$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json) Hash identifier: 3GTPFt9JhTvSz8usjeSdMPdtOieCrfSAlqNzrUJchuE= Subject key identifier: 32:9A:40:C6:E7:94:F4:B7:C8:43:EA:74:9A:7E:02:B5:66:0A:C9:6F Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019FAA9143F4184BB470442F6D171D9E6A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft Manifest number: 1A12 Signing time: Tue 28 Jul 2026 21:11:14 +0000 Manifest this update: Tue 28 Jul 2026 21:11:14 +0000 Manifest next update: Wed 29 Jul 2026 21:11:14 +0000 Files and hashes: 1: HiODX_GB1lr5tn-F5Ukq4bN5ZxU.roa (hash: w0l5co7lbR0eBVZRSrILn/VweaeGBPQR+RW6klO/oVE=) 2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=) 3: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=) 4: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 4E85QdsmXX0iuaCpyERJm11Ix/XL2FKGE29ZdhQ/iqs=) 5: doO-DYqobZmFvdLcd-K-qxcr84E.roa (hash: 7zGwklkpyjE5YZHV1coBMWX3WdDjVnJMXK20a6+4lgI=) 6: e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa (hash: N1xgKMxZ6JNLp0L0Qd+l/YBBESUI4Q2awE17GKoo6Lc=) 7: gZMt62YXB3fOXlkUgEoT0ISZk38.roa (hash: 7CvKQ04ac0nYoFEHRru1nH3qJSkBG+4xElv372aI5mM=) 8: ijx72sOLkdFwyQPnNALm-uXb8bM.roa (hash: kfeWR9mNoEB+1dBFEGtvr8qeUJFz99AzeH22Swmzpw8=) 9: oGM2VnMpOCKYJ76UmtsN4bcG4AE.roa (hash: u1qpcEzvc0AiMQxU9KKbQ34nUkrdcBih3dx5vdFM29g=) 10: xfymiOaGkXDgwwLlqKOQEGSsXN8.roa (hash: LUf079Ipr2cYBKWBVKbcSJUL/8hC//aGHxyeNjrF6jE=) 11: xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa (hash: lYAG9LJCT1e4qcqagtD7wUdtWmWH2kRZheOBDzQ9ReE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:91:43:f4:18:4b:b4:70:44:2f:6d:17:1d:9e:6a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Jul 28 21:11:14 2026 GMT Not After : Jul 29 21:11:14 2026 GMT Subject: CN=329a40c6e794f4b7c843ea749a7e02b5660ac96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:5a:91:87:dd:ab:68:37:d2:12:39:da:64: 4e:e6:c9:f2:d1:2b:4f:e0:ce:0c:c3:0d:9a:3c:b2: f4:41:57:4c:35:8e:0a:f8:83:10:7b:f6:59:a9:b8: cc:c9:e7:cc:ca:84:f2:6c:ff:cd:17:c2:71:8a:a6: 60:21:ff:7b:06:85:a6:17:31:f8:1d:37:de:d5:5c: 5b:22:a5:84:13:a1:e0:c6:ee:4e:ab:98:23:0a:14: 55:5d:e8:6a:af:63:a4:14:3c:d6:98:f0:01:d2:79: 29:61:60:46:e6:2b:db:36:a4:65:17:cb:f5:94:bb: 66:e3:16:8a:c3:d7:ae:0b:5d:7e:a5:fc:d4:d4:ba: 42:d4:52:1d:6f:f5:31:62:cd:b9:af:d0:8d:af:53: cd:b8:c1:ba:b9:5f:44:23:fc:06:22:fe:cc:f2:31: e3:47:1f:98:81:2f:4d:ad:04:ad:1b:bf:74:ab:fc: e8:7e:1b:5c:d1:b2:67:6d:ac:bb:92:6f:7c:9f:1b: 41:6b:93:45:7a:58:44:8b:14:e6:ae:5c:60:ed:45: 89:32:39:bf:86:b8:fd:b1:cb:b4:7d:a0:6c:8c:a7: 91:ea:28:0c:48:77:42:74:77:c4:07:68:f7:7c:b2: 54:89:cd:19:fb:f5:cb:37:1b:1d:c7:38:7d:93:97: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:40:C6:E7:94:F4:B7:C8:43:EA:74:9A:7E:02:B5:66:0A:C9:6F X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d1:e9:76:17:08:97:85:84:d6:7c:72:5a:7c:b5:1f:63:71: fb:b9:02:00:47:a2:e6:b9:75:f3:cb:98:23:18:5a:b1:cd:d2: c1:d6:3b:f9:f0:bd:77:4c:07:7a:63:9d:ff:a1:ba:7c:da:cb: b1:6f:8a:81:0a:cf:97:eb:ae:5e:64:2e:98:ea:af:80:0b:f6: c4:a3:4c:a8:fc:59:b4:ea:04:c4:4b:96:bb:21:2e:6a:45:fa: ce:cd:1b:72:84:5d:a3:6a:53:3c:2b:4c:77:02:57:73:d3:62: a3:43:e6:f2:d5:f5:4b:09:7c:30:53:2f:02:b7:2d:1b:6b:7b: 47:de:fd:4b:2d:61:e2:fc:ae:88:9f:92:8f:5e:ec:73:02:22: 2d:73:00:9d:79:e1:93:e1:ed:fc:72:b4:29:3e:46:d5:79:bf: 4a:82:5d:23:48:3f:b7:ce:74:9d:36:1f:28:2b:61:87:af:0f: 8e:84:6a:4e:e5:ea:a0:7f:02:8b:7e:05:e5:b4:97:18:17:3e: 5f:b2:08:b5:5a:40:d0:88:68:3d:88:d6:fa:e8:6e:61:3a:fd: ef:be:f5:ed:a6:cb:0e:b2:9c:7a:6f:e4:02:0f:41:3a:38:5e: 84:78:9b:7b:79:a1:a3:aa:61:4b:26:9b:8b:cb:16:5c:8d:37: e6:2e:c0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qkUP0GEu0cEQvbRcdnmoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwNzI4MjExMTE0WhcNMjYwNzI5MjExMTE0WjAzMTEwLwYDVQQD EygzMjlhNDBjNmU3OTRmNGI3Yzg0M2VhNzQ5YTdlMDJiNTY2MGFjOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/NakYfdq2g30hI52mRO5sny0StP 4M4Mww2aPLL0QVdMNY4K+IMQe/ZZqbjMyefMyoTybP/NF8JxiqZgIf97BoWmFzH4 HTfe1VxbIqWEE6Hgxu5Oq5gjChRVXehqr2OkFDzWmPAB0nkpYWBG5ivbNqRlF8v1 lLtm4xaKw9euC11+pfzU1LpC1FIdb/UxYs25r9CNr1PNuMG6uV9EI/wGIv7M8jHj Rx+YgS9NrQStG790q/zofhtc0bJnbay7km98nxtBa5NFelhEixTmrlxg7UWJMjm/ hrj9scu0faBsjKeR6igMSHdCdHfEB2j3fLJUic0Z+/XLNxsdxzh9k5dYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKaQMbnlPS3yEPqdJp+ArVmCslvMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftHpdhcI l4WE1nxyWny1H2Nx+7kCAEei5rl188uYIxhasc3SwdY7+fC9d0wHemOd/6G6fNrL sW+KgQrPl+uuXmQumOqvgAv2xKNMqPxZtOoExEuWuyEuakX6zs0bcoRdo2pTPCtM dwJXc9Nio0Pm8tX1Swl8MFMvArctG2t7R979Sy1h4vyuiJ+Sj17scwIiLXMAnXnh k+Ht/HK0KT5G1Xm/SoJdI0g/t850nTYfKCthh68PjoRqTuXqoH8Ci34F5bSXGBc+ X7IItVpA0IhoPYjW+uhuYTr977717abLDrKcem/kAg9BOjhehHibe3mho6phSyab i8sWXI035i7Azg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:36:57 2026 by rpki-client