfZky2+a1ae70vDr4rJ3y507Q4 BKJ7+Xvdy85a1vMgy2uIRZ2K8clbQj/wZiY0mk3A53udVUw3v2LN2OO+O/UD2PVR qE4HYCf4f4jcQ4p+4VIqK2gAVvPXo+kcDZE5ZZMJ/Lei/LdhRMXIZa6zFXFVHnkc u3EKJP4r7kR37oPxv1GkksoFCatOZwdHaNRUhxl/9fnmduhkpeyXvM1G/khznOsz 8hLbvmhrP9sEc6vjj7rAIRgUoF6sSYG2fWh7JyCbbARZMT0oXENk9JubwpOCKsKR +BbRL/J1MGnrzkp2EHv/H+9JsGFtSViUGQQJ4hCFBfcRDqp357mp1v7+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlWhRdiK2XDUM1ASWq8EQ7QsFNfMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjVOKeQi mPAo4pCSC6EXxPYiYoiqnDKxrCS3L/d8aONzLPZADj7od4FOjrtBv219wMpo0kRM pjMPUKwgfKuKvYwgnYtaVlp6O7ObbgEaFU36J1Y0BFdofHCqMSpL6WCjjNj9ah8X twrZfJPuMga3DvsKrQlAt0MrkbrDRW40HQkkIpfaH9F7PJOWoV1NJx1LeB+dnm5r cEND0sVCB61UgQ2Oyxlpwd/h6xsnQoSp7vb6k3OMRKa6cTsd0Wu+uQCIXEQNdROu Wm9FvKtXSjkvMVL0gCHDp+9vRevBXswnEKOqTG9+RsttOJN5U4ol5dWCKeM/OI0g O7xYuGz77eJR3A== -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:44 2026 by rpki-client