$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: Z6NJSKyCyih31B61myuT/eybW5UTANjgQ9MVGAFGgn0= Subject key identifier: 6B:41:D4:BD:04:FF:7E:AC:54:EB:FC:6B:18:B4:16:03:A8:90:82:6C Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019FAAF5376F06672CD181F558135CDDB578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0894 Signing time: Tue 28 Jul 2026 23:00:24 +0000 Manifest this update: Tue 28 Jul 2026 23:00:24 +0000 Manifest next update: Wed 29 Jul 2026 23:00:24 +0000 Files and hashes: 1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=) 2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: Wpbl/26BPjel8dPr+uKZ2UWsp+PnJsXdbepSGwYwh8A=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=) 6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=) 7: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 8: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 9: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 10: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=) 11: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=) 12: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=) 13: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 14: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=) 15: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:37:6f:06:67:2c:d1:81:f5:58:13:5c:dd:b5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jul 28 23:00:24 2026 GMT Not After : Jul 29 23:00:24 2026 GMT Subject: CN=6b41d4bd04ff7eac54ebfc6b18b41603a890826c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:9c:92:ae:b0:e0:0e:1e:a3:31:b7:e5:4f: 2f:d1:43:b5:c0:60:dd:1c:7a:fe:3e:dc:be:c8:be: 07:25:c1:f9:09:df:82:1b:3a:cf:50:ac:a9:da:32: e6:b9:ec:be:f4:fb:e2:61:10:d6:27:f7:73:5e:c7: e0:35:04:0b:66:23:74:81:32:79:19:80:a5:39:1e: 75:2e:74:d9:81:f4:03:09:82:b8:b1:97:5c:c5:b4: 70:18:37:6c:9d:47:74:b8:34:fd:fb:e0:85:84:54: 81:00:37:de:2e:38:59:20:6e:f3:5d:30:17:34:26: 28:0f:57:27:b9:04:b9:bd:b7:99:26:af:d5:86:61: e6:df:ad:5a:bb:1c:f0:d5:d1:45:6c:0e:b1:5b:96: e2:b8:15:02:11:bc:2c:bf:11:83:ea:c9:81:3d:9c: 30:39:c1:ad:73:44:f3:cc:70:3b:ba:b3:6f:97:97: c7:0c:8d:d8:2a:c8:88:83:db:8f:42:60:3e:b3:41: 6b:8d:a4:93:4d:6e:4d:42:f2:91:12:d1:30:ae:cb: f5:28:b3:28:44:64:ae:a2:7d:e5:dc:21:24:4f:2c: 7c:7e:1f:91:9b:d8:06:40:55:f9:9a:29:71:44:c4: 30:a6:b8:e6:0d:df:3f:2c:81:c3:d6:c2:7d:d6:c8: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:41:D4:BD:04:FF:7E:AC:54:EB:FC:6B:18:B4:16:03:A8:90:82:6C X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:35:69:60:9e:4f:0a:c4:c8:0c:24:10:70:38:c6:9c:81:10: cd:c0:2b:50:39:17:4a:e4:89:b2:e2:d3:07:0e:1c:e3:8a:ee: 4c:60:30:3c:ea:0d:10:a0:d8:7a:2f:f1:1a:05:90:2d:6d:4d: 42:b5:b9:a2:fc:c7:44:26:e0:fe:51:d1:59:a3:b3:76:ce:5e: b7:fa:41:d5:cc:d2:bd:39:59:c4:07:72:ba:cd:74:4f:f5:10: 34:16:ac:10:1b:78:0a:cb:04:34:a0:33:77:1c:ba:25:67:b1: 4f:ac:e9:c8:b4:97:7b:95:d7:07:2a:bb:16:cd:f0:3c:a4:e9: 4c:09:65:f6:cf:5b:c6:67:40:3c:4e:62:50:9e:30:25:81:57: 96:58:4a:23:89:c0:1d:40:75:7a:db:04:4f:4e:78:fb:c0:57: 82:22:bc:e5:a4:1a:1b:99:98:82:cb:30:83:f9:29:70:36:24: 11:16:8c:e0:4a:3c:06:e0:35:0a:ec:7f:50:c1:5d:fb:f6:a7: 94:74:64:e7:37:4e:6a:d8:64:98:4b:72:eb:b4:a3:76:f1:c5: 57:fd:41:00:cc:90:ab:e4:b8:7e:3d:16:7e:32:10:f2:7b:b1: 1f:14:41:e8:1d:96:2f:71:87:ba:26:d9:2a:60:88:0d:59:f1: ce:8c:91:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9TdvBmcs0YH1WBNc3bV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwNzI4MjMwMDI0WhcNMjYwNzI5MjMwMDI0WjAzMTEwLwYDVQQD Eyg2YjQxZDRiZDA0ZmY3ZWFjNTRlYmZjNmIxOGI0MTYwM2E4OTA4MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVuckq6w4A4eozG35U8v0UO1wGDd HHr+Pty+yL4HJcH5Cd+CGzrPUKyp2jLmuey+9PviYRDWJ/dzXsfgNQQLZiN0gTJ5 GYClOR51LnTZgfQDCYK4sZdcxbRwGDdsnUd0uDT9++CFhFSBADfeLjhZIG7zXTAX NCYoD1cnuQS5vbeZJq/VhmHm361auxzw1dFFbA6xW5biuBUCEbwsvxGD6smBPZww OcGtc0TzzHA7urNvl5fHDI3YKsiIg9uPQmA+s0FrjaSTTW5NQvKREtEwrsv1KLMo RGSuon3l3CEkTyx8fh+Rm9gGQFX5milxRMQwprjmDd8/LIHD1sJ91siWmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtB1L0E/36sVOv8axi0FgOokIJsMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDVpYJ5P CsTIDCQQcDjGnIEQzcArUDkXSuSJsuLTBw4c44ruTGAwPOoNEKDYei/xGgWQLW1N QrW5ovzHRCbg/lHRWaOzds5et/pB1czSvTlZxAdyus10T/UQNBasEBt4CssENKAz dxy6JWexT6zpyLSXe5XXByq7Fs3wPKTpTAll9s9bxmdAPE5iUJ4wJYFXllhKI4nA HUB1etsET054+8BXgiK85aQaG5mYgsswg/kpcDYkERaM4Eo8BuA1Cux/UMFd+/an lHRk5zdOathkmEty67SjdvHFV/1BAMyQq+S4fj0WfjIQ8nuxHxRB6B2WL3GHuibZ KmCIDVnxzoyRXw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:40:05 2026 by rpki-client