$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: rB8RB1mx622g75oGzoUvdxAgPKirsgs/BcDP+c6cSWc= Subject key identifier: 05:2E:C8:F0:C0:6A:A4:11:02:DE:38:2C:E9:23:26:BD:08:74:44:6C Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019FA899B531321AAA393FC2A07090387DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1AE7 Signing time: Tue 28 Jul 2026 12:01:13 +0000 Manifest this update: Tue 28 Jul 2026 12:01:13 +0000 Manifest next update: Wed 29 Jul 2026 12:01:13 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: gBQwm1MXiP7w67WvdlLDZ6CS37cwGauYxveuQ2XWhl4=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:b5:31:32:1a:aa:39:3f:c2:a0:70:90:38:7d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jul 28 12:01:13 2026 GMT Not After : Jul 29 12:01:13 2026 GMT Subject: CN=052ec8f0c06aa41102de382ce92326bd0874446c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:42:3b:63:3a:36:8e:a6:60:84:f0:58:51: a2:06:2f:ed:b6:d5:36:61:43:0a:15:31:f0:33:80: 9b:b1:55:3d:0d:a9:8d:53:b9:6b:57:33:e0:02:46: ff:8d:b5:18:6d:5b:84:3f:a0:8f:34:f6:f1:6f:33: 8e:eb:6a:0d:01:95:09:5b:eb:0a:6a:ab:e9:90:30: bd:e9:ad:f7:e1:f8:be:0c:2a:7a:a4:3f:82:63:71: 43:51:84:fa:3e:33:2f:c1:a6:f4:ca:e1:d1:84:37: a4:bf:a8:dc:a4:15:41:70:7b:81:a5:5e:c5:8e:8c: 68:e4:c7:32:c1:a6:76:d0:ae:e4:9d:e7:1b:cf:a0: 5e:d8:55:59:08:47:54:ff:78:2d:75:d1:47:d7:ab: cf:f5:48:e9:04:81:48:1e:84:ec:71:7e:26:a5:d8: 4c:f3:f5:91:96:71:5a:83:ab:bc:19:1f:5a:a1:25: 8f:94:b9:ee:1c:d1:44:4e:0d:65:ec:2f:22:c4:41: c2:37:bc:72:4d:c3:ab:61:38:54:00:85:89:7b:27: 65:e9:fc:78:c4:6e:50:90:4e:05:ac:79:fa:74:62: 1f:7f:2f:dd:3a:f3:7f:6e:fd:e2:f6:b6:6e:32:ea: 68:43:17:24:0b:32:3c:89:ef:5a:4c:a7:d0:da:ed: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:C8:F0:C0:6A:A4:11:02:DE:38:2C:E9:23:26:BD:08:74:44:6C X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fc:19:4a:47:3f:19:83:3e:8a:ed:75:c8:36:c4:6b:36:9b: 4b:a2:3a:6a:5f:82:b1:87:36:e9:cb:71:e5:e5:2a:43:c6:17: cf:15:e1:0f:8a:52:c3:b4:02:ed:9d:5c:12:9e:5a:b5:8d:32: db:dc:d8:e0:1e:e6:38:d0:84:cd:65:17:0e:c1:29:cc:b5:50: 6a:8a:b0:ff:a4:ae:99:82:28:bd:90:f9:d8:11:b3:93:c9:90: f2:c0:d2:99:07:19:47:2b:84:a9:cc:63:93:99:84:41:42:91: 2f:d2:46:c2:ca:4b:74:e6:ff:e0:6f:85:b3:23:b1:59:96:1d: c4:6c:50:d3:0b:f6:c1:64:73:d7:cb:3a:31:88:6c:82:79:97: 83:a0:00:13:2f:c7:ca:18:80:2a:39:a0:ab:bf:a0:43:1d:ca: 90:37:e5:11:bf:d3:7f:bb:f9:d8:a6:ae:4e:07:fe:83:5f:21: d2:d3:f5:bb:13:f2:16:78:85:18:c0:b9:db:a7:64:d8:7c:11: 26:53:19:68:cb:8d:7f:12:03:af:68:ed:de:b7:14:78:7c:b1: fd:e7:ef:73:60:77:21:ca:b8:25:29:c8:20:98:25:47:3e:b6: be:85:83:e2:c9:d3:ec:f0:83:ab:d7:8f:a0:f3:dd:70:ff:30: c3:ed:6a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ombUxMhqqOT/CoHCQOH3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNzI4MTIwMTEzWhcNMjYwNzI5MTIwMTEzWjAzMTEwLwYDVQQD EygwNTJlYzhmMGMwNmFhNDExMDJkZTM4MmNlOTIzMjZiZDA4NzQ0NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAostCO2M6No6mYITwWFGiBi/tttU2 YUMKFTHwM4CbsVU9DamNU7lrVzPgAkb/jbUYbVuEP6CPNPbxbzOO62oNAZUJW+sK aqvpkDC96a334fi+DCp6pD+CY3FDUYT6PjMvwab0yuHRhDekv6jcpBVBcHuBpV7F joxo5McywaZ20K7knecbz6Be2FVZCEdU/3gtddFH16vP9UjpBIFIHoTscX4mpdhM 8/WRlnFag6u8GR9aoSWPlLnuHNFETg1l7C8ixEHCN7xyTcOrYThUAIWJeydl6fx4 xG5QkE4FrHn6dGIffy/dOvN/bv3i9rZuMupoQxckCzI8ie9aTKfQ2u25jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUuyPDAaqQRAt44LOkjJr0IdERsMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavwZSkc/ GYM+iu11yDbEazabS6I6al+CsYc26ctx5eUqQ8YXzxXhD4pSw7QC7Z1cEp5atY0y 29zY4B7mONCEzWUXDsEpzLVQaoqw/6SumYIovZD52BGzk8mQ8sDSmQcZRyuEqcxj k5mEQUKRL9JGwspLdOb/4G+FsyOxWZYdxGxQ0wv2wWRz18s6MYhsgnmXg6AAEy/H yhiAKjmgq7+gQx3KkDflEb/Tf7v52KauTgf+g18h0tP1uxPyFniFGMC526dk2HwR JlMZaMuNfxIDr2jt3rcUeHyx/efvc2B3Icq4JSnIIJglRz62voWD4snT7PCDq9eP oPPdcP8ww+1qvw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:35:57 2026 by rpki-client