$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: tZCsXQ3YUuQhahCq+sKm6PPmBljYgW/4d/rkuEyMCOM= Subject key identifier: 3A:C5:BD:B8:65:25:2C:CF:C0:A1:1D:CA:59:25:D3:F3:D3:43:D5:71 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019FAB9A6697D76346303935E4DD2EA63627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 19E2 Signing time: Wed 29 Jul 2026 02:00:50 +0000 Manifest this update: Wed 29 Jul 2026 02:00:50 +0000 Manifest next update: Thu 30 Jul 2026 02:00:50 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: O6gkJXcMFu78T8Zz3hYwwguri94dYsGycfFYgzGnYc8=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:66:97:d7:63:46:30:39:35:e4:dd:2e:a6:36:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jul 29 02:00:50 2026 GMT Not After : Jul 30 02:00:50 2026 GMT Subject: CN=3ac5bdb865252ccfc0a11dca5925d3f3d343d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:be:9d:98:db:f1:07:13:7c:f8:60:46:55: 67:d0:71:77:4b:0c:17:01:ef:fb:29:26:4d:d3:0b: 3f:bd:d2:95:4f:ac:17:b8:33:e7:80:9d:2a:c0:18: 13:44:8a:b1:d9:ce:c7:38:16:06:a8:1b:38:68:4f: e1:9d:94:77:b3:67:61:54:64:43:8c:f3:39:89:c7: 03:a7:53:43:eb:6f:29:ea:5c:c7:f8:1f:06:51:9d: 26:67:24:e6:df:36:c2:02:4d:fa:c1:33:bc:aa:d9: 81:a0:f6:ed:ec:ba:83:dc:46:8c:87:1d:0d:c9:58: bc:6d:b9:96:18:4b:20:7f:3f:7c:2b:9c:07:16:46: 87:7c:4b:06:29:5e:ad:07:2b:bf:33:16:1f:23:d4: d5:a7:5f:58:f8:ce:67:fb:d7:7e:26:61:c4:68:04: f4:79:74:0f:9f:be:cf:a1:4d:3b:f3:d8:e2:49:65: db:90:56:7d:62:7e:b9:c0:b8:fb:4f:15:d8:49:da: 7d:47:73:75:4f:e2:0a:3f:2a:bc:6a:11:c6:b3:dc: cc:c1:aa:a0:d7:37:79:46:a8:00:37:a8:6d:18:e2: 84:61:c3:92:e3:8b:05:34:94:c9:3d:6c:8c:34:fe: 5d:49:24:1c:ed:df:e9:af:73:36:17:3b:b0:68:68: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C5:BD:B8:65:25:2C:CF:C0:A1:1D:CA:59:25:D3:F3:D3:43:D5:71 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:98:fb:d9:c4:7a:6b:91:f3:de:33:59:38:d5:ec:6a:03:b8: 73:aa:52:d3:d4:b9:64:96:b3:3d:5e:fc:11:4e:c8:b1:41:c6: ed:0a:fa:07:06:54:a5:34:0e:8a:a3:56:39:97:c2:c5:08:60: a4:93:2f:0c:1e:a2:47:ac:84:24:6b:98:04:ed:05:b1:f1:a1: 9f:85:9b:31:55:7e:fb:82:e8:5b:64:50:bd:59:67:c9:00:98: fd:33:8f:33:6f:14:5b:9f:d9:7c:22:e7:77:04:74:97:94:20: c0:cd:75:f4:b5:aa:e3:0d:b8:3b:fe:f4:79:64:6c:63:9b:7e: 01:fb:a7:db:98:36:d6:1b:c5:63:82:32:ab:1b:73:a0:b7:6a: d7:eb:9c:97:66:c3:fd:27:e0:78:2f:92:a9:a3:cd:42:3a:a3: 94:29:ab:23:41:66:a4:e6:46:2f:5f:24:2b:0b:bb:65:80:8a: 5b:0c:9f:24:24:23:05:32:ee:7a:9e:65:6e:05:ad:88:7e:67: 4c:b5:f9:4f:cf:96:97:2b:c4:68:ac:60:c2:96:da:0f:72:19: f1:e0:b5:a3:e2:75:04:c8:6c:df:76:67:fc:10:a1:4c:5c:6f: 5c:fd:4a:e3:d8:86:c2:f2:b5:da:f8:5f:47:92:fc:e4:33:7b: 74:ec:55:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmmaX12NGMDk15N0upjYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNzI5MDIwMDUwWhcNMjYwNzMwMDIwMDUwWjAzMTEwLwYDVQQD EygzYWM1YmRiODY1MjUyY2NmYzBhMTFkY2E1OTI1ZDNmM2QzNDNkNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E++nZjb8QcTfPhgRlVn0HF3SwwX Ae/7KSZN0ws/vdKVT6wXuDPngJ0qwBgTRIqx2c7HOBYGqBs4aE/hnZR3s2dhVGRD jPM5iccDp1ND628p6lzH+B8GUZ0mZyTm3zbCAk36wTO8qtmBoPbt7LqD3EaMhx0N yVi8bbmWGEsgfz98K5wHFkaHfEsGKV6tByu/MxYfI9TVp19Y+M5n+9d+JmHEaAT0 eXQPn77PoU0789jiSWXbkFZ9Yn65wLj7TxXYSdp9R3N1T+IKPyq8ahHGs9zMwaqg 1zd5RqgAN6htGOKEYcOS44sFNJTJPWyMNP5dSSQc7d/pr3M2FzuwaGgIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrFvbhlJSzPwKEdylkl0/PTQ9VxMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJj72cR6 a5Hz3jNZONXsagO4c6pS09S5ZJazPV78EU7IsUHG7Qr6BwZUpTQOiqNWOZfCxQhg pJMvDB6iR6yEJGuYBO0FsfGhn4WbMVV++4LoW2RQvVlnyQCY/TOPM28UW5/ZfCLn dwR0l5QgwM119LWq4w24O/70eWRsY5t+Afun25g21hvFY4IyqxtzoLdq1+ucl2bD /SfgeC+SqaPNQjqjlCmrI0FmpOZGL18kKwu7ZYCKWwyfJCQjBTLuep5lbgWtiH5n TLX5T8+WlyvEaKxgwpbaD3IZ8eC1o+J1BMhs33Zn/BChTFxvXP1K49iGwvK12vhf R5L85DN7dOxVHw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:51:51 2026 by rpki-client