$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: LMuk7lMGFuYAS5IFjaZl1okmN5gKL32RRNyVRO3ak4w= Subject key identifier: F7:76:E3:6B:D5:A9:B8:2C:14:AB:BF:A7:52:15:CA:80:E1:58:FB:D8 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019FA0040989107CC21B90FA6CF1B9E8721F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 19DC Signing time: Sun 26 Jul 2026 20:00:46 +0000 Manifest this update: Sun 26 Jul 2026 20:00:46 +0000 Manifest next update: Mon 27 Jul 2026 20:00:46 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: 2EIlXzzhtdXlgpGaalOHtv66Qwtyf3mbV0zeMS+3OC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:04:09:89:10:7c:c2:1b:90:fa:6c:f1:b9:e8:72:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jul 26 20:00:46 2026 GMT Not After : Jul 27 20:00:46 2026 GMT Subject: CN=f776e36bd5a9b82c14abbfa75215ca80e158fbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:61:d9:45:4a:b8:13:4b:29:79:71:d6:a9: 65:33:6a:07:ac:d6:b4:08:29:4a:7d:43:44:8e:12: d0:84:30:f2:e9:7f:44:f6:a5:03:e6:c5:d1:f9:36: 6c:8e:54:1e:52:bf:81:bc:29:3f:e4:3b:48:f8:47: 72:e0:cb:36:29:79:3c:aa:c5:81:33:ba:d6:f8:be: a1:0c:7f:4f:e1:17:9c:62:46:af:ad:b8:3b:56:b1: 88:20:31:8e:df:ff:7f:40:13:54:28:4c:a4:82:d7: 1a:3e:7a:37:c8:b6:44:1d:fa:6e:6e:8f:bf:17:98: 4b:25:1d:4a:26:f2:0f:d6:a3:a0:36:c7:61:a0:7c: 83:18:2e:35:45:2d:7f:b1:12:72:15:16:35:eb:b5: 02:91:fb:bf:60:b4:8b:35:27:83:d8:5d:0c:b5:fd: 9e:e5:8b:ab:95:b4:43:a2:d9:15:3f:89:c3:f4:b5: 35:3d:b7:f9:33:08:03:95:b8:d2:98:04:88:57:60: e7:87:d8:89:fd:20:03:c3:0f:14:7f:02:a0:03:28: 33:65:03:e3:5c:e4:96:60:93:6e:1d:32:75:b4:c0: a1:32:d5:41:50:0f:9b:b0:fa:6f:c9:3d:c2:39:79: 7a:e5:d6:12:c6:0c:c8:37:be:0a:18:08:3a:90:cf: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:E3:6B:D5:A9:B8:2C:14:AB:BF:A7:52:15:CA:80:E1:58:FB:D8 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c4:8b:dd:e4:04:ad:a0:17:94:ab:45:2e:20:e7:fe:2d:95: de:47:43:70:d8:ba:09:ae:ba:99:f7:1e:25:df:2e:0c:cf:52: 9c:51:56:2a:86:2f:7f:3d:a2:35:2f:35:08:93:47:84:f4:b3: 58:49:38:a3:f6:0b:4a:f8:e0:8a:b3:8d:a9:9c:6d:8c:d7:9b: 7c:e3:86:ae:f1:f4:13:5a:3b:a9:be:7e:97:25:e7:03:98:3b: 46:4c:b1:69:9c:b8:da:b2:d8:fe:30:22:80:1a:c3:70:9a:86: 88:14:a6:6c:fe:e2:eb:25:78:99:04:e3:5b:dc:aa:5c:e0:c6: 38:68:49:9b:a9:71:92:e7:7e:29:40:e6:f9:89:4a:39:38:50: 9e:2e:ee:7d:79:09:d6:e1:50:e8:60:a5:5f:92:13:66:a4:e7: 03:ec:aa:26:69:ea:13:da:62:fd:92:79:b2:06:57:7a:23:d3: 21:a0:1c:c7:3f:57:b3:ba:a4:4c:5f:c2:22:23:2f:88:0f:4a: 89:0f:68:23:4e:60:dd:45:1c:1f:b5:38:7a:87:d6:74:26:8f: ee:b2:3d:07:5f:9c:17:78:37:88:9f:13:27:ac:e1:b6:1c:43: ca:c3:2d:72:40:30:b4:4f:02:a9:2b:28:9a:a0:83:3f:63:39: 5d:49:2a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gBAmJEHzCG5D6bPG56HIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwNzI2MjAwMDQ2WhcNMjYwNzI3MjAwMDQ2WjAzMTEwLwYDVQQD EyhmNzc2ZTM2YmQ1YTliODJjMTRhYmJmYTc1MjE1Y2E4MGUxNThmYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfph2UVKuBNLKXlx1qllM2oHrNa0 CClKfUNEjhLQhDDy6X9E9qUD5sXR+TZsjlQeUr+BvCk/5DtI+Edy4Ms2KXk8qsWB M7rW+L6hDH9P4RecYkavrbg7VrGIIDGO3/9/QBNUKEykgtcaPno3yLZEHfpubo+/ F5hLJR1KJvIP1qOgNsdhoHyDGC41RS1/sRJyFRY167UCkfu/YLSLNSeD2F0Mtf2e 5YurlbRDotkVP4nD9LU1Pbf5MwgDlbjSmASIV2Dnh9iJ/SADww8UfwKgAygzZQPj XOSWYJNuHTJ1tMChMtVBUA+bsPpvyT3COXl65dYSxgzIN74KGAg6kM8rfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd242vVqbgsFKu/p1IVyoDhWPvYMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsSL3eQE raAXlKtFLiDn/i2V3kdDcNi6Ca66mfceJd8uDM9SnFFWKoYvfz2iNS81CJNHhPSz WEk4o/YLSvjgirONqZxtjNebfOOGrvH0E1o7qb5+lyXnA5g7RkyxaZy42rLY/jAi gBrDcJqGiBSmbP7i6yV4mQTjW9yqXODGOGhJm6lxkud+KUDm+YlKOThQni7ufXkJ 1uFQ6GClX5ITZqTnA+yqJmnqE9pi/ZJ5sgZXeiPTIaAcxz9Xs7qkTF/CIiMviA9K iQ9oI05g3UUcH7U4eofWdCaP7rI9B1+cF3g3iJ8TJ6zhthxDysMtckAwtE8CqSso mqCDP2M5XUkq6A== -----END CERTIFICATE-----Generated at Mon Jul 27 05:28:43 2026 by rpki-client