$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: q1KlbsbllA53IhZkFrAhkrj0//sJpC69ZfmrSm7Uosk= Subject key identifier: 49:64:AA:BA:40:B5:C4:E8:57:70:21:01:59:7B:06:14:1D:E3:CC:44 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 019FAC762AEDE9FB8E2F6AB7A13A6DFC201E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: 4F Signing time: Wed 29 Jul 2026 06:00:53 +0000 Manifest this update: Wed 29 Jul 2026 06:00:53 +0000 Manifest next update: Thu 30 Jul 2026 06:00:53 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: KUhwqO5QTLLE3h6GI7iCefbmzAVZ3wH5B/qLDHvqWfg=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa (hash: xruXaUcy87Eg8MhTGHBVaGMg8Mu4blgygDn6oYs8oqo=) 10: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 11: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 12: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:76:2a:ed:e9:fb:8e:2f:6a:b7:a1:3a:6d:fc:20:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Jul 29 06:00:53 2026 GMT Not After : Jul 30 06:00:53 2026 GMT Subject: CN=4964aaba40b5c4e857702101597b06141de3cc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:a8:0d:d7:a1:fb:0b:10:0b:07:4e:d5:61: f9:cc:33:d9:04:56:f0:af:f3:61:d8:d4:9a:86:b3: d7:4d:b2:8f:6e:1f:36:a4:38:12:45:9c:f8:6b:39: 35:4a:e7:be:07:7a:e6:23:bb:22:19:15:98:d6:5c: 23:b2:ed:40:d8:e0:fd:3d:2d:82:ff:e2:8d:1c:91: ee:ca:30:4d:6a:8c:bd:e2:44:9c:ef:0c:88:e2:17: e5:a5:0b:94:25:20:5d:1b:fd:11:de:dd:65:a9:89: d8:19:86:cf:f2:1a:14:09:a5:42:21:ee:f6:d8:03: e6:41:cf:f9:a5:a5:96:2d:82:6f:a8:62:e6:a0:22: 6e:39:e9:8a:6e:dc:55:da:ba:8b:88:17:ad:8e:6f: 40:61:4f:8e:d4:7e:61:6a:e5:e1:e9:37:b9:e6:6f: 29:81:88:65:87:82:89:e0:92:8e:eb:a2:bc:fe:41: 7d:46:32:66:b6:c2:59:df:ef:aa:95:b5:dd:7a:41: 69:f1:58:7c:45:d2:e2:05:7f:2b:fb:bb:92:79:b5: d3:39:81:ee:9f:e0:b2:df:63:f8:e2:bf:19:7b:75: a8:14:3f:e1:42:64:82:46:3a:3a:2a:c3:b2:6a:b5: eb:f0:22:80:e3:33:f3:62:52:09:04:50:33:f2:09: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:AA:BA:40:B5:C4:E8:57:70:21:01:59:7B:06:14:1D:E3:CC:44 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:d7:de:3a:b1:c6:8d:74:97:31:81:74:94:1f:df:16:82: 1a:f5:ae:6c:22:51:25:91:d8:4b:5a:98:c6:ee:ac:fb:94:1e: b9:35:68:85:0c:fb:35:55:45:d0:c1:20:27:0d:13:dd:fd:3e: ec:84:c5:01:e3:69:47:34:0b:c3:98:ff:a7:d9:95:b4:18:4e: 7a:42:23:e9:26:20:32:14:b5:d5:74:b8:d3:94:fb:4d:2d:eb: 32:75:c6:de:04:64:30:be:2d:67:3e:2b:66:97:09:d0:30:95: 43:bb:2e:38:d4:95:90:8d:8f:6d:a1:9f:18:73:7b:73:35:8c: 1d:ba:8f:e9:a1:f4:9f:21:88:28:55:51:90:37:ca:6b:46:d3: 53:55:03:90:d1:a6:d4:17:d8:1a:9e:17:30:5c:44:7f:54:93: 9b:5d:c2:4d:84:b1:0b:8a:a2:bb:06:72:a4:60:55:06:03:f8: 18:c6:36:d7:b0:3c:e2:a3:3a:7a:5f:b3:a8:dc:82:4c:15:dc: 03:73:8d:08:96:59:73:ef:73:a4:51:5e:16:33:4c:ae:d4:7f: 04:47:8e:0b:8b:0e:71:c4:01:22:14:c1:84:a0:1a:7b:f2:32: 07:59:e3:62:8c:f4:1e:73:b1:c5:af:33:ec:52:9b:86:1e:a1: 22:d7:21:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sdirt6fuOL2q3oTpt/CAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYwNzI5MDYwMDUzWhcNMjYwNzMwMDYwMDUzWjAzMTEwLwYDVQQD Eyg0OTY0YWFiYTQwYjVjNGU4NTc3MDIxMDE1OTdiMDYxNDFkZTNjYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/aoDdeh+wsQCwdO1WH5zDPZBFbw r/Nh2NSahrPXTbKPbh82pDgSRZz4azk1Sue+B3rmI7siGRWY1lwjsu1A2OD9PS2C /+KNHJHuyjBNaoy94kSc7wyI4hflpQuUJSBdG/0R3t1lqYnYGYbP8hoUCaVCIe72 2APmQc/5paWWLYJvqGLmoCJuOemKbtxV2rqLiBetjm9AYU+O1H5hauXh6Te55m8p gYhlh4KJ4JKO66K8/kF9RjJmtsJZ3++qlbXdekFp8Vh8RdLiBX8r+7uSebXTOYHu n+Cy32P44r8Ze3WoFD/hQmSCRjo6KsOyarXr8CKA4zPzYlIJBFAz8gnjzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElkqrpAtcToV3AhAVl7BhQd48xEMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC7X3jqx xo10lzGBdJQf3xaCGvWubCJRJZHYS1qYxu6s+5QeuTVohQz7NVVF0MEgJw0T3f0+ 7ITFAeNpRzQLw5j/p9mVtBhOekIj6SYgMhS11XS405T7TS3rMnXG3gRkML4tZz4r ZpcJ0DCVQ7suONSVkI2PbaGfGHN7czWMHbqP6aH0nyGIKFVRkDfKa0bTU1UDkNGm 1BfYGp4XMFxEf1STm13CTYSxC4qiuwZypGBVBgP4GMY217A84qM6el+zqNyCTBXc A3ONCJZZc+9zpFFeFjNMrtR/BEeOC4sOccQBIhTBhKAae/IyB1njYoz0HnOxxa8z 7FKbhh6hItchWQ== -----END CERTIFICATE-----Generated at Wed Jul 29 09:02:40 2026 by rpki-client