$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: VhYiEYqfZMDzQEoXeUeiXH9tmZevrnRAYaYo8fBLgKI= Subject key identifier: F0:C7:E4:AB:A0:56:5A:E1:5D:B1:D0:7C:34:28:E4:2B:39:9E:46:2E Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019FAABED33C53F95CAE55D6FF6E1AAD2265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 01C1 Signing time: Tue 28 Jul 2026 22:01:00 +0000 Manifest this update: Tue 28 Jul 2026 22:01:00 +0000 Manifest next update: Wed 29 Jul 2026 22:01:00 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: aC6m/bBldeU5XETM3DBuSKWyHbgyrSGC9EvexQ4mke0=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:d3:3c:53:f9:5c:ae:55:d6:ff:6e:1a:ad:22:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Jul 28 22:01:00 2026 GMT Not After : Jul 29 22:01:00 2026 GMT Subject: CN=f0c7e4aba0565ae15db1d07c3428e42b399e462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:fc:fb:a8:cd:ca:a0:c3:e9:40:30:14:c1: 2c:aa:2a:08:6f:4b:fa:e0:4d:76:72:4e:94:3b:fa: 66:9f:ed:ee:91:95:6b:77:23:3a:a2:d7:cf:1f:a9: 07:57:34:a5:29:54:91:d3:5c:a4:5b:10:27:e1:10: 77:16:f0:56:ea:5e:c0:67:fa:e1:a2:c5:cc:55:b3: b6:19:38:48:0e:44:47:65:6f:bf:e3:d8:53:3f:8a: 3f:48:d9:bc:3f:f2:8f:88:72:81:ac:09:29:e6:03: 5e:f9:55:3b:75:47:03:17:9d:ee:b5:ae:42:66:25: 0c:23:fe:73:9d:36:8c:4c:b1:72:7d:ee:bd:bc:b4: 80:be:18:ff:72:6c:71:ad:ba:3b:ac:7b:41:c2:1f: 64:ff:46:a1:f8:17:f7:f1:06:92:82:eb:20:1a:fe: 5f:5b:3e:e3:d2:ae:f1:12:f0:f7:8f:98:29:a8:be: 75:b0:4c:b9:68:b9:0a:5e:cd:4a:b1:24:ae:d9:e9: 63:5f:ec:19:06:03:df:55:0e:80:e9:a7:bb:ad:b6: 41:d2:5a:26:53:86:48:e3:48:45:a2:fa:3d:75:61: 19:d5:38:f1:9c:94:6a:16:90:08:b3:11:18:fb:b2: f5:62:73:34:f1:dd:83:7e:39:0e:65:4b:7b:bc:a9: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C7:E4:AB:A0:56:5A:E1:5D:B1:D0:7C:34:28:E4:2B:39:9E:46:2E X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:05:75:14:49:5b:37:1d:ed:d4:5f:c0:bd:bf:75:73:97:85: 33:62:84:5b:ff:f8:4c:c3:3e:38:dd:22:07:08:e2:d3:b4:51: 79:f4:31:8f:4e:95:40:ad:58:c1:fa:70:ea:34:84:81:4d:15: cd:d4:5e:e0:14:f7:ea:08:a4:71:f3:5a:c7:53:45:c8:d2:99: c7:cb:f8:c5:54:89:9b:04:c6:d4:0e:b3:a2:a9:13:3a:45:11: 1f:87:e7:27:2e:bf:3b:cf:74:18:aa:37:d7:8c:e9:6f:b9:c4: f3:75:d6:e8:9f:28:ae:d6:3d:9d:d4:7f:7c:db:fc:85:50:50: f7:30:b7:2f:0a:39:72:b9:58:eb:9c:0a:0d:46:75:ce:e2:a4: 8b:94:b3:f5:b7:4c:a6:04:b9:f6:33:57:c4:b9:a5:47:12:c4: 7f:9a:42:e6:34:1d:89:d3:7e:32:b5:75:3a:de:f9:27:57:00: fb:9f:d8:9f:91:cf:d6:3c:46:d7:72:f6:ab:a4:a7:06:81:b9: f3:00:6a:28:9a:46:72:9a:49:43:dd:21:3a:3c:43:60:e0:57: e9:a0:72:30:8c:86:21:3d:34:14:3a:cf:a9:bd:c3:99:42:1a: d6:bf:67:6e:54:2c:b6:8a:f0:b3:3b:25:b2:05:ad:d8:71:e8: 49:04:4c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvtM8U/lcrlXW/24arSJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNzI4MjIwMTAwWhcNMjYwNzI5MjIwMTAwWjAzMTEwLwYDVQQD EyhmMGM3ZTRhYmEwNTY1YWUxNWRiMWQwN2MzNDI4ZTQyYjM5OWU0NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsT8+6jNyqDD6UAwFMEsqioIb0v6 4E12ck6UO/pmn+3ukZVrdyM6otfPH6kHVzSlKVSR01ykWxAn4RB3FvBW6l7AZ/rh osXMVbO2GThIDkRHZW+/49hTP4o/SNm8P/KPiHKBrAkp5gNe+VU7dUcDF53uta5C ZiUMI/5znTaMTLFyfe69vLSAvhj/cmxxrbo7rHtBwh9k/0ah+Bf38QaSgusgGv5f Wz7j0q7xEvD3j5gpqL51sEy5aLkKXs1KsSSu2eljX+wZBgPfVQ6A6ae7rbZB0lom U4ZI40hFovo9dWEZ1TjxnJRqFpAIsxEY+7L1YnM08d2DfjkOZUt7vKmuOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDH5KugVlrhXbHQfDQo5Cs5nkYuMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgV1FElb Nx3t1F/Avb91c5eFM2KEW//4TMM+ON0iBwji07RRefQxj06VQK1Ywfpw6jSEgU0V zdRe4BT36gikcfNax1NFyNKZx8v4xVSJmwTG1A6zoqkTOkURH4fnJy6/O890GKo3 14zpb7nE83XW6J8ortY9ndR/fNv8hVBQ9zC3Lwo5crlY65wKDUZ1zuKki5Sz9bdM pgS59jNXxLmlRxLEf5pC5jQdidN+MrV1Ot75J1cA+5/Yn5HP1jxG13L2q6SnBoG5 8wBqKJpGcppJQ90hOjxDYOBX6aByMIyGIT00FDrPqb3DmUIa1r9nblQstorwszsl sgWt2HHoSQRMcw== -----END CERTIFICATE-----Generated at Wed Jul 29 02:05:26 2026 by rpki-client