$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: HA14BLC7GOuNYva3m+pvT9OJq/MRumFj5lbgAORJzfY= Subject key identifier: 92:E6:E4:8D:5E:40:22:24:A0:8F:04:D9:0A:0B:94:40:F9:B9:83:C4 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019FAC75C40BFA7506330579E52D85FA7FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 17A0 Signing time: Wed 29 Jul 2026 06:00:26 +0000 Manifest this update: Wed 29 Jul 2026 06:00:26 +0000 Manifest next update: Thu 30 Jul 2026 06:00:26 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: O0MqOzIRqkBeIWxjlTN1GPMk5W65hQZNpKwB/2ULGJA=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:75:c4:0b:fa:75:06:33:05:79:e5:2d:85:fa:7f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jul 29 06:00:26 2026 GMT Not After : Jul 30 06:00:26 2026 GMT Subject: CN=92e6e48d5e402224a08f04d90a0b9440f9b983c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:04:be:13:c6:94:23:2c:7e:3d:d9:66:dd: 28:4c:2b:c3:63:cd:02:7b:af:1b:a2:ce:c6:8a:58: 34:cd:d5:7d:1f:c6:a0:a2:16:e0:89:56:d2:c1:d5: 08:ed:fa:b8:20:52:3b:4b:4a:1d:f1:fb:46:39:98: 03:f7:e9:55:09:0d:7c:26:39:49:37:b6:77:ff:1c: 3b:41:ac:a9:3c:ef:79:70:c8:94:a9:ee:0f:b1:ef: 05:f3:ee:40:69:eb:3b:04:ad:81:99:20:eb:15:61: bb:6e:42:56:4e:77:70:62:dd:7d:e9:8c:76:87:0d: fa:ff:de:3f:01:5b:6a:81:b5:da:d9:de:04:34:9d: 3a:df:43:ed:ce:bc:e4:54:0a:5d:70:e3:77:49:8d: 20:00:7f:cc:fc:5a:b7:f5:26:30:df:6d:6a:5c:9a: be:5b:13:99:a5:db:90:34:04:2b:4c:17:45:34:a0: 3a:e3:3d:c0:8c:5a:84:9f:7f:aa:69:33:76:5b:76: 9d:91:59:a8:20:28:ce:25:27:a4:f0:f0:ae:b5:59: 49:11:c5:ee:6d:25:42:e7:48:79:c4:72:f2:8e:5a: 82:83:f6:40:91:4c:d2:18:12:42:28:54:c3:1c:5f: 61:68:c5:1f:7a:eb:eb:00:7b:dc:ce:d1:d4:ce:b4: 20:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:E4:8D:5E:40:22:24:A0:8F:04:D9:0A:0B:94:40:F9:B9:83:C4 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:d3:e5:7f:1a:6e:2a:b6:ae:a6:56:c1:db:80:6a:49:bc: 4b:fb:2c:cd:1b:69:10:b4:65:55:65:bc:8f:f6:03:04:a6:af: d9:8c:00:9d:b8:af:11:c0:2e:88:b6:2a:37:91:1a:14:90:64: 20:c9:17:7c:76:8a:16:90:2a:a4:f2:f8:48:87:48:c2:21:20: 74:b6:8a:d0:c6:20:6a:5a:16:50:d9:09:62:86:17:26:d1:44: 27:2e:c5:65:77:a3:00:3c:a1:80:67:a0:87:df:f6:7e:9b:dc: 51:c2:1f:d7:92:e3:3e:7a:8c:1e:70:a0:92:c8:f5:95:8b:24: c9:76:9f:43:32:7e:d0:a2:ca:ce:f8:2a:53:17:05:87:f4:87: 72:fc:6d:aa:bc:72:e7:6e:05:e8:5a:54:89:98:cb:3f:54:f7: 48:ee:06:05:8e:4c:5e:31:65:94:27:52:2d:e2:95:53:80:d2: b0:70:73:e4:f9:a4:79:ba:ad:3f:05:75:84:d0:df:db:bd:2e: a9:13:65:33:fa:b5:b9:50:43:c7:16:93:75:01:ca:c3:83:95: 6d:22:88:b4:18:78:7f:fb:6d:45:2a:51:90:08:2a:63:8c:4f: 30:95:cf:93:ad:ba:d9:b4:fa:c9:56:e8:3e:a0:42:6f:24:46: 48:69:c3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sdcQL+nUGMwV55S2F+n+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNzI5MDYwMDI2WhcNMjYwNzMwMDYwMDI2WjAzMTEwLwYDVQQD Eyg5MmU2ZTQ4ZDVlNDAyMjI0YTA4ZjA0ZDkwYTBiOTQ0MGY5Yjk4M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH4EvhPGlCMsfj3ZZt0oTCvDY80C e68bos7Gilg0zdV9H8agohbgiVbSwdUI7fq4IFI7S0od8ftGOZgD9+lVCQ18JjlJ N7Z3/xw7QaypPO95cMiUqe4Pse8F8+5Aaes7BK2BmSDrFWG7bkJWTndwYt196Yx2 hw36/94/AVtqgbXa2d4ENJ0630PtzrzkVApdcON3SY0gAH/M/Fq39SYw321qXJq+ WxOZpduQNAQrTBdFNKA64z3AjFqEn3+qaTN2W3adkVmoICjOJSek8PCutVlJEcXu bSVC50h5xHLyjlqCg/ZAkUzSGBJCKFTDHF9haMUfeuvrAHvcztHUzrQgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLm5I1eQCIkoI8E2QoLlED5uYPEMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUrT5X8a biq2rqZWwduAakm8S/sszRtpELRlVWW8j/YDBKav2YwAnbivEcAuiLYqN5EaFJBk IMkXfHaKFpAqpPL4SIdIwiEgdLaK0MYgaloWUNkJYoYXJtFEJy7FZXejADyhgGeg h9/2fpvcUcIf15LjPnqMHnCgksj1lYskyXafQzJ+0KLKzvgqUxcFh/SHcvxtqrxy 524F6FpUiZjLP1T3SO4GBY5MXjFllCdSLeKVU4DSsHBz5PmkebqtPwV1hNDf270u qRNlM/q1uVBDxxaTdQHKw4OVbSKItBh4f/ttRSpRkAgqY4xPMJXPk6262bT6yVbo PqBCbyRGSGnD8g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:58:31 2026 by rpki-client