$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: jXcYS2ECB281BCtqBitor7ArIQJ5rotuxxhgrDc13bI= Subject key identifier: 9D:16:2D:75:BF:8B:5B:82:89:8D:92:AF:AE:50:5A:19:E9:90:46:54 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019FA82B530BB010B306A294F2D5A655FB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1A32 Signing time: Tue 28 Jul 2026 10:00:39 +0000 Manifest this update: Tue 28 Jul 2026 10:00:39 +0000 Manifest next update: Wed 29 Jul 2026 10:00:39 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 7: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 8: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 9: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 10: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 11: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 0LAbOB/M1Zt0xopR6mbosPXQ2NAVoLggU9k8hF5PNg4=) 25: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 26: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 27: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 28: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 29: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 30: oPoAPW2imYIIhMBjHBjrrJzlTm0.roa (hash: Ai3LKCPihwHhkGrEgiXr64yAeNHxTfkXCv7Ldk/G4cw=) 31: upydEV0ODv-v9FNJbhEvu18F0-I.roa (hash: VtfCIO/Gdxc9uNwon4WUJ3pKbdYHJr5iyQxDnmDVVgE=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:53:0b:b0:10:b3:06:a2:94:f2:d5:a6:55:fb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jul 28 10:00:39 2026 GMT Not After : Jul 29 10:00:39 2026 GMT Subject: CN=9d162d75bf8b5b82898d92afae505a19e9904654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:ca:f4:8e:4d:e4:56:dd:8d:61:44:2b:0c: e3:e6:71:b9:15:7b:6d:01:c6:85:dc:fe:3b:6b:b4: b8:59:62:ca:8d:96:c1:06:3d:85:3a:63:f9:23:1d: 5a:16:2d:e9:1b:4e:11:a1:6d:75:63:a7:ef:c5:0b: ec:df:97:f3:ce:a0:fe:bd:41:9d:0b:58:d6:50:52: 6a:b4:0d:d2:4b:b2:26:55:21:df:72:25:4e:3e:3e: 89:83:36:d9:be:c3:e3:57:99:52:e9:bf:a2:76:fa: 35:1b:74:5f:bb:71:33:52:72:98:ef:4b:31:0a:1d: b4:31:1e:b9:ad:bc:21:93:be:53:19:00:04:5d:3b: 25:c7:9a:73:9f:b6:9e:40:b7:72:69:85:34:21:f2: 22:d7:a0:04:ea:b3:6d:12:16:23:2d:4d:78:14:81: 96:f8:ed:fc:26:1a:48:8d:1a:e6:54:e3:ec:cf:ab: e4:4b:d9:88:44:91:86:32:80:68:65:be:f1:cb:c2: fa:8d:de:e1:ab:98:17:80:cb:f3:5d:f3:4d:f9:6d: 2f:fa:8f:bc:22:91:7b:86:c3:34:e1:c3:98:52:4d: e6:38:9e:af:f1:93:02:a3:6a:7c:41:1b:4f:cb:86: 22:46:af:26:7e:f6:57:69:95:53:4c:1a:7f:8b:df: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:16:2D:75:BF:8B:5B:82:89:8D:92:AF:AE:50:5A:19:E9:90:46:54 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:eb:b1:2e:12:5b:cb:5d:e4:4e:eb:e4:81:cf:d7:32:66:4b: 46:44:ed:4d:06:24:9c:25:dc:15:b4:da:1f:4c:60:8d:11:01: 6f:3a:d8:56:56:b7:f0:43:f7:b5:7e:6d:db:83:6c:ef:df:6f: 19:d7:a1:5c:00:37:b5:8c:ec:75:01:84:4f:fd:00:ff:7c:1c: d7:bd:86:3c:7f:89:5f:11:02:54:dd:60:71:a8:8d:5e:84:ef: 20:3d:e6:23:16:7d:b6:0a:70:cb:d6:dc:81:6d:a5:32:d4:f4: be:47:37:15:5c:03:f7:c0:00:0c:4b:75:fe:e5:41:85:b6:db: 56:7b:3b:b3:a6:84:39:e0:6f:56:21:0c:86:8f:f1:fb:2a:ed: 17:b9:03:a3:13:87:88:58:89:40:39:a7:f4:2f:f4:d3:89:57: 3e:29:16:6c:d0:50:02:b0:fd:3a:d8:98:92:ce:23:ba:c8:58: 31:b6:64:2e:86:2d:7a:ad:03:f2:7c:41:08:4e:bb:92:bd:aa: 49:39:0c:1a:9f:a7:6e:9c:31:75:0c:4b:b4:45:c8:24:84:61: 68:26:50:b8:f9:ea:03:67:a5:4e:8b:cd:bf:dc:80:8d:48:f8: 43:e7:14:16:56:64:82:e0:6c:31:24:92:4e:41:62:97:b7:d2: 7c:d1:b7:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK1MLsBCzBqKU8tWmVfttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwNzI4MTAwMDM5WhcNMjYwNzI5MTAwMDM5WjAzMTEwLwYDVQQD Eyg5ZDE2MmQ3NWJmOGI1YjgyODk4ZDkyYWZhZTUwNWExOWU5OTA0NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3/K9I5N5FbdjWFEKwzj5nG5FXtt AcaF3P47a7S4WWLKjZbBBj2FOmP5Ix1aFi3pG04RoW11Y6fvxQvs35fzzqD+vUGd C1jWUFJqtA3SS7ImVSHfciVOPj6JgzbZvsPjV5lS6b+idvo1G3Rfu3EzUnKY70sx Ch20MR65rbwhk75TGQAEXTslx5pzn7aeQLdyaYU0IfIi16AE6rNtEhYjLU14FIGW +O38JhpIjRrmVOPsz6vkS9mIRJGGMoBoZb7xy8L6jd7hq5gXgMvzXfNN+W0v+o+8 IpF7hsM04cOYUk3mOJ6v8ZMCo2p8QRtPy4YiRq8mfvZXaZVTTBp/i98G4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0WLXW/i1uCiY2Sr65QWhnpkEZUMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeuxLhJb y13kTuvkgc/XMmZLRkTtTQYknCXcFbTaH0xgjREBbzrYVla38EP3tX5t24Ns799v GdehXAA3tYzsdQGET/0A/3wc172GPH+JXxECVN1gcaiNXoTvID3mIxZ9tgpwy9bc gW2lMtT0vkc3FVwD98AADEt1/uVBhbbbVns7s6aEOeBvViEMho/x+yrtF7kDoxOH iFiJQDmn9C/004lXPikWbNBQArD9OtiYks4jushYMbZkLoYteq0D8nxBCE67kr2q STkMGp+nbpwxdQxLtEXIJIRhaCZQuPnqA2elTovNv9yAjUj4Q+cUFlZkguBsMSSS TkFil7fSfNG3QQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:34 2026 by rpki-client