$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: 2NXtsiHKqN8RwZAXcw7ogKe/XWl1dpcWp8vPv4eSJVU= Subject key identifier: 81:59:8A:07:41:51:96:F8:28:1B:12:3C:F2:44:C0:01:35:E2:E3:84 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019FADF7122150EFCC171B5B4B9C24F47890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0A3B Signing time: Wed 29 Jul 2026 13:01:18 +0000 Manifest this update: Wed 29 Jul 2026 13:01:18 +0000 Manifest next update: Thu 30 Jul 2026 13:01:18 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=) 8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: B22TpeQJ6Y9Dti+hpE2HkCoz2KvZQju4aQQDf5SNr24=) 10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 12: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=) 13: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ad:f7:12:21:50:ef:cc:17:1b:5b:4b:9c:24:f4:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Jul 29 13:01:18 2026 GMT Not After : Jul 30 13:01:18 2026 GMT Subject: CN=81598a07415196f8281b123cf244c00135e2e384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:f4:10:ac:b1:94:8e:3a:8b:e6:35:b1:da: df:7e:56:06:50:9a:61:ea:fb:11:c5:e7:2e:d0:43: d2:98:31:2c:e8:ab:18:5a:b5:43:62:26:f4:cd:d4: 0a:7e:a0:5b:a4:81:4f:6e:44:90:b3:0d:8c:3d:88: ad:93:5b:3d:34:77:6a:d2:bc:3b:54:08:21:f1:94: 09:ea:a0:48:95:f4:66:bf:b0:81:8c:df:67:70:52: 07:1a:6f:c2:11:72:f0:e6:38:6a:c2:3e:4d:c8:c1: 39:f7:ad:50:83:95:b4:c8:90:e7:06:de:a3:f1:0d: bc:f7:ef:b8:cf:27:aa:c1:d6:c7:f8:de:5f:d7:e4: 49:ba:12:93:4e:10:c6:a1:85:bf:1c:e6:4c:6f:bb: c5:a3:da:69:a2:b1:dd:b5:5f:44:a7:49:94:d4:45: ad:09:a6:83:43:97:4d:69:2b:1e:74:a0:6b:fb:45: 9a:2b:11:a8:b8:59:3d:e2:6e:8d:e1:7a:6a:49:03: 7e:bf:65:1b:f0:2f:6d:4d:fa:ef:73:48:82:92:b8: 23:2b:f1:22:38:46:2d:e0:a9:78:39:66:d2:0b:76: 97:2c:51:a6:2d:b2:d6:5f:99:90:d9:5d:07:30:9b: d2:ae:04:03:a7:24:d1:76:08:d7:3f:9f:43:bf:e1: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:59:8A:07:41:51:96:F8:28:1B:12:3C:F2:44:C0:01:35:E2:E3:84 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:bc:d9:38:79:7b:62:c4:6b:96:eb:b9:be:97:22:df:4c: 32:89:b1:66:39:2b:04:ce:3b:be:1d:3d:4a:e5:61:6e:13:d4: c6:42:32:f4:18:4f:42:ed:20:91:1f:6b:5b:e3:56:d3:eb:c3: ae:f7:09:d0:33:57:07:5a:24:9c:b3:da:01:a3:a9:39:63:bc: b6:4a:2b:e9:bd:bd:87:cd:4d:f7:bf:47:dd:e4:c5:3f:49:67: 16:f3:10:29:6d:88:9e:0c:b5:cb:2f:15:82:e1:4b:3b:81:3e: e1:dd:42:aa:d2:19:22:6e:d5:0f:86:8c:e4:fb:44:02:3e:67: 8a:02:d7:dd:1b:84:4b:98:ac:a6:f3:01:9e:38:02:e9:71:e0: e2:c4:49:57:2a:d4:46:68:bd:d2:53:75:55:8f:4d:30:20:61: 3b:32:3d:f3:0d:83:17:78:14:66:be:83:6d:96:f7:88:e3:df: fd:79:0d:08:5c:71:34:2f:a1:95:97:a6:22:4c:5d:e1:a6:dd: e4:de:63:d9:d5:c8:a1:af:92:1e:ca:8f:e9:56:e4:2e:9d:0d: af:26:a5:9b:68:98:0f:d6:82:09:da:78:8b:3a:3a:9a:b2:52: 23:4d:15:b5:79:bc:d5:51:d7:55:33:9a:75:ff:aa:8d:0c:3a: 75:6f:61:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+t9xIhUO/MFxtbS5wk9HiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwNzI5MTMwMTE4WhcNMjYwNzMwMTMwMTE4WjAzMTEwLwYDVQQD Eyg4MTU5OGEwNzQxNTE5NmY4MjgxYjEyM2NmMjQ0YzAwMTM1ZTJlMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXz0EKyxlI46i+Y1sdrfflYGUJph 6vsRxecu0EPSmDEs6KsYWrVDYib0zdQKfqBbpIFPbkSQsw2MPYitk1s9NHdq0rw7 VAgh8ZQJ6qBIlfRmv7CBjN9ncFIHGm/CEXLw5jhqwj5NyME5961Qg5W0yJDnBt6j 8Q289++4zyeqwdbH+N5f1+RJuhKTThDGoYW/HOZMb7vFo9pporHdtV9Ep0mU1EWt CaaDQ5dNaSsedKBr+0WaKxGouFk94m6N4XpqSQN+v2Ub8C9tTfrvc0iCkrgjK/Ei OEYt4Kl4OWbSC3aXLFGmLbLWX5mQ2V0HMJvSrgQDpyTRdgjXP59Dv+GqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFZigdBUZb4KBsSPPJEwAE14uOEMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREK82Th5 e2LEa5brub6XIt9MMomxZjkrBM47vh09SuVhbhPUxkIy9BhPQu0gkR9rW+NW0+vD rvcJ0DNXB1oknLPaAaOpOWO8tkor6b29h81N979H3eTFP0lnFvMQKW2Ingy1yy8V guFLO4E+4d1CqtIZIm7VD4aM5PtEAj5nigLX3RuES5ispvMBnjgC6XHg4sRJVyrU Rmi90lN1VY9NMCBhOzI98w2DF3gUZr6DbZb3iOPf/XkNCFxxNC+hlZemIkxd4abd 5N5j2dXIoa+SHsqP6VbkLp0Nryalm2iYD9aCCdp4izo6mrJSI00VtXm81VHXVTOa df+qjQw6dW9hlw== -----END CERTIFICATE-----Generated at Wed Jul 29 15:01:44 2026 by rpki-client