$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: JcwYZcQp2cNW4DiPc4X8qHT+KZNoNqe1cVPjGldjmjs= Subject key identifier: 43:D4:BA:AB:D3:60:0D:9C:9E:99:F7:E6:9C:90:35:DA:6D:2F:1A:A9 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019F9F2809BA9F183ADF555D50E787E202AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1A0A Signing time: Sun 26 Jul 2026 16:00:29 +0000 Manifest this update: Sun 26 Jul 2026 16:00:29 +0000 Manifest next update: Mon 27 Jul 2026 16:00:29 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: 85lCJt6xy6pN9XghpzkxHCKrQyaq7dCjDdQzePOJayg=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: tldfbdi2KX3t4BcCVx6VGGK3iyo.roa (hash: Fi4d+ISfAotrj39E0racwhFRU+l4o+QEW3BSrZlvaV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:28:09:ba:9f:18:3a:df:55:5d:50:e7:87:e2:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jul 26 16:00:29 2026 GMT Not After : Jul 27 16:00:29 2026 GMT Subject: CN=43d4baabd3600d9c9e99f7e69c9035da6d2f1aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:d7:8d:57:0b:3e:37:6b:89:fe:08:6d:ee: 5f:93:aa:29:83:1b:78:40:68:75:12:6c:6f:ec:31: 33:f9:cc:5f:e8:e4:69:64:f5:0e:b6:67:9f:61:81: 96:26:0e:2a:da:a6:9f:3e:51:e3:7f:07:fb:c5:80: b8:6b:a5:db:b0:7e:5b:1e:a3:49:19:64:f3:b4:e2: 80:1e:6a:e9:7c:44:49:20:43:ba:37:0e:82:4b:39: 11:73:2d:3a:8a:4f:ff:4b:8f:cf:50:a3:a9:e4:40: 6d:86:c6:a9:25:7d:07:0e:c1:bb:f0:e8:58:0d:c5: d2:40:8d:84:3e:15:3e:2b:92:7c:1c:bf:ce:8b:6c: a9:56:31:e5:06:39:71:0d:f5:42:d4:75:c8:b2:c9: 5c:21:6e:16:22:a4:80:50:b9:86:f7:6a:3a:16:50: c0:a7:73:4a:e9:37:9a:89:43:c5:e5:2d:33:42:d7: 04:14:fa:f8:b6:99:26:59:89:d1:6e:a2:61:ba:a0: 02:da:ef:02:59:72:70:57:77:78:d2:bf:be:25:b1: 8d:54:e0:08:0e:fb:44:e2:97:a7:48:97:ba:a4:82: 37:60:00:e6:ed:48:9a:db:64:62:44:4a:83:df:77: c5:d9:fd:47:02:38:bc:23:4a:91:96:25:da:d1:ff: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:BA:AB:D3:60:0D:9C:9E:99:F7:E6:9C:90:35:DA:6D:2F:1A:A9 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:50:8f:cf:49:39:6b:d0:bd:6f:82:2c:7f:6d:67:5b:1a:84: 86:d3:36:42:ba:e1:7e:1b:63:b2:2b:c4:c5:da:0a:37:84:ec: b2:e6:6d:9f:b4:f4:c9:c3:dc:c0:25:89:c4:eb:e4:86:84:92: d0:08:32:0f:fd:4f:83:b9:b0:5d:44:47:38:36:e4:18:3a:eb: 6f:05:58:6a:e4:7f:0f:50:28:54:f6:9d:70:ac:c4:23:a9:14: 23:03:92:d3:c5:97:06:40:9e:b0:25:ed:5d:59:f6:86:de:f4: fa:a8:79:86:b9:db:ac:c9:98:c4:77:b5:cd:23:50:8f:44:e6: 2d:e6:8c:59:8e:28:a5:d6:9c:07:42:44:cb:04:fa:4d:a2:5f: 49:3e:74:dd:fe:04:0a:d0:1c:f2:60:7e:f0:31:b9:44:21:f2: 58:82:1b:b4:cb:62:f1:53:17:cc:df:a5:42:b4:64:d1:07:92: 8b:09:ed:fe:24:2d:fe:6d:e8:73:27:1f:56:41:4a:b6:02:d1: a9:77:af:91:6f:4b:11:b6:e2:0c:a1:fe:6e:28:5b:27:f4:6a: a8:a9:f8:43:52:e9:a2:0b:20:5b:e5:3b:82:4d:b0:9f:04:ea: d5:00:2e:eb:1f:df:02:9f:3a:f4:ad:a8:1a:2b:18:6c:f0:40: 2b:81:59:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fKAm6nxg631VdUOeH4gKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwNzI2MTYwMDI5WhcNMjYwNzI3MTYwMDI5WjAzMTEwLwYDVQQD Eyg0M2Q0YmFhYmQzNjAwZDljOWU5OWY3ZTY5YzkwMzVkYTZkMmYxYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLnXjVcLPjdrif4Ibe5fk6opgxt4 QGh1Emxv7DEz+cxf6ORpZPUOtmefYYGWJg4q2qafPlHjfwf7xYC4a6XbsH5bHqNJ GWTztOKAHmrpfERJIEO6Nw6CSzkRcy06ik//S4/PUKOp5EBthsapJX0HDsG78OhY DcXSQI2EPhU+K5J8HL/Oi2ypVjHlBjlxDfVC1HXIsslcIW4WIqSAULmG92o6FlDA p3NK6TeaiUPF5S0zQtcEFPr4tpkmWYnRbqJhuqAC2u8CWXJwV3d40r++JbGNVOAI DvtE4penSJe6pII3YADm7Uia22RiREqD33fF2f1HAji8I0qRliXa0f+auwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPUuqvTYA2cnpn35pyQNdptLxqpMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilCPz0k5 a9C9b4Isf21nWxqEhtM2QrrhfhtjsivExdoKN4TssuZtn7T0ycPcwCWJxOvkhoSS 0AgyD/1Pg7mwXURHODbkGDrrbwVYauR/D1AoVPadcKzEI6kUIwOS08WXBkCesCXt XVn2ht70+qh5hrnbrMmYxHe1zSNQj0TmLeaMWY4opdacB0JEywT6TaJfST503f4E CtAc8mB+8DG5RCHyWIIbtMti8VMXzN+lQrRk0QeSiwnt/iQt/m3ocycfVkFKtgLR qXevkW9LEbbiDKH+bihbJ/RqqKn4Q1LpogsgW+U7gk2wnwTq1QAu6x/fAp869K2o GisYbPBAK4FZOA== -----END CERTIFICATE-----Generated at Mon Jul 27 01:22:18 2026 by rpki-client