$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: 5pB4zSDEQPn7y1+eY1S4+YCYRCbI/ybTKHZDyGondUs= Subject key identifier: E7:E6:AD:F5:3B:39:09:DF:AA:AF:0B:05:03:C0:C1:F9:EF:59:0B:60 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019FA9757BE015520D707E85D8588583DB21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 19EA Signing time: Tue 28 Jul 2026 16:01:16 +0000 Manifest this update: Tue 28 Jul 2026 16:01:16 +0000 Manifest next update: Wed 29 Jul 2026 16:01:16 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=) 3: F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa (hash: 91XsyO5TgXdUONYdDKhh8Ag88o0StrZQ3QWQg+w4w7o=) 4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: DUzYzioWtLph6BUtXJHwIjt95h/+6kf4oiwJwU+yOtg=) 5: GNjPKxixkcQlInXuEMN64INqg7U.roa (hash: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=) 6: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 7: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 8: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=) 9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 12: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 13: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:7b:e0:15:52:0d:70:7e:85:d8:58:85:83:db:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jul 28 16:01:16 2026 GMT Not After : Jul 29 16:01:16 2026 GMT Subject: CN=e7e6adf53b3909dfaaaf0b0503c0c1f9ef590b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:ca:b2:eb:50:40:c1:f8:98:ae:b1:9a:9f: 92:fa:b7:a4:07:19:5a:7b:2d:fc:35:40:ef:f4:f1: 48:04:ab:68:c1:64:24:df:5e:b7:23:22:c7:7b:08: 11:09:e9:d8:f6:e7:8e:5b:19:7b:46:d2:c2:fe:e9: 6b:77:61:46:f7:2f:a3:4e:61:58:e2:ce:f1:fe:f4: 38:93:6a:ea:ed:02:17:ae:97:19:24:4c:e7:a2:2b: 48:89:ee:62:bb:fc:dc:6c:6d:bb:d2:bd:32:e3:2c: e8:0a:e5:4f:16:62:b3:e3:55:4c:73:7a:be:a5:64: d5:b2:99:27:f2:07:df:68:e6:7e:d1:69:e3:1f:c3: 14:0d:98:96:73:13:b0:2e:12:9b:c7:4c:2e:f6:e7: ca:5a:9d:d3:85:f8:3c:96:15:f8:bd:e1:ee:42:04: 30:41:8c:d6:f3:75:20:2e:e7:50:0f:fe:6f:cc:c9: 75:7b:06:82:4c:70:b2:62:4f:bd:fb:07:90:9a:35: b2:e9:ce:4c:1f:ce:e8:61:d6:62:ec:f7:9d:ad:b5: d4:2b:54:13:9c:28:01:cf:36:52:b5:ea:5c:47:6b: 99:94:82:1c:c3:3b:48:7d:59:11:9d:4d:ae:21:88: 44:0e:e9:10:3a:45:00:7c:b2:65:64:05:9b:7a:92: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:AD:F5:3B:39:09:DF:AA:AF:0B:05:03:C0:C1:F9:EF:59:0B:60 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:eb:5a:83:e5:21:09:0c:01:07:68:00:23:06:ff:44:bd:9a: 29:b7:c3:99:1f:b5:94:33:e3:b6:fa:d5:c5:7d:de:08:a8:04: 0b:d9:ba:77:c8:a5:45:36:b4:f1:8f:fe:bb:d1:e8:47:85:12: 07:cd:38:ca:f1:c7:b2:87:ef:35:6f:10:ca:90:e5:a1:31:43: 15:e8:6f:e6:82:db:b7:f4:b5:5c:42:13:5a:12:01:cf:b8:da: bd:3b:8e:77:e8:aa:cc:71:00:94:0b:29:d9:bd:f9:a0:42:ae: e1:26:74:9e:c7:fa:57:57:c9:02:4d:2e:8d:43:1f:91:af:e1: 9f:8d:1e:03:76:56:01:5c:af:a0:f4:cf:13:b9:b3:21:8b:94: a0:36:e5:7e:77:ab:7d:a0:7f:cb:ed:ea:3e:89:81:dc:79:80: 65:55:2c:8f:c8:5f:51:e1:53:e2:d0:83:5d:50:99:5e:a6:8a: 5d:b7:42:05:33:31:09:a3:b5:a2:38:c9:5f:0c:ea:bd:7b:a4: 8e:47:0d:7a:18:d0:7c:ba:e3:03:34:21:b1:f3:13:9c:c2:1a: a0:6a:40:21:53:1b:29:b1:d7:6e:07:66:48:a0:0c:20:c4:5c: 3b:45:30:bc:5e:1c:fb:4e:b1:64:ca:44:6a:2a:35:34:0d:bf: 15:6d:eb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdXvgFVINcH6F2FiFg9shMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwNzI4MTYwMTE2WhcNMjYwNzI5MTYwMTE2WjAzMTEwLwYDVQQD EyhlN2U2YWRmNTNiMzkwOWRmYWFhZjBiMDUwM2MwYzFmOWVmNTkwYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnTKsutQQMH4mK6xmp+S+rekBxla ey38NUDv9PFIBKtowWQk3163IyLHewgRCenY9ueOWxl7RtLC/ulrd2FG9y+jTmFY 4s7x/vQ4k2rq7QIXrpcZJEznoitIie5iu/zcbG270r0y4yzoCuVPFmKz41VMc3q+ pWTVspkn8gffaOZ+0WnjH8MUDZiWcxOwLhKbx0wu9ufKWp3Thfg8lhX4veHuQgQw QYzW83UgLudQD/5vzMl1ewaCTHCyYk+9+weQmjWy6c5MH87oYdZi7PedrbXUK1QT nCgBzzZStepcR2uZlIIcwztIfVkRnU2uIYhEDukQOkUAfLJlZAWbepKKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfmrfU7OQnfqq8LBQPAwfnvWQtgMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+tag+Uh CQwBB2gAIwb/RL2aKbfDmR+1lDPjtvrVxX3eCKgEC9m6d8ilRTa08Y/+u9HoR4US B804yvHHsofvNW8QypDloTFDFehv5oLbt/S1XEITWhIBz7javTuOd+iqzHEAlAsp 2b35oEKu4SZ0nsf6V1fJAk0ujUMfka/hn40eA3ZWAVyvoPTPE7mzIYuUoDblfner faB/y+3qPomB3HmAZVUsj8hfUeFT4tCDXVCZXqaKXbdCBTMxCaO1ojjJXwzqvXuk jkcNehjQfLrjAzQhsfMTnMIaoGpAIVMbKbHXbgdmSKAMIMRcO0UwvF4c+06xZMpE aio1NA2/FW3r2A== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:10 2026 by rpki-client