$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: rdO4u+ARW6bu2/HtdiL9tSnPdb2FkMel0QBOqrT5nZ8= Subject key identifier: D4:ED:8D:0C:77:C7:27:87:18:A9:82:CA:02:BC:CD:CE:27:99:4E:2C Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019FA93D9C6D39EF5792CD272C04193493CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0293 Signing time: Tue 28 Jul 2026 15:00:14 +0000 Manifest this update: Tue 28 Jul 2026 15:00:14 +0000 Manifest next update: Wed 29 Jul 2026 15:00:14 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: BXWlnmJG2igo/HJXYua9O93h9A/zDxZnd2Ft3kAQ+sw=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:9c:6d:39:ef:57:92:cd:27:2c:04:19:34:93:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jul 28 15:00:14 2026 GMT Not After : Jul 29 15:00:14 2026 GMT Subject: CN=d4ed8d0c77c7278718a982ca02bccdce27994e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:b7:72:df:42:93:35:55:23:79:41:95:b2: f3:8d:60:ee:b0:44:c5:4a:b2:05:16:28:92:8b:a2: ea:cb:36:21:7c:34:55:05:58:27:d9:02:bc:cb:75: f2:09:14:03:ac:af:b4:3c:97:5f:b9:90:1a:fb:9d: 2b:db:95:78:60:8d:f2:54:ea:6b:98:a9:de:ad:9b: 20:d7:56:84:e8:ce:3d:23:69:a2:28:fe:24:06:d8: 17:80:fc:47:26:ec:9a:a8:aa:cb:b6:ce:66:25:83: 2f:37:08:63:9c:ef:9d:0e:27:cc:fe:c9:7d:bb:f9: 5d:57:44:f1:77:60:52:09:c4:19:87:67:19:e8:b2: 9e:e6:0e:10:f0:c7:8e:3b:79:c0:85:64:80:02:e2: cb:3d:c5:94:b9:23:6f:c4:c1:50:1f:de:a3:58:3b: cc:a3:08:eb:63:64:6b:84:c1:bd:c1:7f:03:2f:7b: ef:41:3d:e7:ed:6c:a1:1e:51:ae:04:25:30:5e:e5: 5f:79:ab:59:3b:cf:73:62:59:a9:31:da:b6:f4:de: fb:04:c3:7a:d0:91:64:f9:32:b0:9b:84:03:bc:88: 10:49:03:16:65:53:73:57:d2:39:82:52:a8:66:69: 76:dc:b1:43:81:85:42:39:83:ea:d0:8b:f2:b4:86: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:ED:8D:0C:77:C7:27:87:18:A9:82:CA:02:BC:CD:CE:27:99:4E:2C X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e4:b7:2c:7c:e3:69:50:dc:4e:4f:c8:fb:62:e9:3e:10:e6: 46:8b:7e:66:cd:4a:c8:d6:0b:4f:ce:96:98:9e:11:e9:4b:31: d7:ef:a7:f2:4f:4e:0f:f3:e0:a5:1f:c8:9b:55:55:d2:a7:87: ff:4f:73:bf:b7:35:95:55:d3:83:3b:53:5c:af:99:af:a3:01: 3a:82:9e:f6:31:6d:7c:d4:56:34:3d:fc:16:42:d7:95:eb:24: 7c:ca:0d:08:2e:9a:3d:f7:a2:d1:6e:f5:82:b0:5d:2b:0a:54: db:54:8b:a2:85:ef:a9:43:e0:71:75:1a:1c:bb:e6:3b:bf:a6: e4:ca:f9:2d:b4:b5:43:14:50:0d:98:97:6c:5c:07:75:d5:24: 79:cf:fa:1b:d5:e3:62:5a:47:bc:94:54:ab:01:83:b9:f1:59: 62:6a:56:7a:0f:1b:8d:c1:64:1d:b4:d0:75:1b:3c:9b:9f:70: 7b:f4:be:d4:33:92:4f:c9:dc:90:be:fb:fb:5d:17:c7:c6:bd: 9b:d8:09:ba:95:34:00:0b:6d:08:b3:49:e0:ff:15:d1:b2:cc: 7e:f2:9a:d3:ce:4a:8a:17:0d:77:10:3e:57:a0:8d:ed:84:95: d9:06:c5:2f:86:ce:c5:e4:0a:e1:c4:13:28:c3:c9:86:cf:24: 13:96:af:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPZxtOe9Xks0nLAQZNJPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNzI4MTUwMDE0WhcNMjYwNzI5MTUwMDE0WjAzMTEwLwYDVQQD EyhkNGVkOGQwYzc3YzcyNzg3MThhOTgyY2EwMmJjY2RjZTI3OTk0ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC+3ct9CkzVVI3lBlbLzjWDusETF SrIFFiiSi6LqyzYhfDRVBVgn2QK8y3XyCRQDrK+0PJdfuZAa+50r25V4YI3yVOpr mKnerZsg11aE6M49I2miKP4kBtgXgPxHJuyaqKrLts5mJYMvNwhjnO+dDifM/sl9 u/ldV0Txd2BSCcQZh2cZ6LKe5g4Q8MeOO3nAhWSAAuLLPcWUuSNvxMFQH96jWDvM owjrY2RrhMG9wX8DL3vvQT3n7WyhHlGuBCUwXuVfeatZO89zYlmpMdq29N77BMN6 0JFk+TKwm4QDvIgQSQMWZVNzV9I5glKoZml23LFDgYVCOYPq0IvytIYu9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTtjQx3xyeHGKmCygK8zc4nmU4sMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeS3LHzj aVDcTk/I+2LpPhDmRot+Zs1KyNYLT86WmJ4R6Usx1++n8k9OD/PgpR/Im1VV0qeH /09zv7c1lVXTgztTXK+Zr6MBOoKe9jFtfNRWND38FkLXleskfMoNCC6aPfei0W71 grBdKwpU21SLooXvqUPgcXUaHLvmO7+m5Mr5LbS1QxRQDZiXbFwHddUkec/6G9Xj YlpHvJRUqwGDufFZYmpWeg8bjcFkHbTQdRs8m59we/S+1DOST8nckL77+10Xx8a9 m9gJupU0AAttCLNJ4P8V0bLMfvKa085KihcNdxA+V6CN7YSV2QbFL4bOxeQK4cQT KMPJhs8kE5avdQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:43:56 2026 by rpki-client