$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: 7XQ/2tF+DHjFPThn3PExZrXMUbIZ/eru+wpKH81CcSU= Subject key identifier: 0A:FB:7B:80:55:0E:24:A1:9E:74:D1:49:8D:42:E6:40:AB:B6:D6:9A Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019FAA8768E46B1F78012737911ACA38AF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1A10 Signing time: Tue 28 Jul 2026 21:00:28 +0000 Manifest this update: Tue 28 Jul 2026 21:00:28 +0000 Manifest next update: Wed 29 Jul 2026 21:00:28 +0000 Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=) 2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=) 3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=) 4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=) 5: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=) 6: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=) 7: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=) 8: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=) 9: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=) 10: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=) 11: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=) 12: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=) 13: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=) 14: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=) 15: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=) 16: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=) 17: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: xNFocmrcC+4lJnvXK+/wDBEl52EDZobhPFiQXCPda1A=) 18: ozxuboQujXdiImUQ23259rgJxTU.roa (hash: mUzByNgDOakmOWXkp+P9oysXEw/ks3+fUkO7YTuj2Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:68:e4:6b:1f:78:01:27:37:91:1a:ca:38:af:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jul 28 21:00:28 2026 GMT Not After : Jul 29 21:00:28 2026 GMT Subject: CN=0afb7b80550e24a19e74d1498d42e640abb6d69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:28:6e:d7:98:a8:90:1e:1f:42:ad:4a:3a: 64:d6:6e:6e:e4:95:0f:eb:9f:5d:40:98:57:8b:21: 77:c2:80:9a:29:ce:29:9a:59:0c:6c:5c:3f:73:eb: 08:eb:c2:91:21:77:de:32:e5:f2:8d:15:6d:28:ce: 65:37:14:4d:3c:10:e2:72:8f:dd:3f:8d:96:89:d8: f8:d4:90:df:65:c8:ee:db:97:73:25:6b:2c:5b:8d: c2:a5:28:13:b9:c9:8e:7e:9e:ed:6a:1a:2e:df:83: 2b:3d:64:44:3d:4c:ab:03:af:e9:71:b4:a1:d5:2c: 56:fc:e4:1f:83:2a:ca:c7:35:37:a9:24:ad:77:5e: 09:8b:33:17:26:43:5d:c1:fc:cf:12:20:7d:11:75: a1:c7:4a:d2:58:d8:06:2a:99:70:6a:db:c8:11:97: 1c:d8:42:24:89:f1:b0:7a:05:b6:d9:b0:02:34:16: f9:cd:8a:a6:19:99:99:07:c5:8d:36:f4:5f:56:94: d3:ab:c3:20:06:1f:23:93:44:43:8b:19:e9:49:91: 3a:34:65:f3:ff:02:f9:b5:b6:ea:e7:7c:d8:34:3f: a1:b6:cd:f2:d5:ac:2b:3e:ff:01:62:3a:ab:37:3a: 57:82:e2:85:c5:a7:92:75:4a:12:43:77:7b:5f:d2: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FB:7B:80:55:0E:24:A1:9E:74:D1:49:8D:42:E6:40:AB:B6:D6:9A X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a1:77:fa:7b:e0:b1:46:b0:fb:6e:2c:67:29:ab:59:c0:1f: fb:d9:2c:31:54:58:4d:25:19:2b:db:60:ba:fc:65:27:49:4a: 7f:9c:bd:fb:3b:6c:f7:68:3b:f2:42:76:d5:40:75:5b:cb:9c: ff:76:a8:fb:fc:b4:6a:a0:ad:b8:3d:b4:51:b7:68:53:bd:21: 0c:7a:b7:1a:6f:c1:dd:b9:bc:66:6b:73:10:be:9b:97:97:3f: 75:02:a3:ca:bc:26:97:d1:91:f3:fe:fb:c0:68:39:6f:d3:24: 67:18:b9:b1:2b:be:eb:79:9a:ae:9c:c8:36:12:9d:b1:8a:b4: 71:c7:9d:ef:27:87:fa:0d:0f:08:d7:c3:2a:b4:72:3a:58:1a: 63:d3:dc:49:8d:ba:67:4c:a5:1a:1b:6e:3d:56:da:fc:de:f2: 67:ab:4a:a3:61:08:b8:8d:99:4c:57:57:68:a6:1d:76:e3:c4: 2c:f1:6e:6f:4c:90:c3:4f:79:df:93:ea:76:86:e7:9e:44:4f: b8:e0:f1:1b:b9:01:a0:8b:84:6a:26:77:32:58:ee:bc:c8:fa: d8:80:bc:49:67:91:e5:7b:62:ba:34:ae:1a:51:d6:0b:bd:e5: 71:98:2d:1b:89:38:ab:d5:a8:1d:e4:b9:34:db:4c:3d:6a:42: 90:a9:39:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh2jkax94ASc3kRrKOK9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwNzI4MjEwMDI4WhcNMjYwNzI5MjEwMDI4WjAzMTEwLwYDVQQD EygwYWZiN2I4MDU1MGUyNGExOWU3NGQxNDk4ZDQyZTY0MGFiYjZkNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p8obteYqJAeH0KtSjpk1m5u5JUP 659dQJhXiyF3woCaKc4pmlkMbFw/c+sI68KRIXfeMuXyjRVtKM5lNxRNPBDico/d P42Widj41JDfZcju25dzJWssW43CpSgTucmOfp7tahou34MrPWREPUyrA6/pcbSh 1SxW/OQfgyrKxzU3qSStd14JizMXJkNdwfzPEiB9EXWhx0rSWNgGKplwatvIEZcc 2EIkifGwegW22bACNBb5zYqmGZmZB8WNNvRfVpTTq8MgBh8jk0RDixnpSZE6NGXz /wL5tbbq53zYND+hts3y1awrPv8BYjqrNzpXguKFxaeSdUoSQ3d7X9J0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr7e4BVDiShnnTRSY1C5kCrttaaMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqF3+nvg sUaw+24sZymrWcAf+9ksMVRYTSUZK9tguvxlJ0lKf5y9+zts92g78kJ21UB1W8uc /3ao+/y0aqCtuD20UbdoU70hDHq3Gm/B3bm8ZmtzEL6bl5c/dQKjyrwml9GR8/77 wGg5b9MkZxi5sSu+63marpzINhKdsYq0cced7yeH+g0PCNfDKrRyOlgaY9PcSY26 Z0ylGhtuPVba/N7yZ6tKo2EIuI2ZTFdXaKYdduPELPFub0yQw09535PqdobnnkRP uODxG7kBoIuEaiZ3MljuvMj62IC8SWeR5XtiujSuGlHWC73lcZgtG4k4q9WoHeS5 NNtMPWpCkKk5cw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:15 2026 by rpki-client