$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: 8V5JVr+Gtlf/PjITVoQ5ECEbHSUiqPCJR/I29c/0UTs= Subject key identifier: 74:76:C2:00:47:34:28:D3:73:CD:02:8D:66:5B:4D:A5:8C:A9:5E:07 Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 019F85D6E50F4DFC063B70F5B917714C8A50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: 3A Signing time: Tue 21 Jul 2026 18:01:20 +0000 Manifest this update: Tue 21 Jul 2026 18:01:20 +0000 Manifest next update: Wed 22 Jul 2026 18:01:20 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 6: UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa (hash: 2N6GN/Syp2xg8awpUyCZ72kT72P3AjcfpXuKHfUafHk=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: 10Fz4VHS9pmIqXEG9HdwG6z0/9rOVMzcAyCEvsi6NJQ=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:d6:e5:0f:4d:fc:06:3b:70:f5:b9:17:71:4c:8a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Jul 21 18:01:20 2026 GMT Not After : Jul 22 18:01:20 2026 GMT Subject: CN=7476c200473428d373cd028d665b4da58ca95e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:4c:65:4f:8b:09:e1:b2:a0:4a:4f:4e:4c: 50:5e:4f:57:a2:9e:61:65:61:d9:32:56:97:84:c9: 98:2b:2f:7b:8d:26:62:88:cd:27:d1:d5:b1:33:17: e3:a5:a4:88:aa:7c:a2:da:77:c0:84:9c:e6:9d:a1: fe:db:53:41:a0:e0:7e:e4:a4:50:6b:c2:90:6c:f5: 08:f9:f0:0e:e2:f1:7a:d7:a7:c6:cb:7e:26:89:03: 91:8d:1a:3e:9e:ac:3d:52:60:08:c4:26:cb:d2:7d: 65:55:40:1a:50:c4:d2:60:07:2d:74:31:15:51:a3: 52:58:1b:08:c3:8b:bf:9a:bb:87:a5:50:ce:08:8d: 4f:9f:df:68:f7:1e:40:ad:6a:2d:7d:c3:4f:0f:10: 89:85:2b:e0:97:bb:ba:6a:f7:5f:19:25:cf:f8:b1: 67:8c:5b:cb:c6:3c:d0:bd:15:f5:32:86:ed:b3:5c: a5:4b:ef:eb:c3:f6:27:56:b7:32:c8:83:df:a9:ea: 94:c2:f7:2f:af:b6:92:67:77:52:6c:b4:bc:11:66: d2:84:9e:81:b8:46:12:3f:ef:0a:76:6c:08:7d:ef: ae:39:92:d2:71:ee:42:5a:54:83:1d:a8:6d:70:55: ee:c5:96:0a:2d:f9:7f:68:db:63:30:94:6e:53:86: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:76:C2:00:47:34:28:D3:73:CD:02:8D:66:5B:4D:A5:8C:A9:5E:07 X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:be:fa:48:af:0a:e1:62:92:ae:0b:2c:2d:c4:72:50:63:75: 1b:e2:17:2f:1a:95:7c:af:9d:00:da:a6:37:4f:3f:77:d5:53: 33:29:ab:59:1a:1f:0c:88:e5:0f:81:02:38:cc:46:f4:e6:67: ee:65:db:66:d2:52:48:8b:a8:52:82:46:c4:15:cd:af:da:1d: a1:15:cf:12:b9:79:fc:6e:25:13:4f:c3:84:8b:aa:c1:ec:04: 7a:44:09:40:dd:15:81:14:d8:9a:69:fd:37:8a:34:9c:53:c8: ff:cd:54:e8:e0:92:ad:3d:ab:62:b6:b0:cd:c7:2e:35:b2:73: c3:4a:96:54:b1:83:86:17:c0:62:bd:de:c0:a5:6a:57:63:dd: e9:8f:a1:e8:27:96:1f:c8:a8:51:f8:e6:d7:70:4d:01:0d:18: 2f:77:de:2b:12:44:17:5a:ee:6f:c5:48:5c:c3:de:be:26:1e: 13:7d:33:c8:5a:c1:c9:bd:be:34:c6:84:42:f3:9c:5f:23:81: 46:44:9b:e4:53:05:0a:c1:c8:91:f0:60:32:eb:2c:fa:3e:20: c2:23:cc:83:f2:aa:7d:05:1a:48:9e:91:a8:d6:7e:43:7b:c9: e0:8d:00:4f:3c:34:72:bc:e8:09:1f:2e:6f:c5:40:e4:1a:d8: 70:8f:32:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+F1uUPTfwGO3D1uRdxTIpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYwNzIxMTgwMTIwWhcNMjYwNzIyMTgwMTIwWjAzMTEwLwYDVQQD Eyg3NDc2YzIwMDQ3MzQyOGQzNzNjZDAyOGQ2NjViNGRhNThjYTk1ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvJMZU+LCeGyoEpPTkxQXk9Xop5h ZWHZMlaXhMmYKy97jSZiiM0n0dWxMxfjpaSIqnyi2nfAhJzmnaH+21NBoOB+5KRQ a8KQbPUI+fAO4vF616fGy34miQORjRo+nqw9UmAIxCbL0n1lVUAaUMTSYActdDEV UaNSWBsIw4u/mruHpVDOCI1Pn99o9x5ArWotfcNPDxCJhSvgl7u6avdfGSXP+LFn jFvLxjzQvRX1Mobts1ylS+/rw/YnVrcyyIPfqeqUwvcvr7aSZ3dSbLS8EWbShJ6B uEYSP+8KdmwIfe+uOZLSce5CWlSDHahtcFXuxZYKLfl/aNtjMJRuU4aDiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR2wgBHNCjTc80CjWZbTaWMqV4HMB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqb76SK8K 4WKSrgssLcRyUGN1G+IXLxqVfK+dANqmN08/d9VTMymrWRofDIjlD4ECOMxG9OZn 7mXbZtJSSIuoUoJGxBXNr9odoRXPErl5/G4lE0/DhIuqwewEekQJQN0VgRTYmmn9 N4o0nFPI/81U6OCSrT2rYrawzccuNbJzw0qWVLGDhhfAYr3ewKVqV2Pd6Y+h6CeW H8ioUfjm13BNAQ0YL3feKxJEF1rub8VIXMPeviYeE30zyFrByb2+NMaEQvOcXyOB RkSb5FMFCsHIkfBgMuss+j4gwiPMg/KqfQUaSJ6RqNZ+Q3vJ4I0ATzw0crzoCR8u b8VA5BrYcI8y0Q== -----END CERTIFICATE-----Generated at Wed Jul 22 01:08:22 2026 by rpki-client