$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: /Pg5oOkOEFMx/wLX0G7eTq2aJ44uIPcyg80UXDx5S1Q= Subject key identifier: D9:E0:14:70:DE:52:CD:71:D3:7C:A8:77:ED:FF:D7:0F:3B:22:00:2F Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 01A010E3363E5D6BFC2721588F7FAFE51341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 1A0E Signing time: Mon 17 Aug 2026 18:02:00 +0000 Manifest this update: Mon 17 Aug 2026 18:02:00 +0000 Manifest next update: Tue 18 Aug 2026 18:02:00 +0000 Files and hashes: 1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=) 2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=) 3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: F+spIvF8M+0rSMihho+f9Q6v5Qll9FbUSaj9V016A6Q=) 4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=) 5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=) 6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=) 7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=) 8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=) 9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=) 10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 18:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:10:e3:36:3e:5d:6b:fc:27:21:58:8f:7f:af:e5:13:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Aug 17 18:02:00 2026 GMT Not After : Aug 18 18:02:00 2026 GMT Subject: CN=d9e01470de52cd71d37ca877edffd70f3b22002f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:cc:90:e7:1b:be:d4:91:e4:27:cf:37:90: c5:09:0d:6f:83:ed:89:b7:80:1d:1a:2b:db:4c:a0: fa:cc:99:3e:b4:1a:b0:69:70:69:36:7f:79:d3:c8: 96:56:f8:bc:79:71:48:62:9f:99:06:03:3a:e7:3f: b6:46:ad:33:95:10:30:49:a0:0b:3c:d7:8c:5a:ef: e9:2b:43:59:45:20:59:86:f4:ee:a0:91:20:ab:44: c6:8f:18:83:42:95:6b:dc:52:01:ef:fb:51:30:13: 1a:30:83:1a:19:a9:ae:a5:9f:d6:f9:9a:f2:db:6c: 33:4b:43:cd:f2:b2:a5:03:25:a5:35:90:58:4e:97: ab:bd:26:78:f5:7d:ae:44:a8:f9:e1:6a:ea:59:57: e4:a4:d0:cc:86:f4:af:a1:a4:7d:97:e2:7b:97:eb: 37:4f:26:de:5e:04:91:8b:30:a9:e7:b0:87:49:57: be:03:8e:57:d5:cc:16:35:70:ae:9e:1d:4b:e9:20: f5:67:12:cc:4d:34:4f:40:fa:70:50:55:ac:54:c7: 2a:fd:f2:71:8e:08:b5:9e:92:b9:8d:a2:e4:e9:c8: ab:42:d4:4e:cd:07:70:79:81:20:17:87:37:68:cf: 37:eb:51:65:b0:89:68:e1:65:b7:27:89:57:eb:11: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E0:14:70:DE:52:CD:71:D3:7C:A8:77:ED:FF:D7:0F:3B:22:00:2F X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:24:c7:33:a6:d2:ca:6d:92:d6:77:d3:a5:59:3c:66:f2:93: 9a:2e:91:74:f0:3a:d3:13:11:a7:a5:f1:51:43:7b:6d:2c:d3: 2a:c0:6c:b2:9c:9e:12:8b:e3:79:12:ac:56:47:b3:6e:59:e4: aa:09:5f:ee:a4:2f:b6:24:15:73:70:4b:dd:e1:23:91:e2:f7: c8:71:be:80:07:7d:a3:71:f2:12:16:59:db:85:e5:8a:68:19: e8:e1:83:72:70:cf:a5:66:36:4b:11:1f:0a:f7:51:4e:5c:c1: e3:a3:ff:51:87:a8:f1:97:81:0a:3c:da:0b:74:de:bc:3b:e4: 97:e8:5e:08:66:47:ad:d0:f8:59:51:43:3b:01:5b:7c:a4:7d: 8e:7e:c5:bf:e1:a0:55:bc:d8:69:0d:87:5f:ee:a9:39:90:56: e7:80:4e:08:0d:6e:9b:46:fd:48:f8:8a:8c:09:08:ae:98:14: 98:7f:cc:36:a6:54:77:99:a8:33:0d:f2:36:30:ae:64:9f:89: 53:15:a3:38:da:0f:34:54:ec:db:40:27:c8:1e:44:7f:1f:fd: 1d:e5:91:b1:aa:8f:75:3e:0d:3e:fa:f9:a1:03:72:e1:62:18: bd:44:6c:11:72:c4:f5:3c:ce:07:68:42:17:7c:6b:32:dd:96: fe:9a:e2:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAQ4zY+XWv8JyFYj3+v5RNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwODE3MTgwMjAwWhcNMjYwODE4MTgwMjAwWjAzMTEwLwYDVQQD EyhkOWUwMTQ3MGRlNTJjZDcxZDM3Y2E4NzdlZGZmZDcwZjNiMjIwMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoTMkOcbvtSR5CfPN5DFCQ1vg+2J t4AdGivbTKD6zJk+tBqwaXBpNn9508iWVvi8eXFIYp+ZBgM65z+2Rq0zlRAwSaAL PNeMWu/pK0NZRSBZhvTuoJEgq0TGjxiDQpVr3FIB7/tRMBMaMIMaGamupZ/W+Zry 22wzS0PN8rKlAyWlNZBYTpervSZ49X2uRKj54WrqWVfkpNDMhvSvoaR9l+J7l+s3 TybeXgSRizCp57CHSVe+A45X1cwWNXCunh1L6SD1ZxLMTTRPQPpwUFWsVMcq/fJx jgi1npK5jaLk6cirQtROzQdweYEgF4c3aM8361FlsIlo4WW3J4lX6xEqKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNngFHDeUs1x03yod+3/1w87IgAvMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSTHM6bS ym2S1nfTpVk8ZvKTmi6RdPA60xMRp6XxUUN7bSzTKsBsspyeEovjeRKsVkezblnk qglf7qQvtiQVc3BL3eEjkeL3yHG+gAd9o3HyEhZZ24XlimgZ6OGDcnDPpWY2SxEf CvdRTlzB46P/UYeo8ZeBCjzaC3TevDvkl+heCGZHrdD4WVFDOwFbfKR9jn7Fv+Gg VbzYaQ2HX+6pOZBW54BOCA1um0b9SPiKjAkIrpgUmH/MNqZUd5moMw3yNjCuZJ+J UxWjONoPNFTs20AnyB5Efx/9HeWRsaqPdT4NPvr5oQNy4WIYvURsEXLE9TzOB2hC F3xrMt2W/priBA== -----END CERTIFICATE-----Generated at Tue Aug 18 01:09:22 2026 by rpki-client