$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: gwkoKUdvzq80jLcj4jbZiN/H06/e1Xm/jm3EqewrSP8= Subject key identifier: 4B:58:23:C1:0C:29:85:94:22:BA:28:E9:1F:9C:4B:54:7E:97:3D:92 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019FAB2CA68627139FDFC6E290F05848CA49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 19F1 Signing time: Wed 29 Jul 2026 00:00:57 +0000 Manifest this update: Wed 29 Jul 2026 00:00:57 +0000 Manifest next update: Thu 30 Jul 2026 00:00:57 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: MsRzBPedTjeG669ygS4Srx+T2KYPRz/juC8xvLNC4PQ=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 7: VrPDKYMKmnp2V6k_WEnwqOalUuk.roa (hash: ZZB+gfVCQKe+xuNcEMqRNy9VWy20utbLNNHfbV/UCLc=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (hash: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=) 13: lTeOVHsdxHYl83EtLLUCZPYWmcw.roa (hash: X7lBPJhBSCWsxS5TEyH3LBZWaqEarDMl83TKFDu1c5M=) 14: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:a6:86:27:13:9f:df:c6:e2:90:f0:58:48:ca:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jul 29 00:00:57 2026 GMT Not After : Jul 30 00:00:57 2026 GMT Subject: CN=4b5823c10c29859422ba28e91f9c4b547e973d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:af:55:af:10:2e:6e:4f:2e:0e:4e:d7:e8: 3d:e0:0d:d0:ff:eb:d4:fb:42:86:cb:fc:c1:35:a6: 6d:d8:75:da:bf:e3:18:57:33:f9:9c:b7:8b:c8:cc: 8e:eb:e0:8a:9b:26:47:0d:6c:f4:6e:e7:15:d8:40: 79:96:56:ac:02:76:00:c2:9f:8a:28:3f:e7:fe:90: 3a:34:67:8f:4b:e2:28:c1:c8:b4:f9:1a:a2:73:82: 0f:18:3a:a4:37:31:31:b7:49:64:66:8d:c9:7d:43: 17:1b:97:69:fc:5d:95:44:8d:55:33:f3:87:c8:d2: ed:0b:fe:99:b0:a2:eb:50:0e:ad:18:c4:3d:a7:b0: 14:e9:d8:20:f9:5c:78:95:36:0c:df:23:fb:b1:54: 33:b1:c5:9f:9f:f7:fd:58:53:c6:42:57:13:fa:4d: 23:63:c0:33:a2:8b:1e:00:13:14:be:af:1f:af:91: 52:51:0e:e9:eb:ff:c4:36:7e:46:f4:81:10:49:47: 4b:84:17:3f:a2:a4:2b:df:41:c0:d5:64:ab:30:22: 8a:f1:c5:43:1b:32:c2:d3:3d:4d:85:5f:66:07:e0: 60:21:24:70:8b:94:64:73:cf:8a:15:95:eb:06:57: 51:f1:c9:47:97:bb:ab:fc:a3:89:04:09:c6:0a:76: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:23:C1:0C:29:85:94:22:BA:28:E9:1F:9C:4B:54:7E:97:3D:92 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:90:6c:2f:55:5d:5a:90:f2:f8:c3:94:80:ee:1a:2e:1b:b7: 74:9c:41:81:a2:2a:ce:d1:4e:de:82:00:a1:3e:03:d0:af:09: d1:df:96:ec:72:1b:f5:f9:5a:0f:a6:17:10:50:58:07:a0:8e: 5e:34:1c:c1:e1:a9:76:f6:88:fe:46:0b:d7:73:fd:85:eb:bc: b4:0a:f8:88:db:aa:d4:21:16:84:9e:18:c2:ce:67:46:77:a2: 03:c4:63:d2:3e:6b:a2:29:cd:e9:8b:40:cd:b9:0b:3b:8c:6c: 3c:bd:7e:d0:fd:bc:fb:39:fb:79:a6:2b:90:50:f5:72:0a:40: a5:b6:c7:34:3c:0e:a6:9f:18:49:79:6e:dc:27:9c:12:fd:3d: 2e:fb:b3:04:fb:ff:62:13:0e:50:c3:60:d7:e5:d5:37:12:e6: 78:b0:78:ce:b2:e4:a8:76:7a:8d:d6:d4:7c:ee:d4:b6:02:5f: 7a:3b:a8:3e:22:91:86:97:f2:fe:23:50:1f:7c:1c:38:2a:f4: ad:07:f9:c7:b9:7c:7c:30:d4:19:ec:98:19:f3:d5:eb:61:c4: 9c:dd:51:9a:f2:f7:d2:c8:60:ed:75:3e:04:1b:47:e1:32:d9: 5a:fb:42:0d:f9:2c:d6:47:72:e1:b0:07:d2:33:7a:bd:66:43: 66:22:7f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLKaGJxOf38bikPBYSMpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwNzI5MDAwMDU3WhcNMjYwNzMwMDAwMDU3WjAzMTEwLwYDVQQD Eyg0YjU4MjNjMTBjMjk4NTk0MjJiYTI4ZTkxZjljNGI1NDdlOTczZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSmvVa8QLm5PLg5O1+g94A3Q/+vU +0KGy/zBNaZt2HXav+MYVzP5nLeLyMyO6+CKmyZHDWz0bucV2EB5llasAnYAwp+K KD/n/pA6NGePS+Iowci0+Rqic4IPGDqkNzExt0lkZo3JfUMXG5dp/F2VRI1VM/OH yNLtC/6ZsKLrUA6tGMQ9p7AU6dgg+Vx4lTYM3yP7sVQzscWfn/f9WFPGQlcT+k0j Y8AzooseABMUvq8fr5FSUQ7p6//ENn5G9IEQSUdLhBc/oqQr30HA1WSrMCKK8cVD GzLC0z1NhV9mB+BgISRwi5Rkc8+KFZXrBldR8clHl7ur/KOJBAnGCnaiLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtYI8EMKYWUIroo6R+cS1R+lz2SMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpBsL1Vd WpDy+MOUgO4aLhu3dJxBgaIqztFO3oIAoT4D0K8J0d+W7HIb9flaD6YXEFBYB6CO XjQcweGpdvaI/kYL13P9heu8tAr4iNuq1CEWhJ4Yws5nRneiA8Rj0j5roinN6YtA zbkLO4xsPL1+0P28+zn7eaYrkFD1cgpApbbHNDwOpp8YSXlu3CecEv09LvuzBPv/ YhMOUMNg1+XVNxLmeLB4zrLkqHZ6jdbUfO7UtgJfejuoPiKRhpfy/iNQH3wcOCr0 rQf5x7l8fDDUGeyYGfPV62HEnN1RmvL30shg7XU+BBtH4TLZWvtCDfks1kdy4bAH 0jN6vWZDZiJ//g== -----END CERTIFICATE-----Generated at Wed Jul 29 03:57:10 2026 by rpki-client