$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: M4HatMMKisxDo5zApLmPhE9prO8XtT8LqkgIclcf2bA= Subject key identifier: 77:80:8C:8B:93:66:49:70:3E:53:06:A1:49:0A:D3:06:9F:E8:78:7E Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019FA93E6F4342560314BFB654D49506E676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1587 Signing time: Tue 28 Jul 2026 15:01:08 +0000 Manifest this update: Tue 28 Jul 2026 15:01:08 +0000 Manifest next update: Wed 29 Jul 2026 15:01:08 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: F0n9SXt6j3F/sLnKWGHktI+teGnQq/xTpqbRSuWNAD4=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:6f:43:42:56:03:14:bf:b6:54:d4:95:06:e6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jul 28 15:01:08 2026 GMT Not After : Jul 29 15:01:08 2026 GMT Subject: CN=77808c8b936649703e5306a1490ad3069fe8787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:76:41:2a:f3:be:77:c4:f6:88:1b:8a:77: f7:aa:0a:63:70:ff:f2:3d:7f:3c:26:1f:0b:84:00: c9:8d:5d:14:ff:9c:c9:9e:59:07:3d:6f:35:cf:22: 19:17:fd:1e:57:c8:e5:cb:dd:44:4c:46:da:c7:50: 14:20:7e:fa:d4:9d:64:7c:eb:7b:ae:33:33:d8:81: 16:d0:e4:f7:0e:bc:9d:00:83:b8:9d:cf:ab:2f:cc: c5:76:b5:ae:92:4d:e9:a2:a4:72:85:69:4b:e3:54: 3f:5d:35:b8:bf:fa:ec:5b:70:e3:8c:6f:56:1f:76: 52:e6:ad:c7:ac:a9:cf:df:9b:9e:21:51:49:36:bc: a2:f5:76:98:cb:67:88:14:96:d9:7d:14:06:5c:2e: 86:42:9d:8e:e9:57:bf:71:cd:be:f5:f3:57:7c:69: f4:84:19:b3:72:00:ea:6f:12:ed:f3:3b:b4:d1:e9: 24:70:25:95:b6:2c:7f:9f:ef:be:40:e8:1a:e5:3d: b8:a6:08:7d:16:83:26:4e:82:8d:5e:d3:ca:ab:1f: 20:99:29:8b:8e:0a:ca:1f:48:09:c3:7a:c7:71:08: 81:9b:79:1e:7d:06:f1:3b:83:18:dc:97:39:af:e5: b9:85:85:91:0d:6c:14:17:2c:3b:74:6f:e4:56:c4: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:80:8C:8B:93:66:49:70:3E:53:06:A1:49:0A:D3:06:9F:E8:78:7E X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8a:9f:d5:9e:a4:12:eb:ba:87:7a:7a:75:04:54:ac:e8:d0: bb:ab:0e:bf:a8:23:fb:fb:9a:49:61:d5:b6:87:91:c2:8f:a9: c8:d2:41:ac:7d:56:b0:75:a0:ab:5b:86:a1:a4:9e:30:8c:03: 51:db:e0:8d:09:70:4e:bf:2c:9c:0e:d4:2b:f9:63:e5:d8:62: 0f:74:c6:81:5f:3e:ec:19:bc:00:00:a3:46:57:ce:58:6c:fe: 76:3b:55:e0:f2:5c:2b:3a:63:13:75:d6:32:6a:0f:ac:54:71: 21:8d:44:2d:05:f8:a3:50:31:34:25:92:a2:63:a2:3d:40:ce: 1e:0c:f3:03:a0:c4:5c:7b:fd:ec:24:7e:2b:34:ca:db:ec:20: a7:2a:4e:74:20:ca:e8:62:36:f6:ea:94:a3:df:46:66:6d:d8: 13:ad:2b:8f:07:12:49:1d:c3:2d:ca:5e:2d:76:71:8a:e0:77: a4:ae:e3:44:e0:74:53:5d:8e:39:a4:ab:12:1b:c1:6d:6b:79: f0:d9:61:8e:f8:c4:6b:1c:03:97:aa:69:06:c5:73:e7:48:ac: 11:9a:c1:59:05:d9:a1:bf:fc:af:c5:37:df:70:ef:3f:21:bb: c6:54:34:86:d9:54:a2:dd:30:9a:a2:a6:10:5c:b2:29:33:d1: 89:02:3d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPm9DQlYDFL+2VNSVBuZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwNzI4MTUwMTA4WhcNMjYwNzI5MTUwMTA4WjAzMTEwLwYDVQQD Eyg3NzgwOGM4YjkzNjY0OTcwM2U1MzA2YTE0OTBhZDMwNjlmZTg3ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJ2QSrzvnfE9ogbinf3qgpjcP/y PX88Jh8LhADJjV0U/5zJnlkHPW81zyIZF/0eV8jly91ETEbax1AUIH761J1kfOt7 rjMz2IEW0OT3DrydAIO4nc+rL8zFdrWukk3poqRyhWlL41Q/XTW4v/rsW3DjjG9W H3ZS5q3HrKnP35ueIVFJNryi9XaYy2eIFJbZfRQGXC6GQp2O6Ve/cc2+9fNXfGn0 hBmzcgDqbxLt8zu00ekkcCWVtix/n+++QOga5T24pgh9FoMmToKNXtPKqx8gmSmL jgrKH0gJw3rHcQiBm3kefQbxO4MY3Jc5r+W5hYWRDWwUFyw7dG/kVsQhKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeAjIuTZklwPlMGoUkK0waf6Hh+MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIqf1Z6k Euu6h3p6dQRUrOjQu6sOv6gj+/uaSWHVtoeRwo+pyNJBrH1WsHWgq1uGoaSeMIwD UdvgjQlwTr8snA7UK/lj5dhiD3TGgV8+7Bm8AACjRlfOWGz+djtV4PJcKzpjE3XW MmoPrFRxIY1ELQX4o1AxNCWSomOiPUDOHgzzA6DEXHv97CR+KzTK2+wgpypOdCDK 6GI29uqUo99GZm3YE60rjwcSSR3DLcpeLXZxiuB3pK7jROB0U12OOaSrEhvBbWt5 8NlhjvjEaxwDl6ppBsVz50isEZrBWQXZob/8r8U333DvPyG7xlQ0htlUot0wmqKm EFyyKTPRiQI96w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:38:22 2026 by rpki-client