$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: PxxoUwpORga0n0vU9zJiYW8UqLay1MZgeYPaUA3kEGo= Subject key identifier: 84:78:66:75:A9:8A:69:B0:D9:64:3A:E6:DE:FF:6F:F5:74:80:AC:B8 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019FABD184CC1795A7DFEF68C0B4276D1FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 17C7 Signing time: Wed 29 Jul 2026 03:01:02 +0000 Manifest this update: Wed 29 Jul 2026 03:01:02 +0000 Manifest next update: Thu 30 Jul 2026 03:01:02 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: Mm1sFtL8Z7HltzyoJT1425qreD3qdSUeAnTM/1rEkho=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:d1:84:cc:17:95:a7:df:ef:68:c0:b4:27:6d:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jul 29 03:01:02 2026 GMT Not After : Jul 30 03:01:02 2026 GMT Subject: CN=84786675a98a69b0d9643ae6deff6ff57480acb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:ee:ff:cd:0e:9c:a3:e8:88:da:58:86:67: 44:2f:6b:69:fd:e8:a9:e3:98:37:37:97:50:8c:70: 0b:f7:0f:14:20:b7:56:32:b6:2a:6c:0c:b8:c2:d4: 5f:41:1f:87:68:3a:ad:bd:b8:27:8e:be:77:7f:7b: 23:77:54:d0:84:51:33:86:07:d5:da:67:95:87:69: 7f:09:8f:55:c8:14:71:98:09:ca:ed:30:70:29:21: 65:dd:d7:24:93:fd:fa:ad:b4:c7:a1:95:43:38:ca: f6:27:85:55:31:cd:de:19:b0:43:3e:9c:17:1d:0c: ef:59:59:40:30:d4:71:fc:40:e0:79:79:e5:5c:77: 41:05:b1:fa:b4:aa:b8:60:7b:17:4b:04:c1:10:93: 11:14:84:8e:c0:df:39:fc:f0:0c:1e:39:2b:f0:72: 42:e2:e1:2e:c4:74:43:93:7a:13:24:23:27:c4:30: 95:5a:b7:fc:2e:a2:90:b5:32:c2:97:47:b4:a0:d4: b9:e0:bb:77:d2:73:eb:f5:48:67:f3:56:18:50:af: d0:0a:5f:c8:04:2a:40:bf:74:2c:9a:67:db:c5:f8: 3e:6e:d7:00:30:79:fd:cc:74:f4:25:ac:5a:d2:cc: 7e:a4:a5:6e:01:76:53:c4:13:05:52:14:16:34:53: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:78:66:75:A9:8A:69:B0:D9:64:3A:E6:DE:FF:6F:F5:74:80:AC:B8 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f2:62:42:e7:32:19:2d:2d:37:94:d2:ba:87:ca:0c:cd:4e: 0b:3f:c9:fa:a8:d0:b2:11:6c:4d:3b:8d:49:c3:c6:48:a0:b1: 0a:79:13:a9:7d:77:52:b0:5f:22:6e:be:9e:44:9f:8d:8d:79: 56:5f:5e:f3:33:62:24:73:0c:d8:44:81:0e:0f:58:4d:78:2a: e3:fd:92:43:c6:d1:0d:3d:c9:2d:c8:0d:ca:46:53:dc:ed:fa: 2e:18:ae:37:1a:52:0a:be:d1:fd:9f:ac:c3:a5:af:64:d6:78: 3b:1e:a6:67:8a:0c:b5:1d:67:6d:71:d6:c7:92:f8:be:f3:fb: 73:b0:86:ac:6e:ff:fd:e3:f1:ee:45:cf:7b:b5:03:23:fa:d7: 43:04:8d:1a:3a:b0:50:4d:ed:de:e9:d8:3e:e6:b6:6e:11:b4: 8d:5e:03:e8:10:de:de:77:87:61:37:14:64:ab:7e:17:19:a7: 5e:f9:77:84:09:10:4a:6a:c0:e1:de:9b:2d:58:0b:53:61:62: 05:64:4a:6c:fb:f7:92:14:44:cc:42:40:1f:7f:6b:d0:2c:42: 04:20:69:0a:06:e9:88:12:87:63:95:c0:41:40:e4:f5:bc:cc: 9c:c3:d2:99:e8:f0:2c:5e:a8:76:41:1b:15:7d:df:9c:0a:d9: 22:a7:75:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+r0YTMF5Wn3+9owLQnbR/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwNzI5MDMwMTAyWhcNMjYwNzMwMDMwMTAyWjAzMTEwLwYDVQQD Eyg4NDc4NjY3NWE5OGE2OWIwZDk2NDNhZTZkZWZmNmZmNTc0ODBhY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Xu/80OnKPoiNpYhmdEL2tp/eip 45g3N5dQjHAL9w8UILdWMrYqbAy4wtRfQR+HaDqtvbgnjr53f3sjd1TQhFEzhgfV 2meVh2l/CY9VyBRxmAnK7TBwKSFl3dckk/36rbTHoZVDOMr2J4VVMc3eGbBDPpwX HQzvWVlAMNRx/EDgeXnlXHdBBbH6tKq4YHsXSwTBEJMRFISOwN85/PAMHjkr8HJC 4uEuxHRDk3oTJCMnxDCVWrf8LqKQtTLCl0e0oNS54Lt30nPr9Uhn81YYUK/QCl/I BCpAv3Qsmmfbxfg+btcAMHn9zHT0Jaxa0sx+pKVuAXZTxBMFUhQWNFNX4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR4ZnWpimmw2WQ65t7/b/V0gKy4MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/JiQucy GS0tN5TSuofKDM1OCz/J+qjQshFsTTuNScPGSKCxCnkTqX13UrBfIm6+nkSfjY15 Vl9e8zNiJHMM2ESBDg9YTXgq4/2SQ8bRDT3JLcgNykZT3O36LhiuNxpSCr7R/Z+s w6WvZNZ4Ox6mZ4oMtR1nbXHWx5L4vvP7c7CGrG7//ePx7kXPe7UDI/rXQwSNGjqw UE3t3unYPua2bhG0jV4D6BDe3neHYTcUZKt+FxmnXvl3hAkQSmrA4d6bLVgLU2Fi BWRKbPv3khREzEJAH39r0CxCBCBpCgbpiBKHY5XAQUDk9bzMnMPSmejwLF6odkEb FX3fnArZIqd1GA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:41:13 2026 by rpki-client