$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: IxE/cbj/Jb3+nkt2LlJf5HRf32IzlNM2LgU1rTanV2Y= Subject key identifier: 88:EE:F9:86:1F:BA:5C:DC:5E:5A:A8:C9:CE:30:D3:24:FC:EF:E7:BA Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019FAAF52D7C56FCE6C673300203D78E5DB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 19E0 Signing time: Tue 28 Jul 2026 23:00:22 +0000 Manifest this update: Tue 28 Jul 2026 23:00:22 +0000 Manifest next update: Wed 29 Jul 2026 23:00:22 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: sx+N0jX0e8p2ehWBbHVzGV+tQOnDSIk8yukWGtY3bTQ=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:2d:7c:56:fc:e6:c6:73:30:02:03:d7:8e:5d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jul 28 23:00:22 2026 GMT Not After : Jul 29 23:00:22 2026 GMT Subject: CN=88eef9861fba5cdc5e5aa8c9ce30d324fcefe7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:70:95:b4:eb:d7:17:98:cc:dd:9e:4c:07: 43:97:a7:15:03:a4:65:cc:ff:d4:c5:a1:9f:3e:5a: 9a:a0:ba:43:0a:5d:8a:60:73:7c:91:4c:15:92:0d: b5:b2:b6:32:e6:16:f2:69:35:62:1d:d8:af:bc:29: 01:fe:87:b0:d0:7e:07:8a:5d:c2:d4:1d:21:db:28: 39:8f:e5:82:de:9b:fe:7d:9c:4b:b1:72:34:d6:9e: 90:c8:a3:18:8b:55:a1:09:5f:b5:52:07:d9:99:27: 19:64:ec:e0:15:eb:59:69:03:7a:c2:9b:af:d3:2d: 7d:b5:b4:96:4b:21:93:da:cd:73:9f:8f:a4:d9:9a: b9:24:2a:5d:c5:b2:64:3d:e9:35:96:22:d1:6d:c7: c6:68:d8:80:8d:a9:f1:c4:73:16:a1:1c:b1:4e:f8: 4d:07:2e:65:59:23:2c:2b:fd:f1:0f:59:93:b3:d2: d2:8a:dd:92:3c:bf:2c:68:97:9b:c0:73:bc:22:0a: d9:3d:79:be:f3:77:8f:e9:74:7e:f8:24:6b:f5:c1: 90:c3:1e:e9:d7:26:8d:81:70:28:2c:95:e6:ce:4a: 23:ae:7b:48:3c:e1:cd:aa:39:ff:63:41:7e:05:24: 9d:87:98:be:05:cc:df:4f:ea:0d:06:50:69:b7:33: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EE:F9:86:1F:BA:5C:DC:5E:5A:A8:C9:CE:30:D3:24:FC:EF:E7:BA X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:90:de:16:50:7c:57:94:73:72:a4:01:28:28:c2:ba:2b:d5: 87:d1:95:8c:25:76:13:81:23:b2:e9:ee:70:ea:cd:60:d8:8f: 69:37:e9:13:f9:24:c3:a9:27:48:df:28:2c:3f:8a:c5:0e:a6: c4:17:ef:ed:0b:a2:e4:0e:ef:99:1f:66:bf:a7:f0:ee:f1:87: 3b:66:99:4d:df:39:de:c4:ad:0f:b3:db:ac:c5:88:db:c2:2b: 72:1a:7b:87:d6:b7:87:19:1d:31:ef:bb:aa:ad:2e:12:b2:6f: c5:14:e8:c0:d8:44:58:d3:bb:f0:53:33:a1:b5:f4:d7:35:67: f8:e4:59:17:e5:8a:02:c1:1c:7d:35:9e:9e:eb:c5:84:a3:75: 45:89:61:61:ed:e7:16:18:5a:53:e2:c3:50:51:a5:9a:5d:12: 25:c3:44:a1:53:75:1c:ef:99:c0:1d:42:62:c3:0e:a3:ed:ba: 39:59:ec:d1:bb:49:2c:fd:20:7e:d1:1f:8b:a5:a2:4c:79:a7: 48:0b:fe:18:d5:30:6f:09:e1:28:45:71:c5:81:75:1d:af:73: 29:44:56:09:10:6b:85:ea:e2:ce:30:a7:2c:cb:f5:69:e0:75: 2a:17:59:9b:33:39:7b:fc:b4:97:5c:df:43:79:09:6a:29:25: fd:f8:bb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9S18VvzmxnMwAgPXjl22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwNzI4MjMwMDIyWhcNMjYwNzI5MjMwMDIyWjAzMTEwLwYDVQQD Eyg4OGVlZjk4NjFmYmE1Y2RjNWU1YWE4YzljZTMwZDMyNGZjZWZlN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoBwlbTr1xeYzN2eTAdDl6cVA6Rl zP/UxaGfPlqaoLpDCl2KYHN8kUwVkg21srYy5hbyaTViHdivvCkB/oew0H4Hil3C 1B0h2yg5j+WC3pv+fZxLsXI01p6QyKMYi1WhCV+1UgfZmScZZOzgFetZaQN6wpuv 0y19tbSWSyGT2s1zn4+k2Zq5JCpdxbJkPek1liLRbcfGaNiAjanxxHMWoRyxTvhN By5lWSMsK/3xD1mTs9LSit2SPL8saJebwHO8IgrZPXm+83eP6XR++CRr9cGQwx7p 1yaNgXAoLJXmzkojrntIPOHNqjn/Y0F+BSSdh5i+BczfT+oNBlBptzOyAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIju+YYfulzcXlqoyc4w0yT87+e6MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5DeFlB8 V5RzcqQBKCjCuivVh9GVjCV2E4EjsunucOrNYNiPaTfpE/kkw6knSN8oLD+KxQ6m xBfv7Qui5A7vmR9mv6fw7vGHO2aZTd853sStD7PbrMWI28Irchp7h9a3hxkdMe+7 qq0uErJvxRTowNhEWNO78FMzobX01zVn+ORZF+WKAsEcfTWenuvFhKN1RYlhYe3n FhhaU+LDUFGlml0SJcNEoVN1HO+ZwB1CYsMOo+26OVns0btJLP0gftEfi6WiTHmn SAv+GNUwbwnhKEVxxYF1Ha9zKURWCRBrherizjCnLMv1aeB1KhdZmzM5e/y0l1zf Q3kJaikl/fi7Bw== -----END CERTIFICATE-----Generated at Wed Jul 29 06:51:02 2026 by rpki-client