$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: dnBjhxrIT52bKlQPWp9Dnrce3pDRFiKr7MnErxtUAOw= Subject key identifier: 8A:58:E6:2C:A5:8B:D9:88:C1:22:AA:AE:4C:F7:AB:0E:EC:A3:93:F9 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019FA8D01F75D0079874287835E76CFDA998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 177E Signing time: Tue 28 Jul 2026 13:00:39 +0000 Manifest this update: Tue 28 Jul 2026 13:00:39 +0000 Manifest next update: Wed 29 Jul 2026 13:00:39 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: aNDpGGbVEfKE7OEmNAtqx8hUoxNWEe7nAcCpGDNnAqI=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:1f:75:d0:07:98:74:28:78:35:e7:6c:fd:a9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jul 28 13:00:39 2026 GMT Not After : Jul 29 13:00:39 2026 GMT Subject: CN=8a58e62ca58bd988c122aaae4cf7ab0eeca393f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:68:ed:53:d3:cf:27:18:f0:a3:4d:65:97: 3c:9b:1b:af:b0:56:e2:ba:61:2f:b5:a0:ad:16:82: 08:a1:23:3d:0d:a5:d1:70:a2:8c:c4:54:bf:0c:64: 71:10:8e:76:fb:ec:e0:29:9b:8a:85:19:f4:03:5d: 7a:1a:4c:bb:ec:1b:d1:16:a9:2f:b2:48:f9:0d:c6: 1c:15:ed:ee:b6:cc:b0:7c:07:3a:af:4d:69:80:e0: f1:77:16:19:1d:e5:6a:c0:9b:4d:1f:a9:b8:a7:ef: 64:dd:f0:23:83:65:97:65:e1:59:f9:dd:47:e4:02: 81:38:b9:33:6f:b3:d6:46:fd:12:97:cf:72:26:14: 8a:d2:3e:8e:6d:8f:de:bc:c3:4c:6c:ce:8b:d1:80: 6b:81:0e:20:93:e8:d3:44:b2:d4:3c:e6:7f:cb:d5: 17:21:23:1f:73:7b:fb:ce:d8:c8:e4:fb:ca:3d:5a: 3d:dc:c6:4f:be:5a:0d:5d:4f:5f:20:61:f7:d7:86: 7d:6e:3f:b5:8c:7c:55:87:d4:2b:f9:ea:51:5e:84: 9d:69:1c:08:9e:65:54:93:49:e2:69:c0:b7:7f:73: c6:d2:7a:a9:70:c4:2d:fc:d1:37:9c:73:67:7e:c5: 30:ea:b6:cd:0f:0f:24:ba:18:0d:a3:17:2b:b9:b8: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:58:E6:2C:A5:8B:D9:88:C1:22:AA:AE:4C:F7:AB:0E:EC:A3:93:F9 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:27:28:b3:75:fa:24:9f:f7:a0:a7:94:b9:bb:33:7e:09:3f: c8:fe:35:bb:0b:f1:6c:77:ec:07:b0:34:43:55:d1:a8:aa:d5: 9f:89:cc:4d:8e:2b:10:c9:30:99:1e:43:d4:f8:68:7c:d2:6d: 66:ff:c0:c5:44:e2:b3:35:6c:c5:8e:b7:50:42:75:b7:e0:1c: 2d:c2:4b:41:6e:70:a2:0b:88:88:92:36:d8:c8:a8:74:d4:87: f9:1c:2b:ad:cb:f6:01:32:fd:33:87:73:9c:a4:e7:8e:1e:44: a8:69:29:02:e3:ca:ed:8b:d6:6e:44:ad:63:a1:3a:48:f6:f2: bc:26:86:e3:cf:e7:45:cb:7c:ee:a1:4a:7f:fb:4b:a9:b9:48: c2:62:d6:05:db:04:cb:39:8e:58:52:97:12:d9:be:e2:25:dc: 1a:69:d4:44:52:3c:54:3a:3f:0f:65:da:fe:a7:43:76:10:06: 0b:62:74:e4:1b:3b:85:e2:45:0f:04:2d:95:1d:50:ca:fb:d0: d9:9b:89:e5:ea:1e:88:4b:9a:56:1a:34:9d:53:f3:f8:89:54: 22:c8:23:59:91:11:f8:5f:48:3b:95:82:ec:68:51:f8:f9:31: 5b:80:68:2a:4f:cc:04:0e:44:ff:94:cc:41:04:8a:8d:4a:07: 27:16:85:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0B910AeYdCh4Neds/amYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNzI4MTMwMDM5WhcNMjYwNzI5MTMwMDM5WjAzMTEwLwYDVQQD Eyg4YTU4ZTYyY2E1OGJkOTg4YzEyMmFhYWU0Y2Y3YWIwZWVjYTM5M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxRo7VPTzycY8KNNZZc8mxuvsFbi umEvtaCtFoIIoSM9DaXRcKKMxFS/DGRxEI52++zgKZuKhRn0A116Gky77BvRFqkv skj5DcYcFe3utsywfAc6r01pgODxdxYZHeVqwJtNH6m4p+9k3fAjg2WXZeFZ+d1H 5AKBOLkzb7PWRv0Sl89yJhSK0j6ObY/evMNMbM6L0YBrgQ4gk+jTRLLUPOZ/y9UX ISMfc3v7ztjI5PvKPVo93MZPvloNXU9fIGH314Z9bj+1jHxVh9Qr+epRXoSdaRwI nmVUk0niacC3f3PG0nqpcMQt/NE3nHNnfsUw6rbNDw8kuhgNoxcrubgyZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpY5iyli9mIwSKqrkz3qw7so5P5MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoScos3X6 JJ/3oKeUubszfgk/yP41uwvxbHfsB7A0Q1XRqKrVn4nMTY4rEMkwmR5D1PhofNJt Zv/AxUTiszVsxY63UEJ1t+AcLcJLQW5woguIiJI22MiodNSH+Rwrrcv2ATL9M4dz nKTnjh5EqGkpAuPK7YvWbkStY6E6SPbyvCaG48/nRct87qFKf/tLqblIwmLWBdsE yzmOWFKXEtm+4iXcGmnURFI8VDo/D2Xa/qdDdhAGC2J05Bs7heJFDwQtlR1QyvvQ 2ZuJ5eoeiEuaVho0nVPz+IlUIsgjWZER+F9IO5WC7GhR+PkxW4BoKk/MBA5E/5TM QQSKjUoHJxaFFw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:38:06 2026 by rpki-client