$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: FQ2Li11gwNxbJrg6oadBg/7ERiD2wLgcUGeVmmESQhw= Subject key identifier: 96:EE:EB:EE:41:42:6E:BF:94:8C:05:D7:2C:36:5A:90:F4:F7:7D:CF Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019FAA880B3A3F27E9744FCB5D20F083F2EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1257 Signing time: Tue 28 Jul 2026 21:01:10 +0000 Manifest this update: Tue 28 Jul 2026 21:01:10 +0000 Manifest next update: Wed 29 Jul 2026 21:01:10 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: VkngkDhxqDSODhfjTfmuAirBYZqHwj/ZN2TsIRYlCq0=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 6: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 7: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 8: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 9: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:88:0b:3a:3f:27:e9:74:4f:cb:5d:20:f0:83:f2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jul 28 21:01:10 2026 GMT Not After : Jul 29 21:01:10 2026 GMT Subject: CN=96eeebee41426ebf948c05d72c365a90f4f77dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:60:7b:28:57:7a:67:f7:19:bc:bf:47:33: 40:88:8d:5d:6a:8e:ce:a6:ff:7e:8e:d4:05:4c:70: 13:c9:10:13:23:de:68:90:bc:72:19:d9:70:f9:62: 30:59:8d:3c:45:39:72:e2:30:f4:55:db:6c:a5:6a: c5:e0:0b:7d:48:cf:ff:27:39:3f:6c:59:a0:79:4c: 3b:f1:61:42:c1:6a:e9:59:a6:31:19:0f:62:0a:36: a3:df:43:7d:6b:26:b4:68:c9:94:f1:f0:c6:03:d5: 89:ed:bf:88:49:46:55:8a:8f:a3:7b:71:d9:bb:05: ca:8e:3e:70:53:2b:a6:7f:52:9f:65:3b:08:97:0f: 00:58:ed:77:00:02:fe:44:7c:a8:27:ee:66:d1:ec: 92:fb:f6:af:e8:c2:5b:09:8f:3b:b0:a4:79:d7:75: 48:bd:74:a1:a7:6d:19:18:ec:95:81:ad:f2:e5:e0: d0:e1:9f:36:92:05:9e:5f:73:ec:b1:b6:fe:05:83: 4c:1e:60:e2:49:c2:08:27:7e:e2:bd:51:8d:81:e2: e1:4a:5d:63:4a:80:a4:21:24:46:2b:bd:96:ce:fc: 66:e6:93:43:b1:63:8a:d5:f7:42:5a:85:70:9c:ff: 23:7f:1d:a9:19:47:81:6f:74:98:50:90:6b:8c:ff: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:EB:EE:41:42:6E:BF:94:8C:05:D7:2C:36:5A:90:F4:F7:7D:CF X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:91:df:35:a6:d4:b7:2e:a4:96:01:38:33:ed:3c:64:63:10: 8e:a9:d7:ca:f3:01:59:1a:ce:a8:28:1a:59:d1:2a:3d:58:16: fe:cc:72:b0:f8:1b:84:6f:4c:35:8b:59:be:15:82:c3:58:c3: 8a:a7:e4:65:45:72:03:46:b0:de:30:25:b1:81:3d:eb:21:5b: 34:8a:f9:cc:07:fd:8a:2c:64:18:09:41:52:54:04:90:d1:7c: 82:80:3c:7f:83:99:94:d9:19:25:15:43:09:0f:f9:c8:31:b3: b1:2a:d8:98:91:b0:83:74:60:2e:5e:a9:a5:eb:86:9f:ec:58: bb:47:1d:0c:79:ef:54:fb:4a:78:f6:7b:24:8d:ae:69:94:18: 75:fa:38:55:fb:1a:c9:7d:e5:f2:b7:7d:fc:31:a3:ef:67:f0: a9:a1:23:c7:7a:f9:ba:10:ef:91:87:9f:08:f2:be:5c:4c:00: 2e:5f:ed:4a:54:ba:dc:a7:eb:c1:c2:7b:f9:82:f1:3a:62:45: 3b:42:af:e8:24:57:ff:ea:42:22:c0:e5:f8:e6:e9:22:49:57: 62:cd:52:1f:68:ab:69:68:e6:ae:f5:ad:7d:32:56:ef:5c:97: 78:b9:f8:d1:b3:97:0e:65:af:03:d2:3d:87:09:0c:93:a4:1a: 68:75:b6:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qiAs6PyfpdE/LXSDwg/LsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNzI4MjEwMTEwWhcNMjYwNzI5MjEwMTEwWjAzMTEwLwYDVQQD Eyg5NmVlZWJlZTQxNDI2ZWJmOTQ4YzA1ZDcyYzM2NWE5MGY0Zjc3ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg9geyhXemf3Gby/RzNAiI1dao7O pv9+jtQFTHATyRATI95okLxyGdlw+WIwWY08RTly4jD0VdtspWrF4At9SM//Jzk/ bFmgeUw78WFCwWrpWaYxGQ9iCjaj30N9aya0aMmU8fDGA9WJ7b+ISUZVio+je3HZ uwXKjj5wUyumf1KfZTsIlw8AWO13AAL+RHyoJ+5m0eyS+/av6MJbCY87sKR513VI vXShp20ZGOyVga3y5eDQ4Z82kgWeX3Pssbb+BYNMHmDiScIIJ37ivVGNgeLhSl1j SoCkISRGK72Wzvxm5pNDsWOK1fdCWoVwnP8jfx2pGUeBb3SYUJBrjP9cOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbu6+5BQm6/lIwF1yw2WpD0933PMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5HfNabU ty6klgE4M+08ZGMQjqnXyvMBWRrOqCgaWdEqPVgW/sxysPgbhG9MNYtZvhWCw1jD iqfkZUVyA0aw3jAlsYE96yFbNIr5zAf9iixkGAlBUlQEkNF8goA8f4OZlNkZJRVD CQ/5yDGzsSrYmJGwg3RgLl6ppeuGn+xYu0cdDHnvVPtKePZ7JI2uaZQYdfo4Vfsa yX3l8rd9/DGj72fwqaEjx3r5uhDvkYefCPK+XEwALl/tSlS63KfrwcJ7+YLxOmJF O0Kv6CRX/+pCIsDl+ObpIklXYs1SH2iraWjmrvWtfTJW71yXeLn40bOXDmWvA9I9 hwkMk6QaaHW2Ig== -----END CERTIFICATE-----Generated at Wed Jul 29 00:35:34 2026 by rpki-client