$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft File: evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json) Hash identifier: gHMlAEGYViNOBLMn1k3jCCVr/d1bBcovq2jkJf8GNts= Subject key identifier: 4C:17:C4:89:ED:2B:98:80:8D:99:26:62:B5:86:76:E1:B5:DC:26:A9 Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 019FA9AC4160F73224F33150B2AF5046B80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft Manifest number: 0281 Signing time: Tue 28 Jul 2026 17:01:06 +0000 Manifest this update: Tue 28 Jul 2026 17:01:06 +0000 Manifest next update: Wed 29 Jul 2026 17:01:06 +0000 Files and hashes: 1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=) 2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=) 3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=) 4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=) 5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=) 6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=) 7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=) 8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=) 9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: wsJpzoKriymDFcnB0lcOM17xi+pm9lgm9lwhuGCuCOc=) 10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=) 11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:41:60:f7:32:24:f3:31:50:b2:af:50:46:b8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Jul 28 17:01:06 2026 GMT Not After : Jul 29 17:01:06 2026 GMT Subject: CN=4c17c489ed2b98808d992662b58676e1b5dc26a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:8e:2b:ac:9b:58:f0:76:0e:0d:b4:1c:78: 72:13:80:c9:0c:81:5e:b0:cb:8f:87:80:eb:4b:40: bd:d1:6f:cd:f2:e6:18:b4:70:ff:04:cd:98:cb:0a: cf:07:a5:3c:b0:ff:4c:90:33:8c:7a:0e:29:32:bd: fc:37:cc:fd:e2:1d:d9:f8:d5:6c:95:b2:b9:a9:be: e1:81:0a:7d:c6:33:62:8a:5c:2a:12:d5:31:88:a8: 06:75:33:f8:ea:25:ad:9e:52:c3:01:2c:dd:8f:e1: 3f:62:db:73:cf:cd:43:74:09:55:05:71:a3:21:e3: 6c:a6:d6:6d:4b:22:f6:fe:23:e7:c1:1c:06:6e:77: de:31:8e:2d:6b:66:1a:01:0d:8e:e6:c2:3b:98:0f: 27:a9:ee:aa:ae:89:10:5a:56:e4:9f:44:56:51:94: 45:81:3f:bd:01:c6:94:d5:3e:a8:06:1b:85:57:6d: c3:bf:5e:fb:dc:5c:b4:82:5c:cd:c7:35:50:ce:cd: ae:99:67:88:64:68:5b:67:46:a9:b3:5b:40:e8:29: 24:0a:19:b4:44:02:bc:58:7a:80:61:dc:02:46:db: c5:53:06:6e:b8:26:38:32:e3:84:13:63:c6:93:01: 3f:c2:7b:60:b9:c2:45:b0:db:0a:ab:e2:44:a1:d1: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:17:C4:89:ED:2B:98:80:8D:99:26:62:B5:86:76:E1:B5:DC:26:A9 X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:99:a7:f8:c7:aa:0b:cb:39:4d:ef:f1:6a:fd:b2:60:05: 74:6d:8a:09:2d:0b:35:d5:c7:1d:1f:76:99:ca:26:5f:25:5e: 8c:2f:1a:61:9b:67:50:41:24:5a:cd:c8:72:9d:a0:13:6a:26: f4:a4:44:ed:74:68:f1:5a:56:06:ab:bc:d2:18:83:5e:cb:5d: 2d:de:4e:f3:13:5b:a0:53:f1:ce:c5:e4:15:6b:57:57:ea:a6: 28:26:42:47:13:fc:e7:69:c4:54:cc:35:5b:6e:a6:7b:8c:06: 67:c4:5d:15:d5:d4:a9:ca:5d:1d:0f:82:99:49:bd:bc:47:ef: 91:6e:11:45:f6:54:68:fa:48:e0:34:9e:fc:f0:78:5d:ef:3a: 6d:2b:62:39:9e:10:74:34:2c:93:d1:4d:52:e7:42:45:cd:0c: f5:c2:8f:f6:f3:34:ed:2a:9b:e7:29:67:3a:f1:9c:ad:cf:da: 17:6b:e8:e7:06:d7:4a:2a:8f:8d:68:dd:e1:e8:e7:07:02:f1: e3:41:d0:ef:34:83:04:b6:0c:ce:20:bb:3c:7a:16:03:26:7f: 30:d3:0f:b0:58:35:9e:86:48:cc:7c:54:94:f0:00:71:ae:b8: 25:08:64:99:2d:cb:c3:32:74:89:9e:07:5e:6c:95:0f:93:4d: ff:60:ec:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prEFg9zIk8zFQsq9QRrgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjYwNzI4MTcwMTA2WhcNMjYwNzI5MTcwMTA2WjAzMTEwLwYDVQQD Eyg0YzE3YzQ4OWVkMmI5ODgwOGQ5OTI2NjJiNTg2NzZlMWI1ZGMyNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzyOK6ybWPB2Dg20HHhyE4DJDIFe sMuPh4DrS0C90W/N8uYYtHD/BM2YywrPB6U8sP9MkDOMeg4pMr38N8z94h3Z+NVs lbK5qb7hgQp9xjNiilwqEtUxiKgGdTP46iWtnlLDASzdj+E/Yttzz81DdAlVBXGj IeNsptZtSyL2/iPnwRwGbnfeMY4ta2YaAQ2O5sI7mA8nqe6qrokQWlbkn0RWUZRF gT+9AcaU1T6oBhuFV23Dv1773Fy0glzNxzVQzs2umWeIZGhbZ0aps1tA6CkkChm0 RAK8WHqAYdwCRtvFUwZuuCY4MuOEE2PGkwE/wntgucJFsNsKq+JEodFPnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwXxIntK5iAjZkmYrWGduG13CapMB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwmZp/jH qgvLOU3v8Wr9smAFdG2KCS0LNdXHHR92mcomXyVejC8aYZtnUEEkWs3Icp2gE2om 9KRE7XRo8VpWBqu80hiDXstdLd5O8xNboFPxzsXkFWtXV+qmKCZCRxP852nEVMw1 W26me4wGZ8RdFdXUqcpdHQ+CmUm9vEfvkW4RRfZUaPpI4DSe/PB4Xe86bStiOZ4Q dDQsk9FNUudCRc0M9cKP9vM07Sqb5ylnOvGcrc/aF2vo5wbXSiqPjWjd4ejnBwLx 40HQ7zSDBLYMziC7PHoWAyZ/MNMPsFg1noZIzHxUlPAAca64JQhkmS3LwzJ0iZ4H XmyVD5NN/2DsPQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:41:58 2026 by rpki-client