$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: mLGB5/6ghLCLWjad4QlEG7ZMSRgaMk9mVkHThc+PeYg= Subject key identifier: 83:C2:51:E0:93:60:9E:B5:33:AB:91:6A:F6:AE:F1:95:C4:B9:6C:D8 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019FAABEC291F20A399638681CE46194940B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 19FA Signing time: Tue 28 Jul 2026 22:00:56 +0000 Manifest this update: Tue 28 Jul 2026 22:00:56 +0000 Manifest next update: Wed 29 Jul 2026 22:00:56 +0000 Files and hashes: 1: 0V4GxVTZ_UZJbCFGcoowx72gsSk.roa (hash: +f1GKTlxKx4eoIWLLgCpiywfnoF5oARWdeAHQrGsvWo=) 2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 8: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 9: foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa (hash: EJDROl9kvOcSOsvJf3VtUQouW/ymPRQFcveGGjcX/6o=) 10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: gL4SvirO8i62vFgSJYIxa2SfLOWY9pLCrHazAP3iXc0=) 11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:c2:91:f2:0a:39:96:38:68:1c:e4:61:94:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jul 28 22:00:56 2026 GMT Not After : Jul 29 22:00:56 2026 GMT Subject: CN=83c251e093609eb533ab916af6aef195c4b96cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:71:7e:66:9c:57:01:eb:d5:0b:92:d3:8e: ab:6b:46:74:88:99:87:15:6a:d0:e2:fe:78:34:de: a9:eb:f8:f5:59:33:5b:c2:c1:da:6b:e5:01:da:fc: c0:24:5a:17:7d:af:a7:20:ba:2e:17:42:46:83:07: 53:45:ca:c2:e3:53:32:eb:49:72:95:c5:60:a1:60: 4b:79:ad:44:98:c2:19:9e:e9:89:34:71:ef:35:f1: 0b:2c:5a:71:fa:a4:26:f0:ba:81:5f:71:28:a0:4a: 34:4c:c4:90:33:c3:18:d1:61:5b:0a:f1:e2:3e:07: d4:3e:f0:1d:d3:25:c2:94:c2:45:c6:1a:13:36:e1: 13:39:9e:44:8e:a5:a2:5b:f8:c7:2a:0e:6f:04:ce: d8:49:07:c4:2d:f9:f1:e8:be:33:88:5f:e9:15:a7: 49:b9:89:60:39:2e:ca:b2:fb:d9:65:9b:fe:36:23: c5:e6:62:c1:90:62:cb:68:e4:00:30:aa:d4:c6:85: 13:da:38:fd:42:67:76:2c:27:dc:d1:8f:aa:26:37: 9d:10:95:5d:b7:79:95:74:ab:7a:1b:f8:51:d0:17: 1c:71:ed:cd:40:08:3c:4c:3d:96:64:c1:2e:f0:9e: b3:1a:87:45:19:c6:a1:3a:5e:4a:4e:45:46:0f:3b: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C2:51:E0:93:60:9E:B5:33:AB:91:6A:F6:AE:F1:95:C4:B9:6C:D8 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ec:ae:bf:76:50:04:8b:32:b5:f0:4f:ed:38:60:2d:a6:62: 53:96:a0:f4:ac:be:30:d0:27:ff:4b:25:4e:af:88:19:c7:fd: c3:d4:24:c8:73:61:ae:74:25:40:8a:a0:85:f1:26:f5:cd:9e: ca:15:b1:97:c8:53:bd:ff:3b:a7:ed:19:84:ae:2e:43:37:cd: 70:1b:60:24:76:54:f2:7d:ec:aa:b5:42:cd:f4:6d:20:4d:cc: 15:19:9a:44:6a:35:b8:75:58:80:e7:15:d1:a3:40:f1:3e:6c: 29:6b:86:b4:4c:24:c7:ac:60:95:e3:52:4f:5e:2c:06:bf:d7: 54:8d:f9:39:1b:7c:8a:2c:ae:b0:c5:37:72:78:5b:cd:64:e1: fe:73:43:33:38:4a:7c:5d:59:ec:71:d5:b6:8d:4d:b0:f2:7a: ce:30:bf:c2:c3:59:cc:77:47:9e:1b:46:37:7e:9b:eb:69:d2: 27:63:b1:1a:15:17:44:9f:7a:9c:db:0a:87:b1:2f:3a:40:da: a6:02:f5:c5:16:92:93:48:32:68:de:52:3c:db:b1:04:39:dc: 32:46:b2:0e:ad:0b:c9:7b:6a:e4:95:68:b5:25:5d:28:b4:42: 2a:24:ae:5d:bd:48:82:90:d0:84:16:ba:c0:4c:bc:20:12:ca: 11:6d:a7:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvsKR8go5ljhoHORhlJQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwNzI4MjIwMDU2WhcNMjYwNzI5MjIwMDU2WjAzMTEwLwYDVQQD Eyg4M2MyNTFlMDkzNjA5ZWI1MzNhYjkxNmFmNmFlZjE5NWM0Yjk2Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdxfmacVwHr1QuS046ra0Z0iJmH FWrQ4v54NN6p6/j1WTNbwsHaa+UB2vzAJFoXfa+nILouF0JGgwdTRcrC41My60ly lcVgoWBLea1EmMIZnumJNHHvNfELLFpx+qQm8LqBX3EooEo0TMSQM8MY0WFbCvHi PgfUPvAd0yXClMJFxhoTNuETOZ5EjqWiW/jHKg5vBM7YSQfELfnx6L4ziF/pFadJ uYlgOS7KsvvZZZv+NiPF5mLBkGLLaOQAMKrUxoUT2jj9Qmd2LCfc0Y+qJjedEJVd t3mVdKt6G/hR0Bccce3NQAg8TD2WZMEu8J6zGodFGcahOl5KTkVGDzu4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPCUeCTYJ61M6uRavau8ZXEuWzYMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguyuv3ZQ BIsytfBP7ThgLaZiU5ag9Ky+MNAn/0slTq+IGcf9w9QkyHNhrnQlQIqghfEm9c2e yhWxl8hTvf87p+0ZhK4uQzfNcBtgJHZU8n3sqrVCzfRtIE3MFRmaRGo1uHVYgOcV 0aNA8T5sKWuGtEwkx6xgleNST14sBr/XVI35ORt8iiyusMU3cnhbzWTh/nNDMzhK fF1Z7HHVto1NsPJ6zjC/wsNZzHdHnhtGN36b62nSJ2OxGhUXRJ96nNsKh7EvOkDa pgL1xRaSk0gyaN5SPNuxBDncMkayDq0LyXtq5JVotSVdKLRCKiSuXb1IgpDQhBa6 wEy8IBLKEW2n9w== -----END CERTIFICATE-----Generated at Wed Jul 29 00:11:55 2026 by rpki-client