$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json) Hash identifier: c76uV4w/U7R+5LsCPUXIoQKqRcG4kPle9QLVUdgh3Os= Subject key identifier: 89:4D:FE:2E:14:4C:8D:5E:C5:59:92:D4:88:35:3A:6F:3D:62:03:19 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019FA89913B77C65EBB9478B369C03028137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft Manifest number: 19E8 Signing time: Tue 28 Jul 2026 12:00:31 +0000 Manifest this update: Tue 28 Jul 2026 12:00:31 +0000 Manifest next update: Wed 29 Jul 2026 12:00:31 +0000 Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=) 2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=) 3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=) 4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: k5kazwlikcTgg+8gj9YWbV0+CZnsJSeW9QOQgvQHJNY=) 5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=) 6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=) 7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=) 8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=) 9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=) 10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=) 11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:13:b7:7c:65:eb:b9:47:8b:36:9c:03:02:81:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jul 28 12:00:31 2026 GMT Not After : Jul 29 12:00:31 2026 GMT Subject: CN=894dfe2e144c8d5ec55992d488353a6f3d620319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:49:f8:76:a3:e2:f9:99:21:31:0e:a4:07: d0:01:77:ab:7c:42:4a:5b:40:d6:ea:f0:ab:25:f7: cc:5d:f3:4a:06:52:66:2a:56:9c:2c:99:cc:03:be: 6d:38:75:4c:2d:66:93:5f:f9:17:ab:cb:5b:c7:f7: da:82:f4:7a:eb:9d:cd:87:fc:9f:d4:90:6e:2a:47: 00:4c:a1:06:23:73:7c:c5:97:f3:a6:5f:f5:75:31: d1:a0:12:5b:fc:a6:1e:a6:a3:d6:08:0c:d4:4b:99: 61:de:d2:ae:03:30:fa:d1:04:98:0e:bc:ba:24:71: e3:4e:28:46:93:80:20:c8:23:fa:9f:7d:eb:df:0c: e9:36:82:e0:81:c1:84:71:f2:45:3e:54:5d:95:91: 52:cd:08:19:45:a0:b2:76:77:02:2e:94:ff:83:70: fd:26:f5:4f:fd:4d:8a:86:1e:91:0a:11:37:45:b5: 9f:d1:ef:05:25:f0:14:3f:cf:0d:6e:a3:b2:d1:8d: 23:ed:d7:26:e2:70:9b:a6:23:12:fa:10:26:68:b1: cf:31:5f:5b:c5:3a:78:44:10:40:f6:ee:2f:74:ee: 5f:9d:03:7f:ee:65:3c:74:5e:b0:0e:77:c8:8f:55: 91:31:60:22:c6:c4:df:b8:ca:c5:e2:e7:51:d1:37: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4D:FE:2E:14:4C:8D:5E:C5:59:92:D4:88:35:3A:6F:3D:62:03:19 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:bc:0f:23:e1:61:6d:36:85:dd:af:db:0d:6f:5f:61:1d: 59:fe:0f:20:fb:1e:c4:71:ca:02:8e:bd:9f:ec:6f:0d:c5:30: 92:e8:ca:04:85:a3:10:85:3a:2f:bd:94:8d:a6:c6:a4:79:e5: 99:e1:7f:b9:26:3e:de:27:5d:8a:1f:1c:79:d6:67:ca:b6:0e: fa:86:a4:c0:06:5f:4a:83:1e:14:34:a4:a2:0d:9a:da:0f:9a: a2:4c:72:b7:d9:42:57:cd:c4:57:e7:94:87:c7:0a:02:40:0b: ea:81:4b:20:c3:97:94:4b:b6:aa:ae:11:cd:c5:cf:5b:b9:0c: 4a:ed:21:05:bd:f6:41:d2:e8:be:6e:ce:04:a6:b8:d8:b4:a8: 02:f7:79:ab:2c:41:f0:82:f6:02:4b:17:80:37:29:4f:97:d5: dd:86:74:a4:26:9c:bc:ca:12:00:e1:d5:fc:cb:34:9f:31:17: 9e:fc:73:e5:33:61:b9:97:b1:64:d3:93:ed:fd:3b:f8:97:44: 87:1c:e8:9c:90:69:64:90:44:b2:09:35:8d:16:1b:d8:f4:24: f7:ea:b7:3c:d2:60:db:2a:fa:ac:5e:2c:c6:ef:76:a6:5c:75: 7d:7b:3f:94:f7:8b:44:1f:27:2b:24:4b:56:e6:14:8f:7e:2d: 39:89:24:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omRO3fGXruUeLNpwDAoE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwNzI4MTIwMDMxWhcNMjYwNzI5MTIwMDMxWjAzMTEwLwYDVQQD Eyg4OTRkZmUyZTE0NGM4ZDVlYzU1OTkyZDQ4ODM1M2E2ZjNkNjIwMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1J+Haj4vmZITEOpAfQAXerfEJK W0DW6vCrJffMXfNKBlJmKlacLJnMA75tOHVMLWaTX/kXq8tbx/fagvR6653Nh/yf 1JBuKkcATKEGI3N8xZfzpl/1dTHRoBJb/KYepqPWCAzUS5lh3tKuAzD60QSYDry6 JHHjTihGk4AgyCP6n33r3wzpNoLggcGEcfJFPlRdlZFSzQgZRaCydncCLpT/g3D9 JvVP/U2Khh6RChE3RbWf0e8FJfAUP88NbqOy0Y0j7dcm4nCbpiMS+hAmaLHPMV9b xTp4RBBA9u4vdO5fnQN/7mU8dF6wDnfIj1WRMWAixsTfuMrF4udR0TciswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlN/i4UTI1exVmS1Ig1Om89YgMZMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggG8DyPh YW02hd2v2w1vX2EdWf4PIPsexHHKAo69n+xvDcUwkujKBIWjEIU6L72UjabGpHnl meF/uSY+3iddih8cedZnyrYO+oakwAZfSoMeFDSkog2a2g+aokxyt9lCV83EV+eU h8cKAkAL6oFLIMOXlEu2qq4RzcXPW7kMSu0hBb32QdLovm7OBKa42LSoAvd5qyxB 8IL2AksXgDcpT5fV3YZ0pCacvMoSAOHV/Ms0nzEXnvxz5TNhuZexZNOT7f07+JdE hxzonJBpZJBEsgk1jRYb2PQk9+q3PNJg2yr6rF4sxu92plx1fXs/lPeLRB8nKyRL VuYUj34tOYkkVQ== -----END CERTIFICATE-----Generated at Tue Jul 28 14:47:55 2026 by rpki-client