$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: igkw6/TX7MRxsa2DDpHzOUmewmD0PO3u4ZaTolE5NvA= Subject key identifier: BD:CD:BB:2F:2D:78:86:ED:A1:85:B6:E6:A8:06:F9:E2:7E:AC:BC:CE Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019FAAF58675C062DDD6F8727DF07B3E6CD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1A19 Signing time: Tue 28 Jul 2026 23:00:45 +0000 Manifest this update: Tue 28 Jul 2026 23:00:45 +0000 Manifest next update: Wed 29 Jul 2026 23:00:45 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: Mm8mIzQ4fU5YG76bNt57RfIi30ue6mOz14jxuCp5oCM=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: jOWVYK7gkC0LkmTchBPKIshY1wg.roa (hash: GtMSCed+k6Ff9NDCC09DG2TdmxdSLzC8T5DFgatfys0=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:86:75:c0:62:dd:d6:f8:72:7d:f0:7b:3e:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jul 28 23:00:45 2026 GMT Not After : Jul 29 23:00:45 2026 GMT Subject: CN=bdcdbb2f2d7886eda185b6e6a806f9e27eacbcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:5d:91:04:fb:94:2e:c0:42:de:0c:cd:86: bb:dd:5f:7b:ed:1a:d6:6a:b7:a1:c0:51:62:85:fb: 6b:45:b0:5a:f7:c3:4f:5f:72:36:c8:f9:da:ce:ec: 62:d4:4c:4c:ad:66:fa:43:6f:18:a2:a6:f6:bd:d5: 16:2f:48:a0:8f:2a:8d:d9:15:b2:69:b7:04:5a:5b: 1b:06:45:af:f5:07:e5:b8:0e:43:19:c3:12:a4:47: 3c:05:70:f8:5a:f1:f9:92:62:5f:44:ab:87:c5:b5: b8:16:62:67:8e:15:e3:b0:37:7c:a5:5b:bd:53:4d: 15:aa:00:25:e5:e8:84:82:ff:35:6a:19:57:e7:7e: 1b:2c:0f:55:d6:f5:bc:6f:ba:4d:53:24:9a:5e:0d: 3b:8e:81:f0:7f:a2:cb:b9:ff:d9:f8:80:38:d3:09: a6:36:4f:5d:53:46:ab:3e:e1:4d:25:52:50:04:4d: be:7b:ca:14:9f:26:f5:73:50:b1:f4:29:86:ad:0f: c9:d0:ef:6a:33:65:f2:ea:46:ea:f1:54:c9:9c:5b: c2:bf:eb:79:b1:95:0c:21:90:59:f1:fa:1f:10:78: c9:24:ba:93:ea:db:e2:39:d2:f3:83:82:8c:02:70: 25:c5:ac:17:95:02:d6:04:e7:42:61:d2:cb:f4:93: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CD:BB:2F:2D:78:86:ED:A1:85:B6:E6:A8:06:F9:E2:7E:AC:BC:CE X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b1:fa:21:ac:02:c4:71:98:f2:6e:50:0c:8a:c4:5e:0f:16: 5a:77:42:8c:76:6d:41:9c:d3:dd:60:ac:17:a4:15:f3:21:80: 6c:f0:5a:3d:de:f5:98:a7:77:e4:49:df:34:44:6a:e4:cd:d7: 4f:4d:e1:f7:bd:ec:7f:e5:81:8f:c8:c8:f5:29:e5:6a:43:34: 21:33:57:16:36:1f:ff:0f:95:80:f2:58:7f:25:80:23:51:88: e9:ed:8d:5b:f9:c3:37:70:0a:27:73:cd:d4:9d:7e:20:79:a4: 52:06:dd:81:4a:07:92:13:f4:f7:a8:df:b0:97:d1:69:01:b3: 12:c8:36:2e:da:a0:ef:d3:d1:db:e0:f7:8d:61:4a:bc:13:ca: 68:73:51:8c:30:70:23:f0:8c:74:f9:55:9c:f5:1d:9b:7a:a0: b2:bd:b9:7c:1e:f8:b2:e2:f3:e8:25:94:98:72:09:3f:fc:a0: 5a:a6:d0:6c:4c:e8:bf:71:c5:fe:76:db:3e:2c:0c:98:b5:f1: 89:e1:bd:29:8b:ce:f3:87:73:a0:99:12:38:26:ce:45:eb:85: b2:da:75:7b:55:e3:3e:55:8b:2b:2c:db:19:82:68:a2:d0:78: 39:57:36:4e:8b:69:1e:16:4c:d1:13:39:4b:4b:ed:dd:b7:42: 42:ee:fc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9YZ1wGLd1vhyffB7PmzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwNzI4MjMwMDQ1WhcNMjYwNzI5MjMwMDQ1WjAzMTEwLwYDVQQD EyhiZGNkYmIyZjJkNzg4NmVkYTE4NWI2ZTZhODA2ZjllMjdlYWNiY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtdkQT7lC7AQt4MzYa73V977RrW arehwFFihftrRbBa98NPX3I2yPnazuxi1ExMrWb6Q28Yoqb2vdUWL0igjyqN2RWy abcEWlsbBkWv9QfluA5DGcMSpEc8BXD4WvH5kmJfRKuHxbW4FmJnjhXjsDd8pVu9 U00VqgAl5eiEgv81ahlX534bLA9V1vW8b7pNUySaXg07joHwf6LLuf/Z+IA40wmm Nk9dU0arPuFNJVJQBE2+e8oUnyb1c1Cx9CmGrQ/J0O9qM2Xy6kbq8VTJnFvCv+t5 sZUMIZBZ8fofEHjJJLqT6tviOdLzg4KMAnAlxawXlQLWBOdCYdLL9JMlhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3Nuy8teIbtoYW25qgG+eJ+rLzOMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7H6IawC xHGY8m5QDIrEXg8WWndCjHZtQZzT3WCsF6QV8yGAbPBaPd71mKd35EnfNERq5M3X T03h973sf+WBj8jI9SnlakM0ITNXFjYf/w+VgPJYfyWAI1GI6e2NW/nDN3AKJ3PN 1J1+IHmkUgbdgUoHkhP096jfsJfRaQGzEsg2Ltqg79PR2+D3jWFKvBPKaHNRjDBw I/CMdPlVnPUdm3qgsr25fB74suLz6CWUmHIJP/ygWqbQbEzov3HF/nbbPiwMmLXx ieG9KYvO84dzoJkSOCbOReuFstp1e1XjPlWLKyzbGYJootB4OVc2TotpHhZM0RM5 S0vt3bdCQu78Mg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:57:20 2026 by rpki-client