$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: Emjj87Q7YRogSXc98OGFT4JqT19EeJ3J0IyGwoSVl74= Subject key identifier: 5C:5B:A7:29:F8:E5:D1:B1:09:DB:53:70:48:C8:41:27:A5:7F:58:B4 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019FA906B8A5F12F4A5FA9BCD967F83F8734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 191B Signing time: Tue 28 Jul 2026 14:00:17 +0000 Manifest this update: Tue 28 Jul 2026 14:00:17 +0000 Manifest next update: Wed 29 Jul 2026 14:00:17 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 3: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 4: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: S4fQra7FyBw6bk4R_f3Q2_hJKXI.roa (hash: RRFhdOKlXoVTT56pkyBH3PAGnDc0y17VQSEe9gDkJk4=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: 6gnjDhUGRrhF86XEnRt1L+AL9KjKvhSGS1dAp17DVRc=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:06:b8:a5:f1:2f:4a:5f:a9:bc:d9:67:f8:3f:87:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jul 28 14:00:17 2026 GMT Not After : Jul 29 14:00:17 2026 GMT Subject: CN=5c5ba729f8e5d1b109db537048c84127a57f58b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:c8:c2:0f:70:4b:a7:ec:41:7f:c5:b2:01: f9:84:23:d6:b4:4b:72:19:d6:c5:9d:f9:50:49:54: de:18:97:d8:59:ab:b8:63:1b:e0:a5:86:e4:ae:1f: ce:71:01:b5:96:78:e4:44:6a:16:6d:4e:f8:91:e3: e6:68:ec:78:d6:80:cb:17:c2:f3:dc:e0:88:0c:e8: b5:ba:c4:f3:6a:20:b4:52:cb:38:87:29:a8:7b:c9: dc:16:82:75:17:79:54:78:21:a1:16:d1:60:03:9d: a0:cd:c1:f3:8b:67:49:d6:4e:69:48:4c:16:c2:05: 97:ff:03:18:50:be:57:ee:62:86:57:f0:ea:7d:1b: c0:3c:dc:54:e4:42:fa:32:ca:04:5a:bb:1c:08:42: 73:f3:8b:0e:57:b9:e4:74:82:40:e8:c9:06:61:12: fd:3d:15:f9:89:85:c0:89:1e:57:cc:d4:a8:45:64: 6c:74:8a:f1:51:3d:d9:f7:9d:e5:58:89:cc:e8:87: 27:91:45:e2:17:0b:94:b8:b8:69:ef:e6:61:19:85: ee:29:3c:e8:7b:58:ad:58:a0:23:27:2f:3a:85:72: 6c:0d:36:0a:24:c2:c1:8a:cf:31:c8:1e:60:32:2d: b6:83:a9:77:5d:e8:04:5f:9e:e4:d2:dc:c4:00:b1: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:A7:29:F8:E5:D1:B1:09:DB:53:70:48:C8:41:27:A5:7F:58:B4 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:6b:eb:4f:bd:5f:32:36:2b:65:1a:92:82:97:6f:de:03: 27:89:81:7a:53:a2:f9:4f:1b:82:0d:37:5f:bf:f1:91:ee:08: 6c:28:31:ec:6b:3d:e6:c8:97:2b:3a:27:be:a2:6c:66:35:41: bc:f5:5f:b8:af:e2:00:f3:72:a8:70:e3:81:00:91:1a:25:d9: b2:85:ef:ea:38:97:b2:9f:f4:09:bf:39:ef:a9:36:72:66:63: e3:a8:03:1e:5f:16:2a:76:11:f3:aa:06:15:ea:4b:1e:02:24: 32:1c:57:c2:f7:0f:41:d7:5d:26:14:86:a1:2f:3e:19:13:79: e9:28:a0:7c:e2:0b:23:b9:46:cc:c5:28:8e:be:e7:67:12:ca: 78:6c:49:10:a9:e1:2d:a0:03:9d:05:73:b5:00:6a:fd:3a:db: 4d:3d:e2:63:59:e8:4b:29:86:52:01:17:53:d1:d0:77:3e:02: 14:2c:ea:17:d4:e1:b7:1f:6a:fe:56:09:4e:d3:95:e3:75:9a: ae:ab:75:ef:6c:51:0b:74:60:60:c4:67:41:7e:1e:ff:57:a0: e5:05:82:95:28:9f:82:cc:52:23:a9:56:3b:ef:09:b3:43:b6: 4f:e7:fa:7d:62:40:c6:fb:c4:b4:dc:29:4c:51:51:de:f0:68: 6f:e9:5b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pBril8S9KX6m82Wf4P4c0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNzI4MTQwMDE3WhcNMjYwNzI5MTQwMDE3WjAzMTEwLwYDVQQD Eyg1YzViYTcyOWY4ZTVkMWIxMDlkYjUzNzA0OGM4NDEyN2E1N2Y1OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4HIwg9wS6fsQX/FsgH5hCPWtEty GdbFnflQSVTeGJfYWau4YxvgpYbkrh/OcQG1lnjkRGoWbU74kePmaOx41oDLF8Lz 3OCIDOi1usTzaiC0Uss4hymoe8ncFoJ1F3lUeCGhFtFgA52gzcHzi2dJ1k5pSEwW wgWX/wMYUL5X7mKGV/DqfRvAPNxU5EL6MsoEWrscCEJz84sOV7nkdIJA6MkGYRL9 PRX5iYXAiR5XzNSoRWRsdIrxUT3Z953lWInM6IcnkUXiFwuUuLhp7+ZhGYXuKTzo e1itWKAjJy86hXJsDTYKJMLBis8xyB5gMi22g6l3XegEX57k0tzEALGFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxbpyn45dGxCdtTcEjIQSelf1i0MB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN19r60+9 XzI2K2UakoKXb94DJ4mBelOi+U8bgg03X7/xke4IbCgx7Gs95siXKzonvqJsZjVB vPVfuK/iAPNyqHDjgQCRGiXZsoXv6jiXsp/0Cb8576k2cmZj46gDHl8WKnYR86oG FepLHgIkMhxXwvcPQdddJhSGoS8+GRN56SigfOILI7lGzMUojr7nZxLKeGxJEKnh LaADnQVztQBq/TrbTT3iY1noSymGUgEXU9HQdz4CFCzqF9Thtx9q/lYJTtOV43Wa rqt172xRC3RgYMRnQX4e/1eg5QWClSifgsxSI6lWO+8Js0O2T+f6fWJAxvvEtNwp TFFR3vBob+lbHw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:15 2026 by rpki-client