$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: QVDOSJYeGABBR5iB72Fyc8OsTyZjh1HGnFM5uL9HoWE= Subject key identifier: 47:AE:CE:06:8E:5F:EF:DB:90:73:E6:6B:36:27:0D:4A:C7:53:AF:F0 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019FAB639A4EBB85AAF170804B0A889BC86C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1622 Signing time: Wed 29 Jul 2026 01:00:59 +0000 Manifest this update: Wed 29 Jul 2026 01:00:59 +0000 Manifest next update: Thu 30 Jul 2026 01:00:59 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: Uj8G2Bhi4sIYVegq9NiEd3qTMnecF+IcpvMO4aHqFTk=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:63:9a:4e:bb:85:aa:f1:70:80:4b:0a:88:9b:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jul 29 01:00:59 2026 GMT Not After : Jul 30 01:00:59 2026 GMT Subject: CN=47aece068e5fefdb9073e66b36270d4ac753aff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:70:22:11:da:c2:dc:32:56:b0:50:37:86: 97:32:c8:2f:fc:35:82:e1:98:be:c7:b0:79:5a:84: 02:7c:67:b2:17:0f:0b:d1:12:75:ab:cd:dd:ed:78: 18:5f:e9:47:1b:f4:06:96:7d:ea:23:a6:12:19:74: 6d:03:27:74:9e:b2:cb:cd:6f:bd:ff:87:5c:db:f4: 9a:bd:0c:23:7c:25:fb:0f:c2:f8:7f:0d:d9:54:e0: c5:1b:f1:6d:2b:f4:09:e5:85:85:75:57:db:62:c4: 69:3e:1c:e0:2d:77:14:74:6e:38:d3:bc:cd:20:b5: d7:c8:52:55:82:3b:9e:ba:95:be:05:78:19:7e:1e: 85:2b:0b:98:ba:af:88:bf:7d:50:ce:b0:f8:8c:4c: e0:27:9a:70:49:e7:f8:f8:fb:48:98:60:b5:03:13: 25:47:e7:9f:f8:80:71:52:2b:61:42:21:9c:35:fc: f2:ac:a2:c6:6b:af:00:90:03:19:0b:a6:a6:cb:ae: 20:f1:91:f3:ff:6f:09:53:c5:92:47:39:bc:10:9b: af:cd:e6:e2:b2:11:81:38:d4:fc:d7:46:e4:3e:d1: 87:ec:fa:b8:e4:9e:1f:a7:ab:17:97:fc:93:17:12: f7:4b:03:7d:25:52:cf:3f:47:9a:a7:f7:a0:b8:87: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AE:CE:06:8E:5F:EF:DB:90:73:E6:6B:36:27:0D:4A:C7:53:AF:F0 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fc:40:fc:10:92:31:bb:c7:3e:62:6d:df:f7:66:9e:d7:4a: bb:94:49:b6:ff:8e:69:8d:62:cc:32:05:9f:3d:a1:40:33:67: 94:a2:47:9e:30:16:40:4b:74:c9:4d:35:6d:f0:cc:7d:5d:a7: 05:d1:44:3d:2e:fc:10:d4:f3:c9:36:af:76:d9:24:50:52:39: ad:59:cb:d4:45:e3:0f:c5:10:56:d3:f7:be:88:fa:67:0d:15: 65:75:ec:05:fd:0e:3d:52:c9:e1:5c:82:c5:84:5e:46:96:bc: 5d:9d:9b:e0:57:fb:48:34:0e:9a:3a:f2:43:99:e4:66:1d:81: 94:93:4c:09:26:ea:80:16:7d:62:92:28:a4:80:53:4b:f4:eb: fd:92:3b:4d:43:b1:16:e4:60:d1:0f:04:e8:48:9c:61:41:f5: 55:cd:47:03:9a:ad:45:ea:e1:e6:9f:e4:97:ba:e0:27:d4:5d: 5f:65:55:85:52:c0:a2:de:33:42:d9:c1:4c:5f:93:c8:5c:05: 42:b2:3e:45:1c:f1:91:ea:1a:1e:6a:ff:aa:09:bf:b9:d6:8b: 2d:06:6a:7b:cd:fb:3a:d6:60:ce:91:24:41:e9:7e:75:2d:6f: b1:d8:db:d1:2d:ac:8c:6a:d7:81:19:ed:0a:53:71:29:20:33: 9d:8c:cd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rY5pOu4Wq8XCASwqIm8hsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwNzI5MDEwMDU5WhcNMjYwNzMwMDEwMDU5WjAzMTEwLwYDVQQD Eyg0N2FlY2UwNjhlNWZlZmRiOTA3M2U2NmIzNjI3MGQ0YWM3NTNhZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk1wIhHawtwyVrBQN4aXMsgv/DWC 4Zi+x7B5WoQCfGeyFw8L0RJ1q83d7XgYX+lHG/QGln3qI6YSGXRtAyd0nrLLzW+9 /4dc2/SavQwjfCX7D8L4fw3ZVODFG/FtK/QJ5YWFdVfbYsRpPhzgLXcUdG4407zN ILXXyFJVgjueupW+BXgZfh6FKwuYuq+Iv31QzrD4jEzgJ5pwSef4+PtImGC1AxMl R+ef+IBxUithQiGcNfzyrKLGa68AkAMZC6amy64g8ZHz/28JU8WSRzm8EJuvzebi shGBONT810bkPtGH7Pq45J4fp6sXl/yTFxL3SwN9JVLPP0eap/eguIchtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeuzgaOX+/bkHPmazYnDUrHU6/wMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPxA/BCS MbvHPmJt3/dmntdKu5RJtv+OaY1izDIFnz2hQDNnlKJHnjAWQEt0yU01bfDMfV2n BdFEPS78ENTzyTavdtkkUFI5rVnL1EXjD8UQVtP3voj6Zw0VZXXsBf0OPVLJ4VyC xYReRpa8XZ2b4Ff7SDQOmjryQ5nkZh2BlJNMCSbqgBZ9YpIopIBTS/Tr/ZI7TUOx FuRg0Q8E6EicYUH1Vc1HA5qtRerh5p/kl7rgJ9RdX2VVhVLAot4zQtnBTF+TyFwF QrI+RRzxkeoaHmr/qgm/udaLLQZqe837OtZgzpEkQel+dS1vsdjb0S2sjGrXgRnt ClNxKSAznYzNvQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:13 2026 by rpki-client