$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: 0PHjwbq3kKshPApSM6kjYAG1Q8qSdONYRGQuemKEPmE= Subject key identifier: 8F:E3:D2:3F:6A:DB:F6:C9:AB:55:AA:1C:FA:5E:7E:50:DD:C6:2E:EC Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019F91DABC26E25EDC81BF18129579377B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 1A14 Signing time: Fri 24 Jul 2026 02:00:59 +0000 Manifest this update: Fri 24 Jul 2026 02:00:59 +0000 Manifest next update: Sat 25 Jul 2026 02:00:59 +0000 Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=) 2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=) 3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: i9bPLahRHv/BdjjNERaAxP1cbDaHSz9GskLPTcf4gh8=) 4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=) 5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=) 6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=) 7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=) 8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=) 9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=) 10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=) 11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=) 12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=) 13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=) 14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=) 15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=) 16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=) 17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=) 18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:bc:26:e2:5e:dc:81:bf:18:12:95:79:37:7b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jul 24 02:00:59 2026 GMT Not After : Jul 25 02:00:59 2026 GMT Subject: CN=8fe3d23f6adbf6c9ab55aa1cfa5e7e50ddc62eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:87:8d:ed:09:e8:f9:ff:9f:64:ed:f7:a3: 2b:dc:51:6f:f0:ea:1e:05:be:54:7a:3d:74:7b:c2: a1:9e:59:32:ff:5e:a2:13:8d:9f:1a:57:03:ef:7a: 03:d0:2d:71:9e:9b:62:a4:c0:c1:b4:be:e2:19:3e: b4:98:aa:5d:39:f8:7e:c9:b1:d9:fc:7f:e7:2b:eb: 3c:a8:5e:36:c7:08:52:f5:4d:32:e5:6b:93:1a:fc: d4:6b:b3:3e:ea:ad:e9:bb:9d:e4:94:39:69:e6:45: 67:c8:5a:bf:11:fd:50:3c:7c:15:74:64:2b:45:db: 35:78:c0:1a:ac:a1:a4:23:99:ae:28:0a:9c:3e:37: 65:c3:bc:2d:98:e3:15:2c:c9:ea:3e:35:e1:f5:c9: 5d:8b:d0:19:26:a9:2e:20:11:40:30:83:26:77:af: 89:d2:d5:1c:8c:ce:51:c4:b4:a8:f1:39:b5:23:d6: e3:42:c2:c1:da:09:56:34:c6:f9:6c:23:90:eb:61: 5f:ba:73:03:1f:7b:50:0a:f4:65:ae:66:aa:ff:c1: 1f:9a:3f:f2:04:33:d2:9a:0b:eb:c4:91:26:d6:74: e6:08:3f:61:3e:63:c0:46:bd:04:94:b0:1e:86:3d: 5e:7c:c4:2c:e8:26:4b:80:d3:10:97:16:d3:e9:20: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:D2:3F:6A:DB:F6:C9:AB:55:AA:1C:FA:5E:7E:50:DD:C6:2E:EC X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c2:0a:6d:e7:03:8e:e5:c7:d8:8e:d2:33:9b:37:9a:2c:6a: fd:45:dc:c5:9d:0a:e9:b7:54:8a:0c:75:2c:21:91:9c:98:82: 24:29:f1:9f:ef:01:98:88:57:32:53:6e:70:26:46:73:06:1c: 9c:ac:b6:da:e4:a3:ee:e1:f6:c2:fd:e6:cb:c4:1e:40:5b:8b: 5b:58:80:13:c7:30:09:8e:13:da:c9:68:22:9d:f0:b8:47:55: 32:6c:b7:3b:bb:d8:f2:50:01:c4:07:d7:0d:aa:c9:c8:ea:bd: f3:02:f1:1e:92:ff:82:2a:dd:ff:00:61:19:f8:fa:82:cd:c9: ba:f2:56:0a:4f:d3:01:9e:de:7c:07:51:08:8f:1e:3b:da:42: 2a:33:59:8d:b0:dc:8c:e0:8f:26:85:a8:d8:cf:7f:c7:4b:d8: bc:c2:09:9e:89:fb:11:e9:3f:e7:65:ad:91:31:26:ba:7e:a2: 77:ca:9a:97:ef:7b:70:68:01:ad:13:43:31:8c:10:3f:21:ae: fa:ce:f5:8d:cc:c6:a4:84:98:61:72:16:54:94:0f:9e:61:06: 6e:6c:cb:e4:64:5d:f8:3b:0d:86:69:6d:1c:63:e1:92:77:be: 7a:ce:a5:ce:55:b0:fd:d1:68:14:5f:4c:d2:6c:fa:6f:e7:41: e6:de:4d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2rwm4l7cgb8YEpV5N3sHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwNzI0MDIwMDU5WhcNMjYwNzI1MDIwMDU5WjAzMTEwLwYDVQQD Eyg4ZmUzZDIzZjZhZGJmNmM5YWI1NWFhMWNmYTVlN2U1MGRkYzYyZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLCHje0J6Pn/n2Tt96Mr3FFv8Ooe Bb5Uej10e8Khnlky/16iE42fGlcD73oD0C1xnptipMDBtL7iGT60mKpdOfh+ybHZ /H/nK+s8qF42xwhS9U0y5WuTGvzUa7M+6q3pu53klDlp5kVnyFq/Ef1QPHwVdGQr Rds1eMAarKGkI5muKAqcPjdlw7wtmOMVLMnqPjXh9cldi9AZJqkuIBFAMIMmd6+J 0tUcjM5RxLSo8Tm1I9bjQsLB2glWNMb5bCOQ62FfunMDH3tQCvRlrmaq/8Efmj/y BDPSmgvrxJEm1nTmCD9hPmPARr0ElLAehj1efMQs6CZLgNMQlxbT6SB9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/j0j9q2/bJq1WqHPpeflDdxi7sMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMIKbecD juXH2I7SM5s3mixq/UXcxZ0K6bdUigx1LCGRnJiCJCnxn+8BmIhXMlNucCZGcwYc nKy22uSj7uH2wv3my8QeQFuLW1iAE8cwCY4T2sloIp3wuEdVMmy3O7vY8lABxAfX DarJyOq98wLxHpL/gird/wBhGfj6gs3JuvJWCk/TAZ7efAdRCI8eO9pCKjNZjbDc jOCPJoWo2M9/x0vYvMIJnon7Eek/52WtkTEmun6id8qal+97cGgBrRNDMYwQPyGu +s71jczGpISYYXIWVJQPnmEGbmzL5GRd+DsNhmltHGPhkne+es6lzlWw/dFoFF9M 0mz6b+dB5t5NOQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:42:28 2026 by rpki-client