$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: TvTMygh+gv+0Db9ADBuP407wkgtKFJ1+3wrTWTu6U6U= Subject key identifier: 78:65:25:B7:5D:C9:85:D7:1C:D1:DD:86:E9:44:EE:20:04:42:27:30 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019F9F5F54EBC5432FA75D318B71B4C6DFB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 19D5 Signing time: Sun 26 Jul 2026 17:00:52 +0000 Manifest this update: Sun 26 Jul 2026 17:00:52 +0000 Manifest next update: Mon 27 Jul 2026 17:00:52 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=) 5: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 6: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 7: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 8: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: Y4EhnE3xXvoNwmwyPrDLBRESIlGgssHeJts5puNafno=) 10: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:5f:54:eb:c5:43:2f:a7:5d:31:8b:71:b4:c6:df:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jul 26 17:00:52 2026 GMT Not After : Jul 27 17:00:52 2026 GMT Subject: CN=786525b75dc985d71cd1dd86e944ee2004422730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:a4:1b:a6:5f:64:bd:f4:31:a5:aa:77:8a: 02:46:a9:3f:2e:8c:b7:00:67:56:f7:22:58:65:a3: b8:3f:25:c6:9d:a1:6e:94:55:10:ee:73:67:4c:df: d0:67:b9:8f:86:8c:b8:8c:32:f1:d7:20:52:07:53: 89:50:43:5c:95:6b:18:a7:a7:59:70:a3:d0:42:d8: a9:1b:28:5c:d0:bb:99:ea:4d:eb:75:9f:3c:af:71: a1:b7:2b:86:76:f5:7e:b2:a4:de:b6:fa:50:ce:43: f9:33:e8:58:c0:83:b1:1f:24:95:9f:c6:6b:c1:f6: 8d:43:b6:3f:0d:4e:4b:b8:12:8e:cd:34:30:fe:13: c1:d7:1f:e8:7f:bd:f6:18:6b:83:9c:2d:74:8d:4f: 08:78:62:d8:ba:00:2e:49:a5:35:2c:a1:90:88:3a: af:7b:b1:a6:0f:7e:78:0f:1c:d1:cb:2f:bc:9d:ec: b1:e3:58:49:eb:b5:d2:e7:95:5c:5b:4e:83:08:4d: 40:51:35:fe:39:5a:b2:5c:86:07:f8:20:01:df:99: 94:99:87:f8:c7:d2:26:4d:05:56:f8:e2:88:dc:50: 66:3b:7b:a9:10:43:f4:46:a0:4f:e5:e8:8c:39:bf: 5f:f7:1a:e9:9b:45:eb:32:92:d7:e2:c3:b0:82:e0: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:25:B7:5D:C9:85:D7:1C:D1:DD:86:E9:44:EE:20:04:42:27:30 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c9:4d:56:71:40:7d:fe:df:e2:b6:25:6a:e4:26:db:5c:3c: 29:1c:d1:ea:8b:11:8e:9c:fc:36:64:0c:30:a9:a5:47:67:47: ad:77:78:5c:03:e3:9e:0d:b6:7b:34:f7:2f:33:d4:b5:78:0b: 21:20:18:5c:77:3a:e7:ab:de:f4:cb:98:7c:29:6c:53:ac:17: 2a:29:f3:6b:87:30:05:0f:e2:f5:27:a1:2d:18:36:87:3f:fc: 54:ae:ad:2f:42:4a:b7:1d:c8:a6:7a:72:19:17:f4:d5:25:aa: 0f:5a:fa:31:95:d3:50:57:fe:5c:12:2f:10:43:61:47:4a:c9: 0d:ae:bd:30:7e:99:c4:c6:7e:45:e4:71:87:2d:31:6b:f2:06: de:69:62:60:75:57:4f:23:24:9d:ab:eb:06:68:eb:db:10:5b: 3e:ca:46:bc:9f:86:2e:bf:a9:d2:9b:b6:b1:cb:53:61:98:c7: aa:04:5d:4f:d7:d6:1e:9c:38:93:86:14:90:6e:a7:53:d7:b7: f2:18:92:15:4d:52:0a:56:ad:72:09:3b:a2:f3:b4:d4:b3:b9: e2:6e:ea:64:1e:13:4f:83:24:2c:68:f6:cc:c1:7e:c6:b1:3f: 6a:32:82:3d:be:80:0c:cc:99:f4:7f:4f:ed:69:be:87:19:0d: e2:4a:21:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fX1TrxUMvp10xi3G0xt+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwNzI2MTcwMDUyWhcNMjYwNzI3MTcwMDUyWjAzMTEwLwYDVQQD Eyg3ODY1MjViNzVkYzk4NWQ3MWNkMWRkODZlOTQ0ZWUyMDA0NDIyNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxykG6ZfZL30MaWqd4oCRqk/Loy3 AGdW9yJYZaO4PyXGnaFulFUQ7nNnTN/QZ7mPhoy4jDLx1yBSB1OJUENclWsYp6dZ cKPQQtipGyhc0LuZ6k3rdZ88r3GhtyuGdvV+sqTetvpQzkP5M+hYwIOxHySVn8Zr wfaNQ7Y/DU5LuBKOzTQw/hPB1x/of732GGuDnC10jU8IeGLYugAuSaU1LKGQiDqv e7GmD354DxzRyy+8neyx41hJ67XS55VcW06DCE1AUTX+OVqyXIYH+CAB35mUmYf4 x9ImTQVW+OKI3FBmO3upEEP0RqBP5eiMOb9f9xrpm0XrMpLX4sOwguCzTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhlJbddyYXXHNHdhulE7iAEQicwMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMlNVnFA ff7f4rYlauQm21w8KRzR6osRjpz8NmQMMKmlR2dHrXd4XAPjng22ezT3LzPUtXgL ISAYXHc656ve9MuYfClsU6wXKinza4cwBQ/i9SehLRg2hz/8VK6tL0JKtx3Ipnpy GRf01SWqD1r6MZXTUFf+XBIvEENhR0rJDa69MH6ZxMZ+ReRxhy0xa/IG3mliYHVX TyMknavrBmjr2xBbPspGvJ+GLr+p0pu2sctTYZjHqgRdT9fWHpw4k4YUkG6nU9e3 8hiSFU1SClatcgk7ovO01LO54m7qZB4TT4MkLGj2zMF+xrE/ajKCPb6ADMyZ9H9P 7Wm+hxkN4kohLA== -----END CERTIFICATE-----Generated at Mon Jul 27 00:52:33 2026 by rpki-client