$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: 62cb6/ZqXZyNkDFEES36EvWR40EBwCYuETvx3ge2PHk= Subject key identifier: 6C:63:45:57:12:B3:E0:FE:96:4B:B3:E8:16:B3:08:8D:98:B6:28:14 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019FAABE5795CEDD763035C97574B66FC7DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 01C1 Signing time: Tue 28 Jul 2026 22:00:28 +0000 Manifest this update: Tue 28 Jul 2026 22:00:28 +0000 Manifest next update: Wed 29 Jul 2026 22:00:28 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: srVpM9MUIz3lMniBIDXRNSMEO4WD60x5L1Q74PhXioU=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:57:95:ce:dd:76:30:35:c9:75:74:b6:6f:c7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Jul 28 22:00:28 2026 GMT Not After : Jul 29 22:00:28 2026 GMT Subject: CN=6c63455712b3e0fe964bb3e816b3088d98b62814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:0a:7d:48:06:ea:4b:ff:fe:8a:2e:06:1d: 24:5e:99:98:7c:8d:31:89:a0:3c:ba:d3:66:05:d9: e2:ef:3d:81:ad:8f:a6:ee:64:6c:73:7f:cb:e0:9d: a3:42:6e:a7:56:83:d2:5a:06:06:31:04:20:0a:46: 96:73:01:d3:8d:9a:61:b8:ad:2a:77:d5:1b:c5:7c: 1b:27:84:bc:67:ae:ef:61:0d:c4:ef:c7:02:f1:2a: 39:ca:e4:38:d3:78:60:65:92:3f:be:36:e8:7d:6b: 52:23:c7:d0:d1:a9:66:ac:0a:8a:94:b7:8e:36:aa: dd:2b:b9:b3:92:88:49:72:02:5c:49:a5:bc:2f:95: 6b:56:3a:d7:2d:09:a3:c1:fd:58:87:ac:b1:08:71: 98:42:03:69:78:ed:c3:68:0b:48:10:b0:f4:ab:6c: c3:a2:88:e9:a8:cf:36:18:c5:43:5a:75:ce:f8:a4: 9d:bb:2e:cf:58:71:c4:00:41:4e:c5:06:df:9e:7f: 20:d7:29:a2:21:8c:c0:c1:bc:f1:8b:9b:61:46:eb: 97:ad:d5:36:68:ca:61:0a:a9:99:50:4d:a6:7e:a9: fd:17:1f:63:6a:67:ee:4f:6a:e6:97:3d:42:fe:6d: 20:91:2c:d3:28:fc:2e:a1:f7:6e:38:08:6f:39:2d: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:45:57:12:B3:E0:FE:96:4B:B3:E8:16:B3:08:8D:98:B6:28:14 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:34:80:d7:b8:fc:64:c1:46:c1:d2:0d:d0:75:5d:34:9b:94: 1b:fc:2e:45:4f:1c:15:15:7d:ad:68:76:12:9f:6d:a7:e9:ce: 27:d4:8b:4e:bd:a9:36:d5:09:48:fb:6f:e5:84:fc:a7:0c:93: 4d:03:7f:0e:3c:22:26:4e:86:f0:a2:7f:21:18:f4:e6:94:52: 92:77:21:de:1b:42:98:6c:1f:4c:4b:98:a1:28:d3:5f:17:19: 66:63:61:eb:8c:e3:fe:f6:ea:10:51:34:28:d6:cd:71:fe:60: 1a:08:3b:09:3e:00:56:d3:bf:24:6f:43:d9:07:7a:de:c1:d0: b3:c7:79:44:35:58:a9:52:db:2f:66:a5:bd:65:d6:71:b5:53: 3c:d3:63:55:a6:06:06:d9:5d:e0:f1:af:89:0c:11:5f:e2:fe: b1:bf:56:e4:9d:2e:22:63:5a:ee:1d:87:61:8d:74:f1:76:96: 05:67:ae:98:74:cb:9b:8b:69:95:de:a8:08:d4:64:95:d3:6e: 4f:67:3d:f9:f5:fb:0a:17:d2:d8:de:16:68:20:df:c2:4c:77: 3d:4d:4d:85:bb:32:94:cf:2b:a3:6f:ca:8f:c5:32:0b:8f:4c: 02:d9:70:75:41:88:bd:b2:70:d1:25:f9:21:9f:76:e4:c2:5f: a1:4a:fc:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvleVzt12MDXJdXS2b8fdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNzI4MjIwMDI4WhcNMjYwNzI5MjIwMDI4WjAzMTEwLwYDVQQD Eyg2YzYzNDU1NzEyYjNlMGZlOTY0YmIzZTgxNmIzMDg4ZDk4YjYyODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15gKfUgG6kv//oouBh0kXpmYfI0x iaA8utNmBdni7z2BrY+m7mRsc3/L4J2jQm6nVoPSWgYGMQQgCkaWcwHTjZphuK0q d9UbxXwbJ4S8Z67vYQ3E78cC8So5yuQ403hgZZI/vjbofWtSI8fQ0almrAqKlLeO NqrdK7mzkohJcgJcSaW8L5VrVjrXLQmjwf1Yh6yxCHGYQgNpeO3DaAtIELD0q2zD oojpqM82GMVDWnXO+KSduy7PWHHEAEFOxQbfnn8g1ymiIYzAwbzxi5thRuuXrdU2 aMphCqmZUE2mfqn9Fx9jamfuT2rmlz1C/m0gkSzTKPwuofduOAhvOS03LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxjRVcSs+D+lkuz6BazCI2YtigUMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzSA17j8 ZMFGwdIN0HVdNJuUG/wuRU8cFRV9rWh2Ep9tp+nOJ9SLTr2pNtUJSPtv5YT8pwyT TQN/DjwiJk6G8KJ/IRj05pRSknch3htCmGwfTEuYoSjTXxcZZmNh64zj/vbqEFE0 KNbNcf5gGgg7CT4AVtO/JG9D2Qd63sHQs8d5RDVYqVLbL2alvWXWcbVTPNNjVaYG Btld4PGviQwRX+L+sb9W5J0uImNa7h2HYY108XaWBWeumHTLm4tpld6oCNRkldNu T2c9+fX7ChfS2N4WaCDfwkx3PU1NhbsylM8ro2/Kj8UyC49MAtlwdUGIvbJw0SX5 IZ925MJfoUr84A== -----END CERTIFICATE-----Generated at Wed Jul 29 01:00:24 2026 by rpki-client