$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: RHrSA8XunXYqTnff5R53N4KBjrdHz1IUlxuB+qBw2qk= Subject key identifier: 0E:B2:92:31:58:0C:A9:BE:78:B2:C9:C8:35:70:E7:BE:2D:1E:7F:46 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019FA072405688C6767A57BBE6073ECEA022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 123C Signing time: Sun 26 Jul 2026 22:01:09 +0000 Manifest this update: Sun 26 Jul 2026 22:01:09 +0000 Manifest next update: Mon 27 Jul 2026 22:01:09 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: bhCKRQ+u/4u/MvsF33P1oIPrLUDtQKK7d8b8d+NaLLo=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:72:40:56:88:c6:76:7a:57:bb:e6:07:3e:ce:a0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jul 26 22:01:09 2026 GMT Not After : Jul 27 22:01:09 2026 GMT Subject: CN=0eb29231580ca9be78b2c9c83570e7be2d1e7f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:e2:1f:b5:22:e0:54:e9:e7:80:5a:ef:2e: cc:8c:81:34:2d:ec:ec:0c:eb:3f:5c:48:fe:f3:56: 33:2c:18:f5:80:90:b7:9e:46:11:59:f8:bd:16:1f: 71:c1:9a:d5:ce:06:63:8a:93:f6:c4:85:07:c0:32: 66:02:ba:0b:2e:84:f1:71:d4:8a:6c:f3:ab:08:9e: 6a:d8:13:f7:60:69:5a:b7:73:51:cd:b9:0b:08:91: 3d:d2:b9:ea:06:fe:16:56:a0:91:af:e7:68:65:8e: 2b:de:7c:0f:d5:98:ef:1b:1b:aa:ac:78:4a:67:63: af:12:b3:bb:42:68:83:08:dc:20:20:5c:f6:f2:96: 60:57:fb:2c:b4:55:9e:f3:24:02:88:7c:4c:1f:71: e8:b7:e3:a5:db:4c:79:3e:72:55:dc:80:0c:c0:66: cd:9b:c5:33:17:12:5e:b1:c7:f6:d2:23:32:86:f5: 98:47:72:3c:72:e8:ac:c6:50:45:8a:41:cd:30:6f: 2d:54:09:35:c7:10:ab:22:46:e6:80:b4:ed:18:2a: 5e:64:f0:72:47:7e:45:2e:4e:d2:6f:f6:d3:d7:3b: f7:ab:66:74:0b:85:56:17:a4:f7:c8:7d:d4:5a:85: 5b:be:30:5b:8b:06:5f:ee:84:4f:a1:49:a8:e3:5c: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:92:31:58:0C:A9:BE:78:B2:C9:C8:35:70:E7:BE:2D:1E:7F:46 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2e:bf:3f:b8:02:18:d6:0e:a9:4b:34:b5:f4:b8:f4:fd:dc: 32:10:f4:58:bf:65:75:0e:a7:ba:21:56:9a:91:e7:81:40:ca: 03:3d:93:c2:db:aa:6a:35:49:be:49:ef:0f:1c:e6:cf:5a:0a: bf:03:b0:25:22:a1:52:55:8f:de:47:20:b1:c6:0d:e2:0b:be: c5:6e:bb:cd:4c:11:fc:e6:62:5d:03:55:7d:f6:78:c3:25:78: 2e:44:5b:19:ec:77:dd:38:4a:2a:c7:9c:32:55:d4:6f:ba:5c: 67:71:65:38:a9:51:79:3a:3c:d6:1e:7e:84:bb:55:ff:a2:ba: 89:44:56:e3:1e:d0:f0:26:9f:8a:63:51:8c:d2:54:6c:cd:58: e9:2b:71:4d:f0:f8:e2:c5:8e:cf:39:2e:5d:4a:ab:7b:79:15: 2a:c6:1b:0f:9f:63:ba:7f:1a:30:ac:07:8a:58:57:19:c6:45: 3a:8b:80:86:1c:fc:c3:34:cd:19:0c:49:db:58:da:ec:04:71: dd:4b:f3:d0:f5:95:5f:b8:71:53:b1:83:80:bb:ed:33:09:e8: 93:9d:9c:9e:d5:83:6b:fa:0a:a0:5d:29:d2:3b:69:d3:f2:f4: 9d:94:32:fb:d5:25:10:5c:83:57:2b:2f:d1:26:e2:b9:84:07: 3e:d8:70:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gckBWiMZ2ele75gc+zqAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNzI2MjIwMTA5WhcNMjYwNzI3MjIwMTA5WjAzMTEwLwYDVQQD EygwZWIyOTIzMTU4MGNhOWJlNzhiMmM5YzgzNTcwZTdiZTJkMWU3ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EriH7Ui4FTp54Ba7y7MjIE0Lezs DOs/XEj+81YzLBj1gJC3nkYRWfi9Fh9xwZrVzgZjipP2xIUHwDJmAroLLoTxcdSK bPOrCJ5q2BP3YGlat3NRzbkLCJE90rnqBv4WVqCRr+doZY4r3nwP1ZjvGxuqrHhK Z2OvErO7QmiDCNwgIFz28pZgV/sstFWe8yQCiHxMH3Hot+Ol20x5PnJV3IAMwGbN m8UzFxJescf20iMyhvWYR3I8cuisxlBFikHNMG8tVAk1xxCrIkbmgLTtGCpeZPBy R35FLk7Sb/bT1zv3q2Z0C4VWF6T3yH3UWoVbvjBbiwZf7oRPoUmo41xhkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6ykjFYDKm+eLLJyDVw574tHn9GMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC6/P7gC GNYOqUs0tfS49P3cMhD0WL9ldQ6nuiFWmpHngUDKAz2TwtuqajVJvknvDxzmz1oK vwOwJSKhUlWP3kcgscYN4gu+xW67zUwR/OZiXQNVffZ4wyV4LkRbGex33ThKKsec MlXUb7pcZ3FlOKlReTo81h5+hLtV/6K6iURW4x7Q8CafimNRjNJUbM1Y6StxTfD4 4sWOzzkuXUqre3kVKsYbD59jun8aMKwHilhXGcZFOouAhhz8wzTNGQxJ21ja7ARx 3Uvz0PWVX7hxU7GDgLvtMwnok52cntWDa/oKoF0p0jtp0/L0nZQy+9UlEFyDVysv 0SbiuYQHPthw5g== -----END CERTIFICATE-----Generated at Mon Jul 27 07:58:20 2026 by rpki-client