$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: XAnCkDoBUXLLOF3I94WsrrzLaaMTRuJXgBqnsLpMu4k= Subject key identifier: 57:A5:44:07:93:D0:A3:11:1E:3B:48:9C:FB:A2:BC:67:D7:C4:A7:85 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019FA003B6ECC06814D30E4399F5BF58BA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0F11 Signing time: Sun 26 Jul 2026 20:00:25 +0000 Manifest this update: Sun 26 Jul 2026 20:00:25 +0000 Manifest next update: Mon 27 Jul 2026 20:00:25 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 3: CcVgFG7BZonjVWr4-H-FOyJB6rU.asa (hash: laUwrqbn5y+IuSKtz7iff3aTwLc/uHIZOpDttjq0UN0=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: vv3EwV0qv7IDhtSuygLPQ4Uo2Tq7wI6Ura85WA+yxkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:03:b6:ec:c0:68:14:d3:0e:43:99:f5:bf:58:ba:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jul 26 20:00:25 2026 GMT Not After : Jul 27 20:00:25 2026 GMT Subject: CN=57a5440793d0a3111e3b489cfba2bc67d7c4a785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:4c:35:1f:52:41:25:4e:10:f9:4e:0a:48: a7:c4:7b:33:2e:49:12:5e:42:03:ee:09:1e:a4:8d: 2f:75:85:43:dd:bf:38:a3:9b:2f:4e:01:3b:4b:05: cc:c0:fe:d0:e4:58:81:45:36:a0:68:d7:77:b9:fa: 97:20:d2:11:48:d0:d4:0b:c5:d9:c6:c2:58:0c:54: 8d:e5:ef:75:b1:d8:26:1d:aa:0b:b5:0a:4c:e9:95: cb:12:58:14:94:4d:08:95:9b:50:eb:8e:b9:d0:f5: 1b:cd:3c:87:2d:c4:89:6b:62:44:65:f5:7f:2b:0a: 1b:a7:7f:41:71:fc:47:90:77:4d:52:74:8b:37:cb: 6f:7a:42:f8:6b:68:61:4a:66:b1:47:3d:d2:e1:57: e9:3e:30:99:11:4a:eb:7a:07:a8:74:90:ae:ad:47: e5:fc:5d:17:86:5e:40:0a:00:dd:76:c4:48:67:c8: 4e:6b:68:55:44:f4:4a:5b:be:4c:0d:fb:40:6f:ef: bf:3c:cb:2e:51:4f:02:9a:b2:30:79:ef:85:59:25: 75:48:7e:c7:6d:af:a0:fc:26:be:4c:30:9f:c7:c8: 26:98:36:36:9b:10:df:df:85:4c:e1:80:93:67:f7: 36:e8:29:f9:88:02:81:9d:2b:8b:7c:33:ea:97:d6: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A5:44:07:93:D0:A3:11:1E:3B:48:9C:FB:A2:BC:67:D7:C4:A7:85 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:c5:3f:2c:dd:a3:23:19:51:b8:80:37:88:db:2f:bc:02: 01:ae:8b:18:07:79:b4:c0:91:d8:c9:37:a0:da:19:83:02:36: 4a:d9:3d:69:07:12:81:f9:c5:c6:9c:f9:85:53:bb:60:9f:b1: e0:d2:73:41:bc:d7:fe:a3:87:23:c4:e7:b9:da:c4:d2:a5:88: c6:89:0b:ae:02:34:39:72:55:9a:4a:77:12:cc:23:88:b5:9b: ed:a0:c1:6f:01:d3:e5:87:4f:ba:2b:ee:3d:b6:80:fe:fa:d8: d0:06:8d:14:75:ed:f6:29:6b:b0:2b:84:c4:a7:e0:d7:e7:2c: f2:aa:05:ad:01:a5:6b:05:e1:52:85:76:c5:cf:bd:4c:8c:69: 80:28:19:60:4f:a6:34:d5:5a:8d:a9:36:24:49:f8:08:f8:44: b3:2b:5f:95:33:dc:d9:1c:68:84:72:30:0c:d0:e7:a1:14:c8: 86:46:0f:6f:43:ee:bd:d1:76:0f:58:50:5c:5c:9c:e1:c4:81: 46:f9:ff:f3:94:2a:17:1f:21:71:d3:8d:4b:14:2f:6f:60:20: 06:ae:c1:43:e0:27:57:2c:cd:5e:82:a4:ad:dd:ca:a7:02:f2: 72:c4:8f:17:86:86:f3:b8:cb:9c:9c:12:59:45:58:92:71:60: e0:4a:6f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gA7bswGgU0w5DmfW/WLo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNzI2MjAwMDI1WhcNMjYwNzI3MjAwMDI1WjAzMTEwLwYDVQQD Eyg1N2E1NDQwNzkzZDBhMzExMWUzYjQ4OWNmYmEyYmM2N2Q3YzRhNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqJMNR9SQSVOEPlOCkinxHszLkkS XkID7gkepI0vdYVD3b84o5svTgE7SwXMwP7Q5FiBRTagaNd3ufqXINIRSNDUC8XZ xsJYDFSN5e91sdgmHaoLtQpM6ZXLElgUlE0IlZtQ64650PUbzTyHLcSJa2JEZfV/ Kwobp39BcfxHkHdNUnSLN8tvekL4a2hhSmaxRz3S4VfpPjCZEUrregeodJCurUfl /F0Xhl5ACgDddsRIZ8hOa2hVRPRKW75MDftAb++/PMsuUU8CmrIwee+FWSV1SH7H ba+g/Ca+TDCfx8gmmDY2mxDf34VM4YCTZ/c26Cn5iAKBnSuLfDPql9b8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFelRAeT0KMRHjtInPuivGfXxKeFMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDDFPyzd oyMZUbiAN4jbL7wCAa6LGAd5tMCR2Mk3oNoZgwI2Stk9aQcSgfnFxpz5hVO7YJ+x 4NJzQbzX/qOHI8TnudrE0qWIxokLrgI0OXJVmkp3EswjiLWb7aDBbwHT5YdPuivu PbaA/vrY0AaNFHXt9ilrsCuExKfg1+cs8qoFrQGlawXhUoV2xc+9TIxpgCgZYE+m NNVajak2JEn4CPhEsytflTPc2RxohHIwDNDnoRTIhkYPb0PuvdF2D1hQXFyc4cSB Rvn/85QqFx8hcdONSxQvb2AgBq7BQ+AnVyzNXoKkrd3KpwLycsSPF4aG87jLnJwS WUVYknFg4EpvGQ== -----END CERTIFICATE-----Generated at Mon Jul 27 04:48:16 2026 by rpki-client