$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: 045MtiSh+cshzk7RHK8edDqEfRreU6YrZtklxNbmFo8= Subject key identifier: 58:53:D2:70:24:C6:01:7C:10:7E:E7:45:2C:9D:5F:47:DF:4C:19:4F Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019FFE00797CC5A06A2B2EE3BC33C7629C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 1A4C Signing time: Fri 14 Aug 2026 02:01:11 +0000 Manifest this update: Fri 14 Aug 2026 02:01:11 +0000 Manifest next update: Sat 15 Aug 2026 02:01:11 +0000 Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=) 2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=) 3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: w+BfjceVehvVnxrcuInwjkSUPIjAOwkBfKi+v5GHWXk=) 4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=) 5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=) 6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=) 7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=) 8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=) 9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=) 10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=) 11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=) 12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=) 13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=) 14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=) 15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=) 16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=) 17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=) 18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fe:00:79:7c:c5:a0:6a:2b:2e:e3:bc:33:c7:62:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Aug 14 02:01:11 2026 GMT Not After : Aug 15 02:01:11 2026 GMT Subject: CN=5853d27024c6017c107ee7452c9d5f47df4c194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4f:01:1b:c8:37:f8:19:8f:fa:24:8e:a4:43: f4:fe:74:20:f5:b5:40:27:69:5b:26:63:62:35:9d: 73:9a:38:db:dc:a4:6a:5b:48:42:5d:d8:86:08:b3: 90:93:c9:f6:93:96:75:a7:16:64:ad:74:58:73:9c: 51:78:58:81:58:65:90:92:b2:d6:27:e3:96:83:0c: 0f:9b:25:2c:f9:01:ed:0e:ba:7c:b9:cf:f6:7b:a4: 56:4c:99:56:9e:76:54:ed:c4:c6:19:ef:af:de:f8: 3b:3f:25:eb:af:cd:01:af:73:62:a2:40:77:0c:69: c1:e7:d0:fe:79:f4:00:ea:69:c8:4c:2b:5b:87:b1: 1d:ee:9e:39:14:05:b2:c7:00:cc:80:46:aa:ff:35: 0d:17:68:92:be:76:8d:90:4f:d8:3f:5e:c2:f6:d5: 1f:61:62:31:58:dd:94:8c:ce:7e:f3:e2:11:c6:e6: 09:8d:8d:a5:67:b6:a0:81:b9:6f:a8:24:69:02:40: 31:b2:ea:1d:44:b2:1b:ff:af:a5:93:ff:5b:a0:62: b3:f1:aa:4e:24:ea:28:80:1f:d4:57:0f:a0:d7:0a: 46:5b:1f:c5:a9:5e:3b:0f:33:34:49:7e:c3:06:d6: 72:62:bb:b9:77:fe:b1:47:64:11:55:2c:a3:4d:52: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:D2:70:24:C6:01:7C:10:7E:E7:45:2C:9D:5F:47:DF:4C:19:4F X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:65:09:e2:bf:0e:63:56:da:43:b9:46:c7:25:2b:1d:3a:cc: e7:0b:55:42:ff:49:38:33:b6:3e:c1:40:28:58:a4:32:d4:5f: 23:b4:14:79:d3:eb:1a:32:c6:8e:02:f1:0d:3a:4a:be:ce:8a: 38:53:ab:dd:d6:89:04:d9:df:00:1c:ec:29:7f:b7:1f:84:3d: 7e:1a:b0:20:dc:bc:d2:d9:f4:d0:96:e9:83:9e:15:34:d3:1c: 30:7d:33:f0:b8:93:27:82:f2:5a:0c:c7:18:bc:b5:50:c8:1c: f8:76:51:33:2f:0f:a5:d1:48:a3:a5:8e:5a:0c:10:aa:4a:e9: 33:24:35:58:7b:32:5a:da:80:ac:b5:67:61:73:01:f2:13:6c: c4:e3:2e:67:3a:8a:c7:04:47:90:4c:1d:60:a7:07:36:ac:a9: 9c:d2:4b:44:18:28:ac:1b:61:e7:cc:3d:b6:37:c1:71:31:ef: 04:22:98:e7:aa:88:0a:b4:7e:58:51:98:d0:de:3a:0b:de:f5: 3c:8f:ec:1f:68:44:28:4e:15:45:ed:b1:50:49:70:c8:5b:76: 6a:23:af:67:f5:be:ff:48:a2:06:17:86:b1:5b:92:41:bc:1b: 7b:f3:47:e0:55:27:e1:49:b7:48:86:ae:57:94:37:a0:26:9c: d7:51:e3:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/+AHl8xaBqKy7jvDPHYpwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwODE0MDIwMTExWhcNMjYwODE1MDIwMTExWjAzMTEwLwYDVQQD Eyg1ODUzZDI3MDI0YzYwMTdjMTA3ZWU3NDUyYzlkNWY0N2RmNGMxOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U8BG8g3+BmP+iSOpEP0/nQg9bVA J2lbJmNiNZ1zmjjb3KRqW0hCXdiGCLOQk8n2k5Z1pxZkrXRYc5xReFiBWGWQkrLW J+OWgwwPmyUs+QHtDrp8uc/2e6RWTJlWnnZU7cTGGe+v3vg7PyXrr80Br3NiokB3 DGnB59D+efQA6mnITCtbh7Ed7p45FAWyxwDMgEaq/zUNF2iSvnaNkE/YP17C9tUf YWIxWN2UjM5+8+IRxuYJjY2lZ7aggblvqCRpAkAxsuodRLIb/6+lk/9boGKz8apO JOoogB/UVw+g1wpGWx/FqV47DzM0SX7DBtZyYru5d/6xR2QRVSyjTVJRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhT0nAkxgF8EH7nRSydX0ffTBlPMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWUJ4r8O Y1baQ7lGxyUrHTrM5wtVQv9JODO2PsFAKFikMtRfI7QUedPrGjLGjgLxDTpKvs6K OFOr3daJBNnfABzsKX+3H4Q9fhqwINy80tn00Jbpg54VNNMcMH0z8LiTJ4LyWgzH GLy1UMgc+HZRMy8PpdFIo6WOWgwQqkrpMyQ1WHsyWtqArLVnYXMB8hNsxOMuZzqK xwRHkEwdYKcHNqypnNJLRBgorBth58w9tjfBcTHvBCKY56qICrR+WFGY0N46C971 PI/sH2hEKE4VRe2xUElwyFt2aiOvZ/W+/0iiBheGsVuSQbwbe/NH4FUn4Um3SIau V5Q3oCac11HjJA== -----END CERTIFICATE-----Generated at Fri Aug 14 04:00:33 2026 by rpki-client