$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: DhqxpeHpYVfgBPJnQmt3t+E/ZHHjl08oMjLqir0pzHc= Subject key identifier: F2:12:EF:50:30:CD:7C:FB:ED:46:48:A0:6B:2C:A8:50:C9:13:F4:B4 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019FA0E0663D60D8BDBC5B74A1A32483FBB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 19E5 Signing time: Mon 27 Jul 2026 00:01:28 +0000 Manifest this update: Mon 27 Jul 2026 00:01:28 +0000 Manifest next update: Tue 28 Jul 2026 00:01:28 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 5: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 8: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: FUiKm2kqocq/F2ywb1WyncZZOcISKc/y00uJ/gkf5Uk=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:e0:66:3d:60:d8:bd:bc:5b:74:a1:a3:24:83:fb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jul 27 00:01:28 2026 GMT Not After : Jul 28 00:01:28 2026 GMT Subject: CN=f212ef5030cd7cfbed4648a06b2ca850c913f4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:09:56:89:04:7f:a6:04:22:c3:a6:48:9e: eb:34:2c:44:68:88:91:9c:7a:48:bd:29:06:69:2d: 07:19:f3:d5:cf:31:f7:e0:2b:be:80:d8:f6:8a:70: 8c:45:d5:8d:39:af:05:61:ee:c3:ce:4c:67:99:7f: 0c:cc:5d:84:c7:d9:fb:3a:05:27:ac:4b:17:1b:35: a8:20:50:68:63:82:cb:54:df:17:d9:99:7e:60:ad: 23:b2:fc:ac:63:20:69:6f:f1:c0:be:94:93:1b:49: 22:e8:0e:5e:52:3a:95:2e:7a:e5:d3:b7:85:ee:0a: 78:91:99:58:0f:da:a1:10:85:bc:a3:ee:81:8b:e7: 5b:d0:1e:b8:65:5f:a0:e1:2c:6c:bb:7b:26:30:60: 9a:a7:8c:40:6c:c5:7c:c0:a5:eb:e5:69:c1:4f:c8: 10:08:25:7e:61:ea:1c:72:bb:39:17:1f:e9:f8:40: 14:10:96:42:9b:53:cb:af:0c:c2:a6:9a:63:83:ab: b0:ec:44:7b:b7:4e:c5:e9:c2:f1:bb:e6:a8:87:83: c5:15:ed:bc:87:54:8e:d0:87:fa:16:67:9a:3c:2f: 08:81:7f:80:0c:aa:1d:57:56:1b:9c:e7:07:43:a8: 2a:0c:8e:1f:8f:50:97:3f:e8:79:8c:40:ba:84:e3: 16:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:EF:50:30:CD:7C:FB:ED:46:48:A0:6B:2C:A8:50:C9:13:F4:B4 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a4:5c:40:4e:68:74:1e:e1:7a:bf:94:85:1d:ea:ba:ac:8a: d9:ad:df:5a:d7:3b:d6:34:1c:3d:28:3d:81:3c:8c:bc:63:4c: 22:34:dc:a4:f2:af:8f:29:20:bf:b9:2d:ee:1c:9f:96:c4:44: c8:8b:8a:b2:22:eb:8b:24:ad:22:20:ee:18:76:62:9f:51:bf: c1:b0:a5:fa:3f:41:90:d2:c1:5c:cf:06:11:75:1d:17:0d:e2: 50:02:55:d7:b0:68:bf:1c:be:28:ef:f9:bf:30:cf:77:ad:87: fa:70:2c:63:ce:60:d2:65:36:58:af:af:d1:e5:1a:be:75:38: 48:41:19:c5:0a:9d:80:ba:65:a0:0b:90:3b:da:28:74:f8:f3: da:ba:dc:64:30:e3:03:86:9b:7f:ae:bd:b3:65:ba:13:21:d5: aa:37:b0:b7:d2:22:56:45:45:d4:84:53:a8:9b:2c:11:ee:19: 0b:e1:98:2c:42:96:96:8a:93:fd:85:5c:43:c3:c9:9e:6c:8f: d7:2a:38:43:89:13:64:b1:0f:fb:fa:b7:32:ee:e4:c7:f4:ad: ba:01:4a:24:52:f8:f8:87:dc:d8:3b:61:70:36:07:09:b8:a0: 38:85:8b:87:23:e0:3d:eb:51:9c:d5:79:26:52:a6:82:c8:cc: 57:6f:58:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+g4GY9YNi9vFt0oaMkg/u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwNzI3MDAwMTI4WhcNMjYwNzI4MDAwMTI4WjAzMTEwLwYDVQQD EyhmMjEyZWY1MDMwY2Q3Y2ZiZWQ0NjQ4YTA2YjJjYTg1MGM5MTNmNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUAJVokEf6YEIsOmSJ7rNCxEaIiR nHpIvSkGaS0HGfPVzzH34Cu+gNj2inCMRdWNOa8FYe7DzkxnmX8MzF2Ex9n7OgUn rEsXGzWoIFBoY4LLVN8X2Zl+YK0jsvysYyBpb/HAvpSTG0ki6A5eUjqVLnrl07eF 7gp4kZlYD9qhEIW8o+6Bi+db0B64ZV+g4Sxsu3smMGCap4xAbMV8wKXr5WnBT8gQ CCV+Yeoccrs5Fx/p+EAUEJZCm1PLrwzCpppjg6uw7ER7t07F6cLxu+aoh4PFFe28 h1SO0If6FmeaPC8IgX+ADKodV1YbnOcHQ6gqDI4fj1CXP+h5jEC6hOMWoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIS71AwzXz77UZIoGssqFDJE/S0MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaRcQE5o dB7her+UhR3quqyK2a3fWtc71jQcPSg9gTyMvGNMIjTcpPKvjykgv7kt7hyflsRE yIuKsiLriyStIiDuGHZin1G/wbCl+j9BkNLBXM8GEXUdFw3iUAJV17Bovxy+KO/5 vzDPd62H+nAsY85g0mU2WK+v0eUavnU4SEEZxQqdgLploAuQO9oodPjz2rrcZDDj A4abf669s2W6EyHVqjewt9IiVkVF1IRTqJssEe4ZC+GYLEKWloqT/YVcQ8PJnmyP 1yo4Q4kTZLEP+/q3Mu7kx/StugFKJFL4+Ifc2DthcDYHCbigOIWLhyPgPetRnNV5 JlKmgsjMV29YpA== -----END CERTIFICATE-----Generated at Mon Jul 27 06:49:05 2026 by rpki-client