$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: 2efyR1c6dHvF3aRLlyWwxedD05J0CXAmf+OtBlVG3mk= Subject key identifier: F8:43:8B:4E:C2:C4:F0:63:68:3B:86:06:0A:60:53:12:F2:EC:56:2D Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019FA74F77AE29089D07AB8F963478D7E34E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1A41 Signing time: Tue 28 Jul 2026 06:00:30 +0000 Manifest this update: Tue 28 Jul 2026 06:00:30 +0000 Manifest next update: Wed 29 Jul 2026 06:00:30 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 4: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 5: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 6: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 7: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 8: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 9: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 10: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 11: epPOuy1pTutJ2UKsGEx6k8t0NsM.roa (hash: LhLHvNhY+o6hK3teST8goEF3vpWXwekcs7mmW+UCQ4Y=) 12: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 13: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: WBR6c/dmDZj31GUxkyZEFkTRDGl4Dyg9v2hoaPj+GQU=) 14: l-ePUX2kUdenPExi55wvbcvzjeE.roa (hash: VCQQ4h7et5JujMAMR2JXJzWE5yCp+HqlZaQybPczicM=) 15: oGUXrmAThPl2HTLUSfGjsKuzjgc.roa (hash: KlFM7h3lanV33N6xyaAPWBSyT8szyeOdsDntq5dgdHo=) 16: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 17: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:4f:77:ae:29:08:9d:07:ab:8f:96:34:78:d7:e3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jul 28 06:00:30 2026 GMT Not After : Jul 29 06:00:30 2026 GMT Subject: CN=f8438b4ec2c4f063683b86060a605312f2ec562d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:11:56:0b:e6:29:6a:40:5c:da:14:de:a8: 9d:49:d6:cc:59:65:22:d6:42:f2:73:34:0a:25:e6: 8e:2b:7c:02:34:cb:a9:ba:db:62:b1:67:fc:6c:4b: a9:2d:13:4c:10:6e:be:49:c4:86:1c:9f:38:0d:97: 2b:d6:28:ee:b0:96:a8:0c:1f:a7:39:a6:6c:b9:6d: 2c:01:0c:6c:e2:25:25:5c:a4:f0:30:15:eb:1c:3b: c6:1a:9d:a8:db:bc:1d:41:0f:df:4a:3b:ea:ca:02: ed:b8:73:d7:0c:7d:f5:d6:86:8c:9f:6d:4b:ac:b5: 6b:57:bf:ae:ec:6a:d9:77:24:40:fe:a0:90:31:16: e5:cc:2f:89:5e:d4:d9:bd:1d:23:82:a8:73:aa:84: 65:4d:8f:6f:38:0f:da:83:82:c2:0e:bd:cd:43:1d: 87:dc:4f:d3:b9:3c:7d:9a:7f:9b:18:ab:10:37:a1: c8:f8:19:4a:f1:d1:0c:26:c3:0d:66:4f:a6:56:ff: 23:a7:ec:85:d9:4a:65:83:83:83:f5:5a:6d:ca:50: 26:53:2b:41:44:e6:b9:68:bb:c5:b3:b1:75:8d:78: 74:83:07:85:cc:a2:23:6e:f8:44:eb:8b:c0:68:93: 21:a1:19:fe:59:27:ad:7a:ef:5a:76:74:c1:3a:67: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:43:8B:4E:C2:C4:F0:63:68:3B:86:06:0A:60:53:12:F2:EC:56:2D X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3a:19:b1:ba:76:84:a6:44:7e:33:a7:a6:31:31:79:0b:73: b7:67:f3:1e:a6:d5:c2:ec:1c:72:ba:ce:11:57:98:56:b1:4c: 12:79:86:11:57:9f:01:10:13:ff:b5:e7:a7:c7:ea:fd:50:30: 86:06:75:eb:c6:42:09:1b:56:e8:c6:de:2e:2f:13:e9:7b:d6: f3:c9:7d:75:2f:97:1b:41:2c:5e:1f:99:23:0c:dc:85:ca:a1: 88:a0:7b:bd:c3:1e:44:a9:1f:e9:99:bf:d9:96:2c:dc:b0:ec: be:03:ae:fc:db:8d:1c:28:d4:24:bf:e5:56:df:24:16:8d:74: 6d:21:4d:63:46:82:4f:1c:12:94:b7:66:6d:78:cc:7a:c2:b7: ce:81:c2:91:f0:85:95:8d:0b:e0:f2:75:d0:59:ed:2f:e5:e8: c5:c4:1b:95:77:46:bf:bc:6f:0a:87:77:93:b5:e0:54:a1:45: 51:45:e5:8e:70:bc:40:df:4b:9e:8b:65:b1:51:d3:19:0d:ec: 52:3e:dc:ea:84:6c:86:b9:62:bc:a8:10:47:ee:36:b1:ab:8b: ca:aa:95:cc:11:df:43:32:7f:73:2b:41:aa:8f:94:54:2c:3d: 2b:83:99:35:3c:c1:e7:97:83:bb:37:98:e7:1a:62:13:d2:9f: a8:c4:2e:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nT3euKQidB6uPljR41+NOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwNzI4MDYwMDMwWhcNMjYwNzI5MDYwMDMwWjAzMTEwLwYDVQQD EyhmODQzOGI0ZWMyYzRmMDYzNjgzYjg2MDYwYTYwNTMxMmYyZWM1NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw30RVgvmKWpAXNoU3qidSdbMWWUi 1kLyczQKJeaOK3wCNMuputtisWf8bEupLRNMEG6+ScSGHJ84DZcr1ijusJaoDB+n OaZsuW0sAQxs4iUlXKTwMBXrHDvGGp2o27wdQQ/fSjvqygLtuHPXDH311oaMn21L rLVrV7+u7GrZdyRA/qCQMRblzC+JXtTZvR0jgqhzqoRlTY9vOA/ag4LCDr3NQx2H 3E/TuTx9mn+bGKsQN6HI+BlK8dEMJsMNZk+mVv8jp+yF2Uplg4OD9VptylAmUytB ROa5aLvFs7F1jXh0gweFzKIjbvhE64vAaJMhoRn+WSeteu9adnTBOmck2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhDi07CxPBjaDuGBgpgUxLy7FYtMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUToZsbp2 hKZEfjOnpjExeQtzt2fzHqbVwuwccrrOEVeYVrFMEnmGEVefARAT/7Xnp8fq/VAw hgZ168ZCCRtW6MbeLi8T6XvW88l9dS+XG0EsXh+ZIwzchcqhiKB7vcMeRKkf6Zm/ 2ZYs3LDsvgOu/NuNHCjUJL/lVt8kFo10bSFNY0aCTxwSlLdmbXjMesK3zoHCkfCF lY0L4PJ10FntL+XoxcQblXdGv7xvCod3k7XgVKFFUUXljnC8QN9LnotlsVHTGQ3s Uj7c6oRshrlivKgQR+42sauLyqqVzBHfQzJ/cytBqo+UVCw9K4OZNTzB55eDuzeY 5xpiE9KfqMQuBg== -----END CERTIFICATE-----Generated at Tue Jul 28 16:06:13 2026 by rpki-client