$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: ZRU7gpCqi/WUfB03Y+Dwryzt+IqtmWgkm4IxOUKrnYk= Subject key identifier: C1:E3:55:A2:3A:89:30:A0:D9:76:68:96:32:03:0B:C6:0B:3B:36:B7 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019FAB6335130F8FDE207E8871B369E1E164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1A5C Signing time: Wed 29 Jul 2026 01:00:33 +0000 Manifest this update: Wed 29 Jul 2026 01:00:33 +0000 Manifest next update: Thu 30 Jul 2026 01:00:33 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: 95KAgD+9Nja3HK2hhNuwBXIsN1eE8F+w60CAInfk4rQ=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: pvvItYaD0BkPMVYmwXbvL-utTRQ.roa (hash: O8ehVuL3rG3e1+vU9AU1AJ7dONUierORB47r4BxJ0l8=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:63:35:13:0f:8f:de:20:7e:88:71:b3:69:e1:e1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jul 29 01:00:33 2026 GMT Not After : Jul 30 01:00:33 2026 GMT Subject: CN=c1e355a23a8930a0d976689632030bc60b3b36b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:a4:cf:7a:5e:04:53:41:7d:47:04:e4:54: eb:8c:28:9c:4c:fa:9e:e6:0e:09:8c:66:1b:c9:31: e9:ce:bf:ec:40:9b:5c:96:05:a0:1f:c2:42:e4:0b: d5:4a:00:20:d7:33:7b:58:38:5b:fa:22:da:f9:ba: a2:ea:96:30:28:44:b5:f6:e8:ca:e3:33:0d:de:66: 20:79:61:7f:98:68:e3:47:9a:94:3b:18:e5:2f:3c: 13:9f:60:f5:b4:3d:50:64:8d:23:4b:f5:0c:07:89: 95:c3:7c:e0:d2:5d:1a:b8:fe:c8:34:b0:ae:80:70: d4:7c:90:49:81:b3:18:f4:75:3e:47:77:06:a0:05: 75:fb:5a:d9:f1:a5:52:bc:3b:16:73:93:38:a1:98: 51:60:e1:85:74:8e:f9:f6:7c:a5:18:a4:48:3d:8f: 46:ee:46:bc:35:41:93:a3:c3:39:e4:1f:fc:37:b4: ce:ec:ea:9e:b4:2b:b7:1e:6a:69:bb:60:7a:57:3b: 18:a0:c8:77:e5:35:47:f3:82:24:48:da:b4:34:18: f1:7e:bb:10:31:86:ce:13:f3:c7:03:b5:dd:f3:fa: ea:1f:9c:f6:21:e1:f6:50:6a:28:46:b9:c6:84:4d: 86:8f:74:f2:60:14:80:94:45:fd:b2:68:4e:a6:a2: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:55:A2:3A:89:30:A0:D9:76:68:96:32:03:0B:C6:0B:3B:36:B7 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:d6:80:da:df:ce:39:ad:f0:30:78:00:a9:a8:0b:a9:73: cf:ae:17:ce:f7:c1:ad:f6:88:d2:99:c1:71:fa:ff:19:8f:a8: 21:e7:72:ef:9a:f1:54:70:eb:87:d4:90:60:c8:ca:f5:78:d8: a9:b5:c4:4e:bb:2b:bd:5d:9f:15:75:22:83:c1:0e:ab:b8:be: 6d:25:06:1d:78:43:1e:78:a9:64:f3:8c:dd:65:91:6c:73:d5: 28:bc:51:4c:74:14:0f:08:0c:44:9d:1b:10:02:dc:85:df:20: 75:31:35:96:17:13:eb:03:6f:53:60:19:e5:df:8e:1f:da:d2: 0c:83:e3:4f:a2:50:3f:d6:c3:f4:04:88:fe:05:d2:11:2a:f3: 1f:6f:e4:9f:6e:eb:35:7c:9f:a2:cf:12:0a:22:08:ee:9c:a9: f1:e7:c9:de:33:81:05:79:4f:37:54:f2:a7:e3:86:3b:dd:73: 90:2c:5e:4c:0b:73:ab:82:65:80:d3:de:1f:61:9d:2e:8b:f5: 61:a7:01:b2:bf:1b:54:b3:a6:32:94:a2:43:9e:74:b4:15:0d: 33:af:0b:40:98:e3:6f:7b:78:06:cc:ca:9e:f3:07:4d:ca:8c: 3b:22:8c:70:12:d3:26:d2:63:fe:1f:39:32:c9:eb:b2:30:60: 2a:ec:28:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rYzUTD4/eIH6IcbNp4eFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwNzI5MDEwMDMzWhcNMjYwNzMwMDEwMDMzWjAzMTEwLwYDVQQD EyhjMWUzNTVhMjNhODkzMGEwZDk3NjY4OTYzMjAzMGJjNjBiM2IzNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9mkz3peBFNBfUcE5FTrjCicTPqe 5g4JjGYbyTHpzr/sQJtclgWgH8JC5AvVSgAg1zN7WDhb+iLa+bqi6pYwKES19ujK 4zMN3mYgeWF/mGjjR5qUOxjlLzwTn2D1tD1QZI0jS/UMB4mVw3zg0l0auP7INLCu gHDUfJBJgbMY9HU+R3cGoAV1+1rZ8aVSvDsWc5M4oZhRYOGFdI759nylGKRIPY9G 7ka8NUGTo8M55B/8N7TO7OqetCu3Hmppu2B6VzsYoMh35TVH84IkSNq0NBjxfrsQ MYbOE/PHA7Xd8/rqH5z2IeH2UGooRrnGhE2Gj3TyYBSAlEX9smhOpqK4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHjVaI6iTCg2XZoljIDC8YLOza3MB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjePWgNrf zjmt8DB4AKmoC6lzz64XzvfBrfaI0pnBcfr/GY+oIedy75rxVHDrh9SQYMjK9XjY qbXETrsrvV2fFXUig8EOq7i+bSUGHXhDHnipZPOM3WWRbHPVKLxRTHQUDwgMRJ0b EALchd8gdTE1lhcT6wNvU2AZ5d+OH9rSDIPjT6JQP9bD9ASI/gXSESrzH2/kn27r NXyfos8SCiII7pyp8efJ3jOBBXlPN1Typ+OGO91zkCxeTAtzq4JlgNPeH2GdLov1 YacBsr8bVLOmMpSiQ550tBUNM68LQJjjb3t4BszKnvMHTcqMOyKMcBLTJtJj/h85 MsnrsjBgKuwoRg== -----END CERTIFICATE-----Generated at Wed Jul 29 04:25:05 2026 by rpki-client