$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: Wuphs/FBDX1G3FnyEgtUr9m+KvnzUc7TbuiY4iAqh7E= Subject key identifier: 93:0A:A5:14:F8:D4:20:37:FD:F7:9B:12:57:37:66:71:E6:9B:1E:91 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019F84C3AE3865BFC76A88A4C9722F6D5C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 18DA Signing time: Tue 21 Jul 2026 13:00:44 +0000 Manifest this update: Tue 21 Jul 2026 13:00:44 +0000 Manifest next update: Wed 22 Jul 2026 13:00:44 +0000 Files and hashes: 1: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=) 3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 7: EfWuRA4xuDAvflS5tv0JhzSei28.roa (hash: SAzMnIbvWnao7wpDdbRqrdkwbQWMAO6Jj0G8Oc5qkbI=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 12: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: XoEy8ZIKyt97YCoWgjVAJmwvz6UDWhPtMOaN5BYQUJ0=) 14: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=) 16: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 17: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 18: u_DOEx2r_J3BkCywvogfeZZkNpA.roa (hash: oEGf5LtDawHz/AlzF45DhMZpwO1j9J3oHupUypQDU5Q=) 19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:c3:ae:38:65:bf:c7:6a:88:a4:c9:72:2f:6d:5c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jul 21 13:00:44 2026 GMT Not After : Jul 22 13:00:44 2026 GMT Subject: CN=930aa514f8d42037fdf79b1257376671e69b1e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:bf:5d:73:27:31:f9:e6:64:2c:a0:f4:3c: 2a:6b:66:dd:7f:2f:a0:4c:3f:5f:3f:bc:90:3a:57: 15:24:76:82:75:08:17:c2:53:9c:f6:b5:35:7e:0c: b7:81:1c:b1:57:15:d0:e8:69:78:15:64:3e:19:0c: ea:9f:d7:44:b2:e0:08:da:7c:42:24:0a:48:85:35: d9:95:1e:c0:28:38:0d:37:cf:d5:ff:b0:74:40:9e: ec:a4:64:57:4a:69:39:b1:97:7a:da:d4:7e:68:57: 06:3a:52:da:e7:9e:dd:9f:b2:d2:6a:d9:37:6e:05: 82:84:6c:e9:6d:d0:a1:ea:97:01:5d:78:18:26:2f: 98:ad:90:a6:93:83:d1:f7:85:66:72:3f:28:49:17: cb:af:ad:7d:c5:8a:0e:23:7c:31:78:cf:f9:39:78: 83:b8:fe:c1:6b:12:11:b3:15:81:5c:77:57:ce:7d: f2:b9:f2:72:29:a3:00:aa:59:f4:c1:91:22:92:0f: 3c:8a:32:d6:93:af:6a:26:03:f0:bb:86:73:58:71: 6c:4f:ef:22:d9:06:4d:d4:8a:cd:54:7c:70:ff:bd: 2e:41:cf:3a:29:2b:53:a0:f9:1a:f0:43:ea:0f:ae: cc:53:00:12:97:22:c1:3d:0b:ab:9f:a9:7b:49:a0: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:A5:14:F8:D4:20:37:FD:F7:9B:12:57:37:66:71:E6:9B:1E:91 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1d:c9:e6:ea:6c:e0:62:64:18:c7:99:51:8c:d6:0d:1d:f4: b9:8c:80:db:42:96:92:bc:de:40:9e:ad:87:51:11:4a:60:ad: bc:84:1e:03:3b:d7:af:67:e7:31:15:2a:be:71:e9:bc:60:22: ab:69:e5:51:c8:0e:72:94:c4:d0:77:63:d6:83:83:ff:4e:bb: 40:2c:d0:90:6b:29:89:90:6b:0e:5e:d1:2a:bd:36:e5:2b:bd: b6:51:6a:31:e6:b0:47:0f:24:c8:09:c2:31:c5:e0:32:c9:2f: a1:86:d3:bd:67:31:92:00:b8:05:93:d2:f5:5e:01:75:a6:c9: 13:e0:55:a4:e1:8a:64:3c:0f:5e:07:f9:c8:ec:79:6a:e2:8e: 18:0b:ba:4e:f9:bb:2d:3c:67:6d:30:32:25:9c:e4:0c:52:fe: 20:42:51:35:2c:56:cb:ee:b0:f3:2d:9b:c8:9c:8b:c0:6c:8c: e2:37:4e:55:9d:2e:07:8b:fc:ad:93:65:58:06:1a:89:ba:88: e1:f5:12:30:99:c3:90:fc:83:84:9a:08:c0:50:13:98:0f:a7: 6d:74:da:5a:fc:eb:dd:b4:c1:e7:6d:1d:17:3f:f5:38:e6:39: 27:a4:68:0a:db:f8:50:80:c6:2c:a4:84:30:4f:d3:4d:18:c9: 5f:9d:2b:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ew644Zb/HaoikyXIvbVwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwNzIxMTMwMDQ0WhcNMjYwNzIyMTMwMDQ0WjAzMTEwLwYDVQQD Eyg5MzBhYTUxNGY4ZDQyMDM3ZmRmNzliMTI1NzM3NjY3MWU2OWIxZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/u/XXMnMfnmZCyg9Dwqa2bdfy+g TD9fP7yQOlcVJHaCdQgXwlOc9rU1fgy3gRyxVxXQ6Gl4FWQ+GQzqn9dEsuAI2nxC JApIhTXZlR7AKDgNN8/V/7B0QJ7spGRXSmk5sZd62tR+aFcGOlLa557dn7LSatk3 bgWChGzpbdCh6pcBXXgYJi+YrZCmk4PR94Vmcj8oSRfLr619xYoOI3wxeM/5OXiD uP7BaxIRsxWBXHdXzn3yufJyKaMAqln0wZEikg88ijLWk69qJgPwu4ZzWHFsT+8i 2QZN1IrNVHxw/70uQc86KStToPka8EPqD67MUwASlyLBPQurn6l7SaB3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMKpRT41CA3/febElc3ZnHmmx6RMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR3J5ups 4GJkGMeZUYzWDR30uYyA20KWkrzeQJ6th1ERSmCtvIQeAzvXr2fnMRUqvnHpvGAi q2nlUcgOcpTE0Hdj1oOD/067QCzQkGspiZBrDl7RKr025Su9tlFqMeawRw8kyAnC McXgMskvoYbTvWcxkgC4BZPS9V4BdabJE+BVpOGKZDwPXgf5yOx5auKOGAu6Tvm7 LTxnbTAyJZzkDFL+IEJRNSxWy+6w8y2byJyLwGyM4jdOVZ0uB4v8rZNlWAYaibqI 4fUSMJnDkPyDhJoIwFATmA+nbXTaWvzr3bTB520dFz/1OOY5J6RoCtv4UIDGLKSE ME/TTRjJX50rfA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:58 2026 by rpki-client