$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: UToxbtSuMwHQH2iiEpQSgVCuVn5kGiYjn/D//lPQuSE= Subject key identifier: 67:3C:B9:93:A6:B2:FB:09:AA:DA:72:E3:7B:37:B3:93:CF:B7:8C:3B Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019FA9759B1891208EF3395E7B66FB3001A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1A09 Signing time: Tue 28 Jul 2026 16:01:24 +0000 Manifest this update: Tue 28 Jul 2026 16:01:24 +0000 Manifest next update: Wed 29 Jul 2026 16:01:24 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: dkBQTOF9lLvpsTd2DWs+Rymt+2N9HftPgBwnGmQ8YDc=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:9b:18:91:20:8e:f3:39:5e:7b:66:fb:30:01:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Jul 28 16:01:24 2026 GMT Not After : Jul 29 16:01:24 2026 GMT Subject: CN=673cb993a6b2fb09aada72e37b37b393cfb78c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:51:0b:f9:bf:5c:47:28:20:99:b7:a0:6a: d4:22:5a:b3:78:fb:56:c3:2c:86:e4:5a:61:ab:c2: 69:6c:43:31:8e:44:78:de:00:7a:88:82:b8:ae:36: ac:c9:8e:6b:c3:7a:c1:ab:8b:72:c3:90:1a:f6:bf: 60:6f:74:04:8c:da:84:d4:78:5d:b7:59:0c:af:cf: 74:04:ab:6c:da:da:bc:12:01:fa:42:5d:dc:41:ab: 50:72:c1:60:cd:a0:33:cd:a2:c2:b0:7e:99:be:34: 04:26:34:a4:ff:0f:9b:51:a2:a2:43:1e:a8:ae:43: 24:d0:ec:0e:e4:28:28:90:0d:1d:dc:f7:a5:a3:7e: 7b:e4:ce:3e:b4:41:49:76:ab:22:a0:19:f3:ce:84: db:11:0b:71:32:18:4f:37:a5:f4:a7:3d:d5:24:ad: d9:95:5b:1c:96:d2:cb:01:38:32:bb:9d:69:76:e6: 89:66:9a:7d:e2:e4:84:a2:a3:83:80:e4:f1:21:ca: 94:10:b5:10:59:d0:ac:27:56:fc:81:1a:79:ea:21: 2e:78:42:37:a4:88:95:59:0e:d0:0e:5e:2d:54:d9: e7:c0:20:18:8e:a0:9b:ec:37:23:33:cf:09:57:85: cf:79:d2:5f:44:bf:1a:16:69:f7:6b:73:9c:9d:22: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:B9:93:A6:B2:FB:09:AA:DA:72:E3:7B:37:B3:93:CF:B7:8C:3B X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a8:e0:a7:3a:37:15:0e:d2:26:fc:0b:46:1a:f0:18:7b:87: 2e:c3:51:d1:56:a0:cf:50:9d:0e:95:fa:eb:74:74:20:38:80: 47:d8:25:d0:09:2d:57:75:61:ec:ba:83:2c:3d:f2:5a:7f:66: cf:e0:9e:a8:a8:73:fa:3a:2e:a9:27:1e:80:99:4b:f6:58:a5: fb:21:c7:00:9e:13:2d:2b:b9:b4:95:80:bc:19:2d:a8:62:3d: e7:ba:35:1d:35:8c:fd:19:b6:9d:57:3e:ee:2c:a2:2e:a9:3d: 50:33:32:bf:2c:8c:6b:cb:47:3d:c1:12:73:bb:60:3a:b3:07: 35:60:12:35:3f:97:82:9d:90:8e:bb:58:44:60:bf:ec:c9:c6: ee:41:e2:1c:41:4f:48:9e:be:8b:fc:de:c9:2e:05:27:94:4d: 95:08:b0:cd:24:ef:36:3b:ec:d4:f6:05:48:d6:11:76:54:90: 67:6b:68:43:16:7e:fb:21:18:6f:1c:d3:1b:17:09:5c:23:48: 89:cd:77:b5:07:6d:cf:6f:7b:97:b3:38:b9:9a:be:0c:09:f6: 8e:0a:c8:40:3d:97:a7:c7:72:60:e0:48:3a:fd:8c:4d:4d:fd: 94:8d:8f:ff:f3:26:e1:12:32:34:0b:ce:8b:57:6d:ea:25:3b: 65:c5:cc:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdZsYkSCO8zlee2b7MAGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwNzI4MTYwMTI0WhcNMjYwNzI5MTYwMTI0WjAzMTEwLwYDVQQD Eyg2NzNjYjk5M2E2YjJmYjA5YWFkYTcyZTM3YjM3YjM5M2NmYjc4YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlghRC/m/XEcoIJm3oGrUIlqzePtW wyyG5Fphq8JpbEMxjkR43gB6iIK4rjasyY5rw3rBq4tyw5Aa9r9gb3QEjNqE1Hhd t1kMr890BKts2tq8EgH6Ql3cQatQcsFgzaAzzaLCsH6ZvjQEJjSk/w+bUaKiQx6o rkMk0OwO5CgokA0d3Pelo3575M4+tEFJdqsioBnzzoTbEQtxMhhPN6X0pz3VJK3Z lVscltLLATgyu51pduaJZpp94uSEoqODgOTxIcqUELUQWdCsJ1b8gRp56iEueEI3 pIiVWQ7QDl4tVNnnwCAYjqCb7DcjM88JV4XPedJfRL8aFmn3a3OcnSK2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc8uZOmsvsJqtpy43s3s5PPt4w7MB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuajgpzo3 FQ7SJvwLRhrwGHuHLsNR0Vagz1CdDpX663R0IDiAR9gl0AktV3Vh7LqDLD3yWn9m z+CeqKhz+jouqScegJlL9lil+yHHAJ4TLSu5tJWAvBktqGI957o1HTWM/Rm2nVc+ 7iyiLqk9UDMyvyyMa8tHPcESc7tgOrMHNWASNT+Xgp2QjrtYRGC/7MnG7kHiHEFP SJ6+i/zeyS4FJ5RNlQiwzSTvNjvs1PYFSNYRdlSQZ2toQxZ++yEYbxzTGxcJXCNI ic13tQdtz297l7M4uZq+DAn2jgrIQD2Xp8dyYOBIOv2MTU39lI2P//Mm4RIyNAvO i1dt6iU7ZcXMtw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:01:49 2026 by rpki-client