$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: Rd0GLrSnrGWScxGoifOzOb3EHsmyCNu/s2FNCJN4Frk= Subject key identifier: CA:D6:14:EE:30:72:4F:23:D3:D6:06:CA:68:F0:1B:15:B4:F4:8C:B5 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019FAB631B8CBFBD72621B1AF97420307F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1A17 Signing time: Wed 29 Jul 2026 01:00:26 +0000 Manifest this update: Wed 29 Jul 2026 01:00:26 +0000 Manifest next update: Thu 30 Jul 2026 01:00:26 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: sHevLl4oZgl+uxWJIB2kwunESzlG9y5Tck3ooM3Py6Y=) 7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=) 11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=) 12: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=) 13: sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa (hash: b1OuAlU0+cSQfcjeLb3gpe1ABMzAcbi57g2ciFKHZfA=) 14: sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa (hash: 13ubUUikB/ayAhjAv3tgoeX0xlseT2rnUuFrpyiC5X0=) 15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:63:1b:8c:bf:bd:72:62:1b:1a:f9:74:20:30:7f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jul 29 01:00:26 2026 GMT Not After : Jul 30 01:00:26 2026 GMT Subject: CN=cad614ee30724f23d3d606ca68f01b15b4f48cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:93:08:ed:d6:4c:80:12:dd:b0:50:c4:e2: d8:e6:66:d1:03:fb:92:31:bc:12:a0:ec:b1:e0:d0: 17:3e:e1:3d:7d:ac:45:e6:cc:7e:f0:39:c6:4f:2d: 73:93:9b:3d:ef:57:ba:b2:63:c8:e3:b7:a7:8d:4e: f0:ea:17:e8:e4:6e:b4:c7:9a:f4:ea:0c:41:b1:48: 9d:af:9a:09:8a:92:6c:b1:3d:d7:ea:0e:21:93:cb: 62:c4:90:a8:2e:41:a2:b6:03:81:f6:86:80:43:cb: 44:8d:c7:e6:c7:1e:44:1e:9c:e5:9e:b7:1b:ef:4f: 82:55:dc:c0:5c:00:92:05:e3:a1:1d:96:53:e6:53: 2f:e4:a7:b0:5e:4f:fb:9d:86:19:23:2c:85:35:06: 86:b8:ae:c0:07:dd:49:19:94:09:09:a1:54:b1:94: 9d:34:de:3a:8b:d5:ff:7d:00:dd:83:70:83:1e:71: 12:47:21:79:cc:26:21:26:c0:ae:b8:f0:69:8f:db: 2a:cd:6e:ef:91:72:f2:28:d4:fc:c7:d0:da:62:e3: bd:d8:05:92:b2:94:77:07:1a:26:70:bc:e5:f8:e1: c7:75:45:08:17:8c:5a:b4:ae:14:84:21:cb:aa:f1: 84:5d:0b:67:d3:a0:c0:6f:b9:d1:a5:58:e2:7c:c4: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:14:EE:30:72:4F:23:D3:D6:06:CA:68:F0:1B:15:B4:F4:8C:B5 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8b:ca:0f:96:94:4a:50:bd:4a:01:a9:7c:4c:ba:d0:74:71: 17:39:87:3f:17:20:7f:04:85:1d:90:53:c2:9c:ea:c1:b4:cd: 68:b8:9c:7b:a7:62:19:1c:61:1d:09:c9:01:fb:ca:f7:ba:94: 7d:dc:0f:b2:98:fa:b2:4d:de:a1:ee:0f:3d:52:70:13:4d:43: c1:88:bc:db:f8:ee:8e:4d:90:f5:7b:ce:2e:c0:d3:5b:dc:ee: fc:88:ce:94:75:9f:60:35:c1:65:dc:a7:c1:df:d9:5f:88:a1: f2:00:19:20:dd:09:70:3c:3c:84:08:cd:92:4c:fa:12:c1:67: 37:84:4d:53:ac:3c:de:5d:d9:db:7f:2d:2b:b5:76:57:c3:27: fc:ad:65:b8:25:94:98:20:45:9f:fa:11:b3:94:b8:92:11:81: 1d:a4:2b:36:b1:f0:23:03:a9:08:b3:90:e8:55:5d:54:8f:7a: 77:e3:66:3d:71:95:c4:da:af:6b:6d:01:19:c3:56:cf:9c:09: 63:5f:5a:10:99:4e:4b:e9:8d:62:2a:6e:9b:bc:04:90:1b:9c: 0e:3e:1e:70:53:03:4a:79:22:6d:96:c3:5e:71:3b:5c:d2:c3: 8c:a1:1d:58:d2:ea:4c:a6:20:51:e0:f3:6d:4a:10:d2:f9:cd: d6:df:44:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rYxuMv71yYhsa+XQgMH9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwNzI5MDEwMDI2WhcNMjYwNzMwMDEwMDI2WjAzMTEwLwYDVQQD EyhjYWQ2MTRlZTMwNzI0ZjIzZDNkNjA2Y2E2OGYwMWIxNWI0ZjQ4Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hqTCO3WTIAS3bBQxOLY5mbRA/uS MbwSoOyx4NAXPuE9faxF5sx+8DnGTy1zk5s971e6smPI47enjU7w6hfo5G60x5r0 6gxBsUidr5oJipJssT3X6g4hk8tixJCoLkGitgOB9oaAQ8tEjcfmxx5EHpzlnrcb 70+CVdzAXACSBeOhHZZT5lMv5KewXk/7nYYZIyyFNQaGuK7AB91JGZQJCaFUsZSd NN46i9X/fQDdg3CDHnESRyF5zCYhJsCuuPBpj9sqzW7vkXLyKNT8x9DaYuO92AWS spR3BxomcLzl+OHHdUUIF4xatK4UhCHLqvGEXQtn06DAb7nRpVjifMTJyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrWFO4wck8j09YGymjwGxW09Iy1MB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIvKD5aU SlC9SgGpfEy60HRxFzmHPxcgfwSFHZBTwpzqwbTNaLice6diGRxhHQnJAfvK97qU fdwPspj6sk3eoe4PPVJwE01DwYi82/jujk2Q9XvOLsDTW9zu/IjOlHWfYDXBZdyn wd/ZX4ih8gAZIN0JcDw8hAjNkkz6EsFnN4RNU6w83l3Z238tK7V2V8Mn/K1luCWU mCBFn/oRs5S4khGBHaQrNrHwIwOpCLOQ6FVdVI96d+NmPXGVxNqva20BGcNWz5wJ Y19aEJlOS+mNYipum7wEkBucDj4ecFMDSnkibZbDXnE7XNLDjKEdWNLqTKYgUeDz bUoQ0vnN1t9E8A== -----END CERTIFICATE-----Generated at Wed Jul 29 04:02:49 2026 by rpki-client