$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: k+rhAuiq8LYsLRbKy6Zj15BvHwTe45vIb+aoi/eCSN0= Subject key identifier: 64:B1:2F:9A:56:E9:2D:CC:9B:5F:6F:CD:EB:2C:60:59:2C:95:54:1C Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019F9E8352F8119875C3F565640C2D66F894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 16F3 Signing time: Sun 26 Jul 2026 13:00:34 +0000 Manifest this update: Sun 26 Jul 2026 13:00:34 +0000 Manifest next update: Mon 27 Jul 2026 13:00:34 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: 8w8lmfnwQvpglX1FesBdIPyf2vP6x2+IIPcfLOmPrxc=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 16: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:83:52:f8:11:98:75:c3:f5:65:64:0c:2d:66:f8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jul 26 13:00:34 2026 GMT Not After : Jul 27 13:00:34 2026 GMT Subject: CN=64b12f9a56e92dcc9b5f6fcdeb2c60592c95541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:c6:9f:07:ba:f5:4a:d3:43:60:48:34:8e: f7:19:51:3d:59:d9:2d:11:9f:4c:71:ba:5d:12:bb: ed:f5:28:ea:d5:5b:84:2d:22:f3:25:5b:3b:51:17: ba:75:fa:46:1d:32:4a:c5:55:8f:06:5f:02:cd:84: 96:57:11:ee:97:bd:ca:e8:de:2c:75:26:8a:4a:a4: 9c:6e:88:f8:d6:e5:fb:ec:eb:e7:1e:5a:dd:9c:70: d6:c2:b8:dd:b8:72:6e:83:cf:dc:d6:99:14:99:b5: 98:8e:40:8a:87:e0:78:13:04:28:2f:2b:81:0a:46: 67:6c:21:88:71:77:91:e2:47:1c:54:45:dd:4b:22: ee:c3:73:4d:0a:f5:4a:e4:19:20:aa:4c:76:f2:d6: ed:44:67:a1:f2:44:22:1d:8c:7c:62:19:e6:f2:4b: 38:f3:b8:43:5d:93:fc:2d:11:65:1f:f8:c5:db:0c: ee:b5:ec:a3:a7:be:a5:d7:78:5b:cc:8e:f7:eb:b9: 54:4e:67:f5:7d:7a:fd:9e:c1:66:1d:21:55:6d:86: 70:44:99:de:51:83:3c:eb:f5:d2:bb:45:79:30:e0: 6b:1b:8f:f0:4e:bc:60:d9:c6:c3:60:0b:cf:45:6f: 1d:a5:73:60:98:95:70:a3:d6:f7:b8:87:e4:e0:4c: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:2F:9A:56:E9:2D:CC:9B:5F:6F:CD:EB:2C:60:59:2C:95:54:1C X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:27:9a:e0:07:17:c3:73:ab:9f:1e:c1:b6:c9:aa:63:98:22: 12:3f:67:1c:43:6b:35:ea:9c:38:8b:6e:6c:5a:fa:34:cd:3c: d6:94:47:30:6f:01:7a:1b:3e:c0:a0:3a:2d:24:22:9e:34:df: 6b:95:15:05:01:2d:58:12:9b:34:2d:b5:8c:40:57:82:c7:9f: f5:2f:5e:4e:f3:14:73:b9:a7:e5:67:19:06:00:8f:cf:68:20: 58:87:e9:2e:e1:f1:bc:d4:02:24:e5:fc:17:85:fb:f7:0c:b9: b5:a6:9c:60:12:80:ed:fd:4b:66:a1:97:f9:cb:c7:d7:2a:e6: 85:b6:50:36:3d:99:85:aa:99:f8:3e:77:94:17:cb:2d:01:e4: c7:f9:a4:15:26:e7:ad:da:55:25:53:09:b7:61:9c:63:b9:8a: d9:d9:82:03:b5:a0:b4:21:c6:f4:59:65:6a:c2:dc:cb:65:9a: 14:d1:5e:2f:12:fb:b5:04:d1:ad:cb:93:4b:ce:ac:6e:fc:72: 90:89:c8:b4:3c:4f:bd:d3:74:42:99:8f:aa:48:8d:80:2c:47: 2f:16:cb:84:d0:7d:d8:2c:4f:ed:f4:2d:11:27:0b:40:60:a3: b8:7d:14:8a:f1:5c:a7:9c:92:2a:e4:53:81:e8:99:42:8f:7f: cf:f7:98:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+eg1L4EZh1w/VlZAwtZviUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwNzI2MTMwMDM0WhcNMjYwNzI3MTMwMDM0WjAzMTEwLwYDVQQD Eyg2NGIxMmY5YTU2ZTkyZGNjOWI1ZjZmY2RlYjJjNjA1OTJjOTU1NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzvGnwe69UrTQ2BINI73GVE9Wdkt EZ9McbpdErvt9Sjq1VuELSLzJVs7URe6dfpGHTJKxVWPBl8CzYSWVxHul73K6N4s dSaKSqScboj41uX77OvnHlrdnHDWwrjduHJug8/c1pkUmbWYjkCKh+B4EwQoLyuB CkZnbCGIcXeR4kccVEXdSyLuw3NNCvVK5Bkgqkx28tbtRGeh8kQiHYx8Yhnm8ks4 87hDXZP8LRFlH/jF2wzuteyjp76l13hbzI7367lUTmf1fXr9nsFmHSFVbYZwRJne UYM86/XSu0V5MOBrG4/wTrxg2cbDYAvPRW8dpXNgmJVwo9b3uIfk4Ez58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSxL5pW6S3Mm19vzessYFkslVQcMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSea4AcX w3Ornx7BtsmqY5giEj9nHENrNeqcOItubFr6NM081pRHMG8Behs+wKA6LSQinjTf a5UVBQEtWBKbNC21jEBXgsef9S9eTvMUc7mn5WcZBgCPz2ggWIfpLuHxvNQCJOX8 F4X79wy5taacYBKA7f1LZqGX+cvH1yrmhbZQNj2ZhaqZ+D53lBfLLQHkx/mkFSbn rdpVJVMJt2GcY7mK2dmCA7WgtCHG9FllasLcy2WaFNFeLxL7tQTRrcuTS86sbvxy kInItDxPvdN0QpmPqkiNgCxHLxbLhNB92CxP7fQtEScLQGCjuH0UivFcp5ySKuRT geiZQo9/z/eY9w== -----END CERTIFICATE-----Generated at Sun Jul 26 20:32:44 2026 by rpki-client