$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: g4Imy2MM1IKEZmsDdBBuBxTWeq5BorZ7IpGB+JsEJew= Subject key identifier: 9B:11:D0:11:F3:F5:F7:7F:D3:43:15:C5:C0:83:D6:73:13:50:B8:FD Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019FAB2CB1B295685F35F6CCE235D2014DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 1AF9 Signing time: Wed 29 Jul 2026 00:01:00 +0000 Manifest this update: Wed 29 Jul 2026 00:01:00 +0000 Manifest next update: Thu 30 Jul 2026 00:01:00 +0000 Files and hashes: 1: 0EAd0NIVQFpYF8Sfry0-sg27DIU.roa (hash: AM+vkkVy+PRlTYsSrmQEunL3834jj/6I3kNZmcTiVSQ=) 2: 1-3OySvVtg6j55zm7RvKKKD2txc4.roa (hash: NIlV04qTE8fz3k+qGrSn4IT9heA3wwx6JbYylqq6SPI=) 3: 1AlxxMUZolJLdZHPVyV2UoSe358.roa (hash: 9ehijIeVwQp7RL+YUW6sio1uU2Yn7VaTLU6Oe4mOvfE=) 4: 3WBdory9XqQbfC4TyXJx63N3UFw.roa (hash: nahNFLPGEU3gQRtFtbIkO4bhI0n9GpvfWrrSsEPAAWY=) 5: D7n5z-X4QhT0cqePH5_ymEPmodc.roa (hash: o8sKCnE2zp0a9Xj0y7an5x9MEDGoNlR5ZqyI5pidfw0=) 6: EugaGmrAg66bJHbDR050z2x8ppM.roa (hash: l112VfNQG03RqXUG4DN5iFKyE8XjBnUNtDrz/Dolok0=) 7: F5NbQDwuDql8YpH3L-ZJg9ShqS0.roa (hash: mjnepbUc5lCxSNEcHUqBuIxj9G2yoTLDmwdW50NPFrU=) 8: FFLikyFmH-Abpg8kwz_BXxHfNCU.roa (hash: cMgG0SrLZjSK1IoPjyUitd4xe4z4i4cE22ZF/9OmiC0=) 9: H3GT4590I-wlLcRehIEn90WLp0w.roa (hash: 9Fh6QD3KXc86AyaAkfv2S/ORqPuK9LKKtkaebRdEzQ0=) 10: HzNF72M-JUjvY2auMIhPMaZbcu4.roa (hash: jIE8nOAj+oK6NNaSyEYskPrjUE0ya5pmThUjASHeDg0=) 11: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: PldWFKXkTURp5FI9GKu4a5nV2abRdrKWmNyg1sy2LXs=) 12: Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa (hash: f53J/UsPl50nlO0PDJi0nDqUWowY7qlvBpfHPm2wNVo=) 13: KAwmeFKkJNecLC_dhlCgmutRBdg.roa (hash: 4iHI08OHJ2NSksCBP3bSg9muJPVbkbXbMCBVzC/LIqU=) 14: LPhThbsTW9RteYTnU5fllHszvgw.roa (hash: Lr7N0csN9qpepByS3CiyJwbJBLIH11PFa4xdBV/iINk=) 15: MjQcicBRkl2ilK5k2Pj8MfAGk7c.roa (hash: owxcLAA7ehhKXpfItnOOd54/kefAYWqbpCPsXKgpLSI=) 16: Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa (hash: QYiqA7g6apA/hS3xz4OT+/HBNbSOo0h0b476zf/bHvU=) 17: R91CcPNkUtu6XE-ZUwryAs6c8dA.roa (hash: lK0bjp1+iJCnWnbzkCHfNgNGHNMPkAnpfr0Ad8hVlWw=) 18: Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa (hash: vIzC9sIZH6YUu+Ppt3sLWqdbfBwlSwyCWej1tNmuxcU=) 19: U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa (hash: vLUhnxRWvdCmmMvb1mJXW0MVOezf9HqsIWcCip83cUs=) 20: U8RgryHUq2JAAsgHSpUUEEa9flU.roa (hash: e5+nqmhm/ol/qrImk3F60PKlgocSXFLw4tFumPg6bGE=) 21: XkCpQ4xWLE9dlV83IDE1saD3b2k.roa (hash: bDYpXnq431ghla3lAMtwBrRxAdHF9JaPOSyXTvPRRR4=) 22: aHs-rF7InSlshvWZMPlqLeGf8BQ.roa (hash: cnpHyXi6Xup8rUbntENTMIwHeI0OtwJDt5zJW7zxTYM=) 23: dorf3vXiF8po1xw2yVEc19fH3qg.roa (hash: aKIMUfFNrtICIbFoumkp4rd3G4RSV0nPoRkpF++bDVw=) 24: dt_sesUw1jCIshOtSv8VduDtfqM.roa (hash: +LfBzD6Ek6GfCiZXW1OnTJegtkF9IIfufLlAfANB8ls=) 25: eQteGe3dUsvEvumdMFEyVqvLcUI.roa (hash: i/PVqNV8H6klhROm0PX4mdNPbEa+iKND/8anAmOUj6s=) 26: k70Hscj98f7iu-7lS91WJLMOGOg.roa (hash: qZAml61fc9EJPJ+5idHBkUiuoGzsk6xQwJ2qpPlbpFU=) 27: m7gY7tgEZEhnmCq-HkAcQ1-8HbE.roa (hash: xODHFAEs2OHYrHZKfEYMuN4r2rdZ9JfZ6XFxFdIMEYo=) 28: nJIWhXF5E_3OsKvezQcMuvFTje4.roa (hash: ysclIta5Nb4QhQEFGOS+ZWWgIylyZJMATCIjNw5UY0s=) 29: oDrrwj_J2YbGDvH96R1q32wibOg.roa (hash: enzCHScTPelD74ea898lsenkjGHLvXoRBcBQQihmhlo=) 30: qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa (hash: qos4wdFa7iSz40bF0wQ8pxahdxfqI9hUbUKo1P2JNYQ=) 31: sWfqkNHPcPkhA5a8aSQtoMjSk1g.roa (hash: g17baIMwzbfRDSr/hcX2JdloXizpSVyiXSiXvc7mu2Y=) 32: uhwMHBy0T1Zz_2CZbx4pD5TsJB4.roa (hash: QGGnLHX611kdCZRgFJS0ABfsrwzGsKy+hT++rsHa4HM=) 33: vkLy7286dxrhKN8_vNXJRiO43tI.roa (hash: zEYD3rV5MA0KRfFUZNuyB8fBP2X5IdnwsvbIbCutsO4=) 34: zeDR4o_SfBOszT4AEUW1U8duE-E.roa (hash: DV7X0NS//RjfJsh5Wd8yUdRAZCxK0Mc4AEjjwna5jWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:b1:b2:95:68:5f:35:f6:cc:e2:35:d2:01:4d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jul 29 00:01:00 2026 GMT Not After : Jul 30 00:01:00 2026 GMT Subject: CN=9b11d011f3f5f77fd34315c5c083d6731350b8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:41:fd:af:de:8c:d8:50:28:90:d5:e8:ff: 72:6a:10:da:0b:3c:c4:80:a6:ff:66:0b:d9:35:b1: a3:df:16:b5:6e:31:b0:88:b4:6b:62:05:33:89:c5: a4:49:56:eb:50:bc:84:04:6d:94:af:d5:61:ce:a1: f5:ef:89:94:d6:11:75:c8:30:38:cf:bf:cd:c0:23: ae:4a:6e:24:01:71:99:65:b0:22:3c:ff:44:d5:02: 9a:85:91:1b:e6:e4:7e:9d:0a:d8:16:d6:bf:79:be: 31:9a:0b:dc:b4:02:07:91:da:aa:0b:0e:df:9b:ae: ad:19:c6:a5:b8:63:89:17:ec:9d:96:07:88:12:d1: db:44:16:d2:d0:71:f7:71:2c:66:ae:06:12:9b:23: c6:d6:03:4d:1c:0c:37:64:cc:52:72:00:cc:c8:37: 29:63:b2:35:ca:a6:68:48:b5:29:6d:99:22:54:77: 1c:e0:ab:d9:44:ef:92:af:37:fe:30:27:f3:87:5f: 3e:e0:8b:11:14:b3:c0:e7:22:01:d8:46:5e:75:b4: 9a:df:55:07:88:34:f5:63:6f:3b:2b:59:a6:bc:84: 37:d7:9b:51:5f:90:1d:10:c6:e0:2e:01:a2:8c:39: a4:77:fe:a2:a7:85:1c:b1:f2:b1:38:8b:17:6a:af: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:D0:11:F3:F5:F7:7F:D3:43:15:C5:C0:83:D6:73:13:50:B8:FD X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:94:e6:0d:53:e3:2b:a6:8e:a9:01:e2:b1:69:0c:4c:e8:d8: 59:4d:e9:b2:06:e0:7a:a3:b2:ab:b9:44:96:25:86:99:b6:71: f3:ce:10:ae:56:07:e9:1b:23:0f:b8:fd:54:4d:21:e0:cc:fd: 25:c3:b8:5f:9e:5a:bf:a2:6e:22:85:b4:17:d3:fa:35:26:6f: bf:0c:2d:80:19:d9:db:d8:e3:28:33:58:bb:c9:51:f9:41:e0: ff:91:d5:aa:8c:90:be:1a:2f:ea:29:ea:b6:3c:93:a1:b3:21: 11:40:35:68:28:24:d5:81:f9:7e:6c:d6:00:81:f6:04:dc:9b: fb:17:d5:e8:0c:57:b5:43:ac:19:d5:06:71:d6:aa:ea:95:90: 76:04:34:2f:31:bb:51:28:ce:8e:a4:17:a2:a8:e0:9c:1d:bf: ab:64:68:6b:68:b1:be:ae:f4:23:69:05:d6:d8:81:51:27:c2: 7b:94:16:8b:5d:cf:8d:f7:ea:d5:fc:d0:dd:99:cf:2d:07:b0: ec:2f:b8:f2:75:38:71:00:fa:e0:f8:d9:35:49:cf:19:5d:61: 03:22:17:ae:02:12:18:d7:cc:12:28:51:1a:39:f9:13:1f:fd: f3:3c:21:19:b6:16:9b:21:5d:1e:30:3a:d4:91:71:1f:b3:af: c1:4e:62:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLLGylWhfNfbM4jXSAU38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwNzI5MDAwMTAwWhcNMjYwNzMwMDAwMTAwWjAzMTEwLwYDVQQD Eyg5YjExZDAxMWYzZjVmNzdmZDM0MzE1YzVjMDgzZDY3MzEzNTBiOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx65B/a/ejNhQKJDV6P9yahDaCzzE gKb/ZgvZNbGj3xa1bjGwiLRrYgUzicWkSVbrULyEBG2Ur9VhzqH174mU1hF1yDA4 z7/NwCOuSm4kAXGZZbAiPP9E1QKahZEb5uR+nQrYFta/eb4xmgvctAIHkdqqCw7f m66tGcaluGOJF+ydlgeIEtHbRBbS0HH3cSxmrgYSmyPG1gNNHAw3ZMxScgDMyDcp Y7I1yqZoSLUpbZkiVHcc4KvZRO+Srzf+MCfzh18+4IsRFLPA5yIB2EZedbSa31UH iDT1Y287K1mmvIQ315tRX5AdEMbgLgGijDmkd/6ip4UcsfKxOIsXaq+nxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsR0BHz9fd/00MVxcCD1nMTULj9MB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5TmDVPj K6aOqQHisWkMTOjYWU3psgbgeqOyq7lEliWGmbZx884QrlYH6RsjD7j9VE0h4Mz9 JcO4X55av6JuIoW0F9P6NSZvvwwtgBnZ29jjKDNYu8lR+UHg/5HVqoyQvhov6inq tjyTobMhEUA1aCgk1YH5fmzWAIH2BNyb+xfV6AxXtUOsGdUGcdaq6pWQdgQ0LzG7 USjOjqQXoqjgnB2/q2Roa2ixvq70I2kF1tiBUSfCe5QWi13Pjffq1fzQ3ZnPLQew 7C+48nU4cQD64PjZNUnPGV1hAyIXrgISGNfMEihRGjn5Ex/98zwhGbYWmyFdHjA6 1JFxH7OvwU5iBw== -----END CERTIFICATE-----Generated at Wed Jul 29 09:37:23 2026 by rpki-client