$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: c1uj5Czd93VK/AUiJMfTS3YzFH1ZAjPWqRacxxQQJg0= Subject key identifier: A6:A9:CD:6B:91:42:FD:2C:6C:EB:5D:F0:BF:D2:A2:67:B3:96:12:40 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019F9F281E7B7C8E2AF012770F1D1177B38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 11BE Signing time: Sun 26 Jul 2026 16:00:34 +0000 Manifest this update: Sun 26 Jul 2026 16:00:34 +0000 Manifest next update: Mon 27 Jul 2026 16:00:34 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: 9d9b7ngCfBXn0BZvHGUbIYai3SU.roa (hash: S8rO+x/b1TlI/ds8zRuEobXNGIIkOXMHVIgQZ5JbD+g=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: YrS-zU0gb2gsRDyFXkO54VCWxkM.roa (hash: VPnOry+i0fDjtn98ZDInnQWI3+XyaS04/h6hsFSIigk=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: lC6+2V7yCtAVL+r+xxJCQ3StUkYsVC8HmMvlklFgJbA=) 9: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:28:1e:7b:7c:8e:2a:f0:12:77:0f:1d:11:77:b3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jul 26 16:00:34 2026 GMT Not After : Jul 27 16:00:34 2026 GMT Subject: CN=a6a9cd6b9142fd2c6ceb5df0bfd2a267b3961240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d5:91:e6:e3:95:1a:ff:39:1d:ab:7a:e7:01: 66:03:3c:77:2a:a5:5b:07:73:c0:92:6e:56:b1:1e: 42:40:2b:e8:16:3e:d8:39:20:14:2b:1f:3e:cf:35: cb:14:24:bc:96:4e:34:f4:84:ac:1b:1a:24:2f:5b: 7b:e1:82:0f:9b:d8:f0:ae:da:e4:75:07:52:82:26: 6a:a7:a0:ed:72:80:4e:a0:dd:45:9e:c6:fd:c2:ff: 78:60:0d:e8:c7:7c:6d:57:7b:e3:4c:02:2a:89:5a: c6:f9:ad:80:40:63:77:56:86:35:0d:df:e5:b0:2a: 0f:eb:69:96:40:9d:d0:1f:41:16:5f:83:b3:ae:27: 20:d0:7f:58:d3:24:24:b1:da:f4:ac:e5:34:d3:fc: e7:40:be:f0:3b:88:34:71:2a:a1:dd:b7:e6:99:42: 9a:5d:7f:4a:36:45:8e:35:d9:65:09:78:4f:18:37: 27:4d:d4:e8:56:16:1f:c3:09:7c:5d:ee:88:e7:8c: be:b8:4b:fa:30:b5:48:07:4e:ec:43:8d:96:5f:7e: fd:b7:6d:e0:ec:0b:d1:d8:3b:24:f3:f2:e7:30:7a: d0:15:e0:82:4c:da:1d:5a:46:67:21:65:c1:da:16: df:e6:ea:d1:1a:fe:2e:27:3c:84:f2:0d:3c:a7:c8: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:CD:6B:91:42:FD:2C:6C:EB:5D:F0:BF:D2:A2:67:B3:96:12:40 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fc:e3:06:ae:ac:83:a4:89:19:bf:1c:d7:90:f1:e4:24:21: c5:1c:cd:06:35:52:a5:10:2b:d5:66:c8:93:73:06:df:36:5e: 6f:2d:b2:8f:e8:ec:e1:13:e0:e5:b1:7b:dd:d5:c6:3b:b6:10: f0:dc:b6:9d:3e:ee:fe:07:5a:db:b1:2e:33:1b:15:bd:ed:2e: 57:28:bb:e5:c3:18:67:45:fa:72:7f:58:96:0c:88:e0:80:51: 79:ff:93:52:9c:25:c0:18:56:6e:04:3f:de:ec:bd:34:8f:30: fe:b3:6a:c5:1f:cd:45:e7:e7:4b:69:ab:c8:8c:fd:1a:f0:76: 06:24:b2:49:8a:9e:ef:be:b9:f5:f4:90:d5:13:76:aa:f3:b1: fc:3b:a2:86:34:4e:60:64:50:87:ba:da:ef:4c:c6:c8:ca:ea: 4a:03:38:8f:19:aa:63:4f:f1:57:48:db:e7:d5:0d:66:7b:9c: 55:d3:39:9a:63:32:bd:fe:b8:b0:e9:58:35:9a:9d:b7:31:ef: 60:2d:cb:73:f7:2b:3d:ff:52:1a:18:da:fe:fc:cc:0c:fd:23: f3:69:dd:8c:66:14:e3:a6:34:33:ff:cd:34:4f:cf:95:98:e6: 21:91:50:4f:54:96:b0:e6:fa:19:f2:99:18:50:af:9e:64:68: 6e:62:95:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fKB57fI4q8BJ3Dx0Rd7OOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNzI2MTYwMDM0WhcNMjYwNzI3MTYwMDM0WjAzMTEwLwYDVQQD EyhhNmE5Y2Q2YjkxNDJmZDJjNmNlYjVkZjBiZmQyYTI2N2IzOTYxMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9WR5uOVGv85Hat65wFmAzx3KqVb B3PAkm5WsR5CQCvoFj7YOSAUKx8+zzXLFCS8lk409ISsGxokL1t74YIPm9jwrtrk dQdSgiZqp6DtcoBOoN1Fnsb9wv94YA3ox3xtV3vjTAIqiVrG+a2AQGN3VoY1Dd/l sCoP62mWQJ3QH0EWX4Ozricg0H9Y0yQksdr0rOU00/znQL7wO4g0cSqh3bfmmUKa XX9KNkWONdllCXhPGDcnTdToVhYfwwl8Xe6I54y+uEv6MLVIB07sQ42WX379t23g 7AvR2Dsk8/LnMHrQFeCCTNodWkZnIWXB2hbf5urRGv4uJzyE8g08p8iy9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKapzWuRQv0sbOtd8L/SomezlhJAMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfzjBq6s g6SJGb8c15Dx5CQhxRzNBjVSpRAr1WbIk3MG3zZeby2yj+js4RPg5bF73dXGO7YQ 8Ny2nT7u/gda27EuMxsVve0uVyi75cMYZ0X6cn9YlgyI4IBRef+TUpwlwBhWbgQ/ 3uy9NI8w/rNqxR/NRefnS2mryIz9GvB2BiSySYqe77659fSQ1RN2qvOx/DuihjRO YGRQh7ra70zGyMrqSgM4jxmqY0/xV0jb59UNZnucVdM5mmMyvf64sOlYNZqdtzHv YC3Lc/crPf9SGhja/vzMDP0j82ndjGYU46Y0M//NNE/PlZjmIZFQT1SWsOb6GfKZ GFCvnmRobmKVqA== -----END CERTIFICATE-----Generated at Mon Jul 27 02:03:44 2026 by rpki-client