$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: TlN7v38i7yVqUJmhuEmrQpkVKZEsQ5nhsk0DAhs5iNM= Subject key identifier: DF:B6:AC:1A:DC:A0:24:E4:92:A7:80:E6:D6:72:7D:E3:16:57:3D:F8 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019F55C5E4BD044A727CB7F2F15372981FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0195 Signing time: Sun 12 Jul 2026 10:01:00 +0000 Manifest this update: Sun 12 Jul 2026 10:01:00 +0000 Manifest next update: Mon 13 Jul 2026 10:01:00 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: 6JQLJocJuR0mAXoqaO8Iu0LpSNUTNOYgBkqNYy21jt0=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:55:c5:e4:bd:04:4a:72:7c:b7:f2:f1:53:72:98:1f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Jul 12 10:01:00 2026 GMT Not After : Jul 13 10:01:00 2026 GMT Subject: CN=dfb6ac1adca024e492a780e6d6727de316573df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:5c:38:f3:20:47:84:4b:0a:7b:b3:b4:04: 7e:e0:86:4c:7d:ad:b0:ef:b1:f3:0c:9f:f0:9c:5e: d2:37:f1:9b:5d:a3:13:b6:1f:6e:c4:bc:e6:d8:0c: 6f:11:ed:82:b0:28:eb:66:59:5c:d5:b3:ac:ab:4d: 60:b5:e6:23:a9:22:1f:98:bc:5a:2d:1e:ac:7c:7a: 66:3c:55:b5:ee:7b:76:da:5f:bf:17:71:1b:e8:d5: 53:68:ae:8b:2d:97:57:53:a9:73:df:9e:85:72:35: be:ff:cf:1a:5c:55:6f:12:e9:df:a8:e6:d5:48:87: 7a:85:5b:dd:57:09:86:4d:ee:4a:f9:5b:d0:31:36: 3f:58:85:3f:9f:87:6f:8d:c8:9e:0d:a3:1e:6d:f5: e4:0f:d3:0b:7b:7d:ea:66:ba:e9:fd:20:da:98:91: eb:56:c2:48:2a:92:c4:86:cd:e7:5f:6c:a6:d2:e3: 82:46:2a:2c:de:dd:c6:61:7c:bc:e1:b8:ef:bd:dd: b3:96:8c:70:b9:36:b0:8a:80:24:5d:d8:23:a8:c6: 1e:ca:41:0d:da:3d:a2:02:f4:d9:12:6a:bb:b6:e1: dc:19:7f:cd:2e:f3:43:2c:1e:a9:d9:29:8f:f0:33: 4a:78:61:e6:96:0b:40:44:7b:c1:33:fb:bf:9a:7e: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:AC:1A:DC:A0:24:E4:92:A7:80:E6:D6:72:7D:E3:16:57:3D:F8 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:55:16:49:2f:08:6f:82:04:be:66:67:9c:de:93:95:76:7e: b4:59:0f:39:94:b7:44:87:46:af:19:c5:db:ce:c7:ee:44:87: 96:78:ee:e9:a1:7f:af:f1:e2:fd:3d:a9:49:2e:a9:7d:ed:53: d8:d5:b6:88:b3:5c:3c:a1:84:70:76:45:54:fc:23:60:87:96: 76:9e:4c:7b:eb:1c:61:2e:8c:1a:73:ee:1e:44:a7:25:d6:15: 89:6c:3d:4d:85:63:84:5d:aa:e7:9c:da:71:c2:fb:75:4f:98: 91:8a:79:9e:cc:95:f1:b9:b3:d1:2a:c1:4f:10:44:1c:6d:df: 6e:ac:ae:80:28:4a:b9:b1:5c:03:8c:59:c4:95:47:a2:07:50: 02:e8:1f:a7:e8:9e:62:84:cc:3b:f6:50:28:b1:be:e9:19:e2: c3:e1:4a:f0:77:78:40:88:50:92:70:af:2d:24:b3:c6:ae:7b: f1:75:29:96:5d:1e:ad:35:ef:dd:14:72:5a:a5:07:c8:63:0f: 34:41:56:a6:d3:a6:2e:7f:7d:b0:ab:3c:70:4d:7d:32:c2:8f: a6:7a:03:1d:19:d4:f0:60:a5:44:f8:e8:de:82:7f:ce:81:c7: ec:33:0b:09:7f:88:b4:43:8c:6f:98:14:ee:3a:59:c7:b3:f5: 0c:06:f3:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9VxeS9BEpyfLfy8VNymB/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwNzEyMTAwMTAwWhcNMjYwNzEzMTAwMTAwWjAzMTEwLwYDVQQD EyhkZmI2YWMxYWRjYTAyNGU0OTJhNzgwZTZkNjcyN2RlMzE2NTczZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVVcOPMgR4RLCnuztAR+4IZMfa2w 77HzDJ/wnF7SN/GbXaMTth9uxLzm2AxvEe2CsCjrZllc1bOsq01gteYjqSIfmLxa LR6sfHpmPFW17nt22l+/F3Eb6NVTaK6LLZdXU6lz356FcjW+/88aXFVvEunfqObV SId6hVvdVwmGTe5K+VvQMTY/WIU/n4dvjcieDaMebfXkD9MLe33qZrrp/SDamJHr VsJIKpLEhs3nX2ym0uOCRios3t3GYXy84bjvvd2zloxwuTawioAkXdgjqMYeykEN 2j2iAvTZEmq7tuHcGX/NLvNDLB6p2SmP8DNKeGHmlgtARHvBM/u/mn7ewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+2rBrcoCTkkqeA5tZyfeMWVz34MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1UWSS8I b4IEvmZnnN6TlXZ+tFkPOZS3RIdGrxnF287H7kSHlnju6aF/r/Hi/T2pSS6pfe1T 2NW2iLNcPKGEcHZFVPwjYIeWdp5Me+scYS6MGnPuHkSnJdYViWw9TYVjhF2q55za ccL7dU+YkYp5nsyV8bmz0SrBTxBEHG3fbqyugChKubFcA4xZxJVHogdQAugfp+ie YoTMO/ZQKLG+6Rniw+FK8Hd4QIhQknCvLSSzxq578XUpll0erTXv3RRyWqUHyGMP NEFWptOmLn99sKs8cE19MsKPpnoDHRnU8GClRPjo3oJ/zoHH7DMLCX+ItEOMb5gU 7jpZx7P1DAbzOw== -----END CERTIFICATE-----Generated at Sun Jul 12 12:03:38 2026 by rpki-client