$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: OHaeBf7bO0QnO3DF23721Iw7tFfVrgg2oJEBXmPO+Po= Subject key identifier: 18:78:98:5D:48:20:30:B4:88:A2:E2:8C:BA:BA:9A:1A:05:3B:A8:9C Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019FA9AC0FF5B86C52AF955695C8D1F46746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0B4F Signing time: Tue 28 Jul 2026 17:00:53 +0000 Manifest this update: Tue 28 Jul 2026 17:00:53 +0000 Manifest next update: Wed 29 Jul 2026 17:00:53 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: mI+/iH7Jkm2lsfQU7KveK9KiMloj4yPxFhqNu4u86QE=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:0f:f5:b8:6c:52:af:95:56:95:c8:d1:f4:67:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jul 28 17:00:53 2026 GMT Not After : Jul 29 17:00:53 2026 GMT Subject: CN=1878985d482030b488a2e28cbaba9a1a053ba89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:e1:07:95:31:ad:c0:d3:31:76:42:50:16: f0:36:f8:02:09:26:ad:a1:17:13:36:13:bb:c1:75: ab:e0:26:6f:cc:e5:7d:c7:83:ab:ac:6a:43:71:e6: a8:c5:21:07:64:3f:cf:f9:7a:9e:e3:35:44:98:2f: 9e:4e:55:8f:f1:ed:d0:38:05:52:58:f9:70:f5:70: 71:66:53:ce:ad:09:23:6b:2f:81:f6:6e:ed:1d:e4: d3:9a:2c:f6:00:9b:b7:e8:ec:39:f4:e5:5c:21:72: 53:21:3c:d8:79:92:04:0f:de:4c:4b:9d:38:93:62: 03:6f:eb:8d:07:a5:d6:17:3f:b0:09:6d:6c:94:92: 0e:2b:0b:97:00:a9:40:d3:fe:0a:d2:42:fb:b9:6b: 3b:ca:25:e3:b6:ee:16:cf:07:55:4f:6f:79:0d:a5: 63:98:8e:72:1e:59:02:e0:4d:52:20:f2:9c:89:28: 2c:db:2b:bb:b2:6f:1b:43:e4:78:48:fc:c5:82:ca: 63:1e:8e:87:d1:1d:d0:59:be:07:9f:16:ca:0c:12: ce:b2:36:a5:32:ce:c5:f6:e5:ef:29:26:4d:eb:15: 2d:48:19:ad:64:2e:aa:fd:98:83:b1:73:15:89:4d: 98:03:4f:2a:e9:95:28:56:af:63:86:49:79:31:14: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:98:5D:48:20:30:B4:88:A2:E2:8C:BA:BA:9A:1A:05:3B:A8:9C X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:88:11:ff:b3:61:07:37:0b:66:21:70:73:ec:76:72:41:07: 90:39:ae:87:7c:89:69:80:6d:97:0d:79:5f:70:46:8e:66:fc: 27:f0:74:ec:47:6f:47:c3:bf:0d:16:9f:07:c7:c7:8b:0c:93: fd:0e:7b:ed:17:c3:09:81:da:ee:0c:d8:63:ca:01:38:8f:1d: 48:88:59:a8:24:67:ec:fd:52:0d:c3:17:23:bb:f0:d2:83:6c: 57:db:53:a8:8a:f4:a2:57:07:55:d3:11:b3:5d:5e:74:15:cf: 30:88:d1:c1:5f:f0:9b:be:a0:2e:45:64:d4:81:4d:95:88:79: 7a:f6:f2:64:28:0b:af:c0:5c:16:14:18:d0:1c:92:71:57:b9: f0:28:41:3c:a2:2c:ad:81:62:a3:79:11:1c:f9:16:fb:02:dc: d5:62:cd:45:c8:45:8a:89:cf:54:5f:31:bc:b8:9b:65:2f:da: 45:ed:98:ed:2a:1b:29:fc:c3:d2:a8:27:9c:3f:0e:db:bd:2e: 45:a6:e6:43:64:49:83:46:bc:45:cc:b3:55:dc:26:aa:74:33: d9:c4:87:7d:28:dd:6a:4a:6e:a0:00:fa:86:33:37:2d:75:2c: e7:a0:47:aa:4b:fc:da:f3:33:5a:cf:bd:72:8d:10:51:82:4c: f0:b5:06:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prA/1uGxSr5VWlcjR9GdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwNzI4MTcwMDUzWhcNMjYwNzI5MTcwMDUzWjAzMTEwLwYDVQQD EygxODc4OTg1ZDQ4MjAzMGI0ODhhMmUyOGNiYWJhOWExYTA1M2JhODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDhB5UxrcDTMXZCUBbwNvgCCSat oRcTNhO7wXWr4CZvzOV9x4OrrGpDceaoxSEHZD/P+Xqe4zVEmC+eTlWP8e3QOAVS WPlw9XBxZlPOrQkjay+B9m7tHeTTmiz2AJu36Ow59OVcIXJTITzYeZIED95MS504 k2IDb+uNB6XWFz+wCW1slJIOKwuXAKlA0/4K0kL7uWs7yiXjtu4WzwdVT295DaVj mI5yHlkC4E1SIPKciSgs2yu7sm8bQ+R4SPzFgspjHo6H0R3QWb4HnxbKDBLOsjal Ms7F9uXvKSZN6xUtSBmtZC6q/ZiDsXMViU2YA08q6ZUoVq9jhkl5MRQ4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh4mF1IIDC0iKLijLq6mhoFO6icMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbogR/7Nh BzcLZiFwc+x2ckEHkDmuh3yJaYBtlw15X3BGjmb8J/B07EdvR8O/DRafB8fHiwyT /Q577RfDCYHa7gzYY8oBOI8dSIhZqCRn7P1SDcMXI7vw0oNsV9tTqIr0olcHVdMR s11edBXPMIjRwV/wm76gLkVk1IFNlYh5evbyZCgLr8BcFhQY0ByScVe58ChBPKIs rYFio3kRHPkW+wLc1WLNRchFionPVF8xvLibZS/aRe2Y7SobKfzD0qgnnD8O270u RabmQ2RJg0a8RcyzVdwmqnQz2cSHfSjdakpuoAD6hjM3LXUs56BHqkv82vMzWs+9 co0QUYJM8LUGeg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:53:07 2026 by rpki-client