$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: FV478pg7AFqAEDJRsPZ75CE68w9/bdSFtmBavJNnJFg= Subject key identifier: 1D:B0:21:B4:5B:B8:11:BD:1A:D3:1E:29:69:86:31:A0:AA:92:A5:1F Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019FAAF5CBDDB4D9CAA51C0D8D4AE1E076D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 19E5 Signing time: Tue 28 Jul 2026 23:01:02 +0000 Manifest this update: Tue 28 Jul 2026 23:01:02 +0000 Manifest next update: Wed 29 Jul 2026 23:01:02 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: +oIKqFmUpqY/eVwRFOj02WxWjhei3EtxpszDCQa3uIM=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:cb:dd:b4:d9:ca:a5:1c:0d:8d:4a:e1:e0:76:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jul 28 23:01:02 2026 GMT Not After : Jul 29 23:01:02 2026 GMT Subject: CN=1db021b45bb811bd1ad31e29698631a0aa92a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:27:5f:be:6d:51:07:96:e0:ea:d9:c1:53: c7:55:cc:ff:2c:fe:c0:e1:10:6e:ce:e9:75:09:b5: 33:b9:e5:c5:fd:a1:9d:0a:8d:d3:20:6a:e0:55:2d: a7:e1:96:72:72:16:7b:a4:38:41:f0:df:94:eb:2c: 8c:5c:1d:cf:d9:76:73:6b:87:ec:de:b9:d9:1d:e2: cd:5e:17:3a:87:49:66:a4:26:75:0d:9f:80:7a:c5: 85:61:6b:f8:43:26:4b:c6:0f:f6:62:91:e6:c4:3b: 1b:7a:6e:d3:ec:f2:52:39:81:c0:60:b8:3b:a1:78: e7:f2:22:a1:26:e0:17:ce:36:8d:47:9f:78:83:7e: c4:2a:39:8c:dd:16:09:a2:60:9a:d7:01:48:e9:f4: 47:df:a4:05:6a:15:9e:a7:eb:4e:a2:37:3e:4b:27: 96:8a:4e:b0:76:95:2a:47:08:5a:87:cf:f2:97:47: be:ae:3b:61:bb:ab:80:8b:bf:e1:58:ce:0b:4c:e0: 31:6c:f3:e6:bc:24:77:b8:d4:a2:fe:85:f3:8d:6e: 0d:11:92:f9:78:1e:ec:6a:cf:62:9b:b8:93:ad:b0: 7b:e6:9f:62:99:9b:7a:8a:65:c8:77:35:3b:4b:bf: 63:7f:58:40:d1:de:34:d3:10:a3:70:18:41:85:74: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B0:21:B4:5B:B8:11:BD:1A:D3:1E:29:69:86:31:A0:AA:92:A5:1F X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:a6:62:c3:09:6e:c8:d8:d1:40:c3:e1:38:38:2f:33:86:b9: 2d:90:8e:36:f9:46:0f:eb:b8:86:9b:36:ba:19:c2:ed:ff:40: 4d:8c:96:71:6f:71:5b:55:51:bc:af:6a:56:7e:4d:ab:56:e4: f9:71:ce:39:29:8f:88:18:12:1c:18:12:23:08:06:65:50:ff: af:f9:52:fc:fb:4b:0c:a8:0d:80:1c:40:50:44:73:c7:a6:40: a6:e9:62:e7:c3:42:53:23:46:3f:07:05:d4:f4:44:49:2e:79: ca:2e:bf:ba:15:86:50:44:73:90:62:f4:32:9a:a2:af:e9:37: 25:f0:b3:28:e7:18:28:ae:c2:7a:22:f1:3b:c9:8d:dd:09:0b: 56:dd:00:c4:79:3e:9a:0b:0b:c6:5a:a1:53:2c:3e:76:ee:f1: e5:87:88:39:02:af:fb:22:16:3b:ca:c1:03:f6:a3:27:09:7c: 33:ed:da:1d:15:cb:91:12:76:93:3c:e9:8d:42:2c:72:e2:17: 0d:3b:94:98:20:dc:b5:12:c7:a2:ba:d1:a0:b8:48:51:fb:2a: 1f:2c:b8:ed:c2:df:a3:d4:c4:10:75:25:70:ec:08:63:3e:49: e3:71:43:83:40:48:eb:64:7a:f1:62:e3:04:0d:71:95:af:b4: cc:96:5c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9cvdtNnKpRwNjUrh4HbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwNzI4MjMwMTAyWhcNMjYwNzI5MjMwMTAyWjAzMTEwLwYDVQQD EygxZGIwMjFiNDViYjgxMWJkMWFkMzFlMjk2OTg2MzFhMGFhOTJhNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BwnX75tUQeW4OrZwVPHVcz/LP7A 4RBuzul1CbUzueXF/aGdCo3TIGrgVS2n4ZZychZ7pDhB8N+U6yyMXB3P2XZza4fs 3rnZHeLNXhc6h0lmpCZ1DZ+AesWFYWv4QyZLxg/2YpHmxDsbem7T7PJSOYHAYLg7 oXjn8iKhJuAXzjaNR594g37EKjmM3RYJomCa1wFI6fRH36QFahWep+tOojc+SyeW ik6wdpUqRwhah8/yl0e+rjthu6uAi7/hWM4LTOAxbPPmvCR3uNSi/oXzjW4NEZL5 eB7sas9im7iTrbB75p9imZt6imXIdzU7S79jf1hA0d400xCjcBhBhXRpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2wIbRbuBG9GtMeKWmGMaCqkqUfMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKZiwwlu yNjRQMPhODgvM4a5LZCONvlGD+u4hps2uhnC7f9ATYyWcW9xW1VRvK9qVn5Nq1bk +XHOOSmPiBgSHBgSIwgGZVD/r/lS/PtLDKgNgBxAUERzx6ZApuli58NCUyNGPwcF 1PRESS55yi6/uhWGUERzkGL0Mpqir+k3JfCzKOcYKK7CeiLxO8mN3QkLVt0AxHk+ mgsLxlqhUyw+du7x5YeIOQKv+yIWO8rBA/ajJwl8M+3aHRXLkRJ2kzzpjUIscuIX DTuUmCDctRLHorrRoLhIUfsqHyy47cLfo9TEEHUlcOwIYz5J43FDg0BI62R68WLj BA1xla+0zJZc1Q== -----END CERTIFICATE-----Generated at Wed Jul 29 06:20:33 2026 by rpki-client