$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: kfO0evgEyYDqKvVEBFIMxSdQOun/uBAFe9tqz3G3DFA= Subject key identifier: 80:CD:CF:CB:C8:08:52:F3:95:5B:B6:E1:07:88:9B:17:31:E1:F1:96 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019FA787115D11ABACD3EC2333A06019C013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 19DA Signing time: Tue 28 Jul 2026 07:01:14 +0000 Manifest this update: Tue 28 Jul 2026 07:01:14 +0000 Manifest next update: Wed 29 Jul 2026 07:01:14 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: i2xC+O+8Ah7SmCgnO4BFik5H/ZG2LdwxaLB/O26ZMqw=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:87:11:5d:11:ab:ac:d3:ec:23:33:a0:60:19:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jul 28 07:01:14 2026 GMT Not After : Jul 29 07:01:14 2026 GMT Subject: CN=80cdcfcbc80852f3955bb6e107889b1731e1f196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:2a:6a:c4:a1:79:3d:65:19:b5:b9:44:7e: 47:cf:8b:99:8c:99:9b:fa:58:fc:eb:b4:bc:79:71: c5:ed:ef:6d:2f:77:53:cd:07:08:f2:1f:7b:41:f5: a3:1c:a6:e9:63:b7:23:aa:c9:4e:43:b8:e6:76:d7: ba:75:fa:27:11:98:e2:9a:d4:01:d8:b6:f7:45:d0: 97:1e:b3:34:9f:ab:5f:bc:fd:04:c0:9f:91:60:ab: 9c:27:75:08:fc:1e:bf:eb:2b:e8:71:6e:ef:90:2e: 72:37:0e:1f:05:ef:42:69:b7:1b:7c:51:56:66:4c: a4:63:70:6a:11:5f:25:eb:c4:e2:18:72:fb:ba:13: 12:fc:cc:42:41:88:87:cd:8d:44:23:f9:b2:ec:71: c2:18:4b:c8:71:f9:ab:06:0f:d1:94:21:ff:41:af: d8:45:99:02:8a:ac:39:6e:50:7d:70:74:13:ad:41: 8a:a9:7b:26:11:62:5e:76:46:25:26:5c:27:8c:0f: ce:15:4c:53:e5:96:01:6b:8b:8a:40:64:be:0f:c1: ae:91:6e:93:39:64:5b:31:31:a1:e4:ad:78:8b:da: 47:21:3b:8f:0a:81:0b:7e:ea:60:fc:bc:75:50:68: b0:24:c7:a3:14:be:8a:0a:38:5e:b7:bd:eb:bc:6e: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CD:CF:CB:C8:08:52:F3:95:5B:B6:E1:07:88:9B:17:31:E1:F1:96 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ee:5d:c0:40:d5:03:ca:7e:52:f8:e3:bb:e9:79:59:24:b4: 42:b4:58:fe:a8:2f:06:6d:94:1c:88:19:b8:f1:a6:86:3b:1e: 21:ef:19:b0:39:1a:a1:50:50:68:b5:e4:46:05:e0:66:40:34: 7b:7e:fc:16:d6:6a:40:10:1f:6c:46:94:74:52:7e:a5:2e:b1: 34:e9:de:41:50:40:da:ac:28:f1:44:31:f2:13:e6:12:fa:69: 95:47:bd:6d:f6:cd:26:dc:56:47:2f:b6:0c:36:a7:e1:5a:7c: 00:b3:3b:60:e2:30:cd:25:f6:06:02:1a:7f:4e:61:e1:f6:7c: ba:53:38:bd:26:1d:d3:f3:95:28:d1:a5:35:f0:7b:98:a1:de: fe:19:05:d4:a5:8d:be:15:56:37:d6:c1:79:1c:57:53:84:f6: 99:22:89:98:87:c6:c1:72:5a:7a:a1:48:89:43:b8:c3:34:83: 2b:e7:92:4b:d6:41:8e:61:9d:ce:f3:0b:96:a2:07:21:38:32: f1:46:61:7b:6f:5b:82:3b:16:78:11:cf:93:e7:d9:e8:f0:65: 4d:39:cd:ea:33:c4:6b:93:e0:4d:ef:d4:7e:b4:16:5b:8f:c9: ae:65:7d:47:47:ab:64:10:df:5a:44:7e:88:af:eb:ad:ab:37: 82:63:8e:66 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+nhxFdEaus0+wjM6BgGcATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNzI4MDcwMTE0WhcNMjYwNzI5MDcwMTE0WjAzMTEwLwYDVQQD Eyg4MGNkY2ZjYmM4MDg1MmYzOTU1YmI2ZTEwNzg4OWIxNzMxZTFmMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EIqasSheT1lGbW5RH5Hz4uZjJmb +lj867S8eXHF7e9tL3dTzQcI8h97QfWjHKbpY7cjqslOQ7jmdte6dfonEZjimtQB 2Lb3RdCXHrM0n6tfvP0EwJ+RYKucJ3UI/B6/6yvocW7vkC5yNw4fBe9CabcbfFFW ZkykY3BqEV8l68TiGHL7uhMS/MxCQYiHzY1EI/my7HHCGEvIcfmrBg/RlCH/Qa/Y RZkCiqw5blB9cHQTrUGKqXsmEWJedkYlJlwnjA/OFUxT5ZYBa4uKQGS+D8GukW6T OWRbMTGh5K14i9pHITuPCoELfupg/Lx1UGiwJMejFL6KCjhet73rvG6fZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIDNz8vICFLzlVu24QeImxcx4fGWMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+5d wEDVA8p+Uvjju+l5WSS0QrRY/qgvBm2UHIgZuPGmhjseIe8ZsDkaoVBQaLXkRgXg ZkA0e378FtZqQBAfbEaUdFJ+pS6xNOneQVBA2qwo8UQx8hPmEvpplUe9bfbNJtxW Ry+2DDan4Vp8ALM7YOIwzSX2BgIaf05h4fZ8ulM4vSYd0/OVKNGlNfB7mKHe/hkF 1KWNvhVWN9bBeRxXU4T2mSKJmIfGwXJaeqFIiUO4wzSDK+eSS9ZBjmGdzvMLlqIH ITgy8UZhe29bgjsWeBHPk+fZ6PBlTTnN6jPEa5PgTe/UfrQWW4/JrmV9R0erZBDf WkR+iK/rras3gmOOZg== -----END CERTIFICATE-----Generated at Tue Jul 28 14:44:01 2026 by rpki-client