$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: IMwrVhHp0nfOm9TrBybpxs6ox2pPiK52thuQwf0MFd0= Subject key identifier: A1:3C:B5:EA:ED:0D:DD:1D:23:4E:BE:61:C9:5F:B7:B3:BB:9F:5E:77 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019FAAF559BFCB769CB9FA823F68A0DC6BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 19F4 Signing time: Tue 28 Jul 2026 23:00:33 +0000 Manifest this update: Tue 28 Jul 2026 23:00:33 +0000 Manifest next update: Wed 29 Jul 2026 23:00:33 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: vu2pnlXsEfeAR3Nqm/rcGOy9YvZ/BrPNAMPlT159HJM=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: SRWh4DySnbPbtUqnKudLh37LWmk.roa (hash: 3VUWYpD5nskw9fhQcV0TB/lPM9InR0vwQ+h1mvelWpc=) 12: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 13: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) 15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:59:bf:cb:76:9c:b9:fa:82:3f:68:a0:dc:6b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jul 28 23:00:33 2026 GMT Not After : Jul 29 23:00:33 2026 GMT Subject: CN=a13cb5eaed0ddd1d234ebe61c95fb7b3bb9f5e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:15:0b:dc:82:5d:9f:65:91:52:7b:9d:a9: 99:95:a4:20:50:46:e2:56:96:be:2c:9a:ea:a3:03: 3d:98:b0:a4:7f:17:99:c8:63:8c:69:01:af:d0:29: 2b:47:80:ea:a8:52:c6:94:14:9e:d1:c3:0d:ae:f5: a2:f9:4c:ea:3e:c3:54:a2:95:64:89:52:e4:bb:d6: 80:23:61:13:f5:6c:20:41:6b:05:80:89:62:e0:b3: 4d:42:a8:31:cb:58:8a:df:03:1a:a2:4c:0c:68:96: 48:86:99:df:9c:c7:50:e7:d3:f6:d9:3e:ae:cc:4b: 16:68:12:fb:26:b0:47:a0:77:8d:d5:e6:a7:3c:d7: e3:70:25:80:74:70:bb:dc:75:1f:ce:10:65:a4:11: f7:6b:47:5d:b0:e3:18:ca:30:87:db:05:98:5d:22: b6:98:e9:48:01:28:97:55:c3:59:7c:b5:a3:3c:dc: 23:ce:40:15:2d:92:b9:9d:34:ea:1c:9e:15:93:55: 6e:5d:45:7f:bf:9f:56:a5:fc:fe:cc:c3:b0:c1:cc: ee:70:d9:b3:9e:44:66:8e:cb:72:0f:0c:2c:c8:f0: 50:52:29:6e:8d:4c:6f:d1:14:90:bc:4b:81:b7:66: ef:a8:9d:2b:38:90:55:8d:1a:eb:f2:cd:19:a9:bc: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3C:B5:EA:ED:0D:DD:1D:23:4E:BE:61:C9:5F:B7:B3:BB:9F:5E:77 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0c:5d:95:f3:8c:93:a3:07:1c:85:d2:a8:6f:a0:d3:5d:02: e3:64:70:d0:18:2c:1a:a5:31:00:e9:73:ed:3b:d4:bf:e0:2d: c4:9c:c5:a7:a9:7e:9d:22:c2:65:12:17:57:79:66:c5:97:4a: f0:6f:d4:4c:19:3c:c2:26:ab:12:5a:61:da:b8:c4:77:71:d2: ca:c2:85:e5:ad:ee:ee:cd:81:44:f8:57:61:93:c1:79:bf:95: 80:ff:c3:66:3e:b7:9a:aa:2e:88:ba:ed:c4:30:54:63:93:aa: a6:2a:1a:53:3e:0a:8a:1c:05:1b:06:3f:10:e7:cc:c0:43:cf: f6:c6:ac:5a:63:2d:37:b7:3b:07:fa:10:47:03:df:90:0d:1f: 0a:93:9b:9b:73:eb:d1:e0:07:f9:60:79:b4:a7:2b:47:17:5c: 5d:4b:47:29:c0:b6:10:8f:43:ea:60:d9:e7:9e:04:20:f4:00: e4:f2:73:7c:44:7d:3f:00:48:7b:a0:52:dd:42:d0:b1:9e:fe: ad:3e:7b:61:d5:08:b1:a1:c4:45:c5:52:f9:08:fd:fe:e3:a8: 48:c9:7a:45:9e:10:6b:8d:58:85:6b:62:ee:f8:18:8b:54:68: 83:50:20:ed:a2:e9:84:4f:7a:fc:71:f2:33:5d:90:0d:71:63: 76:bf:3c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9Vm/y3acufqCP2ig3GvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNzI4MjMwMDMzWhcNMjYwNzI5MjMwMDMzWjAzMTEwLwYDVQQD EyhhMTNjYjVlYWVkMGRkZDFkMjM0ZWJlNjFjOTVmYjdiM2JiOWY1ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4QVC9yCXZ9lkVJ7namZlaQgUEbi Vpa+LJrqowM9mLCkfxeZyGOMaQGv0CkrR4DqqFLGlBSe0cMNrvWi+UzqPsNUopVk iVLku9aAI2ET9WwgQWsFgIli4LNNQqgxy1iK3wMaokwMaJZIhpnfnMdQ59P22T6u zEsWaBL7JrBHoHeN1eanPNfjcCWAdHC73HUfzhBlpBH3a0ddsOMYyjCH2wWYXSK2 mOlIASiXVcNZfLWjPNwjzkAVLZK5nTTqHJ4Vk1VuXUV/v59Wpfz+zMOwwczucNmz nkRmjstyDwwsyPBQUilujUxv0RSQvEuBt2bvqJ0rOJBVjRrr8s0ZqbxZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE8tertDd0dI06+Yclft7O7n153MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQxdlfOM k6MHHIXSqG+g010C42Rw0BgsGqUxAOlz7TvUv+AtxJzFp6l+nSLCZRIXV3lmxZdK 8G/UTBk8wiarElph2rjEd3HSysKF5a3u7s2BRPhXYZPBeb+VgP/DZj63mqouiLrt xDBUY5OqpioaUz4KihwFGwY/EOfMwEPP9sasWmMtN7c7B/oQRwPfkA0fCpObm3Pr 0eAH+WB5tKcrRxdcXUtHKcC2EI9D6mDZ554EIPQA5PJzfER9PwBIe6BS3ULQsZ7+ rT57YdUIsaHERcVS+Qj9/uOoSMl6RZ4Qa41YhWti7vgYi1Rog1Ag7aLphE96/HHy M12QDXFjdr88ZA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:57:00 2026 by rpki-client