$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: D7MP6ZycFFdyhZvieRcdvT8hhRFM6m0/3QRpCdrWUBM= Subject key identifier: CE:EA:7C:3A:84:EF:D5:63:E9:CC:75:77:3E:A5:CD:26:F6:68:F6:5D Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019FA1F280E77EDFAB91D558F99E43E0843B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 19DD Signing time: Mon 27 Jul 2026 05:00:52 +0000 Manifest this update: Mon 27 Jul 2026 05:00:52 +0000 Manifest next update: Tue 28 Jul 2026 05:00:52 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 44fh+XrwhgGXKrkB9FYbcVh88SFvRpJTQ3GvZKGQpmc=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:f2:80:e7:7e:df:ab:91:d5:58:f9:9e:43:e0:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jul 27 05:00:52 2026 GMT Not After : Jul 28 05:00:52 2026 GMT Subject: CN=ceea7c3a84efd563e9cc75773ea5cd26f668f65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b3:32:7a:36:c3:6f:86:6b:e3:e0:66:88:5f: 78:51:0a:6a:31:65:0e:59:4e:24:73:c4:7d:48:b7: 2c:02:79:e4:af:15:27:2f:cb:21:4d:bc:e3:0e:1c: e5:1b:ac:16:a2:1b:88:52:34:6d:9b:2b:ce:eb:fc: a2:82:c4:02:0a:37:8b:2c:e6:9d:7e:ea:b4:7c:ce: 0d:2d:d5:01:b0:26:19:26:25:4e:90:f8:be:79:a5: 5c:77:6d:4e:7f:84:a7:8f:34:d7:5e:9f:8d:25:d7: 65:cb:5b:92:26:28:80:c4:3c:52:f5:75:13:cd:e4: 3a:b0:3e:58:9b:ad:7d:ac:e4:80:ba:87:52:f5:0b: 52:04:09:50:53:f5:10:f6:04:e7:c4:85:90:9e:01: bb:4a:97:91:19:95:ab:24:a8:ed:40:9d:93:9c:69: e0:94:85:3a:e9:ce:50:82:3e:4d:ba:39:14:f8:87: fc:c9:ca:bc:09:f4:47:9f:d3:6c:90:88:9a:cd:10: 54:86:d1:e7:d4:fa:f2:4c:bd:d5:4a:46:35:12:fd: 57:d5:d5:cd:45:3f:35:ab:21:4f:5f:f1:3f:33:72: f0:b4:9a:88:94:87:53:5d:e0:d9:66:d2:54:43:a2: 6f:67:cd:43:d3:1b:c3:c4:64:9f:25:d1:09:46:5f: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:7C:3A:84:EF:D5:63:E9:CC:75:77:3E:A5:CD:26:F6:68:F6:5D X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:00:d7:c5:e7:02:96:0c:33:9a:15:95:88:2f:50:53:d5:5c: ca:61:aa:1b:84:30:d7:fa:8e:fa:42:42:98:d0:a3:c8:12:42: e5:9a:0c:22:b3:f8:ea:02:ac:0d:8f:a3:ce:66:52:1f:a3:94: 7b:24:13:a7:e3:57:a4:02:06:07:21:44:db:e1:5e:bb:58:4e: aa:85:5d:18:3f:10:f8:c5:b8:91:76:d6:1e:14:f2:65:15:1f: 29:13:6b:9c:2e:f7:df:f7:5c:77:5d:84:50:ec:11:ec:f2:f2: db:91:bc:46:e0:96:3f:b5:9c:c6:c4:31:93:87:d8:87:e4:f1: a7:87:2b:b9:30:a8:5d:0c:56:03:ea:d0:80:f3:2f:65:07:01: d0:be:92:68:e5:fe:42:8a:45:a5:cb:cd:83:fa:eb:d8:cf:70: 18:04:fd:23:66:41:85:d5:35:6d:bb:e4:a1:7d:f1:ec:60:3f: e8:16:80:5c:65:1a:98:25:8f:a4:3c:cd:71:cc:2a:65:5c:b0: bc:9d:3e:7e:6d:d8:72:a0:ba:74:0a:a9:92:54:98:1e:27:63: 62:38:b5:04:7c:2a:6f:30:d4:b2:9a:10:67:87:b7:46:51:30: 54:be:79:81:46:0e:12:ea:5a:b8:83:ea:c4:bf:66:75:e1:2f: ff:78:8a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+h8oDnft+rkdVY+Z5D4IQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwNzI3MDUwMDUyWhcNMjYwNzI4MDUwMDUyWjAzMTEwLwYDVQQD EyhjZWVhN2MzYTg0ZWZkNTYzZTljYzc1NzczZWE1Y2QyNmY2NjhmNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77MyejbDb4Zr4+BmiF94UQpqMWUO WU4kc8R9SLcsAnnkrxUnL8shTbzjDhzlG6wWohuIUjRtmyvO6/yigsQCCjeLLOad fuq0fM4NLdUBsCYZJiVOkPi+eaVcd21Of4SnjzTXXp+NJddly1uSJiiAxDxS9XUT zeQ6sD5Ym619rOSAuodS9QtSBAlQU/UQ9gTnxIWQngG7SpeRGZWrJKjtQJ2TnGng lIU66c5Qgj5NujkU+If8ycq8CfRHn9NskIiazRBUhtHn1PryTL3VSkY1Ev1X1dXN RT81qyFPX/E/M3LwtJqIlIdTXeDZZtJUQ6JvZ81D0xvDxGSfJdEJRl+mlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7qfDqE79Vj6cx1dz6lzSb2aPZdMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagDXxecC lgwzmhWViC9QU9VcymGqG4Qw1/qO+kJCmNCjyBJC5ZoMIrP46gKsDY+jzmZSH6OU eyQTp+NXpAIGByFE2+Feu1hOqoVdGD8Q+MW4kXbWHhTyZRUfKRNrnC733/dcd12E UOwR7PLy25G8RuCWP7WcxsQxk4fYh+Txp4cruTCoXQxWA+rQgPMvZQcB0L6SaOX+ QopFpcvNg/rr2M9wGAT9I2ZBhdU1bbvkoX3x7GA/6BaAXGUamCWPpDzNccwqZVyw vJ0+fm3YcqC6dAqpklSYHidjYji1BHwqbzDUspoQZ4e3RlEwVL55gUYOEupauIPq xL9mdeEv/3iKNA== -----END CERTIFICATE-----Generated at Mon Jul 27 13:14:57 2026 by rpki-client