$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft File: byNYUxg5hEeanWn0ChlPC4tn4WU.mft (raw, json) Hash identifier: pbgyiSL1Tx/NzKizg23g/XB3dZn50o1Cp1JF86wfJjU= Subject key identifier: 36:7C:A8:94:6F:10:02:B9:57:D1:70:8D:D7:70:81:AA:7B:BD:21:F3 Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165 Certificate serial: 019FA899DE74E06D24917562F4DA6024B126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:01:23 +0000 Manifest this update: Tue 28 Jul 2026 12:01:23 +0000 Manifest next update: Wed 29 Jul 2026 12:01:23 +0000 Files and hashes: 1: 2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa (hash: RaceEYp+9x/nmRjbttzsLu4fwsF5EmfcJqvuxa0ObDg=) 2: 3MxkJ8oImusR-x6YZIDHo7H63Vw.roa (hash: OGE63mhnkHU2lgMLydoR0MdyRE14meeXr8jQF5XZkts=) 3: 7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa (hash: MQjxwKpRG2tiJ2eQhlWW1RBEP51Pbiw0toODvQ604Ak=) 4: 9EELKgk7YXr6QiSeinApyGlwoOg.roa (hash: 65EuDdRjxCNjT0cpt3YcmI/39MhqamhYj7mC3NNKwG4=) 5: HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa (hash: el4hRvXmm03w/ouApdicwVDgwdfDa1Ax7skb82xPN74=) 6: T_XID6vuukHAvdlVbOkSvdJrmpQ.roa (hash: 3iwmUlZdkQ/+grvrDB6VspRZaoYjMWi/tzaIbi1/oWU=) 7: XCLmZ42Y2x9YN1-Jb94X567tAPE.roa (hash: ltIWBiaNO3Twv3Jxf5yLk7wkuyVnobkAoGRbCxAIl/Q=) 8: XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa (hash: MyDRiichukTa9/2yAU6IIGMytc1TPM1wlbX1da+yjW4=) 9: Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa (hash: Upfc+pXKegcvhRzDlXEiNd2VXaPZzzD0Dy/XWAb+Rt8=) 10: ajCoue65wSBqsLOepcqnGK-maoY.roa (hash: YnWPiPKcNfNunm8Lp8arYjMf1qLz2VlLI9iMozyniiE=) 11: byNYUxg5hEeanWn0ChlPC4tn4WU.crl (hash: IZBMxQzlQgm39TDDyOHEQYbvLU4pJIpuJItvw8qtlmg=) 12: dGMIw7XyljKZ4VAipgRb_Gv3574.roa (hash: 5XpQyNwCpMd1s8manxuLHo6eOOCEr2maqfz0CCW1PAA=) 13: dgzEX6Rn-OqO4kyR10BfdiXHxCM.roa (hash: q0vAO8NsoCVHvKqTdmqncsS0Cbhf2cyWq21pDNvi164=) 14: huXlbPqAA1b9i7ZmKbP4NUymuTI.roa (hash: 2yKN6PVua0m6pjdKSS6mAuCNTQE3dH0rSHmJAsGUQ2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:de:74:e0:6d:24:91:75:62:f4:da:60:24:b1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165 Validity Not Before: Jul 28 12:01:23 2026 GMT Not After : Jul 29 12:01:23 2026 GMT Subject: CN=367ca8946f1002b957d1708dd77081aa7bbd21f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:3c:7f:df:18:f7:61:5d:7b:d7:73:95:4e: f0:19:c7:69:96:54:96:e6:06:d6:75:8d:b0:f2:26: e3:7b:78:aa:71:77:b7:fc:78:70:7e:8c:78:4f:7d: 4f:a4:39:d7:8f:6b:d8:cd:ea:cb:50:fb:d8:d6:8b: 06:5b:17:ad:31:78:fa:ea:c7:02:81:8b:54:af:d7: a3:95:d1:99:3a:10:9d:e9:dd:28:2d:58:6c:94:d5: 73:30:c0:dd:ea:53:e4:5b:f8:b8:79:03:18:ac:1d: c5:fc:3d:a4:b1:02:40:2b:2d:3f:d0:b8:be:a1:74: 02:e7:6c:2b:12:b6:ff:c4:1a:3a:85:0e:41:2d:07: 62:b0:5b:1e:de:06:33:58:f1:d6:e8:52:29:c2:c8: 09:fe:b6:7a:32:ca:f2:f6:3a:d6:73:17:a0:54:91: c3:ae:8f:5d:ba:f1:54:b1:d6:cc:7b:38:74:ab:22: ce:3a:1e:24:81:7a:13:60:68:2c:29:f7:09:4c:74: 2a:48:9f:b9:86:a9:c2:bf:ff:34:73:67:44:1d:fe: 0f:ab:0b:a6:e7:2c:9c:a9:f0:89:fa:40:75:34:d7: 6e:39:33:23:e7:cb:be:13:aa:e7:38:4c:c1:cb:55: 5a:ad:78:dd:ca:1f:54:2f:73:bc:b1:22:d0:e5:56: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:A8:94:6F:10:02:B9:57:D1:70:8D:D7:70:81:AA:7B:BD:21:F3 X509v3 Authority Key Identifier: keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:f0:9f:96:de:1a:f4:e0:4b:a0:e1:5a:a0:9a:ea:65:b6: d9:7d:40:b5:51:ce:b8:18:a1:93:55:cf:db:9c:8c:c4:3c:c9: b8:52:4a:fe:4e:98:99:14:77:1a:60:29:cd:6f:90:cf:cf:5a: 52:88:ee:d4:68:70:97:0f:0c:9f:b6:93:02:13:8f:62:74:51: 69:2e:ae:b7:a3:b2:33:7f:d5:3a:6e:60:6d:c4:2b:e8:c4:01: 36:0d:54:29:d1:25:79:ea:b1:56:6a:44:8c:15:06:cd:5b:46: f8:f3:ee:e9:39:e9:d2:01:59:49:95:52:f1:34:ea:a8:03:51: fe:c5:4e:10:20:fc:07:9d:fd:3e:46:c2:94:ae:78:06:3b:20: d7:7f:7c:a5:73:a7:94:d5:08:b3:0f:0b:af:67:e3:b4:88:4f: 47:d3:49:c7:df:18:ee:30:a0:82:6d:ad:cd:a0:82:82:03:6c: a8:f1:bf:62:1b:45:80:08:79:d3:9e:8d:cc:0b:95:12:30:67: 2f:89:b2:30:eb:89:ef:7a:bb:46:cb:37:8c:fc:97:3b:e2:67: e4:13:b1:69:ea:07:82:eb:c9:55:b0:04:45:0d:2d:39:96:38: 12:eb:8e:9f:67:40:b4:16:7f:b1:93:74:3c:a0:bc:fc:b5:ef: 65:b2:16:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omd504G0kkXVi9NpgJLEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjM1ODUzMTgzOTg0NDc5YTlkNjlmNDBhMTk0ZjBiOGI2 N2UxNjUwHhcNMjYwNzI4MTIwMTIzWhcNMjYwNzI5MTIwMTIzWjAzMTEwLwYDVQQD EygzNjdjYTg5NDZmMTAwMmI5NTdkMTcwOGRkNzcwODFhYTdiYmQyMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYs8f98Y92Fde9dzlU7wGcdpllSW 5gbWdY2w8ibje3iqcXe3/Hhwfox4T31PpDnXj2vYzerLUPvY1osGWxetMXj66scC gYtUr9ejldGZOhCd6d0oLVhslNVzMMDd6lPkW/i4eQMYrB3F/D2ksQJAKy0/0Li+ oXQC52wrErb/xBo6hQ5BLQdisFse3gYzWPHW6FIpwsgJ/rZ6Msry9jrWcxegVJHD ro9duvFUsdbMezh0qyLOOh4kgXoTYGgsKfcJTHQqSJ+5hqnCv/80c2dEHf4Pqwum 5yycqfCJ+kB1NNduOTMj58u+E6rnOEzBy1VarXjdyh9UL3O8sSLQ5VaY5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ8qJRvEAK5V9Fwjddwgap7vSHzMB8GA1UdIwQY MBaAFG8jWFMYOYRHmp1p9AoZTwuLZ+FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBLwn5be GvTgS6DhWqCa6mW22X1AtVHOuBihk1XP25yMxDzJuFJK/k6YmRR3GmApzW+Qz89a Uoju1Ghwlw8Mn7aTAhOPYnRRaS6ut6OyM3/VOm5gbcQr6MQBNg1UKdEleeqxVmpE jBUGzVtG+PPu6Tnp0gFZSZVS8TTqqANR/sVOECD8B539PkbClK54Bjsg1398pXOn lNUIsw8Lr2fjtIhPR9NJx98Y7jCggm2tzaCCggNsqPG/YhtFgAh5056NzAuVEjBn L4myMOuJ73q7Rss3jPyXO+Jn5BOxaeoHguvJVbAERQ0tOZY4EuuOn2dAtBZ/sZN0 PKC8/LXvZbIWHQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:04:10 2026 by rpki-client