$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: ATHMr/o408ZQjXsoynhjvbS6eYDBKYfyD8KyoOUtt+A= Subject key identifier: 0D:85:46:1D:E8:5E:28:36:11:E9:03:5E:47:AF:D6:F1:4F:C9:6E:E6 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019FD83C6255A7B3589F4FAE0D8B2ED4B384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 0430 Signing time: Thu 06 Aug 2026 18:01:03 +0000 Manifest this update: Thu 06 Aug 2026 18:01:03 +0000 Manifest next update: Fri 07 Aug 2026 18:01:03 +0000 Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=) 2: 364eowWUpdHpRRNTUTnx-wVwLG0.roa (hash: REQkrovFJbhkk2t1l2Big9Qs8J0xEVpFx/DXeDXHf8E=) 3: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=) 4: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: /8LBAjtdRMywtq7aZXrvYXNfZCfdMqma9X5nQbk9Wcg=) 5: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=) 6: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=) 7: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=) 8: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=) 9: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=) 10: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=) 11: pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa (hash: +2tNKvGcCLANosV1u5zkvXemE5ip/Oj7vqWsHidx0W8=) 12: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=) 13: xkBXp7rwmSNtGrPWn7O7LK3eIPc.roa (hash: ruZb0fyLFNIK8oCJZQCr0uOvP96aIH6PYR41YcREAHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Aug 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d8:3c:62:55:a7:b3:58:9f:4f:ae:0d:8b:2e:d4:b3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Aug 6 18:01:03 2026 GMT Not After : Aug 7 18:01:03 2026 GMT Subject: CN=0d85461de85e283611e9035e47afd6f14fc96ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:80:bb:83:af:fa:3d:8b:9b:5e:63:5f:10: ad:82:8d:7b:2a:52:ab:4f:d3:5b:0a:b5:06:0e:59: 23:83:0e:8d:ca:c3:ae:e4:ee:41:20:24:78:9f:ab: fb:30:9f:bf:0b:8f:86:f3:e4:9d:c7:2f:26:cb:9c: e9:04:48:51:5e:c2:73:63:c2:bb:9e:f6:52:dd:b3: ac:88:7e:82:8d:ea:7d:64:4b:83:ba:0d:1e:83:c3: 0a:ee:e4:95:25:f1:e6:c3:43:cf:1a:62:cf:78:99: 9d:2b:9d:06:64:9e:96:61:27:b7:40:c9:23:1e:8c: 95:8a:ea:ac:c9:38:df:8e:43:71:ce:65:6c:21:cd: 05:2b:ec:b1:c7:e7:3a:4d:28:05:24:96:0b:a8:d1: 18:3e:c6:cf:46:aa:41:81:03:c6:fb:c3:5c:d9:eb: 5b:ac:c4:0c:c5:06:08:1f:e2:bf:4f:92:78:91:f9: 6b:a0:c6:7a:65:9e:14:e9:df:77:17:bd:af:74:01: 27:46:08:ae:0f:bd:4c:e5:b7:d8:a9:23:df:8b:f0: 14:df:23:59:a2:73:fd:e6:46:20:3f:ba:41:08:4f: 28:00:a3:35:a5:80:63:6e:bf:63:a9:c2:a3:d5:10: 91:cc:1e:7e:df:c7:a6:fe:47:6e:1e:77:39:fe:1f: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:46:1D:E8:5E:28:36:11:E9:03:5E:47:AF:D6:F1:4F:C9:6E:E6 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5d:e5:e9:f6:1b:5f:1f:16:f2:78:7b:0a:bf:11:fc:b2:b5: ff:30:c4:54:c2:bb:bf:2c:a6:5a:e2:55:7c:85:27:f5:62:24: a8:05:db:01:f3:e3:dd:aa:1c:b1:d9:55:a3:d6:33:d6:24:a5: bb:22:ce:91:f4:a1:c4:fc:5f:73:72:cb:fa:bc:d3:d4:ca:c4: 7d:7e:aa:9f:6a:16:5c:61:6c:6a:af:76:33:e3:c2:9d:65:22: 7f:ee:c1:c8:4c:56:e4:6a:b8:de:6d:e5:44:e6:93:e0:6a:01: cb:39:d7:f3:b7:43:94:23:4f:3d:82:b5:ac:f5:ba:27:37:8e: c6:0d:5d:f6:c7:2e:22:28:68:6e:3f:02:1c:f7:7e:cb:eb:24: 8d:ca:e6:f4:b2:22:e6:4c:e3:17:23:60:85:98:1f:84:ef:b3: 65:63:26:62:41:2f:f6:f0:4e:08:6b:f4:89:ee:0a:18:01:f7: 3f:76:ad:21:ba:e9:40:62:c6:75:e6:01:d3:1c:87:67:5d:4e: 86:ce:4a:a6:2e:a9:cb:a6:7b:3b:c4:2f:9b:81:a5:99:82:fd: 66:39:34:57:2f:04:8e:df:67:06:46:1b:c7:05:d0:33:68:f7: 74:21:26:a4:93:0b:84:b2:5b:40:ce:a7:fa:e8:c1:41:50:f6: ca:49:cb:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/YPGJVp7NYn0+uDYsu1LOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwODA2MTgwMTAzWhcNMjYwODA3MTgwMTAzWjAzMTEwLwYDVQQD EygwZDg1NDYxZGU4NWUyODM2MTFlOTAzNWU0N2FmZDZmMTRmYzk2ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKOAu4Ov+j2Lm15jXxCtgo17KlKr T9NbCrUGDlkjgw6NysOu5O5BICR4n6v7MJ+/C4+G8+Sdxy8my5zpBEhRXsJzY8K7 nvZS3bOsiH6Cjep9ZEuDug0eg8MK7uSVJfHmw0PPGmLPeJmdK50GZJ6WYSe3QMkj HoyViuqsyTjfjkNxzmVsIc0FK+yxx+c6TSgFJJYLqNEYPsbPRqpBgQPG+8Nc2etb rMQMxQYIH+K/T5J4kflroMZ6ZZ4U6d93F72vdAEnRgiuD71M5bfYqSPfi/AU3yNZ onP95kYgP7pBCE8oAKM1pYBjbr9jqcKj1RCRzB5+38em/kduHnc5/h9L9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2FRh3oXig2EekDXkev1vFPyW7mMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl3l6fYb Xx8W8nh7Cr8R/LK1/zDEVMK7vyymWuJVfIUn9WIkqAXbAfPj3aocsdlVo9Yz1iSl uyLOkfShxPxfc3LL+rzT1MrEfX6qn2oWXGFsaq92M+PCnWUif+7ByExW5Gq43m3l ROaT4GoByznX87dDlCNPPYK1rPW6JzeOxg1d9scuIihobj8CHPd+y+skjcrm9LIi 5kzjFyNghZgfhO+zZWMmYkEv9vBOCGv0ie4KGAH3P3atIbrpQGLGdeYB0xyHZ11O hs5Kpi6py6Z7O8Qvm4GlmYL9Zjk0Vy8Ejt9nBkYbxwXQM2j3dCEmpJMLhLJbQM6n +ujBQVD2yknLnQ== -----END CERTIFICATE-----Generated at Fri Aug 7 00:30:22 2026 by rpki-client