$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: q8adQyE4RcKH43whWYGKccd4sU32UwTxX8+byvM3Fv0= Subject key identifier: BE:49:28:0A:31:32:23:24:7A:C6:ED:DA:D4:67:38:A5:B4:4F:FB:3D Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019FC9A5112C2DFB1423C4A6608950AD6FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 123A Signing time: Mon 03 Aug 2026 22:01:05 +0000 Manifest this update: Mon 03 Aug 2026 22:01:05 +0000 Manifest next update: Tue 04 Aug 2026 22:01:05 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 3: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=) 4: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 5: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 6: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: wHmTgxHpzBIpvDKkty+COHB0kWuhJxZzGcnJEmSures=) 7: kb1i0Euop8uoZI3hbnb2E8DBgcA.roa (hash: /59t43jCATUh6sMhTHPSZs3hBikNt8v++IxN2wJ5leg=) 8: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) 9: rjckdxrOW6yb8UbBlQuItd3xhV8.roa (hash: 0JVOip2Nlhin+Ly1iQyyyD/alQ1c3usrAontHun6a3c=) 10: xddt07zyoLb-y4ddIpmNk_Ngnlo.roa (hash: yi5hHDSKd9O5g6YykPT5aDJKpKMiWzWCSa5v86IH4b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c9:a5:11:2c:2d:fb:14:23:c4:a6:60:89:50:ad:6f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Aug 3 22:01:05 2026 GMT Not After : Aug 4 22:01:05 2026 GMT Subject: CN=be49280a313223247ac6eddad46738a5b44ffb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:87:03:0d:ed:aa:50:0d:63:a9:21:ae:47: d2:aa:1d:d5:ce:a1:81:0e:64:d2:43:92:5a:ce:9b: bc:13:96:82:c3:c9:72:cf:60:1f:b1:f6:e9:f4:4d: 14:39:61:b2:66:09:a9:ea:4a:24:81:9b:e3:4b:30: c8:97:bc:05:c5:9f:4d:bc:46:d7:d3:6a:cf:86:cb: 27:f7:e6:82:7d:83:32:54:0d:3c:fd:ca:eb:39:a8: 29:fd:84:24:ef:25:4d:1c:bd:50:b2:f9:1e:09:c1: 0d:e9:9a:fb:bf:35:d4:dd:e3:1e:64:aa:d4:33:3b: 7f:13:be:84:dc:6f:ef:5b:2f:eb:6d:59:e5:ec:e5: 8e:ae:d0:42:32:1c:9a:cd:a5:1e:46:25:98:d0:ed: 84:e3:79:81:a0:2d:0e:24:11:ef:95:6d:95:b2:88: f8:7e:ab:ce:9e:c6:55:45:81:9b:a4:e6:27:23:9c: 96:ea:a9:0e:56:99:2b:3c:fc:1b:c5:41:45:e3:cf: 8a:11:2e:00:f9:15:ee:49:5b:fb:39:c0:59:0d:ab: f2:14:d3:17:bf:02:43:8b:c6:a2:7b:f2:71:76:70: 93:93:76:43:58:9b:52:4b:e8:88:0b:1d:b3:4e:8b: 51:b6:1c:02:bf:22:d1:1c:d5:21:4f:63:ba:ce:96: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:28:0A:31:32:23:24:7A:C6:ED:DA:D4:67:38:A5:B4:4F:FB:3D X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ae:d4:ec:6a:5f:93:ec:3c:ff:14:9c:32:3e:8a:1e:12:90: 78:f2:5c:1c:62:39:c0:47:3d:33:38:a7:30:00:61:6f:5e:a2: 95:8f:d9:fd:36:be:4f:9f:2b:4d:b6:5c:fe:6e:34:2f:75:f5: 63:da:61:cc:26:d5:1f:52:f9:ac:95:05:5a:df:00:cc:e5:bc: 38:e1:4d:78:37:72:41:b8:86:9a:08:6c:7c:bd:b3:23:5b:00: 5d:38:37:0b:8e:8c:69:6e:ad:78:ab:c1:b9:5f:bc:45:6e:f6: d5:6c:05:cc:7a:52:ca:11:8c:62:39:b5:c8:5b:ab:1f:6f:95: 91:a0:33:77:fa:7f:bf:8c:eb:a3:3f:fa:8a:3c:4a:aa:fd:e4: e3:71:8c:7c:8c:58:e8:7d:b2:ee:15:7b:2c:07:e8:97:23:47: e2:af:ba:3e:6b:b1:d6:7a:d2:22:ae:c0:10:2a:f4:00:a7:31: f1:bd:17:6a:00:53:a4:53:ef:21:88:f8:74:89:72:c2:ef:cb: 45:9f:95:f0:70:f7:11:fc:2c:16:b9:85:bd:3d:28:86:50:83: e2:ae:23:48:13:eb:0f:9e:cd:f2:83:5a:3e:e6:11:cd:2e:51: 08:c7:c1:be:33:63:c6:96:86:d6:ce:ab:85:33:f9:ed:ca:d9: 9f:6a:83:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/JpREsLfsUI8SmYIlQrW/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwODAzMjIwMTA1WhcNMjYwODA0MjIwMTA1WjAzMTEwLwYDVQQD EyhiZTQ5MjgwYTMxMzIyMzI0N2FjNmVkZGFkNDY3MzhhNWI0NGZmYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeHAw3tqlANY6khrkfSqh3VzqGB DmTSQ5Jazpu8E5aCw8lyz2Afsfbp9E0UOWGyZgmp6kokgZvjSzDIl7wFxZ9NvEbX 02rPhssn9+aCfYMyVA08/crrOagp/YQk7yVNHL1QsvkeCcEN6Zr7vzXU3eMeZKrU Mzt/E76E3G/vWy/rbVnl7OWOrtBCMhyazaUeRiWY0O2E43mBoC0OJBHvlW2Vsoj4 fqvOnsZVRYGbpOYnI5yW6qkOVpkrPPwbxUFF48+KES4A+RXuSVv7OcBZDavyFNMX vwJDi8aie/JxdnCTk3ZDWJtSS+iICx2zTotRthwCvyLRHNUhT2O6zpaz+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5JKAoxMiMkesbt2tRnOKW0T/s9MB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq7U7Gpf k+w8/xScMj6KHhKQePJcHGI5wEc9MzinMABhb16ilY/Z/Ta+T58rTbZc/m40L3X1 Y9phzCbVH1L5rJUFWt8AzOW8OOFNeDdyQbiGmghsfL2zI1sAXTg3C46MaW6teKvB uV+8RW721WwFzHpSyhGMYjm1yFurH2+VkaAzd/p/v4zroz/6ijxKqv3k43GMfIxY 6H2y7hV7LAfolyNH4q+6Pmux1nrSIq7AECr0AKcx8b0XagBTpFPvIYj4dIlywu/L RZ+V8HD3EfwsFrmFvT0ohlCD4q4jSBPrD57N8oNaPuYRzS5RCMfBvjNjxpaG1s6r hTP57crZn2qDYA== -----END CERTIFICATE-----Generated at Tue Aug 4 08:50:16 2026 by rpki-client