$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: VbHidMpcAd2moej9Eucyi53FeojcxYUunXC3Paz2Lq8= Subject key identifier: 53:2C:D3:82:CB:1A:C7:F6:97:BF:C5:D1:1E:B9:9D:C3:39:7D:16:E1 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019FA82B2CB8856A5E8D325090405BEF5391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 16F8 Signing time: Tue 28 Jul 2026 10:00:29 +0000 Manifest this update: Tue 28 Jul 2026 10:00:29 +0000 Manifest next update: Wed 29 Jul 2026 10:00:29 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: KCC1827CX/H0NoDvQC3drtb9upFZAwXq0rWR+qB/tmg=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 16: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:2c:b8:85:6a:5e:8d:32:50:90:40:5b:ef:53:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jul 28 10:00:29 2026 GMT Not After : Jul 29 10:00:29 2026 GMT Subject: CN=532cd382cb1ac7f697bfc5d11eb99dc3397d16e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:61:c0:4f:86:27:d4:e9:bc:bc:9a:1e:12: 1a:4c:55:7d:2f:f5:af:46:08:28:13:0a:9b:93:c5: 1c:02:9d:ce:5e:f4:42:be:30:0a:3d:64:e5:10:5a: 29:e7:36:e2:f7:3b:d5:2b:43:43:57:f4:13:d9:ff: 90:52:09:e7:58:0f:93:1f:4b:a3:6f:be:0b:f0:22: 3a:61:b2:8a:bf:e6:74:d2:a6:f5:90:d2:f0:28:a2: 14:d7:9c:43:cf:41:bc:78:17:b7:cf:cf:97:a9:de: 4c:d4:f4:ac:30:25:fd:65:a9:df:df:a9:5e:83:bb: 41:b1:8d:dd:e6:5b:a8:bf:a2:68:d4:ae:a5:55:7c: 91:36:3a:fe:29:2e:97:bc:39:46:4c:9a:4b:d0:46: 05:a7:db:c2:fe:e5:36:76:93:17:df:f9:a8:08:5f: 1e:71:17:cc:b2:15:fd:ed:75:12:9f:cb:68:72:bf: 81:9f:c0:ea:c4:45:1a:fa:e5:be:0f:a6:09:4e:0e: b1:4c:8e:4d:c2:8e:af:c2:e6:97:96:fd:de:4e:fe: 8a:4f:1d:b1:1c:54:26:02:46:a0:34:96:b2:1c:bf: 23:da:e5:1b:a2:b3:30:12:19:95:0f:67:ee:38:bc: ea:62:58:e9:56:62:28:bc:f2:0a:60:73:b8:1d:97: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2C:D3:82:CB:1A:C7:F6:97:BF:C5:D1:1E:B9:9D:C3:39:7D:16:E1 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d3:fd:ac:4f:93:aa:0a:3c:3d:ef:62:a3:de:41:b2:8d:cb: f4:cd:ea:b5:ff:c0:80:e2:31:d9:e7:1d:c8:71:7e:f8:63:38: ff:af:c2:4d:82:60:4b:87:c7:a0:97:1e:a5:22:b3:bd:fd:5d: 0e:37:2e:24:a9:e9:d8:9a:2d:16:1d:5a:4f:13:48:6c:2e:d0: 82:35:2a:98:84:57:72:ae:6f:fc:b7:86:26:35:2b:62:b7:06: cd:3f:4a:c8:61:94:5f:bc:c8:ec:12:59:31:ee:ca:3e:3e:b2: 47:4a:6a:63:9e:d1:dc:35:d4:fc:9a:bb:f2:78:38:07:66:94: b2:67:ff:9c:07:b5:f4:4e:49:f7:18:4d:f1:42:5b:97:b5:33: e9:80:f2:d9:d8:11:09:1f:70:87:ed:4c:41:dc:11:03:0e:f6: f0:70:c5:24:54:14:e5:60:e4:79:46:94:96:cd:5e:00:b6:c6: 02:2b:35:d6:ce:52:cc:8b:10:a9:82:20:a3:f3:55:78:ea:a2: 8c:10:04:92:0a:59:e4:a0:fe:33:4b:b0:69:8b:ce:71:89:39: 0e:b3:dd:95:06:e7:72:6c:89:de:20:89:87:bc:92:c1:fb:d0: 73:cf:dc:b9:0a:64:3f:ba:47:a6:0d:b4:13:00:e3:52:54:2a: 93:33:9d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oKyy4hWpejTJQkEBb71ORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwNzI4MTAwMDI5WhcNMjYwNzI5MTAwMDI5WjAzMTEwLwYDVQQD Eyg1MzJjZDM4MmNiMWFjN2Y2OTdiZmM1ZDExZWI5OWRjMzM5N2QxNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+VhwE+GJ9TpvLyaHhIaTFV9L/Wv RggoEwqbk8UcAp3OXvRCvjAKPWTlEFop5zbi9zvVK0NDV/QT2f+QUgnnWA+TH0uj b74L8CI6YbKKv+Z00qb1kNLwKKIU15xDz0G8eBe3z8+Xqd5M1PSsMCX9Zanf36le g7tBsY3d5luov6Jo1K6lVXyRNjr+KS6XvDlGTJpL0EYFp9vC/uU2dpMX3/moCF8e cRfMshX97XUSn8tocr+Bn8DqxEUa+uW+D6YJTg6xTI5Nwo6vwuaXlv3eTv6KTx2x HFQmAkagNJayHL8j2uUborMwEhmVD2fuOLzqYljpVmIovPIKYHO4HZcncQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMs04LLGsf2l7/F0R65ncM5fRbhMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtP9rE+T qgo8Pe9io95Bso3L9M3qtf/AgOIx2ecdyHF++GM4/6/CTYJgS4fHoJcepSKzvf1d DjcuJKnp2JotFh1aTxNIbC7QgjUqmIRXcq5v/LeGJjUrYrcGzT9KyGGUX7zI7BJZ Me7KPj6yR0pqY57R3DXU/Jq78ng4B2aUsmf/nAe19E5J9xhN8UJbl7Uz6YDy2dgR CR9wh+1MQdwRAw728HDFJFQU5WDkeUaUls1eALbGAis11s5SzIsQqYIgo/NVeOqi jBAEkgpZ5KD+M0uwaYvOcYk5DrPdlQbncmyJ3iCJh7ySwfvQc8/cuQpkP7pHpg20 EwDjUlQqkzOdEA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:54 2026 by rpki-client