$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: KnrBrjQjeNI/IAWL/xLt9ZlLGvPMorgutOHz+D37uds= Subject key identifier: C9:6A:99:86:E8:B3:10:42:4F:7C:F0:B0:D2:DE:35:B2:35:58:55:CB Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019FCF70314CA2118A346241EC52E76D65C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 109B Signing time: Wed 05 Aug 2026 01:01:04 +0000 Manifest this update: Wed 05 Aug 2026 01:01:04 +0000 Manifest next update: Thu 06 Aug 2026 01:01:04 +0000 Files and hashes: 1: 6mhv5UsNi48e2qDq3ejV1I51Uj4.roa (hash: DnBbdic7iw6ZxNpBPBJIWL6I3IXFvu/CiDUrM9wqPfY=) 2: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 3: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 6: Tu_T42E3ufkr5EdGed7Q5Y9QfTE.roa (hash: G6AYRvUu0pSmXmi05gBtAjztEBx1iYtCbNAeG2Wv4tE=) 7: aOumDGTQxWZ8hJvNXE1O6jKUHpE.roa (hash: vCVlUFC6bv1vAp54J7Z4/dZxnu8HsSnhut8xqiafmc8=) 8: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 9: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 10: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 11: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: 2j4Bi+8xoZaJcN4jrxiuJy3/F3+2RTPSf31ncAdOEEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cf:70:31:4c:a2:11:8a:34:62:41:ec:52:e7:6d:65:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Aug 5 01:01:04 2026 GMT Not After : Aug 6 01:01:04 2026 GMT Subject: CN=c96a9986e8b310424f7cf0b0d2de35b2355855cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:2a:82:98:12:4b:8b:e0:97:dc:a4:fe:5f: 09:26:6d:cf:57:47:74:68:f9:f1:57:60:80:ee:65: ff:83:cd:8d:d6:8a:c4:57:5c:b7:fd:b1:cb:46:95: 37:b7:2f:11:3e:0b:9b:46:87:0c:ba:b2:70:30:be: 47:aa:f3:8d:9d:2d:15:40:48:12:12:38:4a:c3:e7: 8b:2f:ec:84:0a:6e:92:0b:1c:f1:ad:21:65:a9:c1: 47:5f:73:98:f7:94:a9:bb:0f:59:2a:d5:2a:24:27: 3b:61:7d:b1:da:78:17:44:86:73:fa:98:49:36:ff: 74:bc:59:3d:58:e2:9e:bb:d3:55:2e:cb:b7:4b:32: a0:fe:f6:cd:ff:2e:77:12:a8:da:dc:a5:a9:23:5d: d1:7b:0f:81:98:0d:ca:a7:33:ec:d5:bd:80:09:2a: 4b:a8:db:fa:b4:74:dc:24:c4:57:73:2f:71:12:4e: 2c:23:2d:ed:c7:50:a8:48:88:8b:e5:12:6d:58:88: f3:ab:98:fb:64:a2:29:a3:f3:d9:2c:32:e4:ff:7b: 1a:75:19:76:60:2b:dd:88:d2:38:0f:19:ae:8f:34: fa:4d:fd:b6:08:95:c4:29:bc:e9:08:8f:b1:2f:3f: bc:13:08:71:99:68:d4:80:f5:61:96:45:6b:e0:fc: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6A:99:86:E8:B3:10:42:4F:7C:F0:B0:D2:DE:35:B2:35:58:55:CB X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e4:96:e4:3e:7e:6b:f6:66:d2:8a:99:b1:59:82:56:4f:e2: 44:64:2f:90:92:de:37:8d:5e:68:e3:29:6c:94:c6:8b:93:ab: 28:cf:f9:ac:cc:85:99:0a:e6:dc:02:ca:5f:ff:ce:a2:94:25: 96:ee:1e:47:ab:59:4c:42:35:15:6c:1f:65:24:24:3a:1d:d0: 1e:56:b5:18:09:ea:ba:76:d9:7a:57:49:20:e0:7b:3d:0e:e6: 3f:7b:67:55:09:eb:a4:6c:ac:47:30:63:a6:3d:34:40:77:b5: 2b:a0:a2:ab:8e:cd:90:fe:b6:4e:1d:41:57:37:a8:f1:8f:65: c6:2a:54:29:d3:86:f9:4d:82:5c:dc:e2:42:07:0d:8f:7c:31: 50:f2:a5:13:59:22:89:8e:f2:dd:6f:55:62:84:a4:7a:04:1b: 42:5d:56:76:50:eb:61:8c:a6:47:9e:a7:a8:6d:ba:54:7f:18: 4b:37:39:e8:47:68:b7:2a:7e:8e:70:5a:9b:75:9c:31:29:19: c5:e0:b1:e3:a7:02:38:1b:f9:95:11:47:25:40:4c:9e:98:5e: 30:80:25:2e:00:20:33:b6:1a:5e:6a:47:d4:a3:90:37:d7:c8: 16:5b:b7:9a:e9:27:52:4e:b7:c9:c5:be:85:9e:c6:60:09:55: 54:82:71:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/PcDFMohGKNGJB7FLnbWXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwODA1MDEwMTA0WhcNMjYwODA2MDEwMTA0WjAzMTEwLwYDVQQD EyhjOTZhOTk4NmU4YjMxMDQyNGY3Y2YwYjBkMmRlMzViMjM1NTg1NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUAqgpgSS4vgl9yk/l8JJm3PV0d0 aPnxV2CA7mX/g82N1orEV1y3/bHLRpU3ty8RPgubRocMurJwML5HqvONnS0VQEgS EjhKw+eLL+yECm6SCxzxrSFlqcFHX3OY95Spuw9ZKtUqJCc7YX2x2ngXRIZz+phJ Nv90vFk9WOKeu9NVLsu3SzKg/vbN/y53Eqja3KWpI13Rew+BmA3KpzPs1b2ACSpL qNv6tHTcJMRXcy9xEk4sIy3tx1CoSIiL5RJtWIjzq5j7ZKIpo/PZLDLk/3sadRl2 YCvdiNI4DxmujzT6Tf22CJXEKbzpCI+xLz+8EwhxmWjUgPVhlkVr4PxgTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlqmYbosxBCT3zwsNLeNbI1WFXLMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+SW5D5+ a/Zm0oqZsVmCVk/iRGQvkJLeN41eaOMpbJTGi5OrKM/5rMyFmQrm3ALKX//OopQl lu4eR6tZTEI1FWwfZSQkOh3QHla1GAnqunbZeldJIOB7PQ7mP3tnVQnrpGysRzBj pj00QHe1K6Ciq47NkP62Th1BVzeo8Y9lxipUKdOG+U2CXNziQgcNj3wxUPKlE1ki iY7y3W9VYoSkegQbQl1WdlDrYYymR56nqG26VH8YSzc56Edotyp+jnBam3WcMSkZ xeCx46cCOBv5lRFHJUBMnpheMIAlLgAgM7YaXmpH1KOQN9fIFlu3muknUk63ycW+ hZ7GYAlVVIJxbQ== -----END CERTIFICATE-----Generated at Wed Aug 5 11:06:05 2026 by rpki-client