$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: u50zdpBrYoGNFn/5ARo01dE2qPnI2u6oVCPpw73zh7s= Subject key identifier: BE:88:C9:C8:D1:B9:00:10:02:B2:A9:3E:85:5A:E4:18:50:E6:34:37 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019FA907073DDA09DDE5450C5F6E8E56B3A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0DA4 Signing time: Tue 28 Jul 2026 14:00:37 +0000 Manifest this update: Tue 28 Jul 2026 14:00:37 +0000 Manifest next update: Wed 29 Jul 2026 14:00:37 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: peA/M2H5BglQTC7NHbKBRzYu2tw4eXNDkBSPE3UThVY=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=) 12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:07:3d:da:09:dd:e5:45:0c:5f:6e:8e:56:b3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jul 28 14:00:37 2026 GMT Not After : Jul 29 14:00:37 2026 GMT Subject: CN=be88c9c8d1b9001002b2a93e855ae41850e63437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:7f:68:a6:4e:cf:e9:71:d4:b4:8b:5a:70: ac:13:97:d7:97:4a:eb:27:57:06:b0:ae:ff:37:0e: 25:49:eb:80:e6:79:ee:d4:e8:fb:4d:6c:f5:6d:c3: a1:51:4c:dc:90:66:10:da:81:be:65:de:24:a1:1e: cb:8b:b1:c6:dc:40:b4:26:32:89:88:2e:4e:7b:72: 22:eb:22:6a:3b:c1:21:42:6f:d9:04:83:7e:c0:26: c9:25:50:99:1d:c6:72:5d:e0:df:ef:1b:74:b4:dc: 3e:58:b7:35:bc:04:ce:56:29:a6:bd:f7:37:70:53: 82:48:03:35:82:d9:7e:68:9c:a3:dc:62:bd:7c:f5: dd:be:4f:fd:54:98:6d:1b:4c:07:52:db:d1:65:2c: b6:83:14:f8:01:a7:25:04:b6:b2:00:37:e7:34:95: 8d:17:e3:14:f7:7d:6d:61:80:94:e5:8b:16:07:5c: 54:e6:d8:67:84:d4:94:b4:18:7a:d4:1f:e6:50:fd: d9:46:45:be:22:89:56:0b:83:9c:e1:2e:33:40:cf: 0e:de:3a:fe:99:9e:d0:15:c6:e6:44:cc:b5:7a:06: b6:8e:fb:01:43:f5:2f:b0:a7:e5:ee:06:33:0b:97: c0:2a:48:79:ae:29:cb:94:d1:20:be:00:0b:ac:a5: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:C9:C8:D1:B9:00:10:02:B2:A9:3E:85:5A:E4:18:50:E6:34:37 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:79:67:c2:c3:5f:7c:f3:61:38:08:81:95:e4:94:cd:66:94: 4b:62:51:66:f8:e3:ff:b0:1b:65:4f:e6:e0:9f:94:e7:e3:8d: c6:ae:96:f7:bd:22:60:a4:77:53:0d:be:e2:a0:04:43:4f:57: 3e:c1:ec:96:4d:b6:07:c3:26:b4:8b:cb:c4:04:b8:6f:e2:c5: 72:5a:05:df:96:ac:f1:62:b6:08:33:f5:36:3b:b9:e9:8d:32: b3:ec:9e:51:9c:6c:c6:63:68:fe:b3:a7:17:9c:80:c5:cb:6f: 8b:55:46:98:b1:ae:f6:d1:fa:65:de:a4:3c:23:99:59:0e:18: d9:3e:96:e7:1b:74:56:8d:8b:72:8d:5d:e8:e7:06:be:f6:03: 84:49:a2:73:ab:05:6f:4a:4e:7e:56:92:2d:ef:83:00:81:94: b3:2e:f3:87:7d:d8:9f:5b:2e:da:37:db:81:62:78:7e:ae:9e: 9a:6a:2a:c4:a1:02:cf:89:62:ee:27:bd:48:e6:83:10:68:d9: 09:dd:de:bd:2c:61:f1:e5:d1:01:c7:cc:69:aa:18:76:13:e7: ec:63:de:95:ae:db:df:2a:cd:2c:82:d2:ba:c5:61:ff:f9:4b: 87:f2:bf:47:08:18:49:33:ce:ce:24:c5:dd:6b:ce:c0:7d:e1: 96:c1:7f:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pBwc92gnd5UUMX26OVrOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwNzI4MTQwMDM3WhcNMjYwNzI5MTQwMDM3WjAzMTEwLwYDVQQD EyhiZTg4YzljOGQxYjkwMDEwMDJiMmE5M2U4NTVhZTQxODUwZTYzNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaN/aKZOz+lx1LSLWnCsE5fXl0rr J1cGsK7/Nw4lSeuA5nnu1Oj7TWz1bcOhUUzckGYQ2oG+Zd4koR7Li7HG3EC0JjKJ iC5Oe3Ii6yJqO8EhQm/ZBIN+wCbJJVCZHcZyXeDf7xt0tNw+WLc1vATOVimmvfc3 cFOCSAM1gtl+aJyj3GK9fPXdvk/9VJhtG0wHUtvRZSy2gxT4AaclBLayADfnNJWN F+MU931tYYCU5YsWB1xU5thnhNSUtBh61B/mUP3ZRkW+IolWC4Oc4S4zQM8O3jr+ mZ7QFcbmRMy1ega2jvsBQ/UvsKfl7gYzC5fAKkh5rinLlNEgvgALrKVDSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6IycjRuQAQArKpPoVa5BhQ5jQ3MB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3lnwsNf fPNhOAiBleSUzWaUS2JRZvjj/7AbZU/m4J+U5+ONxq6W970iYKR3Uw2+4qAEQ09X PsHslk22B8MmtIvLxAS4b+LFcloF35as8WK2CDP1Nju56Y0ys+yeUZxsxmNo/rOn F5yAxctvi1VGmLGu9tH6Zd6kPCOZWQ4Y2T6W5xt0Vo2Lco1d6OcGvvYDhEmic6sF b0pOflaSLe+DAIGUsy7zh33Yn1su2jfbgWJ4fq6emmoqxKECz4li7ie9SOaDEGjZ Cd3evSxh8eXRAcfMaaoYdhPn7GPela7b3yrNLILSusVh//lLh/K/RwgYSTPOziTF 3WvOwH3hlsF/9A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:02:09 2026 by rpki-client