$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: vg8RvigEVJhpxW6i8ARjdqNH8Pfb5qt4/qkklMQfBi8= Subject key identifier: 28:2C:5B:15:BF:7D:8F:46:54:7C:CA:A9:70:FB:3F:BC:AE:62:67:B1 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019F55C6372C8155A63378099A43E0F206BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 0195 Signing time: Sun 12 Jul 2026 10:01:21 +0000 Manifest this update: Sun 12 Jul 2026 10:01:21 +0000 Manifest next update: Mon 13 Jul 2026 10:01:21 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: LWJgzUafohfetYpq8wCPPE7v3djDcqynuH5HJ9QoSMU=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:55:c6:37:2c:81:55:a6:33:78:09:9a:43:e0:f2:06:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Jul 12 10:01:21 2026 GMT Not After : Jul 13 10:01:21 2026 GMT Subject: CN=282c5b15bf7d8f46547ccaa970fb3fbcae6267b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:98:34:c0:1d:40:97:84:11:5f:13:b7:4c: 8f:cf:75:6c:40:94:4f:e0:0f:bb:fa:55:46:db:65: 48:3a:1c:1a:56:79:ee:e7:5f:09:5e:e1:72:e4:96: 8d:e4:75:7d:f3:3b:a4:23:97:a5:b1:d6:55:9a:d7: 69:f5:e1:e7:45:7c:03:0d:ec:40:d7:09:a4:a1:79: 44:48:2f:c9:15:1d:62:7e:59:22:50:95:dc:3a:67: d7:74:d8:91:4e:f8:3a:2f:fc:51:01:8d:9c:f1:72: bb:c4:81:22:d5:46:78:61:d0:2f:87:26:a6:3a:16: cc:a4:dd:c8:d0:23:a8:68:22:ad:e6:cb:7b:46:c9: c3:75:f2:88:99:48:14:42:df:29:ae:69:52:f4:fd: 34:81:ea:92:f2:a2:fe:dc:a2:d6:33:ea:05:6f:0a: 6b:36:ac:9a:a0:d1:be:15:95:80:81:37:c9:fd:a7: 38:f4:86:c5:c0:f7:46:0a:a3:79:58:76:04:e5:88: 7f:fb:37:a0:c7:a8:a1:8c:db:b5:df:86:c4:e9:a2: da:53:74:96:4e:20:75:05:3d:cd:b8:24:5e:51:7d: 85:32:3c:7a:d2:48:54:a7:ed:71:cd:d9:75:ca:60: b8:f3:f2:8b:81:02:38:dd:81:c9:d0:57:89:01:e9: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:5B:15:BF:7D:8F:46:54:7C:CA:A9:70:FB:3F:BC:AE:62:67:B1 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:38:73:55:bc:46:a4:62:05:98:f0:8e:8b:7c:c6:0f:63:70: 04:f3:60:d0:f5:ef:15:9c:a9:fb:53:35:20:e6:1f:f1:96:54: f9:cd:c2:b9:75:1e:a8:0b:02:8f:c0:cc:9a:ef:0e:4c:2e:e1: f7:a0:20:96:8f:c7:b7:1d:d5:10:42:90:1f:9d:95:7c:bb:eb: 6d:bb:0b:3d:d3:09:83:b2:a2:46:34:b9:47:93:74:55:9d:48: 90:97:67:62:61:c1:c7:18:ef:46:c8:68:bf:a8:c7:1e:7c:f1: 1b:19:a8:97:b1:f5:85:6e:b0:f0:2a:05:5e:32:2f:cb:e0:68: d9:8d:53:ba:5a:6c:dc:18:84:a7:66:c7:23:bb:1f:a1:54:de: b4:c4:4e:bf:21:84:f1:12:af:10:45:a0:11:b0:8a:d0:b9:c9: 31:8a:85:b7:ac:ee:fd:0d:6e:fa:fd:18:f6:99:66:9e:ab:d9: 5e:e1:1c:03:a8:2c:2a:17:5d:b8:37:9b:31:0b:16:64:97:d0: f2:e3:06:e8:30:42:ff:50:47:f3:63:96:73:44:d8:f9:e1:65: e5:a0:91:78:e3:3d:be:4a:55:b8:a7:5c:d0:e2:b2:bb:6e:38: fc:e2:c2:77:38:27:20:b6:dc:e8:b0:d2:c7:42:70:db:c2:a5: 26:b4:4c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9VxjcsgVWmM3gJmkPg8ga6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNzEyMTAwMTIxWhcNMjYwNzEzMTAwMTIxWjAzMTEwLwYDVQQD EygyODJjNWIxNWJmN2Q4ZjQ2NTQ3Y2NhYTk3MGZiM2ZiY2FlNjI2N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUqYNMAdQJeEEV8Tt0yPz3VsQJRP 4A+7+lVG22VIOhwaVnnu518JXuFy5JaN5HV98zukI5elsdZVmtdp9eHnRXwDDexA 1wmkoXlESC/JFR1iflkiUJXcOmfXdNiRTvg6L/xRAY2c8XK7xIEi1UZ4YdAvhyam OhbMpN3I0COoaCKt5st7RsnDdfKImUgUQt8prmlS9P00geqS8qL+3KLWM+oFbwpr NqyaoNG+FZWAgTfJ/ac49IbFwPdGCqN5WHYE5Yh/+zegx6ihjNu134bE6aLaU3SW TiB1BT3NuCReUX2FMjx60khUp+1xzdl1ymC48/KLgQI43YHJ0FeJAekyXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgsWxW/fY9GVHzKqXD7P7yuYmexMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDhzVbxG pGIFmPCOi3zGD2NwBPNg0PXvFZyp+1M1IOYf8ZZU+c3CuXUeqAsCj8DMmu8OTC7h 96Aglo/Htx3VEEKQH52VfLvrbbsLPdMJg7KiRjS5R5N0VZ1IkJdnYmHBxxjvRsho v6jHHnzxGxmol7H1hW6w8CoFXjIvy+Bo2Y1Tulps3BiEp2bHI7sfoVTetMROvyGE 8RKvEEWgEbCK0LnJMYqFt6zu/Q1u+v0Y9plmnqvZXuEcA6gsKhdduDebMQsWZJfQ 8uMG6DBC/1BH82OWc0TY+eFl5aCReOM9vkpVuKdc0OKyu244/OLCdzgnILbc6LDS x0Jw28KlJrRMGQ== -----END CERTIFICATE-----Generated at Sun Jul 12 12:04:56 2026 by rpki-client