$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: ilchUqSQuRSFblyYGE4JHAKDUueT4ufbCiO+Ib2FkKM= Subject key identifier: DD:CD:43:82:37:79:AB:5B:8B:BD:43:AC:DE:FF:9A:FA:5C:AE:20:C5 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019FA93DC425A8EB9807B47090F207406FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 15D5 Signing time: Tue 28 Jul 2026 15:00:25 +0000 Manifest this update: Tue 28 Jul 2026 15:00:25 +0000 Manifest next update: Wed 29 Jul 2026 15:00:25 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: SFLTURg26Jha/rByw0dQHEEcL9wu2yA4ZDFaz3mX7yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:c4:25:a8:eb:98:07:b4:70:90:f2:07:40:6f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jul 28 15:00:25 2026 GMT Not After : Jul 29 15:00:25 2026 GMT Subject: CN=ddcd43823779ab5b8bbd43acdeff9afa5cae20c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:66:a2:f7:1d:b7:31:fe:a7:4c:23:97:ec:02: 2d:e1:53:e3:79:c6:7d:2b:6d:db:dc:aa:1e:2e:04: b3:19:09:46:f1:07:d9:89:fd:f6:47:0a:12:1c:96: 9b:bd:88:da:c5:a2:73:33:c9:9c:4b:90:f0:ee:c6: 6e:14:c7:b4:2c:30:9d:79:63:25:ea:ac:3b:45:98: 88:a0:85:1e:7e:9b:39:ad:7e:81:e4:78:a2:a0:d6: 16:50:4c:d7:32:0f:82:37:6b:f2:3e:a9:59:05:2d: ac:82:22:d8:05:53:0d:89:44:24:05:20:1e:2d:e1: 6c:34:17:a8:5e:85:09:61:73:04:2d:2f:ed:c6:ad: 94:8a:bd:f2:79:49:02:23:a3:60:7b:1f:eb:e6:73: 51:29:85:7c:ce:ad:f1:36:04:af:4a:ea:77:e2:78: 79:9d:a5:f7:eb:ce:89:a9:57:24:88:0e:4f:0c:8b: d1:2a:12:72:15:6e:f0:e2:b7:de:33:80:62:d9:07: d1:a1:9a:bb:90:08:ba:4a:49:60:ef:40:eb:66:f7: 4f:03:2f:cf:86:7d:89:47:6d:50:2c:ba:e2:8e:9b: b5:86:13:7f:41:54:70:69:a8:df:41:6a:6c:6c:ec: 53:38:c5:d6:af:f0:4e:ff:ba:ca:df:09:ec:91:b9: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CD:43:82:37:79:AB:5B:8B:BD:43:AC:DE:FF:9A:FA:5C:AE:20:C5 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b6:95:e8:d4:da:78:ba:cf:6c:07:0e:e4:f9:4b:42:b2:8f: ce:1e:58:a3:52:56:1e:e0:b6:5d:49:d3:e6:6a:cf:65:e0:2d: 82:6f:1c:5e:d1:62:0f:20:10:64:4e:73:94:6b:7f:3e:fb:9d: cb:41:4e:63:12:cb:e4:20:e6:bc:0d:14:d8:c5:b6:85:dd:f2: 8e:e2:14:f9:53:59:a9:91:0a:76:2b:94:31:1b:e8:1e:64:a5: 4e:53:3f:1d:1b:4d:54:de:c8:88:7d:2f:dc:9d:06:77:aa:ac: 7b:d9:53:61:b2:7e:16:90:98:42:4b:04:42:2f:21:5a:55:94: d8:e6:86:e8:99:a8:8d:5f:4c:55:69:16:49:fe:f4:af:d6:0d: 77:41:38:bc:7d:d4:ae:1b:6e:ae:a0:e3:59:45:69:1b:5e:a2: 45:64:d8:4f:76:c0:b3:74:e9:73:b5:07:a7:65:08:b9:69:a1: dc:b8:76:ac:6c:d8:b0:f3:66:37:0a:1b:1f:bd:c9:26:3a:c0: 0f:99:47:55:f4:80:ed:e9:7b:4d:ad:10:a9:6e:95:2c:e4:92: 91:5e:04:fc:37:0a:9e:d5:c1:43:1d:3d:cd:00:73:f2:61:6c: 15:ff:1e:b5:62:5d:a2:74:d7:df:7f:ee:4e:96:47:04:86:ed: 86:74:d5:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPcQlqOuYB7RwkPIHQG+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNzI4MTUwMDI1WhcNMjYwNzI5MTUwMDI1WjAzMTEwLwYDVQQD EyhkZGNkNDM4MjM3NzlhYjViOGJiZDQzYWNkZWZmOWFmYTVjYWUyMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mai9x23Mf6nTCOX7AIt4VPjecZ9 K23b3KoeLgSzGQlG8QfZif32RwoSHJabvYjaxaJzM8mcS5Dw7sZuFMe0LDCdeWMl 6qw7RZiIoIUefps5rX6B5HiioNYWUEzXMg+CN2vyPqlZBS2sgiLYBVMNiUQkBSAe LeFsNBeoXoUJYXMELS/txq2Uir3yeUkCI6Ngex/r5nNRKYV8zq3xNgSvSup34nh5 naX3686JqVckiA5PDIvRKhJyFW7w4rfeM4Bi2QfRoZq7kAi6Sklg70DrZvdPAy/P hn2JR21QLLrijpu1hhN/QVRwaajfQWpsbOxTOMXWr/BO/7rK3wnskbmm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3NQ4I3eatbi71DrN7/mvpcriDFMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbaV6NTa eLrPbAcO5PlLQrKPzh5Yo1JWHuC2XUnT5mrPZeAtgm8cXtFiDyAQZE5zlGt/Pvud y0FOYxLL5CDmvA0U2MW2hd3yjuIU+VNZqZEKdiuUMRvoHmSlTlM/HRtNVN7IiH0v 3J0Gd6qse9lTYbJ+FpCYQksEQi8hWlWU2OaG6JmojV9MVWkWSf70r9YNd0E4vH3U rhturqDjWUVpG16iRWTYT3bAs3Tpc7UHp2UIuWmh3Lh2rGzYsPNmNwobH73JJjrA D5lHVfSA7el7Ta0QqW6VLOSSkV4E/DcKntXBQx09zQBz8mFsFf8etWJdonTX33/u TpZHBIbthnTVKQ== -----END CERTIFICATE-----Generated at Wed Jul 29 01:32:42 2026 by rpki-client