$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: iU0fRl05vUhpbgCY/2sBBM2FQHoz/ohZcLLs1bZ84RE= Subject key identifier: CF:68:78:4A:96:6E:82:5F:09:C7:43:64:7F:CF:4D:D5:39:5E:85:05 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019FA8D04F417681F7AF2CB8C182236BE455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1A20 Signing time: Tue 28 Jul 2026 13:00:51 +0000 Manifest this update: Tue 28 Jul 2026 13:00:51 +0000 Manifest next update: Wed 29 Jul 2026 13:00:51 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=) 3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: ukHIadXRSuV0IAB+wy/Go5XkTOLVW/y85e7lsKeN2Y4=) 6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=) 7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=) 8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=) 11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=) 12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=) 13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=) 14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:4f:41:76:81:f7:af:2c:b8:c1:82:23:6b:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jul 28 13:00:51 2026 GMT Not After : Jul 29 13:00:51 2026 GMT Subject: CN=cf68784a966e825f09c743647fcf4dd5395e8505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:01:4c:47:ae:59:c3:41:f1:97:ad:4d:c7: 54:08:55:62:98:c2:83:ac:7d:a2:d7:50:b4:87:71: 63:25:92:f3:9a:1d:2c:fd:54:84:3f:7d:56:39:32: 5c:3c:58:ee:c2:27:07:d8:cf:23:f3:39:2d:16:ab: 49:08:ff:85:d8:ae:3f:99:36:2f:9b:e3:39:38:9d: 24:9e:28:2e:34:66:20:92:44:16:6f:f4:f0:70:65: 29:82:0a:38:ad:c2:d7:8c:a4:14:14:1e:5e:d4:6b: 54:2b:70:5e:e9:b4:71:75:6f:ee:e4:04:ae:2e:37: e9:34:89:ce:38:a5:81:d5:ce:c9:70:ec:22:62:53: 48:4d:72:4a:40:67:d2:46:ab:9e:1d:d9:70:92:cb: 28:4e:34:f7:bf:cb:7a:b1:53:1d:85:e5:5c:52:7c: 69:87:2a:ed:0d:20:1e:df:3c:82:88:de:3a:38:0b: cb:e5:ea:2c:7c:3f:de:4a:f9:17:46:dc:0a:69:cc: 51:3c:9e:80:77:67:57:c2:80:18:af:05:6f:ee:ff: f1:03:6a:47:28:ae:11:2c:f9:15:fd:39:78:65:d6: 86:f6:fe:ea:56:de:c2:f4:92:18:6a:06:bf:b0:01: 56:ab:5f:f5:dd:e3:0a:0e:56:ae:18:3c:bf:95:66: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:68:78:4A:96:6E:82:5F:09:C7:43:64:7F:CF:4D:D5:39:5E:85:05 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:96:4e:a7:d1:d1:2e:01:d1:3e:74:e2:bc:9d:97:80:23:41: d9:43:b2:8d:d6:30:2d:44:21:6a:8d:b5:50:c7:db:69:14:1f: bc:aa:d3:6c:67:6d:b9:76:29:50:12:ad:db:cd:83:0b:62:59: c5:7b:66:8a:fe:f9:b2:9d:4a:4c:d8:b0:ad:05:a4:ad:28:af: 9a:b5:47:f3:0f:1d:da:a2:9c:76:49:38:fc:d5:8d:0d:b2:ed: 84:f0:20:90:e1:60:2b:50:b0:55:58:50:c0:94:1d:49:9d:82: 11:af:15:93:f1:56:00:40:fb:6f:96:fa:59:c2:ff:23:ab:7c: 8b:a5:25:3a:3c:58:1d:a2:66:b9:37:3a:d5:df:5f:a8:a5:03: 82:77:39:6e:d8:5a:f8:ba:25:db:39:e0:43:ff:84:f8:be:cd: 44:d7:77:5d:f1:3b:81:6d:8a:2f:60:70:59:a9:25:b7:be:9d: a5:54:b4:1b:98:8d:cc:79:e0:60:fb:73:a6:28:4d:bd:70:96: d1:6e:75:80:69:31:4e:d5:93:d8:98:e4:96:bd:99:b9:b5:fa: a3:28:20:db:c2:bb:1f:1f:ee:b7:56:e4:30:b1:fc:fb:da:d3: 9b:af:ed:db:01:37:08:b0:33:a2:bc:05:64:de:0a:56:fb:d9: 2e:43:96:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0E9BdoH3ryy4wYIja+RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwNzI4MTMwMDUxWhcNMjYwNzI5MTMwMDUxWjAzMTEwLwYDVQQD EyhjZjY4Nzg0YTk2NmU4MjVmMDljNzQzNjQ3ZmNmNGRkNTM5NWU4NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHUBTEeuWcNB8ZetTcdUCFVimMKD rH2i11C0h3FjJZLzmh0s/VSEP31WOTJcPFjuwicH2M8j8zktFqtJCP+F2K4/mTYv m+M5OJ0kniguNGYgkkQWb/TwcGUpggo4rcLXjKQUFB5e1GtUK3Be6bRxdW/u5ASu LjfpNInOOKWB1c7JcOwiYlNITXJKQGfSRqueHdlwkssoTjT3v8t6sVMdheVcUnxp hyrtDSAe3zyCiN46OAvL5eosfD/eSvkXRtwKacxRPJ6Ad2dXwoAYrwVv7v/xA2pH KK4RLPkV/Tl4ZdaG9v7qVt7C9JIYaga/sAFWq1/13eMKDlauGDy/lWZ8VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9oeEqWboJfCcdDZH/PTdU5XoUFMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5ZOp9HR LgHRPnTivJ2XgCNB2UOyjdYwLUQhao21UMfbaRQfvKrTbGdtuXYpUBKt282DC2JZ xXtmiv75sp1KTNiwrQWkrSivmrVH8w8d2qKcdkk4/NWNDbLthPAgkOFgK1CwVVhQ wJQdSZ2CEa8Vk/FWAED7b5b6WcL/I6t8i6UlOjxYHaJmuTc61d9fqKUDgnc5btha +Lol2zngQ/+E+L7NRNd3XfE7gW2KL2BwWaklt76dpVS0G5iNzHngYPtzpihNvXCW 0W51gGkxTtWT2Jjklr2ZubX6oygg28K7Hx/ut1bkMLH8+9rTm6/t2wE3CLAzorwF ZN4KVvvZLkOWAg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:52 2026 by rpki-client