$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: d0CPt840euMIkYioRo76Ma/v2V6SDGP7QjWjYPhyEfc= Subject key identifier: 3D:8F:76:05:4E:5B:38:FA:CD:54:59:73:DA:4A:F1:89:D3:FE:71:B6 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019FA9AC093C6005B02AFB696E4418CDFED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1697 Signing time: Tue 28 Jul 2026 17:00:51 +0000 Manifest this update: Tue 28 Jul 2026 17:00:51 +0000 Manifest next update: Wed 29 Jul 2026 17:00:51 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 3: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 4: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 5: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 6: ZFC2U3uQIhdNpB72KbpGlziRc2o.roa (hash: z5uebA6QMfVds8/qjjHA8y0xgv3fGyNQU+YomK8H6Hs=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: BWeLVJxqh5DyU/R8U0m9EemBcBs0Qv7QBJ4TXtD/S9o=) 9: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (hash: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=) 10: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:09:3c:60:05:b0:2a:fb:69:6e:44:18:cd:fe:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jul 28 17:00:51 2026 GMT Not After : Jul 29 17:00:51 2026 GMT Subject: CN=3d8f76054e5b38facd545973da4af189d3fe71b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:c9:72:52:a2:c4:10:ca:9a:ed:31:b0:7b: 7f:f7:1d:a3:d0:29:15:b2:5b:d2:f8:66:1c:fe:7a: 5f:8f:b2:ac:05:99:00:18:c6:2a:05:35:47:d4:67: 54:80:0d:2e:bd:20:2b:e0:8b:1a:6b:ae:f4:07:33: 91:e9:b6:3b:5f:27:90:8c:c5:c8:3d:44:2a:f4:56: 4e:c1:8c:39:f6:8f:92:01:c9:10:06:1a:48:ec:de: c4:02:60:5f:cd:ee:44:b7:c9:ae:e9:4b:72:5c:b8: 19:6f:49:28:f8:0f:2e:63:fe:eb:43:39:62:af:cd: 59:9d:ef:39:81:fc:dc:74:0a:64:f0:ad:56:fb:31: e2:e5:17:06:50:6e:e9:7d:65:22:7a:9d:90:03:68: 32:13:e5:21:25:f7:62:3b:a2:fc:93:4d:ec:70:52: 5b:e2:28:aa:6b:83:84:9e:20:f9:06:76:4a:ac:99: 49:6d:ab:cf:ff:f2:47:8b:70:d4:10:05:ab:69:e6: c4:1a:01:d2:ae:03:89:4b:91:6e:38:ed:6a:39:aa: e5:93:0f:d1:e7:91:6e:38:2c:45:9e:73:cb:58:12: 38:1e:3b:ff:52:1f:84:13:ca:41:06:86:e2:6c:6d: 05:57:17:1e:59:28:44:20:b7:26:95:e8:5e:98:f8: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:76:05:4E:5B:38:FA:CD:54:59:73:DA:4A:F1:89:D3:FE:71:B6 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:58:92:b7:0c:ef:38:c8:58:22:dc:6c:98:ee:52:22:3e:08: 03:38:f6:97:b2:47:e2:7c:0d:0c:18:ad:91:4b:26:64:71:09: 6c:87:12:53:9e:df:69:0f:bc:fe:c2:61:b7:85:10:ab:f4:46: bf:54:1d:1c:71:f3:c3:22:46:c7:01:67:d4:11:95:d7:2e:71: cc:f4:1a:58:3b:e8:21:cd:51:c2:34:bc:3f:e9:24:81:81:92: a8:4d:9e:04:03:48:d0:a0:12:15:53:32:ec:03:1d:e2:4b:28: db:c7:a4:9d:65:56:59:b0:16:a0:a9:2e:a9:67:a9:cb:57:aa: 81:10:71:40:16:af:42:89:e5:0e:16:b1:69:03:db:a9:41:64: 61:a2:8d:bf:94:cc:2e:31:43:2f:2b:1a:06:9f:c8:33:41:c4: 45:ab:8e:12:e2:79:21:42:ff:01:34:c4:a8:22:90:41:ff:03: 82:68:32:ee:fd:37:ef:19:ef:c9:dd:7b:ab:85:e2:79:82:cd: 9d:1a:84:d7:ba:0e:a9:6c:bd:5b:65:79:c0:13:aa:17:14:68: 45:8f:4c:d7:46:24:7b:25:b1:c1:7f:11:fa:00:b8:8e:89:7f: 21:ee:86:01:fc:3f:3c:57:41:8f:df:0d:dd:14:d1:e3:ba:fe: fb:f8:96:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prAk8YAWwKvtpbkQYzf7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwNzI4MTcwMDUxWhcNMjYwNzI5MTcwMDUxWjAzMTEwLwYDVQQD EygzZDhmNzYwNTRlNWIzOGZhY2Q1NDU5NzNkYTRhZjE4OWQzZmU3MWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBfJclKixBDKmu0xsHt/9x2j0CkV slvS+GYc/npfj7KsBZkAGMYqBTVH1GdUgA0uvSAr4Isaa670BzOR6bY7XyeQjMXI PUQq9FZOwYw59o+SAckQBhpI7N7EAmBfze5Et8mu6UtyXLgZb0ko+A8uY/7rQzli r81Zne85gfzcdApk8K1W+zHi5RcGUG7pfWUiep2QA2gyE+UhJfdiO6L8k03scFJb 4iiqa4OEniD5BnZKrJlJbavP//JHi3DUEAWraebEGgHSrgOJS5FuOO1qOarlkw/R 55FuOCxFnnPLWBI4Hjv/Uh+EE8pBBobibG0FVxceWShEILcmlehemPjqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2PdgVOWzj6zVRZc9pK8YnT/nG2MB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFiStwzv OMhYItxsmO5SIj4IAzj2l7JH4nwNDBitkUsmZHEJbIcSU57faQ+8/sJht4UQq/RG v1QdHHHzwyJGxwFn1BGV1y5xzPQaWDvoIc1RwjS8P+kkgYGSqE2eBANI0KASFVMy 7AMd4kso28eknWVWWbAWoKkuqWepy1eqgRBxQBavQonlDhaxaQPbqUFkYaKNv5TM LjFDLysaBp/IM0HERauOEuJ5IUL/ATTEqCKQQf8Dgmgy7v037xnvyd17q4XieYLN nRqE17oOqWy9W2V5wBOqFxRoRY9M10YkeyWxwX8R+gC4jol/Ie6GAfw/PFdBj98N 3RTR47r++/iWwA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:14:23 2026 by rpki-client