$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: ubnesrhQjHZX78y2U7wEy3ZuOgZ0nO6XsKiEXoSAh6g= Subject key identifier: E3:18:C7:BE:28:1B:CB:3D:8C:C4:27:4B:2D:26:B7:6C:8A:85:60:59 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019FA82B5F332F67FB8D53241BA8BDB45591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0425 Signing time: Tue 28 Jul 2026 10:00:42 +0000 Manifest this update: Tue 28 Jul 2026 10:00:42 +0000 Manifest next update: Wed 29 Jul 2026 10:00:42 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: S2Tu7kBglKL6VRjV0/isu/pXcsvHSTvZzp8eKFz2HO4=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 7: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 8: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (hash: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=) 9: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 10: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 11: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 12: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 13: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 14: juRzxVJwarhIfSklgOiQQRJcr-Q.roa (hash: MRCpSk5iY23hustIzHxvVTRKj+fIV+g79/vD2SakhjU=) 15: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 16: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 17: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:5f:33:2f:67:fb:8d:53:24:1b:a8:bd:b4:55:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jul 28 10:00:42 2026 GMT Not After : Jul 29 10:00:42 2026 GMT Subject: CN=e318c7be281bcb3d8cc4274b2d26b76c8a856059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:20:9d:ce:5a:79:ca:84:31:dc:ad:af:c0: 62:57:6f:8c:76:25:6c:91:e0:c9:75:3a:9c:c7:47: 87:85:51:c7:f4:0b:11:93:8f:25:05:85:7f:f3:36: 9d:b8:ef:cb:2e:5a:45:a1:7b:80:21:3e:09:c0:71: 46:ba:09:f1:58:cb:c7:14:b3:99:0a:a9:74:37:32: 5c:61:ac:1b:38:da:fe:4f:50:81:12:6d:b9:8a:19: e2:25:69:13:58:65:48:a5:0a:03:c8:a7:97:65:02: c9:72:d9:34:62:f8:c2:64:f9:f9:56:a7:48:ad:00: 21:a5:1f:4a:d1:a3:54:e1:ee:c1:2b:25:d4:66:d6: 40:c3:ce:d7:2f:81:2a:64:49:7c:1d:25:7c:81:e4: 24:08:ce:da:39:83:89:6f:10:6d:18:f6:59:a3:fd: 61:dd:1f:c0:c3:88:df:82:96:23:89:c6:8f:74:c5: 3c:e6:9b:ba:5f:7b:96:73:42:11:9b:b0:48:2d:1f: 0e:c1:e8:d5:5a:d9:8f:93:08:06:ad:a0:4d:4b:96: 24:b4:df:aa:8e:d1:6c:b7:1f:ae:84:b2:3d:37:19: 30:bb:40:b4:ca:06:cd:e3:55:2e:1c:e0:bc:8b:e1: 05:2f:d3:aa:6c:75:e5:8a:b2:cc:46:e5:12:da:92: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:C7:BE:28:1B:CB:3D:8C:C4:27:4B:2D:26:B7:6C:8A:85:60:59 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:8e:12:7c:32:c7:28:7d:2d:1d:d6:a1:86:3f:61:a2:67: 5d:b5:bb:2c:e9:ac:17:0d:c4:97:f1:61:4f:18:d5:c1:f5:b7: 65:ae:9e:e5:79:0b:77:e4:b5:ba:04:88:4f:a9:da:3c:b8:cd: ae:a9:a2:09:a7:c6:25:d2:88:4b:d4:1e:05:d7:ad:82:5d:87: e5:ba:2e:82:06:fe:09:7c:c1:93:74:42:66:60:a6:be:52:ce: a5:48:81:c2:b1:22:07:8f:9c:ff:b0:1f:11:ce:88:e1:09:52: d6:90:ae:df:bf:15:d8:67:b2:28:71:51:82:74:b7:fb:ce:4c: b0:5b:54:17:33:17:5d:57:05:39:e9:fd:35:29:2b:a1:15:77: d5:e3:88:ea:fe:0c:e2:4b:4e:e2:9d:f8:29:97:35:22:9a:7e: 97:27:10:e0:43:3a:43:3d:29:0f:1b:2d:a4:a5:41:0b:93:75: c6:7b:e3:38:21:91:1c:a4:1a:4e:47:0c:12:42:28:c3:d1:c0: fb:4d:49:8c:49:87:87:7a:f7:dd:03:c1:ce:e7:7d:de:c2:58: 1e:0a:a7:11:a9:e7:83:d3:91:5c:37:d9:84:08:ea:b7:14:37: 3e:b4:4d:1a:13:d5:3d:46:d6:fa:ea:4a:88:4a:96:b9:66:07: e7:ec:e3:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK18zL2f7jVMkG6i9tFWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNzI4MTAwMDQyWhcNMjYwNzI5MTAwMDQyWjAzMTEwLwYDVQQD EyhlMzE4YzdiZTI4MWJjYjNkOGNjNDI3NGIyZDI2Yjc2YzhhODU2MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wsgnc5aecqEMdytr8BiV2+MdiVs keDJdTqcx0eHhVHH9AsRk48lBYV/8zaduO/LLlpFoXuAIT4JwHFGugnxWMvHFLOZ Cql0NzJcYawbONr+T1CBEm25ihniJWkTWGVIpQoDyKeXZQLJctk0YvjCZPn5VqdI rQAhpR9K0aNU4e7BKyXUZtZAw87XL4EqZEl8HSV8geQkCM7aOYOJbxBtGPZZo/1h 3R/Aw4jfgpYjicaPdMU85pu6X3uWc0IRm7BILR8OwejVWtmPkwgGraBNS5YktN+q jtFstx+uhLI9Nxkwu0C0ygbN41UuHOC8i+EFL9OqbHXlirLMRuUS2pJV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMYx74oG8s9jMQnSy0mt2yKhWBZMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3SOEnwy xyh9LR3WoYY/YaJnXbW7LOmsFw3El/FhTxjVwfW3Za6e5XkLd+S1ugSIT6naPLjN rqmiCafGJdKIS9QeBdetgl2H5bouggb+CXzBk3RCZmCmvlLOpUiBwrEiB4+c/7Af Ec6I4QlS1pCu378V2GeyKHFRgnS3+85MsFtUFzMXXVcFOen9NSkroRV31eOI6v4M 4ktO4p34KZc1Ipp+lycQ4EM6Qz0pDxstpKVBC5N1xnvjOCGRHKQaTkcMEkIow9HA +01JjEmHh3r33QPBzud93sJYHgqnEanng9ORXDfZhAjqtxQ3PrRNGhPVPUbW+upK iEqWuWYH5+zjlQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:14:12 2026 by rpki-client