$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: vtNUQOuV+l91hgzu/iov8quq7/+ZuhRJHvreXbS4dsQ= Subject key identifier: 7F:FA:AA:CD:26:60:68:35:5C:09:35:DE:9F:08:8F:E6:43:30:16:F0 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019FA9AC035DE9C15CA4E176A591817067F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1975 Signing time: Tue 28 Jul 2026 17:00:50 +0000 Manifest this update: Tue 28 Jul 2026 17:00:50 +0000 Manifest next update: Wed 29 Jul 2026 17:00:50 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: IBZz1c+KAmJtZrFV0xEB+cBloVDcqtSMUdHR5tHk5IE=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:03:5d:e9:c1:5c:a4:e1:76:a5:91:81:70:67:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jul 28 17:00:50 2026 GMT Not After : Jul 29 17:00:50 2026 GMT Subject: CN=7ffaaacd266068355c0935de9f088fe6433016f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:bb:f2:f9:6d:43:e5:41:8d:cc:81:6c:4e: 25:bc:d2:d1:fb:16:b7:9d:8f:72:e1:1c:16:6e:53: e4:5c:bc:d4:6a:b5:a7:20:79:b3:e6:bf:75:fd:e9: 21:95:61:a7:52:ff:ac:52:49:d0:4b:30:a0:a1:f7: 57:bc:a9:1e:93:a5:ff:4a:d3:4f:d0:37:85:5d:24: f3:bf:56:91:f2:a9:1f:fb:e7:50:2d:6a:c4:02:3e: ea:d7:b5:9f:5d:8e:19:96:a1:e9:d5:e4:f2:16:43: 57:a1:cb:a1:f4:22:6b:29:c0:fc:39:80:ff:d2:26: 1d:12:cc:39:30:04:c5:74:33:7a:09:97:a5:35:51: 21:48:67:2d:31:f6:c8:70:23:3f:a4:1d:2f:25:86: fd:24:4b:b9:57:72:8a:fb:12:7c:9d:d1:da:53:99: a8:ab:2e:94:fa:1d:12:b9:4a:d3:21:ca:18:12:f6: ff:c8:a2:7e:d9:43:11:af:f1:c7:25:08:f8:29:d5: 84:6c:5f:53:e2:36:fc:a8:21:61:1f:21:5d:d6:b6: 02:81:de:b4:b4:3d:7d:a5:cd:5e:df:67:ab:25:42: b1:62:1e:60:e9:5f:1e:fd:72:90:3e:89:9e:d4:8d: bb:fb:60:92:75:bb:97:e1:ea:0a:c4:09:37:e8:02: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FA:AA:CD:26:60:68:35:5C:09:35:DE:9F:08:8F:E6:43:30:16:F0 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:21:8b:ea:fa:65:2c:bd:7b:29:17:9d:d6:58:48:e3:b5:66: c5:59:7e:61:bc:0b:72:c1:25:e2:46:02:21:fa:bd:75:0d:51: 05:0e:53:da:7b:e2:15:ad:ca:a8:df:52:56:fe:3a:82:9c:f9: 02:8b:52:cd:97:e2:6a:6d:53:05:d7:4c:2b:46:68:87:53:3e: e1:69:94:49:0f:19:98:d4:c2:21:51:9c:0a:d8:a0:21:5c:78: 60:4a:19:e3:e6:15:34:42:3d:8d:12:c9:5f:ba:1d:f8:95:44: 36:b9:33:4d:5e:8b:46:78:6d:a1:65:6e:ca:77:79:85:8f:14: db:f8:c7:1e:e2:c9:11:30:d4:59:4b:df:ad:33:8b:5d:55:55: e1:97:53:41:88:3d:d0:8a:c1:a6:54:cc:25:ae:44:0a:c5:9f: 55:ff:ad:6a:6b:e5:2a:a9:9c:6c:39:31:eb:dd:dd:d3:99:c0: c6:cb:cb:40:98:04:7a:98:63:f4:31:e9:c7:be:bd:32:0e:a8: 95:0a:ca:f9:e1:ad:ef:96:8c:7e:16:f4:ed:50:3e:b8:86:07: 82:f2:ef:17:64:02:c4:46:c9:5a:aa:62:01:c7:7d:3d:d7:2e: 25:9a:ae:fa:e0:26:2f:6e:fb:d9:e1:e4:8c:e8:ca:2e:f9:84: b4:ca:72:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prANd6cFcpOF2pZGBcGfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNzI4MTcwMDUwWhcNMjYwNzI5MTcwMDUwWjAzMTEwLwYDVQQD Eyg3ZmZhYWFjZDI2NjA2ODM1NWMwOTM1ZGU5ZjA4OGZlNjQzMzAxNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3u78vltQ+VBjcyBbE4lvNLR+xa3 nY9y4RwWblPkXLzUarWnIHmz5r91/ekhlWGnUv+sUknQSzCgofdXvKkek6X/StNP 0DeFXSTzv1aR8qkf++dQLWrEAj7q17WfXY4ZlqHp1eTyFkNXocuh9CJrKcD8OYD/ 0iYdEsw5MATFdDN6CZelNVEhSGctMfbIcCM/pB0vJYb9JEu5V3KK+xJ8ndHaU5mo qy6U+h0SuUrTIcoYEvb/yKJ+2UMRr/HHJQj4KdWEbF9T4jb8qCFhHyFd1rYCgd60 tD19pc1e32erJUKxYh5g6V8e/XKQPome1I27+2CSdbuX4eoKxAk36AKEdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/6qs0mYGg1XAk13p8Ij+ZDMBbwMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiGL6vpl LL17KRed1lhI47VmxVl+YbwLcsEl4kYCIfq9dQ1RBQ5T2nviFa3KqN9SVv46gpz5 AotSzZfiam1TBddMK0Zoh1M+4WmUSQ8ZmNTCIVGcCtigIVx4YEoZ4+YVNEI9jRLJ X7od+JVENrkzTV6LRnhtoWVuynd5hY8U2/jHHuLJETDUWUvfrTOLXVVV4ZdTQYg9 0IrBplTMJa5ECsWfVf+tamvlKqmcbDkx693d05nAxsvLQJgEephj9DHpx769Mg6o lQrK+eGt75aMfhb07VA+uIYHgvLvF2QCxEbJWqpiAcd9PdcuJZqu+uAmL2772eHk jOjKLvmEtMpyFA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:38 2026 by rpki-client