$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: T4sj1OBkbLiltT+RV/6OYj44tWGABh/oNCAm2CVsJlI= Subject key identifier: 25:46:CE:27:3A:CA:95:70:03:EC:55:9B:F4:6E:8E:B7:C9:E5:5F:8B Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019FA899D3BDD780E400C137D0B957DA69CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0D3A Signing time: Tue 28 Jul 2026 12:01:21 +0000 Manifest this update: Tue 28 Jul 2026 12:01:21 +0000 Manifest next update: Wed 29 Jul 2026 12:01:21 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 5: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: z2ScK43LXfds7fMeFvdLcUuxcyzhDQ9u1D2PruK9dw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:d3:bd:d7:80:e4:00:c1:37:d0:b9:57:da:69:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jul 28 12:01:21 2026 GMT Not After : Jul 29 12:01:21 2026 GMT Subject: CN=2546ce273aca957003ec559bf46e8eb7c9e55f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f5:25:40:eb:55:df:b4:d0:b3:44:5a:05:80: 0f:e5:d1:cd:9e:97:fe:83:d2:d7:5f:fa:d9:8f:85: 0e:d3:a6:da:51:95:71:f5:06:5f:7f:4a:c0:b9:31: 6a:7e:dc:df:12:01:57:1e:7f:2c:01:d6:30:2e:85: cb:16:95:f4:de:98:49:4f:7d:7e:6f:88:17:86:b3: e3:cb:13:ad:15:33:43:c9:22:6f:59:da:18:08:13: 39:95:7d:4f:a2:7f:51:64:2c:d7:51:5f:71:ac:4e: 7a:2b:a6:a5:76:4a:5b:8b:ac:05:11:8b:bb:67:b0: dc:df:5b:fe:10:76:8f:12:b5:9e:e2:f9:d3:08:1b: a8:67:ad:d4:ff:ad:7a:63:38:88:21:cf:a3:15:55: bc:f3:47:d6:4c:c2:99:8b:27:22:06:f2:a2:05:11: fa:a3:21:d3:a0:2b:12:d5:5e:c9:58:33:8e:0c:82: d3:e3:57:2d:9a:e5:2c:ae:83:98:67:96:56:56:e2: db:3a:15:7b:88:37:43:f0:10:d6:2d:d3:8e:d4:e0: 43:3c:ef:2b:9f:e1:3e:aa:fb:8f:a9:95:39:39:31: 14:1c:fb:3f:80:46:eb:59:22:ef:fa:b0:1d:27:33: 0c:14:63:04:9d:16:e5:a0:c0:f2:cf:98:66:5c:17: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:46:CE:27:3A:CA:95:70:03:EC:55:9B:F4:6E:8E:B7:C9:E5:5F:8B X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:c8:77:96:fa:1b:1b:7c:cd:79:40:47:6d:69:bf:ac:35: f6:5b:fe:1f:b3:a8:7a:ab:54:f9:75:83:2d:ad:7c:34:d3:04: 70:91:f0:de:33:7f:2d:64:6e:9f:79:20:e4:1e:61:ff:24:06: 3c:bf:6c:1c:b3:da:e0:d1:37:34:7c:93:67:09:5f:52:34:8c: a0:48:30:cc:4f:ff:12:74:79:6e:2a:6b:7a:c0:73:78:30:82: 1b:6d:3d:09:c4:09:bf:b4:ab:02:ea:62:f6:51:a8:04:90:20: 88:10:19:a5:01:1e:3e:68:fc:82:eb:6d:04:8f:44:c2:3d:ef: b0:24:f3:05:12:3d:46:c2:ca:37:93:d5:ca:1e:c9:0f:ff:cf: 93:fc:fb:de:99:21:b6:43:b4:6d:99:6a:b7:74:c0:c8:7b:0b: 8b:e3:25:b1:12:06:9a:dc:e9:54:d9:ae:10:96:e7:b5:36:f7: a0:56:0c:4e:70:af:3d:7f:5f:e9:61:e0:8b:df:4d:bd:d1:89: 04:e2:8f:c5:27:d3:35:7b:3a:fb:9d:54:97:18:24:1b:cc:b7: ec:01:91:9a:4e:2a:09:ac:e6:f6:83:82:fc:e0:39:bd:af:ec: 56:fe:33:4b:d7:20:60:e8:9a:6b:cd:bb:df:47:4a:94:78:05: 39:01:d8:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omdO914DkAME30LlX2mnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwNzI4MTIwMTIxWhcNMjYwNzI5MTIwMTIxWjAzMTEwLwYDVQQD EygyNTQ2Y2UyNzNhY2E5NTcwMDNlYzU1OWJmNDZlOGViN2M5ZTU1ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/UlQOtV37TQs0RaBYAP5dHNnpf+ g9LXX/rZj4UO06baUZVx9QZff0rAuTFqftzfEgFXHn8sAdYwLoXLFpX03phJT31+ b4gXhrPjyxOtFTNDySJvWdoYCBM5lX1Pon9RZCzXUV9xrE56K6aldkpbi6wFEYu7 Z7Dc31v+EHaPErWe4vnTCBuoZ63U/616YziIIc+jFVW880fWTMKZiyciBvKiBRH6 oyHToCsS1V7JWDOODILT41ctmuUsroOYZ5ZWVuLbOhV7iDdD8BDWLdOO1OBDPO8r n+E+qvuPqZU5OTEUHPs/gEbrWSLv+rAdJzMMFGMEnRbloMDyz5hmXBfMKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVGzic6ypVwA+xVm/RujrfJ5V+LMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk3Id5b6 Gxt8zXlAR21pv6w19lv+H7OoeqtU+XWDLa18NNMEcJHw3jN/LWRun3kg5B5h/yQG PL9sHLPa4NE3NHyTZwlfUjSMoEgwzE//EnR5bipresBzeDCCG209CcQJv7SrAupi 9lGoBJAgiBAZpQEePmj8guttBI9Ewj3vsCTzBRI9RsLKN5PVyh7JD//Pk/z73pkh tkO0bZlqt3TAyHsLi+MlsRIGmtzpVNmuEJbntTb3oFYMTnCvPX9f6WHgi99NvdGJ BOKPxSfTNXs6+51UlxgkG8y37AGRmk4qCazm9oOC/OA5va/sVv4zS9cgYOiaa827 30dKlHgFOQHY0w== -----END CERTIFICATE-----Generated at Tue Jul 28 19:30:18 2026 by rpki-client