$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: in69zEzW9Q6n16djJOlyK0Ef6zI/CtJ9vsG1WEudr+Q= Subject key identifier: BF:89:32:76:4E:C1:C7:45:CB:AE:A7:AE:D2:C0:1E:09:8E:57:F1:A6 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019FA9E31B45025A86424F68AA6872616EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 13A1 Signing time: Tue 28 Jul 2026 18:01:00 +0000 Manifest this update: Tue 28 Jul 2026 18:01:00 +0000 Manifest next update: Wed 29 Jul 2026 18:01:00 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 7UfAinTOsvdVYQr7FGgqi506kIh2oqF55fWHWzPFfJs=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e3:1b:45:02:5a:86:42:4f:68:aa:68:72:61:6e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jul 28 18:01:00 2026 GMT Not After : Jul 29 18:01:00 2026 GMT Subject: CN=bf8932764ec1c745cbaea7aed2c01e098e57f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:69:bb:4f:38:89:35:55:f5:66:d8:1e:cd: 39:f6:61:3e:69:c5:04:1f:51:a4:69:f7:b3:1f:93: 69:25:94:55:f9:9b:a9:f6:c0:42:8f:4f:d6:4c:06: f6:fb:c6:17:0e:2a:56:5c:75:95:30:69:53:18:02: 1b:67:a3:52:ba:71:c5:c4:0e:1e:dc:d7:39:7c:5d: ae:71:da:35:ac:27:3c:58:c3:9f:b2:f8:af:e9:98: b2:b0:1d:a3:ad:8a:d1:e5:34:98:12:db:b7:67:c3: f0:13:c5:18:b4:c1:21:6b:b1:23:7a:17:bb:e4:5d: b7:c6:d1:7c:ef:74:c2:6e:e1:45:98:c9:91:2c:aa: 38:5f:ab:09:c1:4f:fc:28:a3:cd:96:cd:82:6a:05: 5e:f1:f8:40:42:8f:08:6c:a7:e7:de:88:dc:07:c0: d8:9a:d1:de:1d:ee:16:15:d1:bc:27:55:f1:f7:9d: ac:3d:3b:c5:3c:3d:b7:d9:a2:6c:ad:7c:ae:a7:fc: 75:9a:b8:fa:71:c4:e5:d3:d2:d1:38:3b:cf:b6:6a: 31:db:39:bf:65:1d:c9:29:c2:1a:8c:8b:9b:6d:ca: 41:5a:18:43:92:5c:b2:b5:f5:61:a9:b7:0a:e4:5f: 1e:f0:31:19:27:b5:21:70:be:59:6e:c8:9a:c4:7e: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:32:76:4E:C1:C7:45:CB:AE:A7:AE:D2:C0:1E:09:8E:57:F1:A6 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0f:99:b2:87:82:d6:9c:b9:59:01:56:bf:9a:c5:9f:26:3f: 61:bd:44:9f:91:ce:74:b7:13:9b:c5:7b:87:6d:91:0d:95:fc: 55:cd:27:b9:aa:41:f5:93:a8:6d:da:5a:3f:5d:28:df:69:b7: 88:01:a5:d0:9d:f8:b6:aa:21:df:ca:6a:91:d8:23:e0:68:01: a3:47:b1:8f:2a:dc:e6:e1:39:d2:42:4a:96:d2:53:89:24:b4: 71:1f:b4:75:00:17:4c:53:17:8e:23:0a:3d:2e:8d:39:8c:e1: e0:ba:51:4a:43:e9:68:71:0c:e8:f7:82:ad:38:fc:5b:a3:2d: 84:6b:b2:b6:67:91:d6:8f:1a:8b:6f:56:f4:0f:19:82:63:a6: ab:16:7b:09:de:47:1c:ee:6d:4b:09:bf:c7:d4:6c:3e:4f:3d: 11:55:ac:1b:43:d2:34:95:d7:5a:f3:f4:bb:4e:80:63:9c:7f: a2:cb:2a:5c:07:61:e8:2b:09:c3:0a:67:0a:aa:92:d5:fb:75: 93:d0:03:f7:a5:d7:f5:c9:99:3a:ab:c6:0e:22:fe:50:a9:cf: 2a:a6:7e:5d:0b:b9:ec:37:dc:98:41:fa:4d:99:e7:ba:9e:de: 30:a2:19:1f:3d:d5:6b:89:34:8d:4e:ce:c4:0f:9e:a3:b6:e0: 52:70:53:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4xtFAlqGQk9oqmhyYW7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNzI4MTgwMTAwWhcNMjYwNzI5MTgwMTAwWjAzMTEwLwYDVQQD EyhiZjg5MzI3NjRlYzFjNzQ1Y2JhZWE3YWVkMmMwMWUwOThlNTdmMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Fpu084iTVV9WbYHs059mE+acUE H1GkafezH5NpJZRV+Zup9sBCj0/WTAb2+8YXDipWXHWVMGlTGAIbZ6NSunHFxA4e 3Nc5fF2ucdo1rCc8WMOfsviv6ZiysB2jrYrR5TSYEtu3Z8PwE8UYtMEha7Ejehe7 5F23xtF873TCbuFFmMmRLKo4X6sJwU/8KKPNls2CagVe8fhAQo8IbKfn3ojcB8DY mtHeHe4WFdG8J1Xx952sPTvFPD232aJsrXyup/x1mrj6ccTl09LRODvPtmox2zm/ ZR3JKcIajIubbcpBWhhDklyytfVhqbcK5F8e8DEZJ7UhcL5ZbsiaxH68KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+JMnZOwcdFy66nrtLAHgmOV/GmMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw+ZsoeC 1py5WQFWv5rFnyY/Yb1En5HOdLcTm8V7h22RDZX8Vc0nuapB9ZOobdpaP10o32m3 iAGl0J34tqoh38pqkdgj4GgBo0exjyrc5uE50kJKltJTiSS0cR+0dQAXTFMXjiMK PS6NOYzh4LpRSkPpaHEM6PeCrTj8W6MthGuytmeR1o8ai29W9A8ZgmOmqxZ7Cd5H HO5tSwm/x9RsPk89EVWsG0PSNJXXWvP0u06AY5x/ossqXAdh6CsJwwpnCqqS1ft1 k9AD96XX9cmZOqvGDiL+UKnPKqZ+XQu57DfcmEH6TZnnup7eMKIZHz3Va4k0jU7O xA+eo7bgUnBT3g== -----END CERTIFICATE-----Generated at Wed Jul 29 02:53:29 2026 by rpki-client