$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: JXazGAnRXoWGQ34jHn0fRebvIMn8+MWIQpreCFV/Yyc= Subject key identifier: BD:A9:15:7B:3F:64:12:DF:E2:F6:1B:2A:63:92:3C:DD:F7:A1:E5:74 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019FAA87632A4F0F45B17CA0E20B314EB7D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 179F Signing time: Tue 28 Jul 2026 21:00:27 +0000 Manifest this update: Tue 28 Jul 2026 21:00:27 +0000 Manifest next update: Wed 29 Jul 2026 21:00:27 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: uzwISiEQ/SfihMhbvDocawxOBCK7mx7HEaoDt+nKYkU=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:63:2a:4f:0f:45:b1:7c:a0:e2:0b:31:4e:b7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jul 28 21:00:27 2026 GMT Not After : Jul 29 21:00:27 2026 GMT Subject: CN=bda9157b3f6412dfe2f61b2a63923cddf7a1e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:4e:d2:8d:6b:9c:54:4d:0e:47:76:00:e7: 4b:06:1e:90:7c:93:60:d0:cc:23:26:33:18:4d:5f: d0:5d:7a:79:98:c0:f4:a5:10:72:5c:39:30:3e:75: 6b:55:cf:3e:e8:24:94:40:b0:a5:aa:03:2b:c5:20: be:81:13:c8:d8:63:29:15:f8:a8:0f:fc:ea:7e:be: b7:d5:b5:1e:a9:af:32:bf:10:af:6b:7a:b5:57:c8: 30:be:9d:fc:8e:87:a9:14:1a:4d:95:ef:7d:85:52: 58:1e:88:04:5c:d7:0e:9f:0d:8b:87:73:ba:b8:d0: 1d:05:5c:b1:c1:f5:c4:23:4b:7c:94:a4:55:7d:a2: 0c:64:50:31:a1:bf:3f:97:f9:f2:55:ce:35:61:c7: f2:f9:68:5a:fa:b5:f1:9d:aa:60:14:a2:58:b9:dd: 9c:81:37:c6:43:0c:ca:a3:92:27:e0:4a:b6:39:c8: 6b:8c:21:79:f6:44:84:b2:08:90:1a:c3:b6:8a:4e: 88:19:0e:15:13:bc:48:ab:bf:26:2f:11:25:67:9c: c6:a9:a7:11:b9:68:68:15:d6:82:ae:57:9f:ba:ba: 5a:b8:db:98:46:bf:f8:01:0c:6d:1d:e6:69:49:f7: 55:71:4a:de:f2:4e:b2:00:8c:f1:81:4e:29:28:d3: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:15:7B:3F:64:12:DF:E2:F6:1B:2A:63:92:3C:DD:F7:A1:E5:74 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:c8:5b:9d:68:98:a1:fb:28:80:90:1d:12:cf:75:71:aa:23: 41:5b:ed:96:22:94:01:23:f9:99:52:8b:d9:2b:be:e9:85:a9: ce:46:f0:13:81:d3:c7:55:be:8b:ab:ee:57:fb:27:fa:a5:74: dc:55:58:ad:f4:73:18:d5:95:73:8f:dc:d7:ee:fe:5e:c6:10: c4:ab:46:68:c5:29:59:1d:d6:12:d9:25:56:cd:70:87:5f:5f: cd:7e:46:78:b3:24:df:53:ab:dc:61:c1:04:e5:e8:50:6e:dc: bd:65:aa:7b:4b:b4:e0:d3:ea:95:ff:14:0c:ee:03:50:11:3c: 31:e2:93:7a:12:e9:cf:89:e9:5d:b8:9b:97:c5:90:cb:db:1c: a1:8b:a5:e5:d4:b5:69:46:a9:14:c2:e4:b7:8b:bb:16:af:3f: 0c:70:c8:e6:ee:42:10:5f:1c:03:15:7b:96:2e:3f:99:00:a7: 26:51:d8:05:7e:98:c7:51:cc:42:fc:20:30:7e:15:ee:08:ac: 09:60:e3:59:e1:5c:c7:02:53:75:1b:2b:08:a5:ba:57:d7:2d: b9:cb:21:d5:5e:89:d2:58:b6:2a:16:73:61:71:e7:18:1c:4e: b1:0a:e8:c1:52:bd:b2:1f:5f:10:f6:d2:f5:e7:4c:b8:95:63: 5d:0a:8e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh2MqTw9FsXyg4gsxTrfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNzI4MjEwMDI3WhcNMjYwNzI5MjEwMDI3WjAzMTEwLwYDVQQD EyhiZGE5MTU3YjNmNjQxMmRmZTJmNjFiMmE2MzkyM2NkZGY3YTFlNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2VO0o1rnFRNDkd2AOdLBh6QfJNg 0MwjJjMYTV/QXXp5mMD0pRByXDkwPnVrVc8+6CSUQLClqgMrxSC+gRPI2GMpFfio D/zqfr631bUeqa8yvxCva3q1V8gwvp38joepFBpNle99hVJYHogEXNcOnw2Lh3O6 uNAdBVyxwfXEI0t8lKRVfaIMZFAxob8/l/nyVc41Ycfy+Wha+rXxnapgFKJYud2c gTfGQwzKo5In4Eq2OchrjCF59kSEsgiQGsO2ik6IGQ4VE7xIq78mLxElZ5zGqacR uWhoFdaCrlefurpauNuYRr/4AQxtHeZpSfdVcUre8k6yAIzxgU4pKNPjiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2pFXs/ZBLf4vYbKmOSPN33oeV0MB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMhbnWiY ofsogJAdEs91caojQVvtliKUASP5mVKL2Su+6YWpzkbwE4HTx1W+i6vuV/sn+qV0 3FVYrfRzGNWVc4/c1+7+XsYQxKtGaMUpWR3WEtklVs1wh19fzX5GeLMk31Or3GHB BOXoUG7cvWWqe0u04NPqlf8UDO4DUBE8MeKTehLpz4npXbibl8WQy9scoYul5dS1 aUapFMLkt4u7Fq8/DHDI5u5CEF8cAxV7li4/mQCnJlHYBX6Yx1HMQvwgMH4V7gis CWDjWeFcxwJTdRsrCKW6V9ctucsh1V6J0li2KhZzYXHnGBxOsQrowVK9sh9fEPbS 9edMuJVjXQqOEg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:48 2026 by rpki-client