$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: 8E7SoTAgrjJDDZTny3059TB4+jEg9CKwMLBwdk2Ozyg= Subject key identifier: 71:2D:2D:40:2D:37:E3:D4:EB:2B:A9:19:D3:82:91:73:64:38:32:02 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019FA7BE0B1FF63A133DF42468DFDE44E54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 199B Signing time: Tue 28 Jul 2026 08:01:17 +0000 Manifest this update: Tue 28 Jul 2026 08:01:17 +0000 Manifest next update: Wed 29 Jul 2026 08:01:17 +0000 Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=) 2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: tL6C314iO2LFlBdlIiGtvtqFZLzuYE7CpJFBmqEqN7Y=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:be:0b:1f:f6:3a:13:3d:f4:24:68:df:de:44:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jul 28 08:01:17 2026 GMT Not After : Jul 29 08:01:17 2026 GMT Subject: CN=712d2d402d37e3d4eb2ba919d382917364383202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:28:22:d7:75:14:f1:62:12:19:32:73:94:ec: 77:af:ef:21:bd:74:0c:d4:6a:83:a2:11:ba:b0:fe: 3c:2b:b9:c5:11:a0:a4:05:b3:b7:75:8f:bc:28:63: 97:8d:d3:39:31:8f:d9:e2:52:f1:d4:e2:1b:29:9a: cf:dd:55:54:e8:67:33:63:25:35:62:3e:6c:c6:c4: 87:ea:c0:08:c7:35:10:8d:86:93:5d:36:c2:3c:7f: 08:c4:10:69:94:1b:92:aa:45:d3:a7:b1:f0:ad:7b: c0:b2:9c:19:95:13:77:ca:1d:75:d4:57:de:e2:cc: 08:68:db:ae:ed:bb:30:d9:d7:cc:dd:fc:ae:ba:21: 48:66:65:62:cf:c6:12:4e:42:00:72:25:96:4c:e2: 19:a4:59:7c:4b:b5:0b:a4:e6:e1:ed:08:26:b4:4c: d3:fd:27:b0:70:57:49:22:7d:d9:3c:16:1d:8b:97: 03:80:aa:02:65:84:ac:8f:fc:26:00:3a:93:fa:34: df:12:18:ae:45:7c:4e:cc:cd:d2:59:d8:09:ab:8f: a1:26:b5:66:27:f2:43:d0:1c:af:18:94:d0:7d:41: 20:ac:62:fa:da:29:be:81:7b:04:c2:98:99:a6:f9: f4:3a:03:2a:0c:25:0d:35:c2:d7:d6:4a:ea:e0:32: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:2D:40:2D:37:E3:D4:EB:2B:A9:19:D3:82:91:73:64:38:32:02 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:11:68:d4:98:c6:d2:f3:0c:fb:f8:fb:bf:f0:0e:9a:3b:32: 39:ad:6b:d5:b0:85:b3:47:31:2e:c0:79:96:b4:39:b7:92:2c: 48:fb:e9:f8:d2:6a:c1:66:52:ad:dc:07:5b:ca:ac:56:4a:41: 6e:00:3b:01:f3:a1:9a:3b:3b:8d:53:ca:fd:8a:63:74:d0:4a: b8:71:fb:5b:20:80:99:4f:ca:2f:07:d6:57:c2:78:bf:43:5a: e7:68:14:77:a8:94:2a:c6:78:46:d6:f1:e8:34:70:8f:a7:6c: 5a:06:4d:e2:bb:41:4b:18:f4:a9:98:4d:d0:b8:0d:96:d5:f1: 2e:b4:ce:07:57:e6:02:89:01:28:ce:db:ca:30:2d:71:8a:7e: dc:81:7f:35:d2:c7:d1:03:3d:cc:90:2f:f4:58:1b:56:55:df: e4:b7:63:48:f5:60:c5:68:fa:55:a7:07:47:34:26:71:b9:e4: 16:36:da:47:1d:db:49:ce:2e:84:26:d6:34:44:0d:65:4d:4f: f5:ed:8f:c1:19:7c:d7:c1:11:1d:df:4a:d8:39:0d:0a:55:13: 00:fa:03:7e:55:47:bd:c9:f7:f0:6d:11:2b:0f:2d:a3:d6:06: b9:14:f6:1b:aa:59:fc:6a:6c:8a:0b:cd:60:91:3a:45:bd:d9: 15:c9:b0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvgsf9joTPfQkaN/eROVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwNzI4MDgwMTE3WhcNMjYwNzI5MDgwMTE3WjAzMTEwLwYDVQQD Eyg3MTJkMmQ0MDJkMzdlM2Q0ZWIyYmE5MTlkMzgyOTE3MzY0MzgzMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkigi13UU8WISGTJzlOx3r+8hvXQM 1GqDohG6sP48K7nFEaCkBbO3dY+8KGOXjdM5MY/Z4lLx1OIbKZrP3VVU6GczYyU1 Yj5sxsSH6sAIxzUQjYaTXTbCPH8IxBBplBuSqkXTp7HwrXvAspwZlRN3yh111Ffe 4swIaNuu7bsw2dfM3fyuuiFIZmViz8YSTkIAciWWTOIZpFl8S7ULpObh7QgmtEzT /SewcFdJIn3ZPBYdi5cDgKoCZYSsj/wmADqT+jTfEhiuRXxOzM3SWdgJq4+hJrVm J/JD0ByvGJTQfUEgrGL62im+gXsEwpiZpvn0OgMqDCUNNcLX1krq4DKMRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEtLUAtN+PU6yupGdOCkXNkODICMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBFo1JjG 0vMM+/j7v/AOmjsyOa1r1bCFs0cxLsB5lrQ5t5IsSPvp+NJqwWZSrdwHW8qsVkpB bgA7AfOhmjs7jVPK/YpjdNBKuHH7WyCAmU/KLwfWV8J4v0Na52gUd6iUKsZ4Rtbx 6DRwj6dsWgZN4rtBSxj0qZhN0LgNltXxLrTOB1fmAokBKM7byjAtcYp+3IF/NdLH 0QM9zJAv9FgbVlXf5LdjSPVgxWj6VacHRzQmcbnkFjbaRx3bSc4uhCbWNEQNZU1P 9e2PwRl818ERHd9K2DkNClUTAPoDflVHvcn38G0RKw8to9YGuRT2G6pZ/GpsigvN YJE6Rb3ZFcmwZQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:47:22 2026 by rpki-client