$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: Tb4ezbnieCxVrnucDZAId2Fi5F9CnYFNeFdA8qFJbTE= Subject key identifier: 01:5D:31:B8:48:49:10:07:62:A1:F6:FB:20:74:E6:BD:71:B2:F7:6F Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019FAC08C1E1FF22CABAA3DB4D1C196C9FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 19EA Signing time: Wed 29 Jul 2026 04:01:22 +0000 Manifest this update: Wed 29 Jul 2026 04:01:22 +0000 Manifest next update: Thu 30 Jul 2026 04:01:22 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: JsdGjjzZHZhwSfvuqAeiyuJpGmsCqCjZwWNIG7sNTM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:08:c1:e1:ff:22:ca:ba:a3:db:4d:1c:19:6c:9f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jul 29 04:01:22 2026 GMT Not After : Jul 30 04:01:22 2026 GMT Subject: CN=015d31b84849100762a1f6fb2074e6bd71b2f76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:05:17:0c:66:f2:e2:d9:ad:05:18:5d:fb: e8:11:82:2e:4c:ce:37:a8:22:a8:fc:4a:00:fd:ab: ca:5b:c9:b8:65:c5:49:2c:a3:a9:c9:9a:2f:eb:42: e1:b1:79:a2:08:1e:98:19:2e:e1:98:a9:3e:c5:2c: 7a:db:04:23:87:b4:a2:65:6c:aa:00:0b:23:a3:f4: 0a:2d:4e:57:04:25:cc:0c:c4:49:01:38:87:9a:ee: a2:ca:56:df:c1:1f:68:68:b6:fc:58:92:7a:4a:86: ee:f9:a5:e1:46:84:ad:e2:01:24:22:2d:c7:c5:37: a2:20:e7:c8:3b:63:2e:41:9f:d6:92:fb:30:25:47: 6d:bb:36:65:77:80:09:b6:53:e4:c2:3f:93:7b:a4: 2f:25:ce:a3:51:9e:0c:5e:04:f4:91:38:14:89:1f: 2f:37:a8:e9:83:bb:4f:c0:4f:a7:bb:61:43:4c:45: 21:39:fa:50:0f:b4:00:6a:54:5e:74:e1:b0:f4:7a: d3:e2:41:57:c6:99:ae:17:c3:f2:e5:2b:55:98:5a: f4:c2:19:b9:a3:36:a5:05:75:63:4b:13:92:46:4f: cf:4c:b5:71:d9:30:7c:1d:94:dc:da:9c:59:29:6b: e8:67:66:09:0a:94:ae:2f:74:27:13:2f:5d:e6:b7: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:31:B8:48:49:10:07:62:A1:F6:FB:20:74:E6:BD:71:B2:F7:6F X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:91:5b:e6:bc:75:59:c1:7b:6c:23:f0:e4:d7:fe:82:df:1e: f2:57:dd:98:ab:ea:ee:7c:93:34:7b:50:23:b2:0c:4e:59:8f: b6:04:0d:93:9c:a7:fb:ee:09:72:3c:d9:31:74:4d:53:60:b4: 66:45:f8:60:f2:46:cd:26:5d:e5:0c:00:26:43:17:6f:d3:cb: 6a:e1:9d:b8:93:8a:4a:e2:ad:fd:40:a2:22:49:1d:5c:f6:21: 9a:f6:bc:4c:39:ce:4b:14:76:3f:27:35:d7:04:34:cd:1a:5c: d9:1f:8c:cb:3d:7f:9b:21:cd:81:22:a6:31:bc:60:e0:6f:a9: 29:e4:63:36:73:a9:16:7f:32:3b:c7:d5:fe:5e:74:0a:7f:a3: a1:39:04:6a:38:23:2a:82:50:96:68:51:43:c4:0b:86:18:7d: 87:70:e1:27:b8:53:5d:3f:b8:08:74:f5:a7:cb:bb:b9:19:e3: 74:6a:59:c0:0d:87:55:0c:1a:3a:72:eb:0b:d3:50:a5:6c:8e: fb:a3:8e:50:7f:17:1c:78:c8:80:82:03:1d:b6:06:18:2d:d5: 63:ed:d6:48:5a:ad:34:e8:cf:72:9f:ca:b6:3f:2e:cf:83:74: 2d:e3:6a:48:cc:7e:de:e4:51:01:fe:c0:2d:41:14:66:98:6a: 64:1b:18:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sCMHh/yLKuqPbTRwZbJ/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwNzI5MDQwMTIyWhcNMjYwNzMwMDQwMTIyWjAzMTEwLwYDVQQD EygwMTVkMzFiODQ4NDkxMDA3NjJhMWY2ZmIyMDc0ZTZiZDcxYjJmNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV0FFwxm8uLZrQUYXfvoEYIuTM43 qCKo/EoA/avKW8m4ZcVJLKOpyZov60LhsXmiCB6YGS7hmKk+xSx62wQjh7SiZWyq AAsjo/QKLU5XBCXMDMRJATiHmu6iylbfwR9oaLb8WJJ6Sobu+aXhRoSt4gEkIi3H xTeiIOfIO2MuQZ/WkvswJUdtuzZld4AJtlPkwj+Te6QvJc6jUZ4MXgT0kTgUiR8v N6jpg7tPwE+nu2FDTEUhOfpQD7QAalRedOGw9HrT4kFXxpmuF8Py5StVmFr0whm5 ozalBXVjSxOSRk/PTLVx2TB8HZTc2pxZKWvoZ2YJCpSuL3QnEy9d5rcwIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFdMbhISRAHYqH2+yB05r1xsvdvMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZFb5rx1 WcF7bCPw5Nf+gt8e8lfdmKvq7nyTNHtQI7IMTlmPtgQNk5yn++4JcjzZMXRNU2C0 ZkX4YPJGzSZd5QwAJkMXb9PLauGduJOKSuKt/UCiIkkdXPYhmva8TDnOSxR2Pyc1 1wQ0zRpc2R+Myz1/myHNgSKmMbxg4G+pKeRjNnOpFn8yO8fV/l50Cn+joTkEajgj KoJQlmhRQ8QLhhh9h3DhJ7hTXT+4CHT1p8u7uRnjdGpZwA2HVQwaOnLrC9NQpWyO +6OOUH8XHHjIgIIDHbYGGC3VY+3WSFqtNOjPcp/Ktj8uz4N0LeNqSMx+3uRRAf7A LUEUZphqZBsYEg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:55 2026 by rpki-client