$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: ODOarwNfpNY0tTjn3IqybxeDczcLCdsmtU0mgJVM8Gg= Subject key identifier: CE:6B:14:0F:E2:4B:23:88:22:67:4D:2D:88:F2:F3:9A:AC:65:B6:9B Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019FAA5083C483C6DD7B3E2D638D8D22EC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0CA7 Signing time: Tue 28 Jul 2026 20:00:31 +0000 Manifest this update: Tue 28 Jul 2026 20:00:31 +0000 Manifest next update: Wed 29 Jul 2026 20:00:31 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa (hash: 0Zeu5WbfkcoRWCcChq+NWwrNo0Y/QIR7cp1J9a7juh8=) 8: KWeUe8stEcRBCfK1V9M1OdEhYVo.roa (hash: 5db5SBY8xLjigcej1g8W2J/cv1YnUc8GiiKN3rxcM4Y=) 9: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 10: SY0oaouPknTSy2MmGqSQOcOco4Q.roa (hash: HRxdYO/Iechw+UCcupxpKvFHOwFwn4JRjC6eMfFT/dQ=) 11: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: 9goU/wgzN6/k9SVP/fk5ti3tL5s3ARog4oLSwuluSPk=) 12: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 13: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 14: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 15: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:83:c4:83:c6:dd:7b:3e:2d:63:8d:8d:22:ec:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jul 28 20:00:31 2026 GMT Not After : Jul 29 20:00:31 2026 GMT Subject: CN=ce6b140fe24b238822674d2d88f2f39aac65b69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:76:84:5b:e4:6c:40:9e:03:ef:9b:60:e3: ce:26:61:26:09:f5:7f:8c:aa:53:f1:db:df:0c:72: e0:5b:6d:d3:31:74:62:e0:3a:41:dc:b1:90:09:8f: bd:eb:2d:64:25:e6:d8:69:90:f0:d5:35:cd:7b:a8: c4:2c:a4:e7:fb:9c:34:93:b5:01:8d:47:48:2d:d7: e2:fa:38:33:fc:d1:e9:9b:b1:f2:fa:0b:ba:bf:5a: 60:2f:07:b0:84:73:eb:e1:16:6d:87:d9:db:51:8b: df:be:a5:64:3e:5d:37:d8:cc:99:3a:29:60:fa:51: 3d:3f:8b:6b:98:d3:9e:00:2f:af:89:54:3d:85:c8: 23:5e:cb:41:bb:c2:1c:c0:8a:1f:c3:80:0f:79:3e: 56:ab:36:08:63:53:e7:5f:88:05:a6:24:fc:bb:1e: d1:0c:48:ff:fa:73:76:fb:6f:7d:a8:2f:a1:82:c3: 7a:63:6d:82:db:6a:c3:73:4a:14:90:26:94:af:8c: ef:ef:0b:a4:a1:62:2b:b3:5c:87:1f:07:10:45:0f: cf:94:a9:1f:21:05:9e:a0:e1:7e:ec:01:62:b6:60: bf:88:10:48:44:84:85:f2:ed:e8:2e:84:80:b1:4e: 32:83:20:74:c0:73:9a:b0:14:86:56:91:85:56:5e: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:14:0F:E2:4B:23:88:22:67:4D:2D:88:F2:F3:9A:AC:65:B6:9B X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b0:b7:85:c3:f2:fe:d0:65:0a:0f:54:f9:64:59:29:0c:34: e4:40:0c:b5:fb:6e:03:09:e4:d8:4f:4b:5e:77:3a:ca:68:b7: e0:af:bd:a7:bc:03:2f:87:75:3f:80:90:40:d4:39:5c:80:14: 67:df:83:e6:c4:a3:23:59:cd:fd:80:38:80:7a:05:94:d8:c1: 7a:8e:3d:21:38:4b:0f:50:7f:a8:2d:1b:de:04:94:23:31:d6: 9a:cf:fa:b7:3d:e7:7c:47:b8:ed:92:9f:6c:02:87:e9:3c:38: 71:c1:5f:1c:4c:23:d6:08:40:67:6a:19:ef:ed:90:5c:53:a6: d9:6a:a2:e6:6c:82:72:27:f7:66:5b:2e:a1:a9:d3:37:8c:4a: 50:3a:26:8a:71:5f:15:bf:0a:3f:5c:97:c7:16:40:a8:da:12: fa:c4:c2:75:0d:74:73:80:6c:bc:fb:f9:0e:b8:14:74:52:d7: 18:ee:12:6c:1f:b7:8b:6c:13:3a:46:bf:ab:bb:f0:42:b8:b5: 0b:7b:68:2d:82:c5:37:80:f2:6c:f9:81:41:49:40:e5:2a:3c: c2:9a:9b:1f:4a:f3:83:a6:54:a5:03:ac:b1:7f:8c:df:cc:5c: e1:c8:2c:0d:18:17:e9:63:b1:3c:23:cd:17:83:04:22:48:7f: 83:d1:06:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUIPEg8bdez4tY42NIuyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwNzI4MjAwMDMxWhcNMjYwNzI5MjAwMDMxWjAzMTEwLwYDVQQD EyhjZTZiMTQwZmUyNGIyMzg4MjI2NzRkMmQ4OGYyZjM5YWFjNjViNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFV2hFvkbECeA++bYOPOJmEmCfV/ jKpT8dvfDHLgW23TMXRi4DpB3LGQCY+96y1kJebYaZDw1TXNe6jELKTn+5w0k7UB jUdILdfi+jgz/NHpm7Hy+gu6v1pgLwewhHPr4RZth9nbUYvfvqVkPl032MyZOilg +lE9P4trmNOeAC+viVQ9hcgjXstBu8IcwIofw4APeT5WqzYIY1PnX4gFpiT8ux7R DEj/+nN2+299qC+hgsN6Y22C22rDc0oUkCaUr4zv7wukoWIrs1yHHwcQRQ/PlKkf IQWeoOF+7AFitmC/iBBIRISF8u3oLoSAsU4ygyB0wHOasBSGVpGFVl6brwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5rFA/iSyOIImdNLYjy85qsZbabMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7C3hcPy /tBlCg9U+WRZKQw05EAMtftuAwnk2E9LXnc6ymi34K+9p7wDL4d1P4CQQNQ5XIAU Z9+D5sSjI1nN/YA4gHoFlNjBeo49IThLD1B/qC0b3gSUIzHWms/6tz3nfEe47ZKf bAKH6Tw4ccFfHEwj1ghAZ2oZ7+2QXFOm2Wqi5myCcif3ZlsuoanTN4xKUDominFf Fb8KP1yXxxZAqNoS+sTCdQ10c4BsvPv5DrgUdFLXGO4SbB+3i2wTOka/q7vwQri1 C3toLYLFN4DybPmBQUlA5So8wpqbH0rzg6ZUpQOssX+M38xc4cgsDRgX6WOxPCPN F4MEIkh/g9EGMA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:08 2026 by rpki-client