$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: TGDHONhELVvBc1TU/MI6zTXeo/gzhHt1wONBCFuo0Pk= Subject key identifier: 93:47:6D:5B:0B:E4:8B:65:93:AB:76:BB:EB:D6:BA:C4:81:A7:98:0E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019FA82AF63125FFD885F9DE34611C2AB3EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 136C Signing time: Tue 28 Jul 2026 10:00:15 +0000 Manifest this update: Tue 28 Jul 2026 10:00:15 +0000 Manifest next update: Wed 29 Jul 2026 10:00:15 +0000 Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=) 4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 5: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=) 6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=) 8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=) 9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 10: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: 4oKmMTzLVCJMSuo5FezvH2YnQvtZyL8wpgs3yU9HlxI=) 12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2a:f6:31:25:ff:d8:85:f9:de:34:61:1c:2a:b3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jul 28 10:00:15 2026 GMT Not After : Jul 29 10:00:15 2026 GMT Subject: CN=93476d5b0be48b6593ab76bbebd6bac481a7980e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:af:bf:e5:6c:26:e1:f9:76:de:77:df:fe: 32:26:0f:db:f7:3b:72:d6:7c:ce:9a:4c:dd:54:3e: 29:b5:33:8b:6d:92:02:71:cb:7b:27:8e:b4:84:de: aa:cc:c2:22:71:5e:43:ca:e8:56:6a:54:92:48:0b: c9:05:b3:6a:08:c2:c7:ce:a2:d7:6e:c1:69:8c:f8: c4:ca:3e:75:be:c6:7d:c0:f2:82:e2:5f:68:b1:1b: 4b:bd:df:60:74:ca:bc:c2:f0:fc:4a:d2:63:0b:92: e0:60:6d:3a:3a:42:84:dd:f3:95:d2:fe:49:e4:fe: b4:44:b5:1f:16:04:9d:25:de:58:66:13:ce:97:0f: 71:e5:c6:0b:31:11:96:a6:2d:87:0c:53:71:a9:40: 2c:12:a5:75:d3:28:ed:c9:13:eb:9d:48:58:3e:9f: 13:bf:6b:83:76:5f:37:cc:00:b4:91:b1:44:fc:2d: 63:e5:b5:1d:24:7d:b0:74:64:63:2b:3a:80:b0:44: e0:ed:20:00:ef:13:df:fb:82:4c:76:a1:75:23:b4: 89:e6:62:f4:ad:02:d9:26:74:c1:2f:50:ce:c2:46: e4:1e:18:e5:e1:04:69:46:77:6a:90:05:e6:17:64: 70:78:57:a0:13:8e:7c:73:27:a9:09:0a:9a:16:ac: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:47:6D:5B:0B:E4:8B:65:93:AB:76:BB:EB:D6:BA:C4:81:A7:98:0E X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:92:f7:9d:ec:8e:07:43:b7:0e:94:c0:fe:18:71:60:45:a0: 75:99:10:35:ec:f8:48:43:36:33:e1:11:fb:f4:87:94:65:b6: 75:36:bc:67:ce:e1:a3:db:97:b3:28:45:4e:99:be:df:d0:3f: fc:b6:f9:16:fc:aa:24:25:0d:17:82:fc:07:25:67:14:d7:16: 3b:95:b1:66:4c:62:f8:74:35:03:13:82:a8:db:6a:ea:01:f0: 21:03:ec:7a:1b:c2:77:cc:ba:ff:8f:93:b5:db:51:db:cd:f4: 36:77:1a:5c:04:91:5e:d5:0a:1f:dc:74:e7:f8:6c:f8:1f:07: f0:33:4e:7c:51:7a:68:1c:5a:07:38:27:0f:cc:fc:d0:77:74: 0a:c8:6e:c1:a4:8d:e0:2e:7c:93:01:c4:25:ec:90:52:b3:bc: 35:3e:cc:ad:8e:ab:8d:29:81:28:5c:8c:26:3d:de:0e:00:f2: 9f:1c:20:f2:1e:64:8b:73:c4:b3:de:cf:7a:ee:0e:a4:44:54: e7:9a:18:62:20:ba:eb:fb:a7:c1:b4:08:09:83:09:7d:69:6a: 4f:df:51:2f:91:c9:62:d8:98:f8:9a:0b:b9:64:9f:3d:10:e3: 04:2c:af:d1:56:18:7c:a2:46:b5:2e:ea:1a:d5:99:ed:94:3c: 72:4a:db:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oKvYxJf/YhfneNGEcKrPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwNzI4MTAwMDE1WhcNMjYwNzI5MTAwMDE1WjAzMTEwLwYDVQQD Eyg5MzQ3NmQ1YjBiZTQ4YjY1OTNhYjc2YmJlYmQ2YmFjNDgxYTc5ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytKvv+VsJuH5dt533/4yJg/b9zty 1nzOmkzdVD4ptTOLbZICcct7J460hN6qzMIicV5DyuhWalSSSAvJBbNqCMLHzqLX bsFpjPjEyj51vsZ9wPKC4l9osRtLvd9gdMq8wvD8StJjC5LgYG06OkKE3fOV0v5J 5P60RLUfFgSdJd5YZhPOlw9x5cYLMRGWpi2HDFNxqUAsEqV10yjtyRPrnUhYPp8T v2uDdl83zAC0kbFE/C1j5bUdJH2wdGRjKzqAsETg7SAA7xPf+4JMdqF1I7SJ5mL0 rQLZJnTBL1DOwkbkHhjl4QRpRndqkAXmF2RweFegE458cyepCQqaFqw/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNHbVsL5Itlk6t2u+vWusSBp5gOMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJL3neyO B0O3DpTA/hhxYEWgdZkQNez4SEM2M+ER+/SHlGW2dTa8Z87ho9uXsyhFTpm+39A/ /Lb5FvyqJCUNF4L8ByVnFNcWO5WxZkxi+HQ1AxOCqNtq6gHwIQPsehvCd8y6/4+T tdtR2830NncaXASRXtUKH9x05/hs+B8H8DNOfFF6aBxaBzgnD8z80Hd0CshuwaSN 4C58kwHEJeyQUrO8NT7MrY6rjSmBKFyMJj3eDgDynxwg8h5ki3PEs97Peu4OpERU 55oYYiC66/unwbQICYMJfWlqT99RL5HJYtiY+JoLuWSfPRDjBCyv0VYYfKJGtS7q GtWZ7ZQ8ckrbeg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:23:23 2026 by rpki-client