$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: VCYdNEpTxoRvZzH8gKv971H4EJax/TOAHxzRSEWTRR4= Subject key identifier: 3A:B7:77:F0:3D:18:1C:71:98:4C:CE:C7:82:3C:02:94:8E:4C:07:72 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019FAC08E29533FB32016C9A2FA6B0AFA235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 11D0 Signing time: Wed 29 Jul 2026 04:01:31 +0000 Manifest this update: Wed 29 Jul 2026 04:01:31 +0000 Manifest next update: Thu 30 Jul 2026 04:01:31 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: Jjfcup6FE52UPruFHqW0nywi+Y7LiO9XDc0PRrS1OBI=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:08:e2:95:33:fb:32:01:6c:9a:2f:a6:b0:af:a2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jul 29 04:01:31 2026 GMT Not After : Jul 30 04:01:31 2026 GMT Subject: CN=3ab777f03d181c71984ccec7823c02948e4c0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:81:bf:7f:3e:6b:a4:39:5f:81:51:c0:db: 5f:58:ee:06:0d:0d:31:19:6e:75:33:a3:04:4a:82: 78:cc:b4:3d:69:82:58:2f:75:44:24:ed:a5:b1:f6: 77:db:52:80:02:e6:a6:87:14:fd:c4:55:65:aa:eb: d2:c6:32:5e:b6:53:08:5e:e8:8a:50:a0:14:3c:5a: e8:86:97:9d:dd:40:bb:44:79:ad:66:ae:d0:a5:ca: 23:81:1f:26:4c:81:ee:a6:74:be:da:71:da:a1:7a: 9e:af:c5:7e:31:42:75:46:e9:ce:0a:7c:3d:fc:02: af:78:96:7f:34:12:65:03:70:05:25:6f:9f:c0:b0: 1a:15:ea:7a:94:71:d7:4c:98:0e:f0:b3:45:d4:7d: a5:27:03:74:01:a6:da:27:74:88:55:91:39:98:c1: 10:30:a1:eb:73:01:aa:7b:8b:0c:01:66:a9:4d:3c: 1f:eb:56:c0:59:32:a5:13:b9:c7:f9:8f:1d:00:6c: 77:3a:d8:4d:ff:b9:5a:61:e7:99:27:5e:37:dd:2f: d3:24:83:6d:97:fb:ac:36:4c:54:c8:db:d8:ba:b8: 2a:83:b9:60:98:71:5d:6b:95:cb:d8:22:51:20:74: 66:4f:a1:85:ae:88:2e:95:f7:9a:54:92:1e:ac:87: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:77:F0:3D:18:1C:71:98:4C:CE:C7:82:3C:02:94:8E:4C:07:72 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:60:96:c0:9f:63:f9:ef:16:06:5c:68:51:74:5e:f2:18:2c: 3d:00:08:8d:79:21:80:a0:ed:60:c8:61:5e:4f:8d:5b:8d:fa: ed:bb:44:f6:46:57:ee:21:34:44:ca:c6:54:bc:60:df:b2:8c: 5b:06:0e:d8:bc:e6:35:3f:15:ed:0c:d8:a8:5a:ab:e6:c3:3f: d7:65:ad:e5:23:57:77:18:48:78:f7:60:af:91:54:0e:bd:a2: 71:4a:82:b1:6f:ae:57:6d:9c:a4:6b:f8:58:0d:1f:a6:81:82: 67:da:80:02:0b:a8:ec:af:3d:20:5e:50:ce:44:b4:f0:73:8d: 47:07:c2:e2:b0:bb:04:73:3b:82:2d:1c:2e:14:bc:b6:8c:19: af:bd:ff:3e:a0:f9:a4:05:ed:6b:7c:56:c4:59:e3:73:a6:de: bd:c9:c9:83:1c:53:b5:be:a0:9b:5a:bc:1e:14:e7:45:e9:18: 26:a8:d9:a5:08:e8:6f:4a:ed:b6:de:7f:5a:84:e1:c8:d3:60: 36:9d:9d:d0:44:bf:f7:7d:7d:3c:01:f4:83:f7:ca:8b:b1:ea: 88:41:12:83:56:30:f3:50:57:c0:14:f6:80:d2:40:de:0d:ed: 4b:43:7d:bd:aa:82:af:57:fe:d9:56:17:d4:04:5d:71:bc:01: b6:f3:89:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sCOKVM/syAWyaL6awr6I1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNzI5MDQwMTMxWhcNMjYwNzMwMDQwMTMxWjAzMTEwLwYDVQQD EygzYWI3NzdmMDNkMTgxYzcxOTg0Y2NlYzc4MjNjMDI5NDhlNGMwNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4KBv38+a6Q5X4FRwNtfWO4GDQ0x GW51M6MESoJ4zLQ9aYJYL3VEJO2lsfZ321KAAuamhxT9xFVlquvSxjJetlMIXuiK UKAUPFrohped3UC7RHmtZq7QpcojgR8mTIHupnS+2nHaoXqer8V+MUJ1RunOCnw9 /AKveJZ/NBJlA3AFJW+fwLAaFep6lHHXTJgO8LNF1H2lJwN0AabaJ3SIVZE5mMEQ MKHrcwGqe4sMAWapTTwf61bAWTKlE7nH+Y8dAGx3OthN/7laYeeZJ1433S/TJINt l/usNkxUyNvYurgqg7lgmHFda5XL2CJRIHRmT6GFrogulfeaVJIerIeNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq3d/A9GBxxmEzOx4I8ApSOTAdyMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWCWwJ9j +e8WBlxoUXRe8hgsPQAIjXkhgKDtYMhhXk+NW4367btE9kZX7iE0RMrGVLxg37KM WwYO2LzmNT8V7QzYqFqr5sM/12Wt5SNXdxhIePdgr5FUDr2icUqCsW+uV22cpGv4 WA0fpoGCZ9qAAguo7K89IF5QzkS08HONRwfC4rC7BHM7gi0cLhS8towZr73/PqD5 pAXta3xWxFnjc6bevcnJgxxTtb6gm1q8HhTnRekYJqjZpQjob0rttt5/WoThyNNg Np2d0ES/9319PAH0g/fKi7HqiEESg1Yw81BXwBT2gNJA3g3tS0N9vaqCr1f+2VYX 1ARdcbwBtvOJUg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:52:35 2026 by rpki-client