$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json) Hash identifier: rV0vrJFTcfYHgK1WQUGhjqXvkQuW9BY536l0NBaXeTw= Subject key identifier: E1:E0:E5:D6:F1:94:75:AB:BF:9F:E7:D5:89:C5:1E:E2:8D:7F:F8:75 Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368 Certificate serial: 019FAA1A60317275A2A53D4E69366CD6AD8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft Manifest number: 0212 Signing time: Tue 28 Jul 2026 19:01:23 +0000 Manifest this update: Tue 28 Jul 2026 19:01:23 +0000 Manifest next update: Wed 29 Jul 2026 19:01:23 +0000 Files and hashes: 1: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (hash: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=) 2: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (hash: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=) 3: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (hash: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=) 4: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (hash: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=) 5: Ed26D8U4hy9Q3LQu5_4P5xQ88Fs.roa (hash: kLzLVcajWbXNwZhhTO7Kf1y0Py6ohIR9eaLpz+kos+s=) 6: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (hash: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=) 7: JoonRKwDkzGDADAYbWqY6h6w-K8.roa (hash: cPQ1mkuIkwhP6i3plXOgbNc6BnD5TBFu2q0RZqT67s8=) 8: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (hash: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=) 9: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (hash: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=) 10: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=) 11: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (hash: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=) 12: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: E8O40ovJRh57n4coliDmL7Q/1VG7iJPAi/KA+EiFwXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:1a:60:31:72:75:a2:a5:3d:4e:69:36:6c:d6:ad:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368 Validity Not Before: Jul 28 19:01:23 2026 GMT Not After : Jul 29 19:01:23 2026 GMT Subject: CN=e1e0e5d6f19475abbf9fe7d589c51ee28d7ff875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:2a:67:de:8d:ec:65:14:7f:12:8d:98:f8: 9b:c1:c5:2f:62:f0:06:00:a6:a0:68:b4:07:23:70: 83:b4:8c:f5:6d:cc:7e:89:75:3c:1a:ac:01:74:3d: 32:fb:5f:9e:6a:79:d0:e1:0c:c9:be:2c:cc:0f:5a: 1a:97:92:f2:34:d9:f0:33:13:7e:a0:2c:8c:67:13: 27:70:30:de:57:ec:0a:cb:bf:26:f2:9c:d1:17:82: de:39:d0:82:24:cb:79:39:4c:24:41:4e:a6:23:cd: b5:9a:63:96:83:6d:13:19:4e:3d:96:78:ec:e9:e5: 70:6f:be:bd:ba:cf:e6:20:f9:b7:d6:3c:4c:16:62: 10:1c:48:7c:6f:cd:f5:4b:23:ac:33:99:23:2f:6f: e7:72:26:7d:df:8c:b7:28:2c:ff:71:1d:fb:dc:56: 46:6d:ac:c2:2b:c7:81:1d:26:de:75:9f:28:2a:38: d9:48:d1:67:d1:51:89:6d:09:c7:7b:50:cf:e4:5b: f7:d6:08:27:da:c6:72:cf:55:5e:01:2f:ba:66:d4: 82:f8:64:3b:a1:f6:fa:3a:88:2a:23:a6:9a:20:96: bb:73:fc:cf:5d:02:32:f1:c6:db:19:90:66:3f:0b: 81:55:0e:fb:e7:b1:40:ee:40:6d:2b:2e:55:b1:e8: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E0:E5:D6:F1:94:75:AB:BF:9F:E7:D5:89:C5:1E:E2:8D:7F:F8:75 X509v3 Authority Key Identifier: keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d3:65:d4:e4:f9:88:0d:ed:1f:ed:43:47:b8:17:16:59:93: 85:7a:0f:f3:52:e2:14:74:86:e0:f1:ea:ba:63:0d:a3:59:55: 75:89:80:11:85:8c:75:b0:d9:72:3a:d9:9d:b6:53:89:77:e0: 6e:6b:ff:af:4e:be:b4:9f:20:75:23:63:17:24:0a:4f:81:81: 10:aa:ac:54:d5:28:3a:60:90:8d:10:29:05:02:61:e6:09:61: af:e7:b9:97:9f:68:e9:93:a5:9e:dc:33:a6:cd:29:6b:e6:48: fe:fa:df:e0:9d:16:7c:34:1b:12:09:a9:f7:ec:5f:c6:3b:c3: 1c:05:aa:34:f8:26:be:45:0e:3e:f2:b3:19:4d:b2:23:e9:9f: d9:22:58:75:1a:01:36:49:7f:fb:c3:1a:69:a3:8f:3f:87:fc: b6:b6:0a:9b:f7:f1:bc:45:2f:55:35:b1:69:9b:3a:0a:f8:e6: 9e:9d:5c:76:f9:29:0f:ec:06:e1:32:59:d1:75:1c:89:1c:a7: 8e:bb:00:96:15:bd:29:48:15:20:66:24:a9:33:43:a0:5e:0e: 7f:45:48:85:85:86:9f:5c:82:d0:df:e5:b6:73:41:bd:3e:2d: a4:97:53:74:cb:ea:0a:7d:06:57:60:9e:7e:db:9d:b8:87:9a: fa:8a:09:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGmAxcnWipT1OaTZs1q2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0 MTQzNjgwHhcNMjYwNzI4MTkwMTIzWhcNMjYwNzI5MTkwMTIzWjAzMTEwLwYDVQQD EyhlMWUwZTVkNmYxOTQ3NWFiYmY5ZmU3ZDU4OWM1MWVlMjhkN2ZmODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEkqZ96N7GUUfxKNmPibwcUvYvAG AKagaLQHI3CDtIz1bcx+iXU8GqwBdD0y+1+eannQ4QzJvizMD1oal5LyNNnwMxN+ oCyMZxMncDDeV+wKy78m8pzRF4LeOdCCJMt5OUwkQU6mI821mmOWg20TGU49lnjs 6eVwb769us/mIPm31jxMFmIQHEh8b831SyOsM5kjL2/nciZ934y3KCz/cR373FZG bazCK8eBHSbedZ8oKjjZSNFn0VGJbQnHe1DP5Fv31ggn2sZyz1VeAS+6ZtSC+GQ7 ofb6OogqI6aaIJa7c/zPXQIy8cbbGZBmPwuBVQ7757FA7kBtKy5VsejuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHg5dbxlHWrv5/n1YnFHuKNf/h1MB8GA1UdIwQY MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtNl1OT5 iA3tH+1DR7gXFlmThXoP81LiFHSG4PHqumMNo1lVdYmAEYWMdbDZcjrZnbZTiXfg bmv/r06+tJ8gdSNjFyQKT4GBEKqsVNUoOmCQjRApBQJh5glhr+e5l59o6ZOlntwz ps0pa+ZI/vrf4J0WfDQbEgmp9+xfxjvDHAWqNPgmvkUOPvKzGU2yI+mf2SJYdRoB Nkl/+8MaaaOPP4f8trYKm/fxvEUvVTWxaZs6Cvjmnp1cdvkpD+wG4TJZ0XUciRyn jrsAlhW9KUgVIGYkqTNDoF4Of0VIhYWGn1yC0N/ltnNBvT4tpJdTdMvqCn0GV2Ce ftuduIea+ooJAQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:15:22 2026 by rpki-client