$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: 2rDqD+kWzSe5aT6GpsGEeQNM3tEaMSwtz88HCJyPPBM= Subject key identifier: 01:27:4F:3D:14:BB:64:87:66:FF:71:86:31:1D:19:27:B7:66:6E:AE Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019FA93E72CE9CA0FF765E66178084670384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 13A7 Signing time: Tue 28 Jul 2026 15:01:09 +0000 Manifest this update: Tue 28 Jul 2026 15:01:09 +0000 Manifest next update: Wed 29 Jul 2026 15:01:09 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 6: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 8plh/KHaIcqb+NjUo9pgBeRixm95gWoy0FqCgOcZ+To=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: mnNKxvqyX4ji89R1P4Lrhnun34M.roa (hash: 9zg3oF/RaHPi5XG1qYCPea66H/lTzoUD6Gk79Hpa+OI=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:72:ce:9c:a0:ff:76:5e:66:17:80:84:67:03:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jul 28 15:01:09 2026 GMT Not After : Jul 29 15:01:09 2026 GMT Subject: CN=01274f3d14bb648766ff7186311d1927b7666eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:8b:91:b5:0c:46:25:39:0b:67:7d:b9:43: 10:e6:8f:2f:f0:5f:21:eb:f7:77:61:97:95:47:68: 2a:d1:d3:cf:6c:65:e9:06:71:d1:ba:1a:2e:9b:9a: 26:aa:28:8d:1f:0c:ea:47:8c:68:87:9f:69:c0:61: 89:f0:ca:d3:5c:1f:3d:8f:62:9a:9e:4d:b4:92:ec: d1:31:65:5f:aa:2d:73:37:7a:da:cc:4d:b5:af:71: 03:cb:06:f6:97:df:6b:8b:ef:6f:74:06:0f:8f:a5: cd:49:52:f6:95:2e:d5:92:c1:c8:15:8e:41:34:60: d8:f5:8f:77:92:2c:0d:01:66:b9:3c:bf:1f:d3:4e: 3b:55:fd:96:79:02:56:fd:0b:ca:0e:5e:25:cb:d1: 5c:4d:36:70:78:e7:4b:e4:6a:4e:13:89:fc:a5:24: b2:e9:ad:14:8d:46:67:0a:80:3b:9d:3c:cb:5a:e4: 1b:ea:9c:85:bf:3f:5a:61:20:57:8e:ae:3e:0c:61: 3a:e6:76:80:60:e6:e5:20:bf:35:44:34:fc:bf:a9: 06:20:3f:7e:47:0f:77:2e:a9:b5:2a:90:c3:a1:d1: 59:12:2c:24:e2:ba:a3:41:79:92:d3:56:9b:3b:5a: 02:a1:31:b0:34:00:7f:29:ae:12:8e:f3:56:ce:5e: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:4F:3D:14:BB:64:87:66:FF:71:86:31:1D:19:27:B7:66:6E:AE X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3d:05:09:41:1a:67:17:a4:a2:fb:05:13:c8:b5:ed:e3:7b: 8f:cd:60:84:2e:c0:05:05:b0:5d:af:e2:b6:d6:6f:1d:78:ac: 46:c4:ff:73:bc:de:05:3d:84:9a:b5:b0:be:9c:0b:e0:94:03: 36:4c:93:a5:d2:7d:9a:c9:f0:ff:39:08:4d:7b:1a:c0:91:dc: ed:e3:3d:e3:9a:d6:ad:5c:da:2f:d6:2f:0e:4e:25:02:34:a1: 9b:15:1b:d1:4a:70:d9:86:b8:e5:87:b9:41:06:96:99:30:77: 0f:74:0d:c3:0e:eb:d2:4b:dd:1e:4b:fa:12:f7:8f:c5:f0:a3: 60:72:a7:19:fb:b7:2c:45:dd:73:da:dc:e8:a5:1b:60:fb:8a: 14:21:ce:cc:82:cc:9e:2d:98:6a:70:b0:0e:99:75:fa:cc:24: 0b:28:93:30:56:25:ce:d3:ca:06:32:34:05:31:63:d1:24:39: d7:ae:0e:70:0e:3d:dd:0a:68:e3:7a:7c:94:6e:18:1f:22:c6: 73:01:37:d4:26:ba:c9:e8:e1:b6:54:9b:1f:b9:33:8b:cc:9e: d0:e6:b1:ca:99:08:24:1f:88:a7:06:76:e3:fd:6d:2f:9a:35: 52:f8:bd:20:73:cf:ed:6c:43:67:9d:c4:c7:cc:97:b0:10:bb: 56:f7:5e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPnLOnKD/dl5mF4CEZwOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwNzI4MTUwMTA5WhcNMjYwNzI5MTUwMTA5WjAzMTEwLwYDVQQD EygwMTI3NGYzZDE0YmI2NDg3NjZmZjcxODYzMTFkMTkyN2I3NjY2ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMaLkbUMRiU5C2d9uUMQ5o8v8F8h 6/d3YZeVR2gq0dPPbGXpBnHRuhoum5omqiiNHwzqR4xoh59pwGGJ8MrTXB89j2Ka nk20kuzRMWVfqi1zN3razE21r3EDywb2l99ri+9vdAYPj6XNSVL2lS7VksHIFY5B NGDY9Y93kiwNAWa5PL8f0047Vf2WeQJW/QvKDl4ly9FcTTZweOdL5GpOE4n8pSSy 6a0UjUZnCoA7nTzLWuQb6pyFvz9aYSBXjq4+DGE65naAYOblIL81RDT8v6kGID9+ Rw93Lqm1KpDDodFZEiwk4rqjQXmS01abO1oCoTGwNAB/Ka4SjvNWzl472wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEnTz0Uu2SHZv9xhjEdGSe3Zm6uMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPT0FCUEa ZxekovsFE8i17eN7j81ghC7ABQWwXa/ittZvHXisRsT/c7zeBT2EmrWwvpwL4JQD NkyTpdJ9msnw/zkITXsawJHc7eM945rWrVzaL9YvDk4lAjShmxUb0Upw2Ya45Ye5 QQaWmTB3D3QNww7r0kvdHkv6EvePxfCjYHKnGfu3LEXdc9rc6KUbYPuKFCHOzILM ni2YanCwDpl1+swkCyiTMFYlztPKBjI0BTFj0SQ5164OcA493Qpo43p8lG4YHyLG cwE31Ca6yejhtlSbH7kzi8ye0OaxypkIJB+IpwZ24/1tL5o1Uvi9IHPP7WxDZ53E x8yXsBC7VvdeEQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:54 2026 by rpki-client