$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: K7kxZlPBRd95alQbLNg5r58nJrjxMC6CzFJSAqXagcI= Subject key identifier: 45:28:DA:EE:BE:50:71:24:1B:4E:CB:C6:6D:92:55:FF:43:BD:F4:65 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 019F54B4035EC0862C4CF8F2DD1B87E0669B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 01DF Signing time: Sun 12 Jul 2026 05:01:51 +0000 Manifest this update: Sun 12 Jul 2026 05:01:51 +0000 Manifest next update: Mon 13 Jul 2026 05:01:51 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: 0jsW47n0KnbXBxpf/Rm4gKZZWzRjktBlhxWlCrHh7dM=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:54:b4:03:5e:c0:86:2c:4c:f8:f2:dd:1b:87:e0:66:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Jul 12 05:01:51 2026 GMT Not After : Jul 13 05:01:51 2026 GMT Subject: CN=4528daeebe5071241b4ecbc66d9255ff43bdf465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:2a:45:63:51:eb:18:42:40:9a:ea:1f:96: a2:87:c1:b6:5f:ca:38:17:01:c2:c6:1c:7e:c4:79: 17:67:08:0e:82:da:2f:42:ee:83:6d:81:82:dc:ce: ca:01:e4:a7:d0:cd:a6:3e:69:ee:9b:76:22:4a:40: e0:92:f0:c1:16:d6:50:ec:6b:30:15:dc:41:3a:1b: c7:ad:66:a0:0b:16:e0:17:14:08:4f:d9:d3:a5:7f: 19:83:90:f2:6b:05:43:19:c0:e4:9d:ed:f4:af:48: 6e:ad:99:60:46:2b:47:7f:3a:d1:97:ed:c9:20:4f: dd:61:58:7d:ee:14:4d:d0:5f:5b:21:54:21:e7:2d: 58:1d:7b:b6:07:45:8c:41:de:9a:85:21:9f:8f:0a: b2:24:a1:fc:48:b8:e2:d0:29:eb:8c:ed:5e:b5:9a: 82:fb:e5:74:f3:05:ca:48:49:a5:10:70:d5:e2:d4: 75:73:c8:60:39:61:28:aa:79:f0:9a:7a:7c:54:ec: 14:c0:94:e2:cc:e4:4b:fe:96:5e:77:60:8c:e3:0b: 9d:3e:35:6f:66:0c:50:d2:82:04:52:cf:59:72:a6: 73:a0:bc:7f:f3:a6:2c:d3:ca:d7:af:ea:d7:24:dc: ac:9c:e7:70:cc:5e:2b:77:f2:3c:27:dc:27:1b:6a: 09:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:DA:EE:BE:50:71:24:1B:4E:CB:C6:6D:92:55:FF:43:BD:F4:65 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:56:71:1c:49:6c:13:b9:56:29:72:6a:43:0f:1c:5c:92:82: 99:8d:80:ee:d5:d1:43:fe:b1:21:09:77:a8:84:1c:f9:cb:ff: 19:b4:da:1c:05:ee:17:3f:ba:5c:d0:d5:0c:b5:6b:1e:7f:3d: a7:4f:d4:78:46:3e:28:5d:48:0a:6d:31:2f:47:58:b4:76:38: 19:e3:04:1c:ef:1f:47:44:1f:42:23:ff:da:6f:0e:b8:d7:8c: 54:68:b5:02:c7:76:8a:ff:3f:e8:22:e1:2a:2b:ef:09:dc:c3: b0:34:a0:7b:84:cf:8d:72:65:b0:09:ee:b1:c6:16:7c:58:f9: d0:16:69:09:f8:e1:ea:8e:09:14:4d:44:f8:61:cf:8e:bb:25: 6b:3d:64:23:29:ca:6b:d3:97:bc:bd:cf:b2:b5:e9:3f:ca:80: 36:00:6f:42:90:b8:47:c8:65:6f:c8:37:bb:9e:8b:2c:68:49: 6c:29:7f:60:5a:f7:01:a0:96:19:3f:fc:5d:07:67:b0:ea:3b: 28:ed:29:ed:20:a8:16:1f:46:92:c2:d0:89:da:56:52:35:0e: 7f:12:cb:09:85:41:a0:55:7a:26:65:aa:2f:d0:f5:c4:66:05: 75:af:6c:1c:df:8d:97:ec:b5:59:46:23:5b:3b:54:3a:15:ff: bd:21:17:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9UtANewIYsTPjy3RuH4GabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwNzEyMDUwMTUxWhcNMjYwNzEzMDUwMTUxWjAzMTEwLwYDVQQD Eyg0NTI4ZGFlZWJlNTA3MTI0MWI0ZWNiYzY2ZDkyNTVmZjQzYmRmNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZMqRWNR6xhCQJrqH5aih8G2X8o4 FwHCxhx+xHkXZwgOgtovQu6DbYGC3M7KAeSn0M2mPmnum3YiSkDgkvDBFtZQ7Gsw FdxBOhvHrWagCxbgFxQIT9nTpX8Zg5DyawVDGcDkne30r0hurZlgRitHfzrRl+3J IE/dYVh97hRN0F9bIVQh5y1YHXu2B0WMQd6ahSGfjwqyJKH8SLji0CnrjO1etZqC ++V08wXKSEmlEHDV4tR1c8hgOWEoqnnwmnp8VOwUwJTizORL/pZed2CM4wudPjVv ZgxQ0oIEUs9ZcqZzoLx/86Ys08rXr+rXJNysnOdwzF4rd/I8J9wnG2oJNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUo2u6+UHEkG07Lxm2SVf9DvfRlMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1ZxHEls E7lWKXJqQw8cXJKCmY2A7tXRQ/6xIQl3qIQc+cv/GbTaHAXuFz+6XNDVDLVrHn89 p0/UeEY+KF1ICm0xL0dYtHY4GeMEHO8fR0QfQiP/2m8OuNeMVGi1Asd2iv8/6CLh KivvCdzDsDSge4TPjXJlsAnuscYWfFj50BZpCfjh6o4JFE1E+GHPjrslaz1kIynK a9OXvL3PsrXpP8qANgBvQpC4R8hlb8g3u56LLGhJbCl/YFr3AaCWGT/8XQdnsOo7 KO0p7SCoFh9GksLQidpWUjUOfxLLCYVBoFV6JmWqL9D1xGYFda9sHN+Nl+y1WUYj WztUOhX/vSEXEA== -----END CERTIFICATE-----Generated at Sun Jul 12 07:26:42 2026 by rpki-client